Onboard control system for controlling devices installed on motor vehicle and method or rewriting control program and variables therefor

• US 6,108,598 A
• Filed: 10/15/1996
• Issued: 08/22/2000
• Est. Priority Date: 04/23/1996
• Status: Expired due to Fees

• Current Assignee: Mitsubishi Denki Kabushiki Kaisha (Mitsubishi Electric Corporation)
• Original Assignee: Mitsubishi Electric Corporation
• Inventors: Sumitani, Jiro
• Primary Examiner(s): Nguyen, Tan
• Assistant Examiner(s): Donnelly, Arthur D.
• Application Number:
  US08/732,855
• Time in Patent Office: 1,407 Days
• Field of Search: 701/29, 701/35, 701/102, 701/115, 701/114, 701/36, 123/479, 123/22.1, 395/652, 395/182.21, 395/183.22
• US Class Current: 701/29
• CPC Class Codes: B60R 16/0315 using multiplexing techniques multiplexing for transmission of signals G08C15/00; multiplexing for electrical communication in general H04J
• CPC Class Codes: F02D 41/2487 Methods for rewriting
• CPC Class Codes: F02D 41/26 using computer, e.g. microprocessor
• CPC Class Codes: G05B 19/042 using digital processors G05B19/05 takes precedence
• CPC Class Codes: G05B 2219/23215 Check data validity in ram, keep correct validity, compare rom ram
• CPC Class Codes: G05B 2219/23306 Load program from host, remote load, non volatile card to volatile, ram
• CPC Class Codes: G05B 2219/23307 Initial program loader, ipl, bootstrap loader
• CPC Class Codes: G05B 2219/23339 Update diskette, cassette initiates bootstrap program to load eeprom, flash
• CPC Class Codes: G05B 2219/24137 Non volatile memory to store program on power loss
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

A vehicle-onboard control system for controlling various devices mounted on the motor vehicle. A control program for the control system can be altered through facilitated processing procedure with simple hardware structure while avoiding unfitness of control variables stored in a backup random access memory and used in executing the control program. A bootstrap program (13) responds to a command signal (C) issued by an external memory rewriting device (50) upon rewriting of the control program to thereby set an initialization flag (FN) in a backup RAM (14) containing control variables. The control program rewritten with updated data supplied from the memory rewriting device (50) responds to the set state of the initialization flag (FN) upon activation, to thereby initialize the control variables stored in the backup RAM (14) so that the control variables conform with the control program.

Claims

1. A vehicle-onboard control system installed on a motor vehicle for controlling at least one device mounted on said vehicle, comprising:

a central processing unit (11) for executing a control program by using various control variables to thereby control said device (40) mounted on said motor vehicle;

a writable non-volatile read-only memory (12) for storing said control program;

a backup random access memory (14) for storing said control variables;

a backup power supply (30) for supplying electric power to said backup random access memory (14);

a bootstrap program (13) for operating said central processing unit (11) to allow said control program to be rewritten;

an address changing interface (15) for locating said bootstrap program (13) at an address executable by said central processing unit (11) upon rewriting of said control program; and

a memory rewriting device (50) for outputting a rewrite signal (A) for actuating said address changing interface (15) and a command signal (C) for activating said bootstrap program (13);

wherein an initialization flag (FN) is provided in said backup random access memory

     14) adapted to be set by said bootstrap program (13) in response to said command signal (C) upon rewriting of the said control program; and

wherein said control program responds to the set state of said initialization flag (FN) upon activation of said control program after having been rewritten, to thereby initialize said control variables stored in said backup random access memory (14).

2. A vehicle-onboard control system according to claim 1,

wherein processes for rewriting said control program stored in said writable non-volatile read-only memory (12) and initialization of said backup random access memory (14) are executed as interrupt processing routines enabled by said bootstrap program (13).

3. A vehicle-onboard control system according to claim 2,

wherein said command signal (C) contains a control variable initialize command signal;

and

wherein said backup random access memory (14) is initialized in response to said control variable initialize command with said initialization flag (FN) being set up in said backup random access memory (14).

4. A vehicle-onboard control system according to claim 1,

wherein initialization of said control variables stored in said backup random access memory (14) is executed by said control program upon activation thereof after having been rewritten when an off-state of said backup power supply (30) is detected.

5. A vehicle-onboard control system according to claim 1,

wherein initialization of said control variables stored in said backup random access memory (14) is executed by said control program upon activation thereof after having been rewritten when data stored in said backup random access memory (14) is decided as being abnormal.

6. A vehicle-onboard control system installed on a motor vehicle for controlling at least one device mounted on said vehicle, comprising:

a central processing unit (11) for executing a control program by using various control variables to thereby control said device (40) mounted on said motor vehicle;

a writable non-volatile read-only memory (12) for storing said control program;

a backup random access memory (14) for storing said control variables;

a backup power supply (30) for supplying electric power to said backup random access memory (14);

a bootstrap program (13) for operating said central processing unit (11) to rewrite said control program;

an address changing interface (15) for locating said bootstrap program (13) at an address executable by said central processing unit (11) upon rewriting of said control program; and

a memory rewriting device (50) for outputting a rewrite signal (A) for actuating said address changing means interface (15) and a command signal (C) for activating said bootstrap program (13);

wherein said control program, after have been rewritten, compares a decision reference value stored in said writable non-volatile read-only memory (12) with a predetermined value stored in said backup random access memory (14) to thereby initialize said backup random access memory (14) when discrepancy is detected between said decision reference value and said predetermined value;

said bootstrap program responding to said command signal (C) to thereby update said decision reference value to an abnormal value; and

wherein said control program initializes said backup random access memory (14) in response to a discrepancy between said abnormal value and said predetermined value upon activation of said control program after having been rewritten.

7. A vehicle-onboard control system according to claim 6,

wherein processes for rewriting said control program stored in said writable non-volatile read-only memory (12) and initialization of said backup random access memory (14) are executed as interrupt processing routines enabled by said bootstrap program (13).

8. A vehicle-onboard control system according to claim 7,

wherein said command signal (C) contains a control variable initialize command signal;

and

wherein said bootstrap program responds to said control variable initialize command to thereby change said decision reference value to said abnormal value.

9. A vehicle-onboard control system installed on a motor vehicle for controlling at least one device mounted on said vehicle, comprising:

a central processing unit (11) for executing a control program by using various control variables to control said device (40) mounted on said motor vehicle;

a writable non-volatile read-only memory (12) for storing said control program;

a backup random access memory (14) for storing said control variables;

a backup power supply (30) for supplying electric power to said backup random access memory (14);

a bootstrap program (13) for operating said central processing unit (11) to rewrite said control program;

an address changing interface (15) for locating said bootstrap program (13) at an address executable by said central processing unit (11) upon rewriting of said control program; and

a memory rewriting device (50) for outputting a rewrite signal (A) for actuating said address changing (15) and a command signal (C) for activating said bootstrap program (13);

wherein a control variable processing flag (FC) adapted to be set in response to said command signal (C) upon rewriting of said control program is provided;

said memory rewriting device (50) outputting a control variable data signal (D) together with said command signal (C);

said command signal (C) containing a control variable initialize command;

said control variable data signal (D) containing a number (n) of data for rewriting said control variable, a start address (ADS) for the rewriting and data for initialization (DN);

said control variable processing flag (FC) being set up in response to said control variable initialize command;

wherein upon rewriting of said control program, said bootstrap program (13) responds to the set state of said control variable processing flag (FC) to thereby initialize in accordance with said data (DN) for initialization the control variables stored at memory locations of said backup random access memory (14) which are determined by said number (n) of the data for rewriting and said rewrite start address (ADS).

10. A method for rewriting a control program stored in a writable non-volatile read-only memory (12) provided in a vehicle-onboard control system installed on a motor vehicle for controlling at least one device mounted on said vehicle, which system further includes a central processing unit (11) for executing the control program by using control variables to thereby control said device (40) mounted on said motor vehicle, a backup random access memory (14) for storing said control variables, a bootstrap program (13) for operating said central processing unit (11) to allow interrupt processing routines to be executed thereby, and a switching device (15) for changing over said bootstrap program and said control program with one another for execution by said central processing unit,

the method for rewriting said control program stored in said writable non-volatile read-only memory (12), comprising the steps of:

issuing a command signal (A, C, D) for activating said bootstrap program to rewrite said control program; and

providing information for allowing an altered control program resulting from said rewriting to initialize said control variables so that said control variables conform with said altered control program.

11. The method according to claim 10,

wherein said information represents an initialization flag (FN) set up in said backup random access memory (14) by said bootstrap program, and

further comprising the step in which said altered control program checks said initialization flag (FN) upon activation to thereby initialize said control variables stored in said backup random access memory (14) when said initialization flag (FN) is set up.

12. The method according to claim 10,

wherein said information represents an abnormal value of a given one of said control variables stored in said backup random access memory (14), said abnormal value being set in said altered control program, and

further comprising the step in which said altered control program compares upon activation thereof said abnormal value and said given one value to thereby initialize said control variables stored in said backup random access memory (14) when said comparison results in discrepancy.

13. The method according to claim 10,

wherein said information represents a control variable initialize command contained in said command signal (C);

and

further comprising the steps of;

issuing a control variable data signal (D) together with said command signal (C); and

setting a control variable processing flag (FC) in response to said control variable initialize command;

wherein upon rewriting of said control program, said bootstrap program (13) responds to the set state of said control variable processing flag (FC) to thereby initialize the control variables stored at memory locations of said backup random access memory (14) in accordance with said control variable data signal (D).