Control system having effective error detection capabilities

• US 5,980,081 A
• Filed: 07/14/1997
• Issued: 11/09/1999
• Est. Priority Date: 07/15/1996
• Status: Expired due to Term

• Current Assignee: DENSO Corporation
• Original Assignee: DENSO Corporation
• Inventors: Watari, Daisuke, Hirata, Sanae
• Primary Examiner(s): Grant, William
• Assistant Examiner(s): Garland, Steven R.
• Application Number:
  US08/892,125
• Time in Patent Office: 848 Days
• Field of Search: 364/184-187, 395/182.08, 395/182.21, 395/182.22, 395/183.01, 395/183.07-183.09, 395/183.13, 395/183.15, 395/183.17, 395/184.01, 371/3, 701/43, 701/107, 714/736, 714/23-25, 714/31-33, 714/37, 714/39, 714/41, 714/47, 714/703, 714/732, 714/734, 324/73.1
• US Class Current: 700/79
• CPC Class Codes: G05B 19/0421 Multiprocessor system
• CPC Class Codes: G05B 2219/2239 Reallocate, reschedule execution of controlled functions if one processor fails
• CPC Class Codes: G05B 2219/24203 Restart, recover from error only if detected states equal stored states
• CPC Class Codes: G06F 11/2236 to test CPU or processors

Abstract

A monitoring process of a subordinate CPU executes a monitoring subroutine based on external data to check if a main CPU is operating properly or not. A ROM stores test input data for the monitoring subroutine and reference data that should be obtained by the monitoring subroutine based on the test input data. The subordinate CPU alternately executes the monitoring process and a logic determination process which executes the monitoring subroutine based on the test input data. When the monitoring subroutine gives results different from the reference data, the logic determination process determines that there is an abnormality in the monitoring subroutine.

Claims

1. A control system comprising:

a parameter data memory unit for storing parameter data;

a processing unit for executing a predetermined process based on said parameter data stored in said parameter data memory unit;

an activation unit for receiving external data, storing said external data in said parameter data memory unit as said parameter data and activating said processing unit;

a test control unit for controlling a target device based on said external data;

a signal generation unit for providing a control signal to said control unit based on a processing result of said predetermined process executed by said processing unit when said processing unit is activated by said activation unit;

a test data memory unit for storing test data, said test data including test input data and reference data indicative of corresponding processing result when said processing unit executes said predetermined process based on said test input data; and

a check unit for reading said test data from said test data memory unit, storing said test data as said parameter data in said parameter data memory unit, activating said processing unit to execute said predetermined process based on said test input data unless said activation unit is activating said processing unit and for determining that there is an abnormality in said processing unit when said processing result of said processing unit based on said test input data is different from said reference data.

2. A control system according to claim 1, wherein:

said parameter data memory unit is further for storing said processing result of said processing unit, said parameter data memory unit including a first memory region and a second memory region that is distinct from said first memory region, said parameter data memory unit storing said processing result of said processing unit in said first memory region when said processing unit is activated by said activation unit, said parameter data memory unit storing said processing result of said processing unit in said second memory region when said processing unit is activated by said check unit; and

said signal generation unit is for generating said control signal based on said processing result stored in said first memory region.

3. A control system according to claim 1, wherein said control unit is for controlling said target device based on said external data stored in said parameter data memory unit.

4. A control system according to claim 1, wherein:

said parameter data memory unit is further for storing said processing result of said processing unit, said parameter data memory unit including a first memory region and a second memory region that is distinct from said first memory region, said parameter data memory unit storing said processing result of said processing unit in said first memory region when said processing unit is activated by said activation unit, said parameter data memory unit storing said parameter data and said processing result of said processing unit in said second memory region when said processing unit is activated by said check unit; and

said control unit is for controlling said target device based on said parameter data stored in said second memory region of said parameter data memory unit.

5. A control system according to claim 1, wherein:

said processing unit is for executing all steps of said predetermined process based on said test input data when said check unit activates said processing unit; and

said check unit is for reading said test data as a set, activating said processing unit based on said respective set of data and determining that there is an abnormality in said processing unit when said processing result of said predetermined process executed by said processing unit is different from said reference data in said set of data.

6. A control system according to claim 1, wherein said check unit is for activating said processing unit at a predetermined time interval.

7. A control system according to claim 1, wherein:

said processing unit is for executing said predetermined process to monitor if there is an abnormality in the control operation of said control unit; and

said signal generation unit is for generating said control signal to set said control unit to an abnormal operation mode when said processing unit determines that there is an abnormality in said control operation of said control unit.

8. A control system according to claim 1, wherein:

said processing unit is for executing said predetermined process to monitor if there is an abnormality in said control unit; and

said signal generation unit is for setting said control unit to an abnormal operation mode to inhibit said control unit from controlling said target device when said processing unit determines that there is an abnormality in said control unit.

9. A control system according to claim 1, wherein:

said control unit is for controlling said target device based on a first target value, said control unit using a predetermined procedure to compute said first target value based on said external data;

said processing unit is further for computing a second target value based on said external data and using said predetermined procedure of said control unit, performing a determination process to determine if there is an abnormality in said control unit, determining that there is an abnormality in said control unit when said second target value is different from said first target value and generating a determination result indicative of result of said determination process;

said test data memory unit is for storing reference data which includes reference computed data and reference determination data;

said check unit is for determining that there is an abnormality in said processing unit when said second target value is different from said reference computed data; and

said check unit also is for determining that there is an abnormality in said processing unit when said determination result is different from said reference determination data.

10. A control system comprising:

a data reception unit for receiving external data;

a processing unit for executing a predetermined process for monitoring a control device based on said external data, said control device being for controlling a target device;

a signal generation unit for generating a control signal to said control device for setting said control device to an abnormal activation mode when a processing result of said predetermined process executed by said processing unit indicates that there is an abnormality in said control device; and

a check unit for determining if there is an abnormality in said processing unit and terminating operations of said signal generation unit after determining that there is an abnormality in said processing unit.

11. A control system comprising:

control means for calculating control data based on input external data, and for controlling a target device by outputting control signals corresponding to said input external data;

first monitoring means for calculating determination data based on said input external data and said control data, for determining an abnormality in said control means by comparing said determination data with said control data, and for inhibiting said control means from controlling the target device when there is an abnormality in said control means; and

second monitoring means provided independently from said first monitoring means for determining an abnormality in said first monitoring means based only on predetermined test data output from said first monitoring means, and for inhibiting said control means from controlling said target device when there is an abnormality in said first monitoring means.

12. A method of controlling a system while also monitoring for abnormalities in the system operation, said method comprising:

storing parameter data;

executing a predetermined control process based on said stored parameter data;

receiving external data and storing it as said parameter data and performing said executing step based thereon;

controlling a target device based on said external data;

providing a control signal based on the result of said executing step;

storing test data, said test data including test input data and reference data indicative of corresponding result of said executing step based on said test input data;

reading said stored test data and performing said executing step based on said test input data when time permits so as to determine whether there is an abnormality in said executing step when the results from said test input data is different from said reference data;

said target device being controlled based on a first target value using a predetermined procedure to compute said first target value based on said external data;

a second target value being computed based on said external data using said predetermined procedure and a determination process being performed to determine if there is an abnormality when said second target value is different from said first target value and a determination result is generated indicative of result of said determination process;

storing reference data which includes reference computed data and reference determination data;

determining that there is an abnormality when said second target value is different from said reference computed data; and

determining that there is an abnormality when said determination result is different from said reference determination data.

13. A method for controlling a system while also monitoring for abnormalities in the system operation, said method comprising:

receiving external data;

executing a predetermined process for monitoring a control device based on said external data, said control device controlling a target device;

generating a control signal to said control device for setting said control device to an abnormal activation mode when a result of said predetermined process indicates that there is an abnormality in said control device; and

determining if there is an abnormality in said processing unit and terminating said control signal after determining that there is an abnormality in said executing step.