Digital control system with error monitor operative upon starting system operation

• US 4,597,052 A
• Filed: 05/14/1984
• Issued: 06/24/1986
• Est. Priority Date: 05/17/1983
• Status: Expired due to Fees

• Current Assignee: Nissan Motor Company Limited 2 Takara-Cho Kanagawa-Ku Yokohama-Shi Kanagawa-Ken Japan
• Original Assignee: Nissan Motor Co., Ltd.
• Inventors: Matsuda, Toshiro
• Primary Examiner(s): NOT, DEFINED
• Application Number:
  US06/610,004
• Time in Patent Office: 771 Days
• Field of Search: 364/183, 364/184, 364/186, 364/424, 364/431.01, 364/200, 364/900, 364/550, 364/551
• US Class Current: 702/183
• CPC Class Codes: G05B 19/0428 Safety, monitoring G05B19/0423 takes precedence
• CPC Class Codes: G06F 11/0736 in functional embedded systems, i.e. in a data processing system designed as a combination of hardware and software dedicated to performing a certain function testing or monitoring of automated control systems G05B23/02
• CPC Class Codes: G06F 11/0739 in a data processing system embedded in automotive or aircraft systems
• CPC Class Codes: G06F 11/0751 Error or fault detection not based on redundancy power supply failures G06F1/30; network fault management H04L41/06
• CPC Class Codes: G06F 11/1417 Boot up procedures

Abstract

A digital control system is provided with an error monitor system which applies dummy loads to an actuator and a monitor lamp in order to check the operation thereof. The digital control system also has a watch-dog timer responsive to a periodic signal produced as long as a microprocessor of the control system is operating normally. The control system is adapted to be initialized in response to the onset of power supply and in response to error signals from the watch-dog timer. A discriminator is provided in the control system to discriminate the cause of initialization of the control system. The discriminator enables the error monitor system when initialization due to onset of power supply is detected but not when initialization is due to errors detected by the watch-dog timer.

Claims

1. A digital control system including a microprocessor which among other functions, checks an actuator to be controlled by the system and an operation monitor, comprising:

first means for resetting and initializing the control system;

second means for activating said first means in response to the onset of power supply to the control system;

third means for detecting malfunction of said control system and activating said first means when malfunction of the control system is detected;

fourth means, responsive to said first means being activated for applying a dummy load to said actuator and said operation monitor for testing the latter; and

fifth means, responsive to activation of said first means by said third means for disabling said fourth means.

2. The digital control system as set forth in claim 1, wherein said fifth means is responsive to the onset of power supply to said control system for enabling said fourth means for a predetermined period of time.

3. The digital control system as set forth in claim 2, wherein said second means is active for a given period of time after the onset of power supply to the control system.

4. The digital control system as set forth in claim 3, wherein said predetermined period of time during which said fifth means enables said fourth means is longer than said given period of time for which said second means is active.

5. An error monitor system for a digital control system controlling an automotive vehicle device, comprising:

a microprocessor performing control operations for the automotive device in accordance with a preselected control parameter, said microprocessor producing periodic signals having a period shorter than a predetermined period as long as the microprocessor is operating normally;

a first detector for measuring the period of said periodic signal and producing a first detector signal when the measured period exceeds said predetermined period;

a second detector for detecting power supply to said microprocessor and outputting a second detector signal for a predetermined period of time in response to the onset of power supply;

means for resetting the control system in response to either of said first and second detector signals and initializing the control system; and

means for applying a dummy load signal to devices to be controlled by the control system, said dummy load applying means being responsive to said second detector signal to produce said dummy signal.

6. The error monitor system as set forth in claim 5, which further comprises means responsive to the onset of power supply to said control system for enabling said dummy load applying means for a given period of time and for disabling the latter after said given period of time.

7. The error monitor system as set forth in claim 6, wherein said given period of time for which said dummy load applying means in enabled is longer than said predetermined period for which said second detector signal is output.

8. The error monitor system as set forth in claim 7, wherein said dummy load applying means is active only when said second detector signal is input while it is in an enabled state.

9. The error monitor system as set forth in claim 8, wherein said first detector comprises a watchdog timer.

10. The error monitor system as set forth in claim 9, wherein said resetting means is active in response to the trailing edge of either of said first and second detector signals.