Data backup apparatus utilized in an electronic control system and data backup method performed in the data backup apparatus

• US 5,668,726 A
• Filed: 12/16/1994
• Issued: 09/16/1997
• Est. Priority Date: 12/17/1993
• Status: Expired due to Term

• Current Assignee: Nippondenso Co., Ltd. (DENSO Corporation)
• Original Assignee: Nippondenso Co., Ltd. (DENSO Corporation)
• Inventors: Kondo, Hiroshi, Okuda, Kazuyuki, Kitagawa, Yoshihiro, Oguri, Takamasa, Yano, Masato
• Primary Examiner(s): Teska, Kevin J.
• Assistant Examiner(s): Walker, Tyrone V.
• Application Number:
  US08/357,923
• Time in Patent Office: 1,005 Days
• Field of Search: 364/431.12, 364/431.11, 364/424.034, 364/424.035, 395/431, 395/438, 395/182.04, 340/825.16, 73/117.3, 371/67.1
• US Class Current: 701/115
• CPC Class Codes: G05B 19/0428 Safety, monitoring G05B19/0423 takes precedence
• CPC Class Codes: Y02P 90/02 Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]

Abstract

A backup RAM for storing pieces of diagnosis data regardless of the cut-off of an electric power is provided in a portion of a RAM. In cases where the detection of an unusual condition by a throttle sensor or a water temperature sensor is judged by a CPU in a current processing routine, a first checking value indicating that the backup RAM is in a renewing period is stored in a checking region of the backup RAM, and pieces of previous diagnosis data stored in a data access region of the backup RAM in a previous processing routine are copied to a temporary refuge region of the backup RAM. Thereafter, pieces of updated diagnosis data obtained in the current processing routine are stored one by one in the data access region in place of the previous diagnosis data, and a second checking value indicating that the backup RAM is in a renewal finishing period is stored in the checking region. In cases where the first checking data is stored in the checking region when the electric power cut off is again supplied, the previous diagnosis data stored in the temporary refuge region are returned to the data access region and are read out according to a request from a diagnosis checker.

Claims

1. A data backup apparatus utilized in an electronic control system, comprising:

control data storing means having a first memory region, a second memory region and a third memory region for storing pieces of updated control data in the first memory region, storing pieces of previous control data in the second memory region and storing a checking value in the third memory region regardless of whether an electric power is cut off;

control data copying means for copying the updated control data stored in the first memory region of the control data storing means to the second memory region of the control data storing means as the previous control data;

control data, renewing means for renewing one after another the updated control data which are stored in the first memory region of the control data storing means and are copied to the second memory region of the control data storing means, by the control data copying means on condition that the electric power is supplied to the control data renewing means, the renewal of the updated control data being stopped during the renewal by cutting off the electric power supplied to the control data renewing means in the middle of the renewal;

checking data setting means for setting a piece of first checking data indicating a start of the renewal of the updated control data performed by the control data renewing means to the third memory region of the control data storing means in cases where the updated control data stored in the first memory region of the control data storing means is renewed by the control data renewing means, and setting a piece of second checking data indicating a finish of the renewal of the updated control data performed by the control data renewing means to the third memory region of the control data storing means in cases where the renewal of the updated control data performed by the control data renewing means is finished, the storage of the first checking data is maintained in the third memory region of the control data storing means in cases where the electric power supplied to the control data renewing means is cut off in the middle of the renewal performed by the control data renewing means; and

control data returning means for returning the previous data copied to the second memory region of the control data storing means by the control data copying means to the first memory region of the control data storing means as the updated control data in cases where the electric power cut off is again supplied to the control data renewing means on condition that the storage of the first checking data is maintained in the third memory region of the control data storing means.

2. An apparatus according to claim 1, wherein the updated control data stored in the first memory region of the control data storing means are composed of pieces of diagnosis data indicating an unusual condition of on-vehicle equipment, an unusual condition judging flag indicating that the diagnosis data are stored in the first memory region, and a piece of judging number data indicating the number of unusual condition judgements, the number of unusual condition judgements denoting the number of renewals performed by the control data renewing means for a particular part of the on-vehicle equipment.

3. An apparatus according to claim 1, wherein the updated control data stored in the first memory region of the control data storing means includes pieces of diagnosis data indicating an unusual condition of on-vehicle equipment selected from the group consisting of a throttle, an air flow, a crank angle and a water temperature, and the diagnosis data indicates the rotational number of a piston, an amount of an intake air and a failure code designating a type of the on-vehicle equipment.

4. An apparatus according to claim 1 wherein

the updated control data stored in the first memory region of the control data storing means are composed of pieces of diagnosis data indicating an unusual condition of on-vehicle equipment detected by a sensor selected from the group consisting of a throttle sensor and a water temperature sensor, an HA unusual condition judging flag of which a setting value "1" indicates that the diagnosis data indicating the unusual condition of the on-vehicle equipment detected by the throttle sensor are stored in the first memory region, a piece of HA judging number data indicating the number of HA unusual condition judgements, which denotes the number of renewals of the diagnosis data indicating the unusual condition of the on-vehicle equipment detected by the throttle sensor, an TW unusual condition judging flag of which a setting value "1" indicates that the diagnosis data indicating the unusual condition of the on-vehicle equipment detected by the water temperature sensor are stored in the first memory region, a piece of TW judging number data indicating the number of TW unusual condition judgements which denotes the number of renewals of the diagnosis data indicating the unusual condition of the on-vehicle equipment detected by the water temperature sensor,

wherein the diagnosis data, the HA unusual condition judging flag and the HA judging number data are copied to the second memory region of the control data storing means by the control data copying means and are returned to the first memory region of the control data storing means by the control data returning means in cases where the HA unusual condition judging flag is set to "1", and

wherein the diagnosis data, the TW unusual condition judging flag and the TW judging number data are copied to the second memory region of the control data storing means by the control data copying means and are returned to the first memory region of the control data storing means by the control data returning means in cases where the TW unusual condition judging flag is set to "1".

5. An apparatus according to claim 1, further including:

a sensor selected from a group comprising a throttle sensor, an air flow detector, a crank angle sensor and a water temperature sensor for detecting an unusual condition of on-vehicle equipment; and

diagnosis data producing means for producing the diagnosis data indicating the unusual condition of the on-vehicle equipment detected by the sensor, the diagnosis data being stored in the first memory region by the control data renewing means.

6. An apparatus according to claim 1, further including:

a diagnosis checker for checking which part of on-vehicle equipment is in a failure condition according to the updated control data returned by the control data returning means to the first memory region.

7. A data backup apparatus utilized in an electronic control system, comprising:

control data storing means having a first memory region and a second memory region for storing pieces of control data in the first memory region and the second memory region;

effective region designating means for alternatively designating the first memory region and the second memory region of the control data storing means as an effective region on condition that an electric power is supplied to the effective region designating means;

control data renewing means for renewing pieces of control data, which are stored in the effective region determined by the effective region designating means one by one, on condition that the electric power is supplied to the control data renewing means, the first memory region and the second memory region of the control data storing means being alternately designated as the effective region each time the control data are renewed by the control data renewing means, and the renewal of the control data being stopped during the renewal by cutting off the electric power supplied to the control data renewing means;

renewing period setting means for setting an operational condition of the effective region determined by the effective region designating means in a control data renewing period in cases where the control data stored in the effective region are under renewal, and setting an operational condition of the effective region determined by the effective region designating means in a control data renewal finishing period in cases where the control data stored in the effective region are not under renewal, the operational condition of the effective regions being maintained to control data renewing period in cases where the electric power is cut off during the renewal of the control data performed by the control data renewing means; and

control data reading-out means for reading out pieces of control data stored in one of the first memory region and the second memory region which is not designated as the effective region by the effective region designating means in cases where the operational condition of the effective region is set in the control data renewing period by the renewing period setting means, and reading out pieces of control data stored in the effective region in cases where the operational condition of the effective region is set in the control data renewal finishing period by the renewing period setting means.

8. An apparatus according to claim 7, wherein the control data stored in the first memory region or the second memory region of the control data storing means are composed of pieces of diagnosis data indicating an unusual condition of on-vehicle equipment.

9. An apparatus according to claim 7, wherein a piece of effective region designating data indicating the designation of one of the first memory region and the second memory region as the effective region is stored in a third memory region of the control data storing means by the effective region designating means, the effective region being identified by the control data renewing means, the renewing period setting means and the control data reading-out means according to the effective region designating data.

10. An apparatus according to claim 7, wherein a piece of renewal processing judgement data indicating that the effective region is in one of the control data renewing period and the control data renewal finishing period is stored in a fourth memory region of the control data storing means by the renewing period setting means, whether the effective region is in one of the control data renewing period and the control data renewal finishing period being identified by the control data reading-out means according to the renewal processing judgement data.

11. An apparatus according to claim 7, wherein the control data stored in one of the first memory region and the second memory region of the control data storing means includes pieces of diagnosis data indicating an unusual condition of on-vehicle equipment selected from the group comprising a throttle, an air flow, a crank angle and a water temperature, and the diagnosis data indicating the rotational number of a piston, an amount of an intake air and a failure code designating a type of on-vehicle equipment.

12. An apparatus according to claim 7, wherein

the control data stored in one of the first memory region and the second memory region of the control data storing means are composed of pieces of diagnosis data indicating an unusual condition of on-vehicle equipment detected by a sensor selected from the group comprising a throttle sensor and a water temperature sensor, an HA unusual condition judging flag of which a set value "1" indicates that the diagnosis data indicating the unusual condition of the on-vehicle equipment detected by the throttle sensor are stored in the effective region, and an TW unusual condition judging flag of which a set value "1" indicates that the diagnosis data indicating the unusual condition of the on-vehicle equipment detected by the water temperature sensor are stored in the effective region being stored in the effective region.

13. An apparatus according to claim 7, further including:

a sensor selected from the group comprising a throttle sensor, an air flow detector, a crank angle sensor and a water temperature sensor for detecting an unusual condition of on-vehicle equipment; and

diagnosis data producing means for producing the diagnosis data indicating the unusual condition of the on-vehicle equipment detected by the sensor, the diagnosis data being stored in the effective region determined by the effective region designating means.

14. An apparatus according to claim 7, further including:

a diagnosis checker for checking which portion of on-vehicle equipment is in a failure condition according to the updated control data read out by the control data reading-out means.

15. A data backup apparatus utilized in an electronic control system, comprising:

control data storing means having a first memory region and a second memory region for storing pieces of control data in the first memory region and the second memory region;

effective region designating means for alternately designating the first memory region and the second memory region of the control data storing means as an effective region on condition that an electric power is supplied to the effective region designating means;

control data renewing means for renewing pieces of control data, which are stored in the effective region determined by the effective region designating means one, by one on condition that the electric power is supplied to the control data renewing means, the first memory region and the second memory region of the control data storing means being alternately designated as the effective region each time the control data are renewed by the control data renewing means, and the renewal of the control data being stopped during renewal by cutting off the electric power supplied to the control data renewing means;

renewing period setting means for setting an operational condition of the effective region determined by the effective region designating means in a control data renewing period in cases where the control data stored in the effective region are under renewal and setting an operational condition of the effective region determined by the effective region designating means in a control data renewal finishing period in cases where the control data stored in the effective region are not under renewal, the operational condition of the effective region being maintained to the control data renewing period in cases where the electric power is cut off during renewal of the control data performed by the control data renewing means;

effective region switching means for switching a memory region designated as the effective region by the effective region designating means from one of the first and second memory regions to another memory region in cases where the operational condition of the effective region is set in the control data renewing period by the renewing period setting means, on condition that the electric power cut off is again supplied to the effective region designating means, the control data renewing means and the renewing period setting means, and maintaining the designation of the effective region performed by the effective region designating means in cases where the operational condition of the effective region is set in the control data renewal finishing period by the renewing period setting means; and

control data reading-out means for reading out pieces of control data stored in the effective region which is determined by the effective region switching means.

16. An apparatus according to claim 15, wherein the control data stored in one of the first memory region and the second memory region of the control data storing means are composed of pieces of diagnosis data indicating an unusual condition of on-vehicle equipment.

17. An apparatus according to claim 15, wherein a piece of effective region designating data indicating the designation of one of the first memory region and the second memory region as the effective region is stored in a third memory region of the control data storing means by the effective region designating means, the effective region being identified by the control data renewing means, the renewing period setting means and the control data reading-out means according to the effective region designating data.

18. An apparatus according to claim 15, wherein a piece of renewal processing judgement data, indicating that the effective region is in one of the control data renewing period and the control data renewal finishing period, is stored in a fourth memory region of the control data storing means by the renewing period setting means, whether the effective region is in one of the control data renewing period and the control data renewal finishing period being identified by the control data reading-out means according to the renewal processing judgement data.

19. An apparatus according to claim 15, wherein the control data stored in one of the first memory region and the second memory region of the control data storing means includes pieces of diagnosis data indicating an unusual condition of on-vehicle equipment selected from the group comprising of a throttle, an air flow, a crank angle and a water temperature, and the diagnosis data indicating the rotational number of a piston, an amount of an intake air and a failure code designating a type of the on-vehicle equipment.

20. An apparatus according to claim 15, wherein

the control data stored in one of the first memory region and the second memory region of the control data storing means are composed of pieces of diagnosis data indicating an unusual condition of on-vehicle equipment detected by a sensor selected from the group comprising a throttle sensor and a water temperature sensor, an HA unusual condition judging flag of which a set value "1" indicates that the diagnosis data indicating the unusual condition of the on-vehicle equipment detected by the throttle sensor are stored in the effective region, and an TW unusual condition judging flag of which a set value "1" indicates that the diagnosis data indicating the unusual condition of the on-vehicle equipment detected by the water temperature sensor are stored in the effective region being stored in the effective region.

21. An apparatus according to claim 15, further including:

a sensor selected from the group comprising a throttle sensor, an air flow detector, a crank angle sensor and a water temperature sensor for detecting an unusual condition of on-vehicle equipment; and

diagnosis data producing means for producing the diagnosis data indicating the unusual condition of the on-vehicle equipment detected by the sensor, the diagnosis data being stored in the effective region determined by the effective region designating means.

22. An apparatus according to claim 15, further including:

a diagnosis checker for checking which portion of on-vehicle equipment is in a failure condition according to the updated control data read out by the control data reading-out means.

23. A data backup apparatus utilized in an electronic control system, comprising:

control data storing means having a first memory region and a second memory region for storing pieces of control data in the first memory region and the second memory region;

effective region designating means for alternately designating the first memory region and the second memory region of the control data storing means as a reading-out effective region on condition that an electric power is supplied to the effective region designating means;

control data renewing means for renewing pieces of control, which are stored in one of the first and second memory region not designated as the reading-out effective region by the effective region designating means one by one, one condition that the electric power is supplied to the control data renewing means, the first memory region and the second memory region of the control data storing means being alternately designated as the reading-out effective region each time the control data are renewed by the control data renewing means, and the renewal of the control data being incompletely finished to store pieces of incomplete control data in one of the first and the second memory region not designated as the reading-out effective region in cases where the electric power supplied to the control data renewing means is cut off in the middle of the renewal performed by the control data renewing means; and

control data reading-out means for reading out pieces of control data stored in the reading-out effective region which is determined by the effective region which is determined by the effective region designating means.

24. An apparatus according to claim 23, wherein the control data stored in one of the first memory region and the second memory region of the control data storing means are composed of pieces of diagnosis data indicating an unusual condition of on-vehicle equipment.

25. An apparatus according to claim 23, wherein a piece of reading-out region designating data indicating the designation of one of the first memory region and the second memory region as the reading-out effective region is stored in a third memory region of the control data storing means by the effective region designating means, the reading-out effective region being identified by the control data renewing means, and the control data reading-out means according to the reading-out region designating data.

26. An apparatus according to claim 23, wherein the control data stored in one of the first memory region and the second memory region of the control data storing means includes pieces of diagnosis data indicating an unusual condition of on-vehicle equipment selected from the group comprising a throttle, an air flow, a crank angle and a water temperature, and the diagnosis data indicating the rotational number of a piston, an amount of an intake air and a failure code designating a type of the on-vehicle equipment.

27. An apparatus according to claim 23, wherein

control data stored in one of the first memory region and the second memory region of the control data storing means are composed of pieces of diagnosis data indicating an unusual condition of on-vehicle equipment detected by a sensor selected from the group comprising a throttle sensor and a water temperature sensor, an HA unusual condition judging flag of which a set value "1" indicates that the diagnosis data indicating the unusual condition of on-vehicle equipment detected by the throttle sensor are stored in the reading-out effective region, and an TW unusual condition judging flag of which a set value "1" indicates that the diagnosis data indicating the unusual condition of the on-vehicle equipment detected by the water temperature sensor are stored in the reading-out effective region being stored in the reading-out effective region.

28. An apparatus according to claim 23, further including:

a sensor selected from the group comprising a throttle sensor, an air flow detector, a crank angle sensor and a water temperature sensor for detecting an unusual condition of on-vehicle equipment; and

diagnosis data producing means for producing the diagnosis data indicating the unusual condition of the on-vehicle equipment detected by the sensor, the diagnosis data being stored in the reading-out effective region determined by the effective region designating means.

29. An apparatus according to claim 23, further including:

a diagnosis checker for checking which portion of on-vehicle equipment is in a failure condition according to the updated control data read out by the control data reading-out means.

30. A data backup apparatus utilized in an electronic control system for storing pieces of diagnosis data utilized for the diagnosis of a driving condition in a vehicle, comprising:

sensing means having at least a first sensor and a second sensor for detecting conditions of a vehicle;

unusual condition detecting means for detecting that a sensing signal obtained by one of the first and second sensor of the sensing means indicates an unusual condition of the vehicle;

driving condition detecting means for detecting a driving condition of the vehicle in cases where an unusual condition of the vehicle is detected by the unusual condition detecting means;

a first memory region for storing pieces of first updated unusual information relating to the driving condition of the vehicle detected by the driving condition detecting means to replace pieces of first previous unusual information already stored in the first memory region with the first updated unusual information one by one, on condition that an electric power is supplied, and maintaining the storage of the first updated unusual information in cases where the electric power supplied is cut off;

a first unusual condition judging region placed in the first memory region for storing a first detecting result of the driving condition detected by the driving condition detecting means, which indicates whether the condition of the vehicle detected by one of the first sensor and the second sensor of the sensing means is unusual;

a first vehicle diagnosis data region placed in the first memory region for storing at least two pieces of first vehicle diagnosis data relating to the driving condition detecting means and a failure code indicating a type of sensor which relates to the driving condition of the vehicle, the first updated unusual information stored in the first memory region including the first detecting result stored in the first unusual condition judging region and the first vehicle diagnosis data stored in the first vehicle diagnosis data region;

a second memory region for storing pieces of second updated unusual information relating to the driving condition of the vehicle detected by the driving condition detecting means to replace pieces of second previous unusual information already stored in the second memory region with the second updated unusual information one by one, on condition that an electric power is supplied, and maintaining the storage of the second updated unusual information in cases where the electric power supplied is cut off, the replacements in the first and second memory regions being alternately performed;

a second unusual condition judging region placed in the second memory region for storing a second detecting result of the driving condition detected by the driving condition detecting means which indicates whether the condition of the vehicle detected by one of the first sensor and the second sensor of the sensing means is unusual;

a second vehicle diagnosis data region placed in the second memory region for storing at least two pieces of second vehicle diagnosis data relating to the driving condition of the vehicle detected by the driving condition detecting means and a failure code indicating a type of sensor which relates to the driving condition of the vehicle, the second updated unusual information stored in the second memory region including the second detecting result stored in the second unusual condition judging region and the second vehicle diagnosis data stored in the second vehicle diagnosis data region;

a third memory region for storing a piece of electric power cut-off information indicating that an electric power is cut off during one of the replacement of the first previous unusual information stored in the first memory region with the first updated unusual information and the replacement of the second previous unusual information stored in the second memory region with the second updated unusual information, and maintaining the storage of the electric power cut-off information in cases where the electric power is cut off, the electric power cut-off information being expressed by one of a first hexadecimal numeral indicating the first memory region in which the replacement of the first previous unusual information is finished and a second hexadecimal numeral indicating the second memory region in which the replacement of the second previous unusual information is finished, the first hexadecimal numeral being stored after the replacement of the first previous unusual information, the second hexadecimal numeral being stored after the replacement of the second previous unusual information, and the storage of one of the first and second hexadecimal numeral, which indicates one of the first and second memory regions being maintained until the replacement in another memory region is finished; and

effective region selecting means for selecting one of first and second memory regions in which the first previous unusual information and the second previous unusual information are not under replacement just before the electric power is cut off as an effective region, in cases where the electric power cut off is again supplied on condition that the electric power cut-off information indicating that the electric power is cut off during one of the replacement of the first previous unusual information and replacement of the second previous unusual information are stored in the third memory region, and wherein one of the first and the second vehicle diagnosis data stored in one of the first and the second vehicle diagnosis data region of the effective region and one of the first and the second detecting result stored in the first unusual condition judging region of the effective region being read out by the effective region selecting means.

31. A data backup method, comprising the steps of:

preparing a first memory region and a second memory region of a backup memory to alternately store pieces of control data utilized for an electric control system in the first memory region and the second memory region;

alternately storing a piece of first designating data, indicating that the first memory region of the backup memory is designated as a reading-out effective region, and a piece of second designating data, indicating that the second memory region of the backup memory is designated as the reading-out effective region, in a third memory region of the backup memory for each of processing routines on condition that an electric power is supplied;

renewing the control data stored in one of the first memory region and the second memory region, which is not designated as the reading-out effective region by one of the first designating data and the second designating data stored in the third memory region, one by one for each of the processing routines on condition that the electric power is supplied; and

reading out the control data stored in the reading-out effective region.