| CPC G06F 9/5038 (2013.01) [G06F 9/4806 (2013.01); G06F 11/3419 (2013.01); G06F 2209/5021 (2013.01)] | 7 Claims |

|
1. An electronic control device comprising:
a processor that includes a plurality of cores configured to execute:
first tasks that has an execution time that varies depending on a processing amount every predetermined cycle; and
a second task that is lower in priority than the first tasks and is prohibited from being interrupted, wherein the second task comprises a core diagnosis task that has a constraint in failure detection time for the plurality of cores, wherein the constraint in failure detection time corresponds to a constraint on a time interval to detect a failure after abnormality occurs in one of the plurality of cores,
wherein the second task is set to be inexecutable simultaneously between the plurality of cores, and
the electronic control device is configured to generate a first plan in which a respective first task of the first tasks is allocated to each of the cores,
the electronic control device is configured to generate a second plan in which the second task is allocated to each of the cores at an executable timing at which the first task is not being executed,
the plurality of cores are configured to execute the first tasks based on the first plan,
the electronic control device is configured to determine that when a delay in the execution of the first executed tasks has occurred by a delay amount of time to thereby postpone, in accordance with a shift amount of time, the future executable timing periods of the second task in a correction to the second plan, and
the electronic control device is configured to execute the second task for each of the cores based on the corrected second plan, wherein the electronic control device controlling a vehicle,
wherein the electronic control device is configured to change the failure detection time in accordance with a travel environment of the vehicle.
|