×

Fail-safe system in integrated control of vehicle

  • US 20020099487A1
  • Filed: 01/17/2002
  • Published: 07/25/2002
  • Est. Priority Date: 01/25/2001
  • Status: Active Grant
First Claim
Patent Images

1. A fail-safe system used in integrated control of a vehicle, comprising:

  • a plurality of actuators for actuating a plurality of structural elements provided on the vehicle, respectively;

    a plurality of sensors for detecting state quantities used in control of operation of the structural elements, respectively;

    a plurality of structural-element control portions for driving and controlling the actuators on the basis of the state quantities detected by the sensors according to preset control programs, respectively, wherein preset priority degrees are given to the structural-element control portions respectively;

    a manager control portion for storing one or more substitute programs designed to implement functions of ones among the structural-element control portions which are necessary for travel of the vehicle;

    a communication line;

    wherein actuators and sensors among the actuators and the sensors which are necessary for travel of the vehicle, the structural-element control portions, and the manager control portion are connected to the communication line to implement communications thereamong;

    failure detecting means for detecting failures of the structural-element control portions; and

    downloading means for, when the failure detecting means detects a failure of one of the structural-element control portions which is necessary for travel of the vehicle, selecting one from non-failed ones of the structural-element control portions as a download destination in accordance with the priority degrees and downloading the substitute program corresponding to the failed structural-element control portion into the selected download-destination structural-element control portion, the selected download-destination structural-element control portion being lower in priority degree than the failed structural-element control portion;

    wherein the download-destination structural-element control portion drives and controls the actuator corresponding to the failed structural-element control portion on the basis of the state quantity detected by the sensor corresponding to the failed structural-element control portion according to the downloaded substitute program.

View all claims
  • 1 Assignment
Timeline View
Assignment View
    ×
    ×