區域控制網路是一個經常被使用在車用網路的通訊協定。然而,在一個共同使用的區域控制網路下,隨著結點數量的增加,頻寬不足的問題和損壞節點或連結的問題越來越嚴重。 根據之前實驗室提出的群集式環狀網路可以用來處理頻寬不足的問題。在這篇論文中,我們對三個不同的拓樸提出理論模型。並且分析這三個不同的拓樸的可排程能力。同時也提出了在有連結損壞的情況下,不同拓樸的可排程能力。並且做模擬來驗證我們所提出的理論模型。 我們為了能了解更多這個模型的細節,我們用systemC建造了控制器的系統層級的模型,並且用Imperas公司所提供虛擬平台來進行模擬。可以看出在不同的運算時所需要的指令集中在那些動作上。 最後,我們對區域控制網路的控制器進行容錯的硬體設計,依照ISO 26262標準的流程進行驗證,最後再和標準規定的等級進行分類,我們的容錯硬體設計能達到安全等級ASIL-D的層級。
The Controller Area Network (CAN) is widely adopted in vehicle networks due to the simple communication protocol. However, with the increasing node number in vehicle network, insucient bandwidth and faulty nodes or links, become two important problems in a single CAN bus. We propose a cluster ring topology for CAN bus to tackle both the bandwidth and fault tolerance problems. By applying the cluster ring topology, the extra bandwidth can also be used to fault tolerance for link or node fails. In addition, we estimate the injection rate versus schedulable messages in the three cluster ring topologies. The throughput models under dierent link or node faults for the three cluster ring topologies are also analyzed. Then we provide simulation results to verify the developed theoretical models. To do the simulation with more detail, we build up the controller model clusterCAN bus models with systemC language. We connect this bus model with Imperas's open virtual platform by the TLM 2.0 standard. In this way we can let our proposed topology be used and veried by others. Moreover, we analysis the CAN controller from the open core project, and build up the safety mechanism including error-detection-correction codes, integrated hardware monitor- ing, and hardware redundancy. We adopt ISO 26262, the latest automotive standard for functional safety, to evaluate the automotive safety integrity level, ASIL-D.