DE102018222086A1 - Control arrangement for a vehicle, vehicle and method for configuring an in-vehicle system - Google Patents

Abstract

The invention relates to a control arrangement (100) for a vehicle (1), having a system (12) external to the vehicle and a system (10) internal to the vehicle having a plurality of control components (14), the system external and internal (12,10) are set up to communicate wirelessly with one another, the vehicle-external system (12) being set up to transmit at least one configuration specification to the vehicle-internal system (10), the configuration specification defining an assignment as to which functions of which control components (14) of the The invention also relates to a vehicle (1) and a method for configuring an in-vehicle system (10).

Description

The invention relates to a control arrangement for a vehicle, a vehicle and a method for configuring an in-vehicle system.

Vehicles, and in particular passenger cars, generally comprise several control components. These can be control devices and in particular digital or electronic control devices. In general, a control component can be provided by any (digital and / or electronic) computing unit of the vehicle.

The control components are set up to execute software applications or generally computer program products and thereby provide functions. In the context of increasing partial or full autonomy of vehicle operation, the number and security relevance of such software applications is increasing.

Previous control components are often characterized by low flexibility and do not always achieve the desired level of security. As a rule, it is only possible within maintenance work, or in some cases not at all, to change or reconfigure the control components with regard to the functions to be performed. This low flexibility also means that there is a security risk, for example if you have to wait until the next maintenance interval before the control components can be reconfigured based on knowledge gained in the meantime.

Furthermore, further assumptions must be made in advance and typically without taking vehicle-specific properties into account in order to configure the control components with regard to the functions to be performed. This can be disadvantageous with regard to the efficient operation of the control components. This also means that a desired level of security cannot always be achieved.

In the DE 199 09 157 A1 it is described that various software components (ie software applications) can be provided to provide desired vehicle functions. Possibilities are disclosed for reloading such software components into a vehicle and for configuring existing software components so that they can interact with the reloaded software components. It is also taught, depending on the computing capacity available in the vehicle, to have software components, if necessary, executed by systems external to the vehicle. On the other hand, no flexible assignment of control devices or hardware-based control components present in the vehicle and the software components loaded into the vehicle is taken into account or made possible.

An object of the present invention is therefore to improve the operation of control components of a vehicle.

This object is achieved by a control arrangement with the features of claim 1, a vehicle with the features of claim 9 and a method with the features of FIG. 10. Advantageous further developments are specified in the dependent claims. Unless otherwise indicated or stated, all of the features mentioned in the introduction can also be provided in the present solution.

A basic idea of the invention is to provide an in-vehicle system (for example an in-vehicle configuration system or, in other words, a backend) that is configured to configure an in-vehicle control system. The in-vehicle system (for example, an in-vehicle control system) can be vehicle-bound and moved together with it. The system external to the vehicle, however, is vehicle-independent and stationary, for example.

The vehicle-external and vehicle-internal system can also be understood as a common distributed system. As explained below, the vehicle-internal system can in particular comprise a configuration control unit and this can optionally be configured distributed within the vehicle.

A configuration can be understood in particular to mean a definition or, in other words, an assignment as to which control components of the in-vehicle system should provide which functions. The latter can include the execution of software applications that enable the functions by the control components.

In other words, the configuration can include the assignment of software applications (or also software components or computer program products) to individual control components.

A desired configuration is preferably transmitted by the vehicle-external system to the vehicle-internal system via a wireless communication link. In particular, this transmission can take place without being bound to maintenance intervals or other fixed predetermined time intervals. Instead, time can be flexible and also compared to maintenance intervals Configuration specifications of the system external to the vehicle which are carried out in short succession (ie a few months apart) are made possible. At least when the vehicle is delivered for the first time, it is preferred that a configuration specification is made or has already been made by the vehicle-external system.

In general, the in-vehicle system can be set up to request configuration specifications from the in-vehicle system. This can take place, for example, when the in-vehicle system with an existing configuration registers errors above an acceptable error limit and / or recognizes that there is no configuration specification for certain errors or error-free normal operating states. The possibly computationally and time-consuming task of determining a configuration specification suitable for this can then be taken over by the vehicle-external system.

An advantage of the solution according to the invention is that new configurations of the vehicle-internal system or of its control components can be carried out flexibly and also with little effort during the service life of the vehicle. For example, a workshop visit to carry out such measures may not be absolutely necessary due to the wireless communication link, which enables a type of remote configuration or maintenance.

A control arrangement for a vehicle is proposed in detail, in particular for a motor vehicle and furthermore in particular for a passenger car. The control arrangement has an in-vehicle system (or, in other words, an in-vehicle configuration system or a back-end) and an in-vehicle system (or, in other words, an in-vehicle control system) with a plurality of (preferably digital and / or electronic and generally hardware-based) or hardware-forming) control components, the vehicle-external and the vehicle-internal system being set up to communicate wirelessly with one another, the vehicle-external system being set up to transmit at least one configuration specification to the vehicle-internal system, and the configuration specification defining an assignment accordingly Which functions are to be provided by which control components of the in-vehicle system.

The vehicle-external and / or vehicle-internal system can be an electronically and / or data-based and / or digitally operated system. For example, the systems or their components can generate and / or process digital signals. In particular, the transmitted configuration specification can be a digital signal and / or data or a data record from which the corresponding specification emerges.
The vehicle-external and / or vehicle-internal system can comprise at least one computing unit in order to generate and / or process any of the signals and / or specifications mentioned herein. The computing unit can comprise at least one microprocessor.

The vehicle-external system can be set up (for example by means of the above-mentioned computing unit) to calculate or select configuration specifications. The vehicle-external system can, additionally or alternatively and for example by means of a (preferably wireless) communication unit, be set up to send and / or receive signals to the vehicle-internal system.

The received signals can be vehicle-specific information, for example regarding the system properties of the in-vehicle system. The system properties can be fixed or unchangeable (for example, independent of the operating state and particularly affect hardware properties). As an alternative or in addition, the system properties can be variable (for example depending on the operating state, in particular to indicate errors). The system external to the vehicle can be set up to generate and / or transmit configuration specifications in accordance with such received information.

The in-vehicle system can be set up to receive the configuration specification, for example by means of a communication unit. The vehicle-external system can also be set up to transmit information to the vehicle-internal system (preferably wirelessly). This can be the vehicle-specific information explained above. In general terms, both the vehicle-internal and the vehicle-external system can thus be set up to (preferably wirelessly) send and / or receive information to the other system.

The control components can in each case be a control unit or at least a computing unit which, for example, comprises at least one microprocessor. Each control component can be designed as a structurally independently manageable and / or structurally integrated unit, which can be placed independently and / or in one piece in the vehicle, for example. The control components can with at least one other Control component or generally communicate with each other, which can be done in each case, for example, via a vehicle bus (ie at least in sections wired). Additionally or alternatively, the control components can each be set up to carry out signal processing and / or to receive and preferably also to send signals. The signals are preferably again digital or electronic signals.

In summary, the control components can each comprise at least one computing unit and the control components are preferably spatially and / or structurally separated from one another. The latter is made possible in particular if the computing units are designed in or as correspondingly separate control units. The control components can therefore generally be spatially distributed in the vehicle.

The term “wireless communication” means, for example, non-wired communication that is based on signal transmissions through the air. This can be done, for example, by means of mobile radio or a (W) LAN connection.

It goes without saying that the in-vehicle system can generally be set up to implement the configuration specification received. This can be done, for example, by setting or specifying the functions carried out by the control components. For example, in the case of the control components, corresponding software modules, software applications and / or computer program products that enable the functions can be activated or transmitted to the control components.

In general, a function can be provided by executing an associated computer program product, software module, software application or software component on an associated control component. Several functions can also be assigned to a control component.

The functions can be control functions, for example, in order to be able to control or operate systems and / or components of the vehicle in a desired manner and / or to be able to process signals generated thereby. In particular, they can be functions required in the context of at least partially autonomous driving operation. For example, it can be a localization function, an environment recognition function that is based, for example, on the processing of environment sensor data (e.g. lidar data), a scheduling function that can be used, for example, to determine required driver intervention, or a parking garage license function that facilitates navigation in a parking garage .

According to a development of the invention, a plurality of configuration specifications (from the vehicle-external system) are transmitted, each of which is dependent on the operating state, and the vehicle-internal system is set up to implement (ie to adjust or, in other words, to set up the assignment defined by the configuration specification).
The operating states can be driving states and / or general (ie also stationary) vehicle states. In general, an operating state is not necessarily to be understood as driving operation. In particular, the operating states can include normal operating states which are present when the vehicle is operating normally and / or fault operating states which are present when the vehicle is operating incorrectly.

The fault operating states can in particular include or relate to fault states of the vehicle-internal system. If faults in this system are found, for example because individual control components fail or output faulty signals, it may be necessary, for example, to reassign functions to still functional control components. An error operating state can also be caused by the crash of a software application providing a function.

An advantage of the described embodiment is that suitable configuration specifications can be stored from the outset, for example in a storage device of the in-vehicle system. These can then be implemented depending on the operating states that occur and in particular any fault operating states, for example by reading from such a memory device. This enables a quick reaction to occurring errors and increases vehicle safety.

In general, it can be provided that the vehicle-internal system is set up to determine operating states of the vehicle and / or to determine a correspondence to operating states for which configuration specifications exist.

According to one embodiment of the invention, the vehicle-internal system is set up to define a configuration specification for at least one operating state for which no assigned configuration specification has been transmitted by the control system external to the vehicle. This can be done, for example, using a rule set that defines how to react to certain error conditions (e.g. in the form of a sequence of steps, especially with regard to whether / which control components should be restarted). The rule set can additionally or alternatively comprise a sequence of steps for checking with regard to alternatively available control components and / or for restoring required data streams or communication connections. The rule set can be stored on a storage device, for example of the in-vehicle system, in particular in the form of program instructions.
The vehicle-internal system can, in particular by means of the configuration control unit described below, be set up to independently determine or at least select and / or implement assignments in the sense of configuration specifications (for example from a previously transmitted plurality of configuration specifications). This is advantageous if a communication connection to the system external to the vehicle cannot always be guaranteed and / or is not possible within a desired time frame.

In general, the in-vehicle system, in particular by means of the configuration control unit described below and / or for setting a configuration, can be set up for at least one of the following: starting functions, stopping functions, pausing functions, migrating functions to another control component, isolating functions, communication channels (for example release or block from, to or between control components).

Another aspect of the invention provides that the assignment of functions and control components defined by the (at least one) configuration specification is based on vehicle-specific information. This may include the aforementioned receipt of such information by the in-vehicle system. The vehicle-external system can then create or select a configuration specification based on such information, for example in order to enable particularly efficient or secure assignments of functions and control components. An advantage of this variant is that the specific circumstances of the vehicle can be taken into account.

• - Einer gewünschten Rechenauslastung der Steuerkomponenten. Hierunter kann insbesondere eine (zeitlich) gleichmäßige Rechenauslastung der Steuerkomponenten fallen und/oder eine zwischen den Steuerkomponenten vergleichbare Rechenauslastung. Hieraus ergeben sich Vorteile hinsichtlich der Verfügbarkeit der einzelnen Funktionen.
• - Ein Kommunikationsbedarf wenigstens einer der Funktionen und/oder einer Kommunikationsfähigkeit der Steuerkomponenten. Unter der Kommunikationsfähigkeit kann allgemein die Art der kommunizierbaren Informationen (beispielsweise die Daten- und/oder Signalrart) und/oder das Ausmaß der kommunizierbaren Informationen verstanden werden (beispielsweise die Daten- und/oder Signalrate). Unter dem Kommunikationsbedarf kann eine zum Ausführen der Funktionen benötige Daten- und/oder Signalrate verstanden werden.

In general, the assignment of functions and control components defined by the configuration specification can be defined taking into account at least one of the following properties:

• - A desired computing load of the control components. This can include, in particular, a (temporally) uniform computing load on the control components and / or a computing load comparable between the control components. This results in advantages with regard to the availability of the individual functions.
• - A communication requirement of at least one of the functions and / or a communication capability of the control components. Communication capability can generally be understood to mean the type of communicable information (for example the type of data and / or signal) and / or the extent of the communicable information (for example the data and / or signal rate). The communication requirement can be understood to mean a data and / or signal rate required to carry out the functions.

In particular, it can be preferred to carry out functions in which there is an increased communication requirement (for example due to a high input or output data rate) on control components which are designed for a correspondingly high communication requirement and / or have correspondingly suitable communication connections. In particular, functions that have to communicate with one another (for example for the purpose of data synchronization) can be carried out on control components that are designed for efficient communication with one another. This relates, for example, to control components which can communicate with one another comparatively quickly via a vehicle bus, for example because they are connected to one another via a comparatively short section of the vehicle bus. In other words, functions that have an increased need for communication with one another can be carried out on control components that can quickly communicate with one another in comparison to other pairs of control components.

In general, a control component can also perform several functions. Functions with an increased need for communication can therefore also be carried out on a common control component, since then e.g. there is no need to access a vehicle bus.

• - Eine gewünschte Redundanz wenigstens einer Funktion innerhalb des fahrzeuginternen Systems. Dies kann umfassen, dass insbesondere sicherheitsrelevante Funktionen mehreren Steuerkomponenten und somit redundant zugeordnet werden. Die Konfigurationsvorgabe kann also auch eine Redundanzvorgabe umfassen.

The need for communication of functions and the communication of the control components is generally to be understood independently of the wireless communication with the system external to the vehicle and is preferably carried out predominantly or exclusively within the vehicle.

• - A desired redundancy of at least one function within the in-vehicle system. This can include that, in particular, safety-relevant functions are assigned to several control components and thus redundantly. The configuration specification can therefore also include a redundancy specification.

According to a further development according to the invention, the vehicle-internal system for implementing the configuration specification (transmitted by the vehicle-external system) comprises a configuration control unit. The configuration control unit can also be set up to carry out functions defined by means of the configuration specification itself, but this is only optional. In any case, it is preferred that the configuration control unit is set up to assign the corresponding function to the control components. For this purpose, it can transmit signals to the control components and / or software modules, software applications, computer program products or software components to the control components, by means of which the corresponding functions can be provided. Alternatively, it can transmit activation signals of the activation signals to the control components, which can then activate software modules, software applications, computer program products or software components required for providing the function and / or read them out from memory devices.

The configuration control unit can comprise or be executed on or in accordance with any of the above and below variants, for example control components with a computing unit or a microprocessor and corresponding signal processing capabilities. These can be control components, at least in part, on which functions can be carried out according to the configuration specification and / or which are already present in the vehicle.

The configuration control unit can be set up for an independent configuration, for example by means of a rule set explained above. The configuration control unit can also be set up to carry out so-called self-healing measures. The latter can include restarting subsystems or control components and / or restoring redundancies, for example if a faulty control component or function has been used to switch to a redundant control component or function and the faulty control component or function has to be restored.

According to one variant, the configuration control unit is a software-based unit, the individual software modules and / or applications of which are distributed over a number of (preferably already existing control components). In other words, the configuration control unit can be distributed over several control components and preferably share the control components with further functions to be carried out.

In summary, the configuration control unit can generally comprise a plurality of configuration software applications that can be executed on control components that are spatially separated from one another in the vehicle.

Alternatively or additionally, the configuration control unit can comprise a plurality of configuration control components (which in turn can be designed in accordance with any of the above and below variants of control components) and the configuration control components are arranged spatially separated from one another in the vehicle. The configuration control components can be set up for communication with one another, for example via a vehicle bus.

In general, the configuration control components can be of identical design and in particular each have a storage device on which information and / or information synchronized with the other configuration control components is / is stored. This can be, for example, information relating to the configuration specification (s) to be implemented. Each of the configuration control components can be set up to implement one or more configuration specifications and in particular all configuration specifications transmitted by the system external to the vehicle. The configuration software applications also have appropriately shared / synchronized information (e.g. through associated storage functions) and / or each set up to implement configuration specifications. This creates redundancy.

In summary, the configuration components and / or configuration software applications can each have information relating to the configuration specification (s) to be implemented.

The invention further relates to a vehicle (in particular a motor vehicle and furthermore in particular a passenger car) comprising a control arrangement according to one of the preceding claims.

• - Übermitteln einer Konfigurationsvorgabe von einem fahrzeugexternen System an ein fahrzeuginternes System über eine drahtlose Kommunikationsverbindung, wobei das fahrzeuginterne System eine Mehrzahl von Steuerkomponenten umfasst; und
• - Umsetzen der Konfigurationsvorgabe durch das fahrzeuginterne System;

wobei die Konfigurationsvorgabe eine Zuordnung dahingehend definiert, welche Funktionen von welchen Steuerkomponenten des fahrzeuginternen Systems bereitgestellt werden sollen.The invention further relates to a method for configuring an in-vehicle system for a vehicle, comprising:

• - Transmitting a configuration specification from an in-vehicle system to an in-vehicle system via a wireless communication link, the in-vehicle system comprising a plurality of control components; and
• - Implementation of the configuration specification by the in-vehicle system;

wherein the configuration specification defines an assignment as to which functions are to be provided by which control components of the in-vehicle system.

The method may include any further step and feature to provide all of the functions and operating states discussed above and below. All further developments and variants of the arrangement features also apply to the corresponding process features. In particular, the method can be executable with a control arrangement according to any of the above and below aspects.

In particular, the method can include the step of determining an operating state and / or a configuration specification provided for an operating state, wherein the operating state can in particular be an error operating state.

• 1 zeigt eine schematische Übersichtsdarstellung einer Anordnung gemäß einem erfindungsgemäßen Ausführungsbeispiel.

The invention is described below with reference to the attached schematic 1 explained.

• 1 shows a schematic overview of an arrangement according to an embodiment of the invention.

In 1 is a vehicle 1 schematically indicated that an in-vehicle system (control system) 10th includes. The term "in-vehicle" is generally a vehicle-related system 10th to understand that is moved together with this. Furthermore, in 1 a system external to the vehicle 12 shown in the form of a server-based backend, for example. The in-vehicle and in-vehicle system 10th , 12 are part of a control arrangement 100 for the vehicle 1 .

The in-vehicle control system 10th includes a plurality of control components 14 . These are as in the vehicle 1 Control units positioned spatially separate from one another. However, this is not mandatory. Generally, a control component 14 are formed by a computing unit, wherein a plurality of corresponding computing units can also be combined in a single control device.

A configuration control unit is also indicated 16 . This can have its own control components 14 include or be executed on control units provided for this purpose. In the example shown is the configuration control unit 16 However, it is designed as a software-based control unit and comprises several software applications (configuration software applications). These are based on the already existing control components 14 of the vehicle 1 executed, which also perform the functions explained below. This is in 1 through dashed connections between the features 14 and 16 indicated. Each configuration software application can independently implement the configuration specification explained below, so that the configuration software applications are generally redundant or the desired functions of the configuration control unit 16 provide. This increases safety and fault tolerance, for example if a single control component fails 14 . The configuration software applications also communicate with one another and each have a knowledge database which is synchronized with one another and in which, for example, the configuration specifications explained below are stored.

The configuration control unit 16 out 1 is therefore not to be understood as a physical / structural unit, but rather as a functional feature that can be achieved by means of or, more precisely, by executing on the control components 14 is realized.

Generally, the configuration control unit 16 or their respective software applications (configuration software applications) from the control components 14 or from other vehicle control units 1 Informed about occurring errors, but also about general operating conditions of the vehicle that affect normal operation. Any software application of the configuration control unit 16 is thus informed about the current operating state of the vehicle and any errors and can configure the vehicle's internal system 10th Adapt depending on the operating status.

The system external to the vehicle 12 (Backend) can be executed on a server, for example. This also includes a communication unit 18th with a corresponding communication unit 20th of the vehicle 1 can communicate wirelessly, for example by means of mobile radio. The wireless communication link enables data to be sent and received (ie exchanged) between the vehicle 1 and the backend 12 . Generally the backend calculates 12 Configuration specifications and, in the example shown, operating state-dependent configuration specifications. Depending on operating state occurring should then the corresponding configuration specifications in the vehicle 1 or its in-vehicle system 10th be implemented.

The configuration specifications each relate to an assignment of functions to be provided by a respective control component 14 . Specifically, this will be the control components 14 Functions are assigned that should provide them. It can be a control component 14 also provide several functions. Depending on the operating state that occurs, the in-vehicle system is thus appropriately configured in accordance with a configuration specification provided for this operating state (if present).

The functions are, for example, functions listed in the introduction, which are used for partially or fully autonomous driving of the vehicle 1 are needed.

The configuration specifications can be made taking into account the objectives generally discussed above (see computation / memory utilization, communication requirements, redundancy). In addition or as an alternative, the configuration specifications can be defined in view of possible error cases or define suitable new configurations and thus reactions to corresponding error cases. Each fault case can represent a predefined operating state and, for example, the failure of individual control components 14 or the crash of software applications executing on it that provide the functions.

The configuration specifications can generally be determined in advance, for example as part of a development process of the vehicle 1 . During the life of the vehicle 1 However, based on the knowledge gained in the meantime, new configuration specifications can be developed. These can then be sent to the vehicle via the wireless communication link 1 be transmitted, which can also take place outside of maintenance intervals. Transmission in a resting phase of the vehicle is preferred, for example when the vehicle is not running. Optionally, it is also possible for the vehicle 1 Requests configuration specifications, for example if there are frequent errors with existing configuration specifications or no configuration specifications have so far been determined for error operating states that occur in real operation.

The transmitted configuration specifications are from the vehicle-bound communication unit 20th directly or indirectly to the configuration control unit 16 or their software applications not shown separately. One of the configuration specifications can be identified as a standard configuration specification and by the configuration control unit 16 initially implemented. On the other hand, further configuration specifications are stored (for example in a storage device of the in-vehicle system that is not shown separately) 10th ) and then implemented when a corresponding assigned operating state occurs.

When implementing a configuration specification, the functions to be performed can be assigned to the individual control components 14 be understood. As discussed above, this can include providing, activating, enabling or sending functional software applications to or in the control components 14 include. The control components 14 can then run the software applications and thereby provide the desired functions. During further operation of the vehicle 1 can the configuration control unit 16 monitor whether errors occur or are reported to them. In this way, fault operating states can be inferred and, if this is the case, an initially transmitted configuration specification stored for this fault operating state can be read out and implemented.

The configuration control unit also monitors 16 preferably also normal operating states, for example on the basis of vehicle sensors, which are not shown separately, and which carry out an environment detection. If certain predefined operating states are recognized (for example, a certain driving situation), if available, configuration specifications initially transmitted for this operating state can be selected and implemented.

This means that current operating states can always be reacted to by implementing suitable configuration specifications, which increases safety. The latter applies in particular if the failure or the crash of software applications is detected or the failure of control components 14 . For such errors, the configuration specifications can determine which control components 14 to be operated alternatively or how the functions that can no longer be carried out are to be provided alternatively.

• - Es können Rückmeldungen von den Steuerkomponenten 14 oder allgemein von dem fahrzeuginternen System 10 erhalten werden, beispielsweise hinsichtlich der Funktionsfähigkeit der Steuerkomponenten 14 bzw. des Systems 10. Insbesondere wenn dabei Fehler erkannt werden, können neue, für diesen Betriebszustand vorgesehene Konfigurationsvorgaben umgesetzt werden, sofern derartige Vorgaben vorab ermittelt wurden.
• - Die einzelnen Funktionen können Informationen hinsichtlich ihrer Funktionsfähigkeit an die Konfigurationssteuereinheit 16 übermitteln. Werden hierbei Fehler festgestellt, wie z.B. eine mangelnde Effizienz oder allgemein eine nicht mehr mögliche Funktionserfüllung, können für diesen (Fehler-)Betriebszustand geeignete Konfigurationsvorgaben ausgelesen und umgesetzt werden, sofern derartige Vorgaben vorab ermittelt wurden.
• - Es können Informationen bezüglich allgemeiner Betriebszustände oder allgemein der Fahrsituation des Fahrzeugs 1 an die Konfigurationssteuereinheit 16 übermittelt werden. Die Konfigurationssteuereinheit 16 kann dann z.B. auf das Vorliegen bestimmter Fahrsituationen schließen und eine für diesen Betriebszustand vorgesehene Konfigurationsvorgabe identifizieren und umsetzen, sofern derartige Vorgaben vorab ermittelt wurden.

In summary, the configuration control unit 16 at least one of the following information is provided:

• - There can be feedback from the control components 14 or generally from the in-vehicle system 10th are obtained, for example with regard to the functionality of the control components 14 or the system 10th . In particular if errors are detected, new configuration specifications provided for this operating state can be implemented, provided such specifications have been determined in advance.
• - The individual functions can provide information regarding their functionality to the configuration control unit 16 to transfer. If errors are found here, such as a lack of efficiency or generally no longer possible to fulfill a function, suitable configuration specifications for this (error) operating state can be read out and implemented, provided such specifications have been determined in advance.
• - There can be information regarding general operating conditions or the driving situation of the vehicle in general 1 to the configuration control unit 16 be transmitted. The configuration control unit 16 can then conclude, for example, the existence of certain driving situations and identify and implement a configuration specification provided for this operating state, provided such specifications have been determined in advance.

The above cases generally aim at implementing initially transmitted configuration specifications, which are provided for the corresponding operating state. The configuration control unit is preferred 16 but also set up to create and / or implement your own configuration specifications, for example if there is no suitable configuration specification available for a specific operating state. Additionally or alternatively, this may be necessary if there is no communication connection to the system external to the vehicle 12 is possible or can no longer be built up within a permissible period of time.

If this is the case, the configuration control unit 16 to be set up independent configuration specifications for the in-vehicle system 10th to define (for example, according to a rule set explained above) and to implement them. This can go hand in hand with so-called self-healing measures, according to which defective control components 14 or software applications are restarted and / or redundancies are restored if, for example, a control component 14 has failed and on a backup engine 14 has been switched to perform a specific function. In this case, you need to restore redundancy for the actual backup engine 14 another control component 14 selected, which will then be the primary or new backup engine 14 serves for the corresponding function.

Advantages of the exemplary embodiment shown relate in particular to the flexibility with regard to adapting configurations of the in-vehicle system 10th , under configuration the assignment of functions to control components 14 is to be understood. Security is also increased, since operating state-dependent configuration specifications can be stored in advance and can be implemented according to the situation and in particular in response to errors.

Reference symbol list

1

vehicle

10th

in-vehicle system (control system)

12

external system (backend)

14

Control component

16

Configuration control unit

18, 20

Communication unit

100

Tax arrangement

QUOTES INCLUDE IN THE DESCRIPTION

This list of documents listed by the applicant has been generated automatically and is only included for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Patent literature cited

• DE 19909157 A1 [0006]

Claims (11)

Control arrangement (100) for a vehicle (1), with a vehicle-external system (12) and a vehicle-internal system (10) with a plurality of control components (14), the vehicle-external and vehicle-internal system (12, 10) being set up to communicate wirelessly with one another, wherein the vehicle-external system (12) is set up to transmit at least one configuration specification to the vehicle-internal system (10), The configuration specification defines an assignment as to which functions are to be provided by which control components (14) of the in-vehicle system (10). Control arrangement (100) after Claim 1 , wherein the control components (14) each comprise at least one computing unit and the control components (14) are spatially and / or structurally separate from one another, Control arrangement (100) after Claim 1 or 2nd , A plurality of configuration specifications are transmitted, each of which is dependent on the operating state, and the in-vehicle system (10) is set up to implement a configuration specification assigned to this operating state as a function of an operating state. Control arrangement (100) according to one of the preceding claims, wherein the vehicle-internal system (10) is set up to define a configuration default for at least one operating state for which no assigned configuration specification has been transmitted by the vehicle-external system (12). Control arrangement (100) according to one of the preceding claims, wherein the assignment of functions and control components defined by the configuration specification takes place based on vehicle-specific information. Control arrangement (100) according to one of the preceding claims, wherein the assignment of functions and control components (14) defined by the configuration specification is defined taking into account at least one of the following properties: - A desired computing load of the control components (14); - A communication requirement of at least one of the functions and / or a communication capability of at least one of the control components (14); - A desired redundancy of at least one function within the in-vehicle system (10). Control arrangement (100) according to one of the preceding claims, wherein the in-vehicle system (10) for implementing the configuration specification comprises a configuration control unit (16). Control arrangement (100) after Claim 7 The configuration control unit (16) comprises a plurality of configuration control components which are arranged spatially separated from one another in the vehicle (1) and / or a plurality of configuration software applications which can be executed on control components (14) arranged spatially separated from one another in the vehicle (1). Control arrangement (100) after Claim 8 , the configuration components and / or configuration software applications each having information relating to the configuration specification to be implemented. Vehicle (1), comprising a control arrangement (100) according to one of the preceding claims. Method for configuring an in-vehicle system (10), with: - Transmission of a configuration specification from a system external to the vehicle to a system internal to the vehicle (10) via a wireless communication link, the system internal to the vehicle (10) comprising a plurality of control components (14); and - Implementation of the configuration specification by the in-vehicle system (10); The configuration specification defines an assignment as to which functions are to be provided by which control components (14) of the in-vehicle system (10).

Images