公开(公告)号：US20240391474A1

公开(公告)日：2024-11-28

申请号：US18695425

申请日：2021-11-10

Applicant: Mitsubishi Electric Corporation

Inventor： Kojiro CHIKAMATSU ,  Hiroshi OKUYAMA ,  Toshinori MATSUI

IPC: B60W50/02 ,  H04L67/12 ,  H04W4/40

Abstract: A vehicle-mounted control apparatus includes a first storage unit that stores a rule at a time when communication data is normal, a second storage unit that stores part of rules stored in the first storage unit, a monitoring unit that monitors whether or not communication data is normal, a reference-rule recording unit that records a rule that coincides with under-monitoring communication data and the number of coincidences therebetween, and a rule-updation unit that updates a rule stored in the second storage unit, based on a rule stored in the first storage unit and a record in the reference-rule recording unit.

公开(公告)号：US20230344859A1

公开(公告)日：2023-10-26

申请号：US17796382

申请日：2020-04-10

Applicant: Mitsubishi Electric Corporation

Inventor： Toshinori MATSUI

IPC: H04L9/40 ,  G06F21/55

CPC classification number: H04L63/1441 ,  G06F21/55

Abstract: Provided are a functional element holder to hold a plurality of functional elements for executing the control and also backup functional elements, an abnormality detector to detect an abnormality caused by a security attack via the communication network, a processing target identifying circuitry to identify, as processing targets, a functional element in which the abnormality is detected and a related functional element related to the abnormality among the plurality of functional elements, and a functional element switcher to switch control functions of the functional elements identified as the processing targets to corresponding respective backup functional elements to cause an execution. The processing target identifying circuitry is configured to extract, as the related functional element, a functional element that is determined to have an operating status having a similarity to that of the functional element in which the abnormality is detected.

公开(公告)号：US20180136924A1

公开(公告)日：2018-05-17

申请号：US15795399

申请日：2017-10-27

Applicant: Mitsubishi Electric Corporation

Inventor： Hiroshi OKUYAMA ,  Toshinori MATSUI ,  Hiroyuki SAITO

IPC: G06F9/445

CPC classification number: G06F8/65 ,  G06F21/57

Abstract: A first control device includes a data processing controller that generates and transfers information indicating a current operating condition of the first control device and information indicating a current operating condition of a vehicle, and transfers a most recent version of a security program, to which the program is to be updated, to a second control device, while the second control device, having received the most recent version of the security program from the first control device, specifies the current operating condition of the vehicle on the basis of the information obtained from the first control device, and when the specified current operating condition matches a vehicle operating condition in which processing for updating the program to the most recent version of the security program is possible, executes processing for updating the program to the most recent version of the security program.

公开(公告)号：US20150298626A1

公开(公告)日：2015-10-22

申请号：US14576632

申请日：2014-12-19

Applicant: Mitsubishi Electric Corporation

Inventor： Hiroshi OKUYAMA ,  Toru MORITA ,  Toshinori MATSUI ,  Madoka BABA ,  Kiyohiro MORITA

IPC: B60R16/023 ,  B60W50/04

CPC classification number: B60W50/045 ,  B60W2050/0006

Abstract: Before a communication control device ECU falls into a sleep state or a power-off state, a substitution request is transmitted to an ECU, among substitute candidate devices ECU to ECU, that is determined by a substitute transmission acceptability determining unit as being capable of taking over the communication control device. A substitution-capable processing load quantity, a substitution-capable process importance level, or a failure determination result of each of the ECUs is used as determination criteria when the substitute transmission acceptability determining unit of the ECU determines a substitute device, and the determination is carried out in an order that takes into consideration the process importance level of each of the ECUs during travelling or at a standstill, to prevent failures in a network or abnormal behaviors of a vehicle.

Abstract translation: 在通信控制装置ECU处于休眠状态或断电状态之前，将代替候补装置ECU〜ECU中的替代请求发送到由替代传输可接受性确定单元确定为能够执行的ECU 通过通信控制设备。 当ECU的替代传输可接受性确定单元确定替代设备时，使用每个ECU的替换能力处理负载量，替代能力过程重要性级别或故障确定结果作为确定标准，并且确定是 以在行驶中或停止时考虑每个ECU的过程重要程度的顺序进行，以防止网络中的故障或车辆的异常行为。

公开(公告)号：US20190222407A1

公开(公告)日：2019-07-18

申请号：US16050210

申请日：2018-07-31

Applicant: Mitsubishi Electric Corporation

Inventor： Mikiya YOSHIDA ,  Kentaro ISHIHARA ,  Toshinori MATSUI

IPC: H04L7/00 ,  H04L12/403 ,  H04L12/26

Abstract: A master control device connected to a plurality of slave control devices via a network is configured to include an own local time counted by a counter unit, in a message and transmit the message to the slave control devices by the timing synchronization unit, calculate a difference between a reception time of a message transmitted from the slave control device, which has received the message, at a timing corrected in accordance with the local time and a pre-calculated message reception predicted time by a timing synchronization determination unit, calculate a correction amount for timing of the slave control devices using the difference by a timing synchronization correction unit, add the correction amount to the local time, include the local time in a message, and transmit the message to the slave control devices.

公开(公告)号：US20190102557A1

公开(公告)日：2019-04-04

申请号：US15938044

申请日：2018-03-28

Applicant: Mitsubishi Electric Corporation

Inventor： Toshiki IKEGASHIRA ,  Toshinori MATSUI ,  Koji SHIMAMURA ,  Hiroshi OKUYAMA

IPC: G06F21/57

CPC classification number: G06F21/575 ,  G06F21/52 ,  G06F2221/2149

Abstract: A first processing environment includes: a control processing unit configured to execute control processing on a control subject; a first storage area for storing data for controlling the control subject; and a verification determination unit. A second processing environment includes: a second storage area for storing an expected value; a verification value generation unit; and a verification execution unit. The verification value generation unit generates the verification value before the control processing is stopped. The verification execution unit executes comparison processing of comparing the expected value and the verification value before the control processing is activated. When the comparison result indicates a verification success, the verification determination unit executes determination processing of determining that the control processing is to be activated, and executes determination processing of determining that activation of the control processing is to be stopped when the comparison result indicates a verification failure.

公开(公告)号：US20130030551A1

公开(公告)日：2013-01-31

申请号：US13629867

申请日：2012-09-28

Applicant: MITSUBISHI ELECTRIC CORPORATION

Inventor： Toshinori MATSUI ,  Kiyohiro MORITA ,  Madoka BABA ,  Toru MORITA

IPC: G05B15/02

CPC classification number: G05B19/0421 ,  G05B2219/23219 ,  G05B2219/25232 ,  G05B2219/25472 ,  G05B2219/2637

Abstract: Provided is a control system capable of reducing cost while securing reliability of original processing of a microcomputer. An engine control device and a meter control device each store a control amount calculating procedure for calculating a control amount regarding a significant control to be performed on the control target of the engine control device. The engine control device compares a control amount regarding the significant control calculated by the engine control device, and a control amount regarding the significant control calculated by the meter control device, to thereby control the control target of the engine control device based on a result of the comparison.

Abstract translation: 提供一种能够在确保微型计算机的原始处理的可靠性的同时降低成本的控制系统。 发动机控制装置和仪表控制装置各存储用于计算关于要在发动机控制装置的控制目标上执行的重要控制的控制量的控制量计算程序。 发动机控制装置将由发动机控制装置计算出的有效控制的控制量与由仪表控制装置计算的有效控制相关的控制量进行比较，从而根据发动机控制装置的结果控制发动机控制装置的控制目标 比较。

公开(公告)号：US20240354398A1

公开(公告)日：2024-10-24

申请号：US18683513

申请日：2021-10-25

Applicant: Mitsubishi Electric Corporation

Inventor： Hiroshi OKUYAMA ,  Toshinori MATSUI

IPC: G06F21/55 ,  G06F21/60

CPC classification number: G06F21/55 ,  G06F21/602

Abstract: An intrusion detection system comprises: a monitor listing for setting a rule(s) on which determination is performed whether communications data is normal or abnormal in every one of respective states; an intrusion detection unit for acquiring communications data flowing through a communications line(s), and for performing, by comparing the communications data with the monitor listing, determination on the presence or absence of abnormality in the communications data; a state management unit for acquiring a state of a host motor vehicle and/or that of a control device, and for changing over the monitor listing for use in the intrusion detection unit; and a processing time management unit for giving rise to increasing a processing time(s) of the intrusion detection unit in accordance with processing content of the intrusion detection unit.

公开(公告)号：US20170108842A1

公开(公告)日：2017-04-20

申请号：US15218475

申请日：2016-07-25

Applicant: Mitsubishi Electric Corporation

Inventor： Toshinori MATSUI

IPC: G05B19/042 ,  G05B11/01

CPC classification number: G05B19/0426 ,  G05B11/01 ,  G05B2219/23229

Abstract: Each of a plurality of type 2 nodes stores one of divisional programs, which are created as parts of a rewriting program for rewriting a program for determining the operation of a type 1 node, by dividing the rewriting program in a manner that allows a partial overlap in data between a divisional program stored in the type 2 node and a divisional program stored in another type 2 node. When divisional programs to the type 1 node are transmittable, each type 2 node transmits the divisional program stored in its own node to the type 1 node via a first network. The type 1 node rewrites a part that corresponds to the received divisional program, and uses the overlapping data to verify whether or not the divisional programs rewritten are the same.