Automotive vehicle controlling apparatus with failure judging facility

• US 5,291,803 A
• Filed: 02/11/1992
• Issued: 03/08/1994
• Est. Priority Date: 02/14/1991
• Status: Expired due to Fees

• Current Assignee: Nissan Motor Co., Ltd.
• Original Assignee: Nissan Motor Co., Ltd.
• Inventors: Yamaguchi, Hiroshi
• Primary Examiner(s): Wright, Dirk
• Application Number:
  US07/832,930
• Time in Patent Office: 756 Days
• Field of Search: 74/866
• US Class Current: 477/34
• CPC Class Codes: B60W 10/06 including control of combustion engines
• CPC Class Codes: B60W 2050/021 Means for detecting failure or malfunction
• CPC Class Codes: B60W 2050/0215 Sensor drifts or sensor failures
• CPC Class Codes: B60W 2050/022 Actuator failures
• CPC Class Codes: B60W 2510/0604 Throttle position
• CPC Class Codes: B60W 2510/0638 Engine speed
• CPC Class Codes: B60W 2510/0642 Idle condition
• CPC Class Codes: B60W 2510/0671 Engine manifold pressure
• CPC Class Codes: B60W 50/02 Ensuring safety in case of control system failures, e.g. by diagnosing, circumventing or fixing failures
• CPC Class Codes: B60W 50/0225 Failure correction strategy
• CPC Class Codes: F02D 41/22 Safety or indicating devices for abnormal conditions in air/fuel ratio feedback systems F02D41/1495, in electric control linkage F02D11/107, in purge control systems F02M25/0809
• CPC Class Codes: F02D 41/266 the computer being backed-up or assisted by another circuit, e.g. analogue
• CPC Class Codes: F16H 2061/1208 with diagnostic check cycles; Monitoring of failures
• CPC Class Codes: F16H 2061/122 Avoiding failures by using redundant parts
• CPC Class Codes: F16H 2061/1284 the failing part is a sensor
• CPC Class Codes: F16H 2061/1288 the failing part is an actuator
• CPC Class Codes: F16H 59/22 Idle position
• CPC Class Codes: F16H 59/24 dependent on the throttle opening
• CPC Class Codes: F16H 59/36 Inputs being a function of speed
• CPC Class Codes: F16H 59/74 Inputs being a function of engine parameters F16H59/14 takes precedence
• CPC Class Codes: F16H 61/12 : Detecting malfunction or potential malfunction, e.g. fail safe in control of hydrostatic gearing F16H61/4192; Circumventing or fixing failures
• CPC Class Codes: Y10S 477/902 : Control signal is engine parameter other than manifold pressure or fuel control
• CPC Class Codes: Y10S 477/906 : Means detecting or ameliorating the effects of malfunction or potential malfunction

Abstract

An apparatus for controlling an automotive vehicle includes a plurality of sensors for detecting operational conditions of the vehicle and for producing condition signals which are received by a plurality of control units. The control units produce control signals in response to which a plurality of actuators control the operations of the vehicle. In order to judge failures of the sensors, a managing unit is provided separately from the control units and the condition signals generated by the sensors are supplied to the managing unit. In the managing unit, a failure judging process is performed by using the condition signals in combination to derive a judgment result.

Claims

1. An automotive vehicle controlling apparatus with failure judging faculty comprising:

sensing means, including a plurality of sensors, for detecting operational conditions of the automotive vehicle to generate a plurality of condition signals;

signal processing means, including at least one control unit, for receiving and processing at least one of said plurality of condition signals and for generating at least one control signal;

actuating means, including at least one actuator, for controlling the automotive vehicle in response to said at least one control signal generated by said signal processing means; and

managing means for receiving information related to said plurality of condition signals generated by said sensing means and for processing the information to judge a failure of at least one sensor in the sensing means and/or at least one actuator in the actuating means,

said managing means further providing at least one correct condition signal related to at least one sensor which is judged to be abnormal, said correct condition signal being derived from condition signals generated by sensors which are judged to be normal.

2. An apparatus according to claim 1, wherein said managing means is directly connected to said sensors in the sensing means to receive the condition signals generated by the sensors, and the managing means is constructed to form said information from the condition signals.

3. An apparatus according to claim 1, wherein said at least one control unit is constructed to form said information in accordance with the condition signals generated by said sensors and said managing means is connected to said at least one control unit in the signal processing means by means of at least one communication circuit to receive said information.

4. An apparatus according to claim 1, wherein said managing means is constructed such that a failure judgement result is derived by processing said information in accordance with a predetermined logic theory.

5. An automotive vehicle controlling apparatus with failure judging faculty comprising:

sensing means, including a plurality of sensors, for detecting operational conditions of the automotive vehicle and for generating a plurality of condition signals;

signal processing means, including at least one control unit, for receiving and processing at least one of said plurality of condition signals and for generating at least one control signal;

actuating means, including at least one actuator, for controlling the automotive vehicle in response to said at least one control signal generated by said signal processing means; and

managing means for receiving information related to said plurality of condition signals generated by said sensing means and for processing the information to judge a failure of at least one sensor in the sensing means and/or at least one actuator in the actuating means,

wherein said managing means is constructed such that a failure judgement result is derived by processing said information in accordance with a majority decision.

6. An automotive vehicle controlling apparatus with failure judging faculty comprising:

sensing means, including a plurality of sensors, for detecting operational conditions of the automotive vehicle to generate a plurality of condition signals;

signal processing means, including at least one control unit, for receiving and processing at least one of said plurality of condition signals and for generating at least one control signal;

actuating means, including at least one actuator, for controlling the automotive vehicle in response to said at least one control signal generated by said signal processing means; and

managing means for receiving information related to said plurality of condition signals generated by said sensing means and for processing the information to judge a failure of at least one sensor in the sensing means and/or at least one actuator in the actuating means,

wherein said sensing means includes an idle switch for detecting a fully closed condition of a throttle valve to generate an idle signal, a full throttle switch for detecting a fully opened condition of the throttle valve to produce a full throttle signal, a throttle sensor for detecting a throttle valve open angle to generate a throttle valve open angle signal, an intake air flow meter for detecting a flow rate of an intake air to produce an intake air flow rate signal, a pressure sensor for detecting a negative pressure within an intake manifold collector to produce a negative pressure signal, and an engine running speed sensor for detecting a running speed of an engine of the automotive vehicle to produce an engine running speed signal;

said signal processing means includes an engine control unit for generating engine control signals for controlling the engine, and an automatic transmission control unit for generating automatic transmission control signals for controlling an automatic transmission;

said actuating means includes an engine controlling actuator group for controlling the engine in response to the engine control signals generated by said engine control unit, and an automatic transmission controlling actuator group for controlling the automatic transmission in response to said automatic transmission control signals; and

said managing means is constructed to detect at least one sensor which is out of order by processing said idle signal, full throttle signal, throttle valve open angle signal, intake air flow rate signal and negative pressure signal in combination.

7. An apparatus according to claim 6, wherein said managing means is constructed such that an input five bit number consisting of five bit status data which represent statuses of said idle signal, full throttle signal, throttle valve open angle signal, intake air flow rate signal and negative pressure signal is formed, the thus formed input five bit number is retrieved on a table which contains all possible situations of input five bit numbers and output five bit numbers which are obtained by totally judging statuses of the input five bit numbers, and an output five bit number contained in a retrieved situation is read out as a judgement result.

8. An apparatus according to claim 7, wherein said managing means is constructed such that said output five bit numbers are obtained by processing the five bit status data in accordance with a majority decision.

9. An apparatus according to claim 7, wherein said managing means is constructed such that said output five bit numbers are derived by processing the five bit status data in accordance with a given logic theory.

10. An apparatus according to claim 6, wherein said managing means is constructed such that when at least one sensor is judged to be out of order, a correct condition signal to be generated by said at least one sensor which is judged to be out of order is derived from condition signals which are generated by sensors which are judged to be normal.

11. An apparatus according to claim 10, wherein said managing means is constructed such that when said intake-air rate sensor is detected to be out of order, a correct value of the intake-air rate is derived from the throttle valve open angle signal and the engine running speed signal.

12. An apparatus according to claim 10, wherein said managing means is constructed such that when said pressure sensor is judged to be out of order, a correct pressure value is derived from the throttle valve open angle signal and the engine running speed signal.

13. An apparatus according to claim 10, wherein said managing means is constructed such that when said idle switch is judged to be abnormal, a correct full close signal is derived from the throttle valve open angle signal.

14. An apparatus according to claim 10, wherein said managing means is constructed such that when said full throttle switch is judged to be out of order, a correct full-open signal is derived from the throttle valve open angle signal.

15. An apparatus according to claim 10, wherein said managing means is constructed such that when said idle switch and full throttle switch are judged to be out of order, a correct idle throttle signal and a correct full throttle signal are derived from the throttle valve open angle signal.

16. An apparatus according to claim 10, wherein said managing means is constructed such that when said throttle sensor is judged t be out of order, a correct throttle valve open angle signal is derived from either one of the intake-air rate signal and negative pressure signal.

17. An apparatus according to claim 10, wherein said managing means is constructed such that when said throttle sensor and negative pressure sensor is judged to be out of order, at first a correct throttle valve open angle signal is derived from the intake-air rate and engine running speed, and then a correct negative pressure value is derived from the thus derived throttle valve open angle signal and engine running speed signal.

18. An apparatus according to claim 6, wherein said managing means is constructed such that the failure judgement result is obtained by checking whether the idle switch is closed or opened, checking whether the throttle valve open angle signal is larger than a predetermined first threshold value when the idle switch is in the on-state, checking whether the intake air flow rate is larger than a predetermined second threshold value when the throttle valve open angle signal is larger than the first threshold value, determining the failure of the idle switch when the intake air flow rate is larger than a second threshold value, and determining a failure of the throttle sensor when the intake air flow rate is equal to or smaller than the second threshold value.