Vehicle control system for executing a series of processes in electronic control units

• US 20050049722A1
• Filed: 08/27/2004
• Published: 03/03/2005
• Est. Priority Date: 08/28/2003
• Status: Active Grant

• Current Assignee: DENSO Corporation
• Original Assignee: DENSO Corporation
• Inventors: Kobayashi, Masayuki
• Granted Patent: US 7,286,921 B2
• Time in Patent Office: Days
• US Class Current: 700/9
• CPC Class Codes: B60W 2050/0045 using databus protocols
• CPC Class Codes: B60W 50/0205 Diagnosing or detecting failures; Failure detection models

Abstract

A series of processes is allocated to functional blocks arranged in electronic control units (ECUs) of a vehicle control system, and each functional block executes the process and outputs a signal. The first functional block receiving a value from a sensor outputs a signal including a check code of a starting state and a result of the process. Each of the other functional blocks produces a signal including a result of the process and a renewed check code based on a signal delivered by the preceding functional block. The last functional block outputs a signal to controls an actuator. A sequence check functional block of one ECU checks the deliveries of the signals designed to be performed in a predetermined order according to the renewed check code and performs error correction processing when the deliveries are performed out of the predetermined order.

Claims

1. A vehicle control system, comprising:

a plurality of electronic control units which executes a series of processes under a given condition, each of the electronic control units having at least one functional block, each of the functional blocks executing one of the processes and outputting a signal including a result of the process, a first one of the functional blocks in execution of the series of processes receiving an input and executing the process using the input, each of the functional blocks subsequent to the first one executing the process using the signal delivered by a preceding one of the functional blocks, and a last one of the functional blocks in the execution of the series of processes outputting the signal for use in vehicle control; and

a detector which detects whether or not the series of processes has been completed under the given condition by the functional blocks of the electronic control units and outputs a detection result.

2. The vehicle control system according to claim 1, wherein deliveries of the signals of the functional blocks are designed to be performed in a predetermined order, and the detector which detects whether or not the deliveries of the signals have been performed in the predetermined order and outputs the detection result.

3. The vehicle control system according to claim 2, wherein a specific functional block or each of a plurality of specific functional blocks denoting apart of the functional blocks or all the functional blocks processes order check information received from one preceding functional block and outputs a signal including both the order check information processed and the result of the process to one succeeding functional block, each of the functional blocks other than the specific functional blocks outputs a signal including both the order check information received from one preceding functional block and the result of the process to one succeeding functional block, and the detector detects whether or not the deliveries of the signals of the specific functional blocks are performed out of the predetermined order according to the order check information of the signal outputted from one of the functional blocks.

4. The vehicle control system according to claim 3, wherein the order check information includes numeral data, and each specific functional block changes the numeral data of the received order check information by a predetermined value.

5. The vehicle control system according to claim 3, wherein the functional blocks including an intended functional block repeatedly execute the series of processes, the detector receives the order check information from the intended functional block for each series of processes, the detector calculates a difference between the order check information received in a preceding series of processes and the order check information received in a current series of processes, and the detector judges that the deliveries of the signals of the functional blocks are performed out of the predetermined order when the difference is not equal to a predetermined difference.

6. The vehicle control system according to claim 2, wherein a specific functional block or each of a plurality of specific functional blocks denoting apart of the functional blocks or all the functional blocks processes order check information received from one preceding functional block and outputs a signal including both the order check information processed and the result of the process to one succeeding functional block, each of the functional blocks other than the specific functional blocks outputs a signal including both order check information received from one preceding functional block and the result of the process to one succeeding functional block, and the detector calculates a difference between the order check information outputted from the functional block first delivering the signal in the predetermined order and the order check information outputted from the functional block delivering the signal at the last but one in the predetermined order and judges that the deliveries of the signals of the specific functional blocks are performed out of the predetermined order when the difference is not equal to a predetermined difference.

7. The vehicle control system according to claim 3, wherein the order check information has a plurality of flags, and each specific functional block sets one or more flags at a predetermined state.

8. The vehicle control system according to claim 3, wherein the specific functional blocks are classified into a plurality of groups, a difference between the received order check information and the processed order check information in the specific functional block(s) of each group differs from a difference between the received order check information and the processed order check information in the specific functional block(s) of each of the other group(s).

9. The vehicle control system according to claim 3, wherein the signal of the functional block first delivering in the predetermined order includes the order check information set at a starting state and the result of the process.

10. The vehicle control system according to claim 9, wherein the functional blocks repeatedly execute the series of processes, and the functional block first delivering the signal in the predetermined order gives a predetermined change to the order check information each time the functional block delivers the signal.

11. The vehicle control system according to claim 10, wherein the functional block first delivering the signal in the predetermined order comprises:

a storing part which produces starting information each time the functional block delivers the signal and stores the starting information in a recording medium;

a reading-out part which reads out the starting information stored in the recording medium by the storing part;

a setting part which sets the starting information read out by the reading-out part as the order check information set at the starting state;

an outputting part which outputs the order check information set by the setting part; and

a process part which executes a first part of the process during a time period between the storage of the starting information performed by the storing part and the reading of the starting information performed by the reading-out part and executes a second part of the process during a time period between the reading of the starting information performed by the reading-out part and the setting of the order check information performed by the setting part.

12. The vehicle control system according to claim 1, wherein the detector is arranged in one electronic control unit in which the last functional block is arranged.

13. The vehicle control system according to claim 1, wherein the detector is arranged in one electronic control unit in which the first functional block is arranged to control an actuator.

14. The vehicle control system according to claim 2, further comprising at least one second detector which detects whether or not the deliveries of the signals of the functional blocks are performed in the predetermined order and outputs a detection result, wherein the detector and the second detector(s) are arranged in the electronic control units different from one another, respectively.

15. The vehicle control system according to claim 3, wherein all the functional blocks including one specific functional block or one or more functional blocks including one specific functional block, respectively, execute a plurality of second processes determined by dividing a second type series of processes in the same manner as the processes for the series of processes, and

the specific functional block receives second order check information for the second type series of processes in addition to the order check information for the series of processes, processes one of the order check information and the second order check information corresponding to the series of processes and the second type series of processes required to be processed at a higher degree of reliability, and outputs the order check information or the second order check information processed.

16. The vehicle control system according to claim 2, wherein one electronic control unit has at least the two functional blocks, the detector judges that the electronic control unit is not correctly operated when the deliveries of the signals performed out of the predetermined order are caused by both the two functional blocks of the electronic control unit.

17. The vehicle control system according to claim 5, wherein the detector detects that the deliveries of the signals are performed out of the predetermined order according to the order check information of the signal outputted from the functional block at the last but one in the predetermined order.

18. The vehicle control system according to claim 7, wherein the flags of the order check information are respectively allocated to the specific functional blocks, each specific functional block sets the corresponding flag at the predetermined state, and the detector detects that the deliveries of the signals are performed out of the predetermined order when at least one of the flags is not set at the predetermined state.

19. The vehicle control system according to claim 3, further including:

a second functional block of one electronic control unit which executes a second process for a second type series of processes with the functional blocks or a part of the functional blocks in the same manner as the process for the series of processes,

wherein the order check information has a plurality of flags, respectively, allocated to the specific functional blocks and the second functional block, and the second functional block sets the corresponding flag of the order check information at a predetermined state in the second process and outputs a signal of both the order check information and a result of the second process.

20. The vehicle control system according to claim 3, wherein each of a plurality of particular functional blocks among the functional blocks first delivers the signal in a predetermined order, each of the signals of the particular functional blocks includes one piece of order check information set at a starting state and data of the result of the process, and one specific functional block receiving the signals of the particular functional blocks outputs a signal including the pieces of order check information processed and pieces of processed data based on the pieces of received data to the succeeding functional block.

21. The vehicle control system according to claim 3, wherein each of a first particular functional block and a second particular functional block among the functional blocks first delivers the signal in a predetermined order, a degree of reliability required of the result of the process of the first particular functional block is higher than that required of the result of the process of the second particular functional block, the signal of the first particular functional block includes the order check information and first data of the result of the process, the signal of the second particular functional block includes second order check information and second data of the result of the process, and one specific functional block receiving the signals of the particular functional blocks outputs a signal including the order check information processed, first processed data based on the first data and second processed data based on the second data.

22. The vehicle control system according to claim 1, wherein the deliveries of the signals among the functional blocks of one of the electronic control units are designed to be performed in a predetermined order to perform a part of the series of processes in the electronic control unit, and the detector which detects whether or not the deliveries of the signals among the functional blocks of the electronic control unit have been executed in the predetermined order and outputs the detection result.

23. A vehicle control system, comprising:

a plurality of electronic control units which repeatedly execute a series of processes to control a vehicle, each series of processes being allocated to the electronic control units, each of the electronic control units executing one of the processes for each series of processes and outputting a signal in communication using a communication line, a first one of the electronic control units in execution of each series of processes receiving an input and outputting the signal including check data and a result of the process using the input, each of the electronic control units subsequent to the first one renewing the check data so as to indicate completion of execution of the process in the check data, executing the process using the signal delivered by a preceding one of the functional blocks and outputting the signal including both the check data renewed and a result of the process, a last one of the electronic control units in the execution of each series of processes outputting the signal for use in vehicle control, and deliveries of the signals among the electronic control units being designed to be performed in a predetermined order for each series of processes; and

an order check unit, arranged in one of the electronic control units, which compares the check data delivered to the electronic control unit in a current series of processes with the check data delivered to the electronic control unit in a series of processes preceding to the current series of processes, judges according to a comparison result whether or not the deliveries of the signals of the electronic control units have been performed in the predetermined order and outputs a judgment result.

24. The vehicle control system according to claim 23, wherein the order check unit detects a difference between the check data for the current series of processes and the check data for the preceding series of processes and judges that the deliveries of the signals of the electronic control units are performed out of the predetermined order when the detected difference is not equal to a predetermined difference.