Electronic control apparatus for vehicle

• US 5,987,365 A
• Filed: 11/20/1996
• Issued: 11/16/1999
• Est. Priority Date: 12/04/1995
• Status: Expired due to Fees

• Current Assignee: Toyota Jidosha Kabushiki Kaisha (Toyota Motor Corporation)
• Original Assignee: Toyota Jidosha Kabushiki Kaisha (Toyota Motor Corporation)
• Inventors: Okamoto, Masato
• Primary Examiner(s): NGUYEN, TAN QUANG
• Application Number:
  US08/754,752
• Time in Patent Office: 1,091 Days
• Field of Search: 701/29, 701/33, 701/34, 701/35, 701/92, 701/97, 395/183.09, 395/184.01
• US Class Current: 701/29
• CPC Class Codes: B60R 16/0315 using multiplexing techniques multiplexing for transmission of signals G08C15/00; multiplexing for electrical communication in general H04J
• CPC Class Codes: F02D 41/266 the computer being backed-up or assisted by another circuit, e.g. analogue
• CPC Class Codes: F16H 2061/122 Avoiding failures by using redundant parts
• CPC Class Codes: F16H 2061/1268 Electric parts of the controller, e.g. a defect solenoid, wiring or microprocessor

Abstract

Disclosed is an electronic control apparatus which performs various kinds of controls associated with the driving of a vehicle. This electronic control apparatus has two electronic control units (ECUs) that are functionally assigned to associated various kinds of controls including the engine control and that independently execute the associated controls. Each ECU has a main central processing unit (CPU) and a sub CPU. The main CPU and sub CPU monitor the operational states of the other. When the local ECU is normal, the main CPU sends a run pulse signal to the mating ECU via a communication line. When the main CPU and sub CPU are normal, each ECU sends another run pulse signal to the mating ECU via the communication line. Each ECU monitors the two run pulse signals sent from the other ECU to determine an abnormality in the mating ECU.

Claims

1. An electronic control apparatus for a vehicle, wherein said apparatus executes a plurality of controls associated with driving of the vehicle, said apparatus comprising:

a first computer and a second computer for independently executing controls, wherein each computer is functionally assigned to and executes at least one associated control, and wherein each computer monitors operational states of other computer;

a main processor and an associated sub processor provided in each computer, wherein the main processor executes the assigned control and monitors an operational state of the associated sub processor and determines whether the operational state of the associated sub processor is abnormal, and wherein the sub processor monitors an operational state of the main processor associated therewith and determines whether the operational state of the associated main processor is abnormal;

a transmitting means associated with each computer, wherein the transmitting means transmits a determining signal to the other computer when at least one of the main processor and the sub processor in the associated computer determines that the operational state of the other processor is abnormal;

an abnormality detecting means provided in each computer, wherein the abnormality detecting means detects an abnormality of the other computer based on the determining signal transmitted from the transmitting means of the other computer;

a warning means for warning of the abnormality, wherein the warning means operates when the abnormality detecting means detects an abnormality of the other computer; and

a restricting means associated with each computer, wherein each restricting means restricts execution of at least one assigned control of the associated computer when at least one of the main processor and the sub processor determines that the operational state of the other processor is abnormal.

2. The apparatus as set forth in claim 1, wherein each computer includes a power circuit associated therewith, wherein the power circuit supplies power to the main processor in the associated computer and monitors operational state of the main processor and determines whether the operational state of the main processor is abnormal, and wherein the power circuit transmits a reset signal that forcibly prohibits operation of the main processor when the power circuit determines that the monitored operational state is abnormal.

3. The apparatus as set forth in claim 2, wherein each main processor has a transmitting means to transmit a dynamic signal to the associated power circuit when the operational state of the main processor is normal, and wherein each power circuit has a monitoring means to monitor the dynamic signal transmitted from the associated main processor and wherein each monitoring means determines the operational state of the associated main processor based on the dynamic signal.

4. The apparatus as set forth in claim 1, wherein the vehicle includes a V-type engine having a first bank and a second bank, wherein each bank is supplied with air for combustion and includes a linkless throttle valve to adjust an amount of the supplied air, wherein the main processor of the first computer controls the throttle valve of the first bank and wherein the main processor of the second computer controls the throttle valve of the second bank.

5. The apparatus as set forth in claim 4, wherein the vehicle has an automatic transmission that is driven by the engine, and wherein the main processor of the first computer additionally controls the transmission.

6. The apparatus as set forth in claim 1, wherein each main processor and the associated sub processor has a monitoring means to monitor an operational state of the other, and wherein each main processor and the associated sub processor has a transmitting means to transmit a dynamic signal to the monitoring means of the other when the operational state of the other is normal, and wherein the monitoring means of each main processor determines the operational state of the associated sub processor based on the transmitted dynamic signal from the associated sub processor and wherein the monitoring means of each sub processor determines the operational state of the associated main processor based on the transmitted dynamic signal from the associated main processor.

7. An electronic control apparatus for a vehicle, wherein said apparatus executes a plurality of controls associated with driving of the vehicle, said apparatus comprising:

a first computer and a second computer for independently executing controls wherein each computer is functionally assigned to and executes at least one associated control, and wherein each computer monitors operational states of other computer;

at least one communication line for allowing the first computer and the second computer to exchange predetermined data necessary for controls with each other;

at least one monitor line for allowing the first computer and the second computer to exchange predetermined signals necessary for monitoring the operational states of the computers with each other;

a main processor and an associated sub processor provided in each computer, wherein the main processor executes at least one assigned control;

a monitoring means provided in the main processor and the associated sub processor in the each computer, wherein the monitoring means allows associated the processors to exchange predetermined signals with each other necessary for monitoring their operational states and for determining whether the operational state of the associated processor is normal;

a communicating means provided in each computer, wherein the communicating means allows each computer to exchange a first dynamic signal, which inverts every given period, with the predetermined data by way of the communication line when the operational state of each computer is normal;

a transmitting means provided in each computer, wherein the transmitting means transmits a second dynamic signal, which inverts every given period, to the other computer by way of the monitor line when the monitoring means of each processor determines that the operational state of the other processor is normal, and wherein each transmitting means transmits a signal other than the second dynamic signal to the other computer by way of the monitor line when at least one monitoring means of the processors determines that the operational state of the other processor is abnormal; and

abnormality detecting means provided in each computer, wherein the abnormality detecting means detects an abnormality of the other computer to monitor both the first dynamic signal and the second dynamic signal transmitted from the other computer by way of the communication line and the monitor line.

8. The apparatus as set forth in claim 7, wherein each computer has a restricting means associated therewith, wherein each restricting means restricts execution of at least one assigned control of the associated computer when the transmitting means of the same computer transmits the signal other than the second dynamic signal to the other computer indicating that the operational state of the computer is abnormal.

9. The apparatus as set forth in claim 8, wherein each computer includes a power circuit associated therewith, wherein the power circuit supplies power to the main processor in the associated computer and monitors operational state of the main processor and determines whether the operational state of the main processor is abnormal, and wherein the power circuit transmits a reset signal that forcibly prohibits operation of the main processor when the power circuit determines that the monitored operational state is abnormal.

10. The apparatus as set forth in claim 9, wherein each main processor has a transmitting means to transmit a dynamic signal to the associated power circuit when the operational state of the associated main processor is normal, and wherein each power circuit has a monitoring means to monitor the dynamic signal transmitted from the associated main processor and wherein each monitoring means determines the operational state of the associated main processor based on the dynamic signal.

11. The apparatus as set forth in claim 8, wherein the vehicle includes a V-type engine having a first bank and a second bank, wherein each bank is supplied with air for combustion and includes a linkless throttle valve to adjust an amount of the supplied air, wherein the main processor of the first computer controls the throttle valve of the first bank and wherein the main processor of the second computer controls the throttle valve of the second bank.

12. The apparatus as set forth in claim 11, wherein the vehicle has an automatic transmission that is driven by the engine, and wherein the main processor of the first computer additionally controls the transmission.

13. The apparatus as set forth in claim 8 further comprising a warning means for warning of an abnormality, wherein the warning means operates when the abnormality detecting means detects an abnormality of the other computer.

14. The apparatus as set forth in claim 8, wherein each main processor and the associated sub processor has a monitoring means to monitor an operational state of the other, and wherein each main processor and the associated sub processor has a transmitting means to transmit a dynamic signal to the monitoring means of the other when the operational state of the other is normal, and wherein the monitoring means of each main processor determines the operational state of the associated sub processor based on the transmitted dynamic signal from the associated sub processor and wherein the monitoring means of each sub processor determines the operational state of the associated main processor based on the transmitted dynamic signal from the associated main processor.

15. The apparatus as set forth in claim 7, wherein each computer includes a power circuit associated therewith, wherein the power circuit supplies power to the main processor in the associated computer and monitors operational state of the main processor and determines whether the operational state of the main processor is abnormal, and wherein the power circuit transmits a reset signal that forcibly prohibits operation of the main processor when the power circuit determines that the monitored operational state is abnormal.

16. The apparatus as set forth in claim 15, wherein each main processor has a transmitting means to transmit a dynamic signal to the associated power circuit when the operational state of the associated main processor is normal, and wherein each power circuit has a monitoring means to monitor the dynamic signal transmitted from the associated main processor and wherein each monitoring means determines the operational state of the associated main processor based on the dynamic signal.

17. The apparatus as set forth in claim 7, wherein the vehicle includes a V-type engine having a first bank and a second bank, wherein each bank is supplied with air for combustion and includes a linkless throttle valve to adjust an amount of the supplied air, wherein the main processor of the first computer controls the throttle valve of the first bank and wherein the main processor of the second computer controls the throttle valve of the second bank.

18. The apparatus as set forth in claim 17, wherein the vehicle has an automatic transmission that is driven by the engine, and wherein the main processor of the first computer additionally controls the transmission.

19. The apparatus as set forth in claim 7 further comprising a warning means for warning of an abnormality, wherein the warning means operates when the abnormality detecting means detects an abnormality of the other computer.

20. The apparatus as set forth in claim 7, wherein each main processor and the associated sub processor has a monitoring means to monitor an operational state of the other, and wherein each main processor and the associated sub processor has a transmitting means to transmit a dynamic signal to the monitoring means of the other when the operational state of the other is normal, and wherein the monitoring means of each main processor determines the operational state of the associated sub processor based on the transmitted dynamic signal from the associated sub processor and wherein the monitoring means of each sub processor determines the operational state of the associated main processor based on the transmitted dynamic signal from the associated main processor.