JP2017138911A - Simulation device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To efficiently and easily specify a cause of occurrence of a problem when a verification result has a problem.SOLUTION: A simulation device comprises: a first device for simulating operations of control software by using software; a second device for simulating the operations of the control software by using hardware mounted with the control software; a first verification result acquisition part for acquiring a first verification result obtained by simulating the operations of the control software by the first device in accordance with a verification scenario; a scenario generation part for, when the first verification result is not within a permissible range with respect to an expectation value prepared beforehand, generating a second inspection scenario for simulation in the second device from the inspection scenario; a second verification result acquisition part for acquiring a second verification result obtained by simulating the second inspection scenario by the second device; and a determination part for determining which of the first device and the control software has a problem on the basis of the second verification result.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a simulation apparatus.

  A technique for verifying control software using SILS (Software In the Loop Simulator) and HILS (Hardware In the Loop Simulator) constituting a virtual ECU (Virtual ECU) is known (see, for example, Patent Document 1). ).

JP 2008-269022

  However, in the conventional technique as described in Patent Document 1 above, when there is any problem in the verification result by SILS, whether there is a problem in SILS (virtual ECU environment) or a problem in control software. Since it is not automatically determined, it is difficult to efficiently identify the cause of the problem.

  SUMMARY OF THE INVENTION Accordingly, an object of the present invention is to provide a simulation apparatus that can easily identify the cause of the problem when there is a problem in the verification result.

In order to achieve the above object, according to the present invention, a first simulation device that simulates the operation of control software using software without using hardware in which the control software is installed;
A second simulation device that simulates the operation of the control software using hardware in which the control software is installed;
A first verification result acquisition unit for acquiring a first verification result obtained by simulating the operation of the control software in the first simulation device according to an inspection scenario;
A scenario generation unit that generates a second inspection scenario for simulation in the second simulation device from the inspection scenario when the first verification result is not within a predetermined allowable range with respect to an expected value prepared in advance; ,
A second verification result acquisition unit for acquiring a second verification result obtained by simulating the second inspection scenario with the second simulation device;
A simulation device is provided that includes a determination unit that determines which of the environment of the first simulation device and the control software has a problem based on the second verification result.

  According to the present invention, when there is a problem in the verification result, it is possible to obtain a simulation apparatus that can easily identify the cause of the problem efficiently.

It is a figure which shows a functional block with the structure of the simulation apparatus 1 by one Example. 3 is a flowchart showing a processing flow and data flow of the simulation apparatus 1.

  The best mode for carrying out the present invention will be described below with reference to the drawings.

  FIG. 1 is a diagram illustrating a functional block together with a configuration of a simulation apparatus 1 according to an embodiment. In FIG. 1, the data is indicated by blocks denoted by reference numerals 40 to 52.

  The simulation device 1 includes a first simulation device 10, a second simulation device 20, and a processing device 30.

  The first simulation apparatus 10 is SILS that performs control software verification. The first simulation device 10 includes a device model that forms control software. SILS constitutes a virtual ECU. A virtual ECU environment configured by SILS is referred to as a “VECU environment”.

  The second simulation apparatus 20 is a HILS that verifies control software using the HILS. HILS performs verification using the mounted ECU.

  The processing device 30 is formed by a computer or the like. As illustrated in FIG. 1, the processing device 30 includes a first determination unit 32, a second determination unit 34, and an actual machine inspection scenario generation unit 36. The processing device 30 includes an interactive user interface.

  FIG. 2 is a flowchart showing the processing flow and data flow of the simulation apparatus 1. In FIG. 2, the solid line arrow is the processing flow, and the dotted line arrow is the data flow. In addition, the following various processes can be realized by using the user interface of the processing apparatus 30 for some operations of the designer. However, the operation of the designer can be automatically realized by the processing device 30 or the like.

  In step S1, the designer generates an inspection scenario 40 for verification by SILS (see a dotted arrow 800).

  In step S <b> 2, the designer assigns an expected value to a variable and a terminal name (for example, a terminal connected to the control target) as a confirmation point with respect to the inspection scenario (see a dotted arrow 820). At this time, the designer also specifies an allowable error (see dotted arrow 820). Thereby, the operation allowable setting data 46 (see FIG. 1) is generated.

  In step S3, the designer gives the inspection scenario 40 to the first simulation apparatus 10 (see the dotted arrow 84). The first simulation apparatus 10 operates the control software (control SW) 80 in accordance with the inspection scenario 40 (see the dotted arrow 86) under the VECU environment (see the dotted arrow 86). As a result, a simulation result 42 (see FIG. 1) is obtained.

  In step S4, the designer gives the simulation result 42 and operation allowable setting data 46 (see FIG. 1) obtained in step S3 to the processing device 30, and the first determination unit 32 (FIG. 1) of the processing device 30 performs the simulation. It is determined whether or not the result 42 is within the specified error range with respect to the expected value set in step S2. When the determination result is “YES”, the first determination unit 32 outputs the first result report, and the process of FIG. 2 ends. When the determination result is “NO”, the process of FIG. 2 proceeds to step S5. The first result report is a report indicating that the simulation result 42 is within the specified error range with respect to the expected value set in step S2.

  In step S <b> 5, the inspection scenario generator 36 for the actual machine of the processing device 30 acquires the inspection scenario 40 and generates an inspection scenario 44 for the actual machine based on the inspection scenario 40. The inspection scenario 44 for an actual machine is obtained by converting the inspection scenario 40 for an actual machine. The actual machine refers to the environment of the second simulation apparatus 20. The inspection scenario generation unit 36 for the actual machine of the processing device 30 gives the generated inspection scenario 44 for the actual machine to the second simulation apparatus 20.

  In step S6, the second simulation apparatus 20 performs a simulation according to the inspection scenario 44 for the actual machine. Note that the second simulation device 20 includes an ECU in which the control software 80 is installed. As a result, an actual machine operation result 48 (see FIG. 1) is obtained. The second simulation device 20 gives the actual machine operation result 48 to the processing device 30.

  In step S7, the second determination unit 34 of the processing device 30 determines whether the actual machine operation result 48 is within the specified error range with respect to the expected value set in step S2. If the determination result is “YES”, the process proceeds to step S9. If the determination result is “NO”, the process proceeds to step S8.

  In step S8, the second determination unit 34 of the processing device 30 determines that there is no problem in the VECU environment, and generates an output that indicates that there is a problem in the control software 80. At this time, the second determination unit 34 of the processing device 30 generates a second result report 52 (see FIG. 1) that represents the difference from the simulation result 42 (where the difference has occurred, the value of the difference, etc.). To do. In response, the designer can modify the control software 80.

  In step S9, the second determination unit 34 of the processing device 30 determines that there is no problem in the control software 80, and generates an output indicating that there is a problem in the VECU environment. In response, the designer can modify the VECU environment.

  In the above-described embodiment, the first determination unit 32 forms the “first verification result acquisition unit” in the scope of claims, and the inspection scenario generation unit 36 for actual machines uses the “scenario generation” in the scope of the claims. The second determination unit 34 forms a “second verification result acquisition unit” and a “determination unit” in the claims.

  The preferred embodiments of the present invention have been described in detail above. However, the present invention is not limited to the above-described embodiments, and various modifications and substitutions can be made to the above-described embodiments without departing from the scope of the present invention. Can be added.

1 Simulation device
DESCRIPTION OF SYMBOLS 10 1st simulation apparatus 20 2nd simulation apparatus 32 1st determination part 34 2nd determination part 36 Inspection scenario generation part for real machines

Claims (1)

A first simulation device that simulates the operation of the control software using software without using the hardware in which the control software is installed;
A second simulation device that simulates the operation of the control software using hardware in which the control software is installed;
A first verification result acquisition unit for acquiring a first verification result obtained by simulating the operation of the control software in the first simulation device according to an inspection scenario;
A scenario generation unit that generates a second inspection scenario for simulation in the second simulation device from the inspection scenario when the first verification result is not within a predetermined allowable range with respect to an expected value prepared in advance; ,
A second verification result acquisition unit for acquiring a second verification result obtained by simulating the second inspection scenario with the second simulation device;
A simulation apparatus comprising: a determination unit that determines which of the environment of the first simulation apparatus and the control software has a problem based on the second verification result.

Images