區域控制網路是一個經常被使用在車用網路的通訊協定。然而，在一個共同使用的區域控制網路下，隨著結點數量的增加，頻寬不足的問題和損壞節點或連結的問題越來越嚴重。
根據之前實驗室提出的群集式環狀網路可以用來處理頻寬不足的問題。在這篇論文中，我們對三個不同的拓樸提出理論模型。並且分析這三個不同的拓樸的可排程能力。同時也提出了在有連結損壞的情況下，不同拓樸的可排程能力。並且做模擬來驗證我們所提出的理論模型。
我們為了能了解更多這個模型的細節，我們用systemC建造了控制器的系統層級的模型，並且用Imperas公司所提供虛擬平台來進行模擬。可以看出在不同的運算時所需要的指令集中在那些動作上。
最後，我們對區域控制網路的控制器進行容錯的硬體設計，依照ISO 26262標準的流程進行驗證，最後再和標準規定的等級進行分類，我們的容錯硬體設計能達到安全等級ASIL-D的層級。

The Controller Area Network (CAN) is widely adopted in vehicle networks due to the simple
communication protocol. However, with the increasing node number in vehicle network,
insucient bandwidth and faulty nodes or links, become two important problems in a single
CAN bus.
We propose a cluster ring topology for CAN bus to tackle both the bandwidth and fault
tolerance problems. By applying the cluster ring topology, the extra bandwidth can also be
used to fault tolerance for link or node fails.
In addition, we estimate the injection rate versus schedulable messages in the three
cluster ring topologies. The throughput models under dierent link or node faults for the
three cluster ring topologies are also analyzed. Then we provide simulation results to verify
the developed theoretical models. To do the simulation with more detail, we build up the
controller model clusterCAN bus models with systemC language. We connect this bus model
with Imperas's open virtual platform by the TLM 2.0 standard. In this way we can let our
proposed topology be used and veried by others.
Moreover, we analysis the CAN controller from the open core project, and build up the
safety mechanism including error-detection-correction codes, integrated hardware monitor-
ing, and hardware redundancy. We adopt ISO 26262, the latest automotive standard for
functional safety, to evaluate the automotive safety integrity level, ASIL-D.

[1] D. A. Schedl. (2007, March) Goals and architecture of
exray at bmw. In Slides
presented at the Vector FlexRay Symposium. [Online]. Available: http://vector.com/
portal/medien/cmc/speeches/FlexRay Symposium 2007/FRS07 02 Schedl.pdf
[2] J. Shapiro, \Flexray: The next generation in-vehicle network," March
2005. [Online]. Available: http://www.evaluationengineering.com/articles/200503/

exray-the-next-generation-in-vehicle-network.php
[3] Y. Xu, \Integrated protocol-operation-controller design based on
exray communication
protocol," in Network Infrastructure and Digital Content (IC-NIDC), 2012 3rd IEEE
International Conference, sep 2012, pp. 199 {203.
[4] L. Wei-Chiu, G. Zhan-Yao, H. Yar-Sun, and C. Ching-Te, \Cluster-based can with
enhanced transmission capability for vehicle networks," in Connected Vehicles and Expo
(ICCVE), 2012 International Conference on, dec 2012, pp. 43 { 48.
[5] K. Tindell, H. Hansson, and A. Wellings, \Analysing real-time communications: con-
troller area network (can)," in Real-Time Systems Symposium, 1994., Proceedings., dec
70
1994, pp. 259 {263.
[6] A. H. Malardalen, R. Malardalen Univ.and Vasteras Sweden Dobrin, and P. S., \Fault
tolerant scheduling on controller area network (can)," in Object/Component/Service-
Oriented Real-Time Distributed Computing Workshops (ISORCW), 2010 13th IEEE
International Symposium on, may 2010, pp. 226 { 232.
[7] J.-Y. Lai, T.-S. Hsu, P.-Y. Chen, C.-T. Huang, Y.-H. Chen, and J.-J. Liou, \Design of
high-throughput inter-pe communication with application-level
ow control protocol for
many-core architectures," in MES '13 Proceedings of the First International Workshop
on Many-core Embedded Systems, may 2010, pp. 41 { 44.
[8] Can protocol controller. OpenCores. [Online]. Available: http://opencores.org/project,
can
[9] H.-C. L. C.-J. Y. Yung-Chang Chang, Li-Ren Huang, \Design of high-throughput inter-
pe communication with application-level
ow control protocol for many-core architec-
tures," in CCL Technical Journal, august 2013, pp. 128 { 133.
[10] synopsys. Tetramax eda. [Online]. Available: http://www.synopsys.com/apps/support/
training/tmax1 fcd.html
[11] wikipedia. controller area network. [Online]. Available: http://en.wikipedia.org/wiki/
CAN bus
71
[12] K. Tindell and A. Burns., \Guaranteeing message latencies on controller area net-
work(can)," in In proceedings of 1st International CAN conference., sep 1994, pp. 1
{11.
[13] R. Davis, A. Burns, R. Bril, and J. Lukkien, \Controller area network (can)
schedulability analysis: Refuted, revisited and revised," Real-Time Systems,
vol. 35, pp. 239{272, 2007, 10.1007/s11241-007-9012-7. [Online]. Available: http:
//dx.doi.org/10.1007/s11241-007-9012-7
[14] J. Chen, W. Jone, J. Wang, H.-I. Lu, and T. Chen, \Segmented bus design for low-
power systems," Very Large Scale Integration (VLSI) Systems, IEEE Transactions on,
vol. 7, no. 1, pp. 25 {29, march 1999.
[15] T. Seceleanu, J. Plosila, and P. Lijeberg, \On-chip segmented bus: a self-timed approach
[soc]," in ASIC/SOC Conference, 2002. 15th Annual IEEE International, sept. 2002,
pp. 216 { 220.
[16] T. Seceleanu and S. Stancescu, \Arbitration for the segmented bus architecture," in
Semiconductor Conference, 2004. CAS 2004 Proceedings. 2004 International, vol. 2,
oct. 2004, pp. 487 { 490 vol.2.
[17] S. Chitra and A. Kandaswamy, \A high performance on-chip segmented bus architec-
ture using dynamic bridge-by-pass technique," in Industrial and Information Systems
(ICIIS), 2010 International Conference on, 29 2010-aug. 1 2010, pp. 249 {254.
[18] L.-B. Fredriksson, \A can kingdom," KVASER AB, Sweden, Tech. Rep., 1995.
72
[19] H. Sivencrona, T. Olsson, R. Johansson, and J. Torin, \Redcantm: simulations of two
fault recovery algorithms for can," in Dependable Computing, 2004. Proceedings. 10th
IEEE Pacic Rim International Symposium on, march 2004, pp. 302 { 311.
[20] M. D. Natale. (2008, October) Understanding and using the controller area
network. andout of a lecture at U.C. Berkeley. [Online]. Available: http:
//inst.eecs.berkeley.edu/ee249/fa08
[21] A. R.-S. L. Rigo, Sandro, Electronic System Level Design. Springer, 2011.
[22] Doulos. Systemc tutorial. Doulos. [Online]. Available: https://www.doulos.com/
knowhow/systemc/tutorial/
[23] Open virtual platform. Imperas. [Online]. Available: http://www.ovpworld.org/
[24] doulos. tlm20. [Online]. Available: https://www.doulos.com/knowhow/systemc/tlm2/
#anchor1
[25] \Iso 26262 road vehicles - function safety," International Organization for Standardiza-
tion, 2011.
[26] \Iso 26262 road vehicles - function safety - part 5," International Organization for
Standardization, 2011.
[27] Z. C. W. Z. Zhai Li, Dong Shouquan, \Study on electromagnetic interference restraining
of electric vehicle charging system," in Power Electronics Systems and Applications
(PESA), 2011 4th International Conference on, june 2011, pp. 1 { 4.
73
[28] Bosch. The conguration of the can bit timing. [Online]. Available: http:
//www.bosch-semiconductors.de/media/pdf 1/canliteratur/cia99paper.pdf
[29] J. F. M. Born and O. Kath, \Application of iso dis 26262 in practice," in Proceedings
of the 1st Workshop on Critical Automotive applications, 2010.
[30] A. Ismail and W. Jung, \Research trends in automotive functional safety," in Qualitiy,
Relaibility, Ristk, Maintenance, and Safety Engineering, 2013 International Conference,
2013.
[31] R. Mariani, \The impact of functional safety standards in the design and test of re-
liable and available integrated circuits,," in Test Symposium (ETS), 2012 17th IEEE
European, 2012, pp. 1-1, 2012.
[32] Z. Yimiao and N. Zhigang, \High reliable digital signal processor for automotive appli-
cation," in SIC (ASICON), 2011 IEEE 9th International Conference on, 2011, pp. 33-
34, 2011.
[33] J. Y. P. S. J. Seo-Hyun, C. Jin-Hee and H. Tae-Man, \Automotive hardware develop-
ment according to iso 26262," in Advanced Communication Technology (ICACT), 2011
13th International Conference on, 2011, pp. 588-592, 2011.
[34] T. (2013). Overview for hercules safety arm mcus. [Online]. Available: http:
//www.ti.com/lsds/ti/microcontroller/safety mcu/overview.page
74
[35] F. (2013). Safeassure functional safety program. [Online]. Available: http:
//www.freescale.com/webapp/sps/site/homepage.jsp?code=SAFETYPRGRM
[36] T. Nolte, \Share-driven scheduling of embedded networks," Ph.D. dissertation, Depart-
ment of Computer Science and Electronics, Malardalen University, Sweden, May 2006.
[37] J. Sommer and R. Blind, \Optimized resource dimensioning in an embedded can-can
gateway," in Industrial Embedded Systems, 2007. SIES '07. International Symposium
on, july 2007, pp. 55 {62.
[38] G. Cena and A. Valenzano, \Overclocking of controller area networks," Electronics
Letters, vol. 35, no. 22, pp. 1923 {1925, oct 1999.
[39] T. Ziermann, S. Wildermann, and J. Teich, \Can+: A new backward-compatible con-
troller area network (can) protocol with up to 16x higher data rates." in Design, Au-
tomation Test in Europe Conference Exhibition, 2009. DATE '09., april 2009, pp. 1088
{1093.
[40] Bosch, \Can specication version 2.0," Robert Bosch GmbH, Postfach 30 02 40 D-70442
Stuttgart, 1991.
[41] T. Hastie, R. Tibshirani, and J. H. Friedman, The Elements of Statistical Learning:
Data Mining, Inference, and Prediction. Springer, 2009, ch. 14.3.12, pp. 520{528.
[42] U. Keskin, \In-vehicle communication networks: A literature survey," Computer Science
Report, no. 09-10, August 2009, eindhoven: Technische Universiteit Eindhoven.
75
[43] \Class c application requirement considers," SAE, Tech. Rep. J2056/1, June 1993.
[44] H. Kopetz, \A solution to an automotive control system benchmark," in Real-Time
Systems Symposium, 1994., Proceedings., dec 1994, pp. 154 {158.