Fail-safe device in an electronic control system for an automotive vehicle
First Claim
Patent Images
1. A fail-safe device in an electronic control system for an automotive vehicle comprising:
- a microcomputer having a central processing unit and an output unit, and adapted to normally periodically executing a program, said microcomputer including an output means for generating control signals and a program run signal in response to the microcomputer executing the program, the program run signal having a predetermined periodically occurring characteristic only while the microcomputer normally periodically executes said program;
a monitor circuit connected to said output means for receiving said program run signal in order to detect the failure of the microcomputer operation and for generating a command signal when the predetermined periodic characteristic of said program run signal does not occur for a time interval in excess of a predetermined interval greater than the period of the predetermined periodic characteristic;
an output signal generator means for outputting preset control signals which are fixed and nonprogrammably determined during operation of said vehicle, said preset control signals corresponding to said control signals, and said output signal generator means including a memory unit for storing said preset control signals; and
a switching circuit associated with said output unit of the microcomputer for selectively feeding said control signals and said preset control signals to said output unit, said switching circuit responsive to said command signal for changing the position thereof between a first position connecting said output means with said output unit for feeding said control signals to said output unit and a second position connecting said output signal generator means with said output unit for feeding said preset control signals to said output unit, said switching circuit being maintained in said first position in said microcomputer normal state and changed to said second position in response to said command signal indicative of microcomputer failure.
1 Assignment
0 Petitions
Accused Products
Abstract
A fail-safe device in an electronic control system for an automotive vehicle comprises a monitoring device for detecting failure of the CPU and generating a signal indicative of error in the CPU, and a storage device for outputting data to replace the CPU output while the CPU is operative. Thus, the control system can work for controlling a vehicle control device even during CPU failure.
-
Citations
13 Claims
-
1. A fail-safe device in an electronic control system for an automotive vehicle comprising:
-
a microcomputer having a central processing unit and an output unit, and adapted to normally periodically executing a program, said microcomputer including an output means for generating control signals and a program run signal in response to the microcomputer executing the program, the program run signal having a predetermined periodically occurring characteristic only while the microcomputer normally periodically executes said program; a monitor circuit connected to said output means for receiving said program run signal in order to detect the failure of the microcomputer operation and for generating a command signal when the predetermined periodic characteristic of said program run signal does not occur for a time interval in excess of a predetermined interval greater than the period of the predetermined periodic characteristic; an output signal generator means for outputting preset control signals which are fixed and nonprogrammably determined during operation of said vehicle, said preset control signals corresponding to said control signals, and said output signal generator means including a memory unit for storing said preset control signals; and a switching circuit associated with said output unit of the microcomputer for selectively feeding said control signals and said preset control signals to said output unit, said switching circuit responsive to said command signal for changing the position thereof between a first position connecting said output means with said output unit for feeding said control signals to said output unit and a second position connecting said output signal generator means with said output unit for feeding said preset control signals to said output unit, said switching circuit being maintained in said first position in said microcomputer normal state and changed to said second position in response to said command signal indicative of microcomputer failure. - View Dependent Claims (3, 4, 5, 6, 7, 9, 10, 11, 12, 13)
-
-
2. A fail-safe device in an electronic control system for an automotive vehicle comprising:
-
a microcomputer having a central processing unit and an output unit, and adapted to normally periodically executing a program, said microcomputer including an output means for generating control signals and a program run signal in response to the microcomputer executing the program, the program run signal having a predetermined periodically occuring characteristic only while the microcomputer normally periodically executes said program; a monitor circuit connected to said output means for receiving said program run signal in order to detect failure of the microcomputer operation and for generating a command signal when the predetermined periodic characteristic of said program run signal does not occur for a time interval in excess of a predetermined interval greater than the period of the predetermined periodic characteristic; an output signal generator means including a memory unit storing preset control signals which are fixed and non-programmably determined during operation of said vehicle, said preset control signals corresponding to said control signals of said output means and effective for controlling a vehicle device to be controlled by the electronic control system, said memory unit being responsive to said command signal for outputting said preset control signals; and a switching circuit associated with said output unit of the microcomputer for selectively feeding said control signals and said preset control signals to said output unit, said switching circuit responsive to said command signal for changing the position thereof between a first position connecting said output means with said output unit for feeding said control signals to said output unit and a second position connecting said output signal generator means with said output unit for feeding said preset control signals to said output unit, said switching circuit being maintained in said first position in said microcomputer normal state and changed to said second position in response to said command signal indicative of microcomputer failure.
-
-
8. A fail-safe device in an electronic control system for an automotive vehicle comprising:
-
a microcomputer having a central processing unit and an output unit, and adapted to normally periodically executing a program, said microcomputer including an output means for generating control signals and a program run signal in response to the microcomputer executing the program, the program run signal having a predetermined periodically occurring characteristic only while the microcomputer normally periodically executes said program; a monitor circuit connected to said output means for receiving said program run signal in order to detect the failure of the microcomputer operation and for generating a command signal when the predetermined periodic characteristic of said program run signal does not occur for a time interval in excess of a predetermined interval greater than the period of the predetermined periodic characteristic; an output signal generator means for outputting preset control signals which are fixed and nonprogrammably determined during operation of said vehicle, said preset control signals corresponding to said control signals, said output signal generator means including a memory unit for storing preset control signals in respective memory addresses and an address signal generator responsive to said command signal for producing an address signal for accessing the corresponding memory address for reading out said preset control signals, said preset control signals being composed of a data component and an address component; and a switching circuit associated with said output unit of the microcomputer for selectively feeding said control signals and said preset control signals to said output unit, said switching circuit responsive to said command signal for changing the position thereof between a first position connecting said output means with said output unit for feeding said control signals to said output unit and a second position connecting said output signal generator means with said output unit for feeding said preset control signals to said output unit, said switching circuit being maintained in said first position in said microcomputer normal state and changed to said second position in response to said command, and said switching means adapted to feed both of said data components and said address component to said output unit.
-
Specification