Electronic control unit for automotive vehicles

• US 6,243,629 B1
• Filed: 09/08/1999
• Issued: 06/05/2001
• Est. Priority Date: 04/19/1996
• Status: Expired due to Term

• Current Assignee: Honda Giken Kogyo Kabushiki Kaisha (Honda Motor Company)
• Original Assignee: Honda Giken Kogyo Kabushiki Kaisha (Honda Motor Company)
• Inventors: Takayama, Yusuke, Sugimoto, Yoshiyuki
• Primary Examiner(s): Chin, Gary
• Application Number:
  US09/391,944
• Time in Patent Office: 636 Days
• Field of Search: 701/29, 701/33, 701/76, 701/92, 180/197, 303/122, 303/122.01, 303/122.02, 303/122.03, 303/122.04, 303/122.05, 303/122.06
• US Class Current: 701/29
• CPC Class Codes: G05B 19/0428 Safety, monitoring G05B19/0423 takes precedence
• CPC Class Codes: G05B 2219/24021 Separate processor for monitoring system
• CPC Class Codes: G05B 2219/24038 Several test signals stored in memory and used as input signals
• CPC Class Codes: G05B 2219/24061 Simulator, generates input signals, shows output signals of logic
• CPC Class Codes: G05B 2219/24092 Warning display lights, lamps, leds on module

Abstract

An electronic control unit for an automotive vehicle which can be manufactured at a low cost and which is compact in size, includes a first microprocessor which has a first memory storing one of a plurality of arithmetic programs for controlling respective predetermined control systems, and which is connected to at least one external sensor and an actuator of a corresponding one of the predetermined control systems. The first microprocessor arithmetically processes information from the at least one external sensor based on the one of the plurality of predetermined arithmetic programs stored in the first memory, and delivers a control signal as a result of the arithmetic processing to the actuator. A second microprocessor is connected to the first microprocessor to deliver and receive data to and from the first microprocessor, thereby monitoring operation of the same. The second microprocessor includes a second memory which stores both check data for checking the operation of the first microprocessor, based on which the first microprocessor executes predetermined arithmetic processing, and solutions determined by the check data. The check data is commonly applicable for all of the plurality of predetermined arithmetic programs. The second microprocessor also includes a determining block which compares between results of the predetermined arithmetic processing executed by the first microprocessor based on the check data and the solutions, and determines that an abnormality exists in the first microprocessor when the results of the predetermined arithmetic processing and the solutions do not agree.

Claims

1. An electronic control unit for an automotive vehicle, comprising:

a microprocessor having first memory means for storing one of a plurality of predetermined arithmetic programs for controlling respective predetermined control systems, said microprocessor being connected to at least one external sensor and an actuator of a corresponding one of said predetermined control systems, said microprocessor arithmetically processing information from said at least one external sensor based on said one of said plurality of predetermined arithmetic programs stored in said first memory means, and said microprocessor delivering a control signal as a result of said arithmetic processing to said actuator; and

monitoring means connected to said microprocessor, for delivering and receiving data to and from said microprocessor and thereby monitoring operation of said microprocessor,

wherein said monitoring means includes;

(i) second memory means for storing both check data for checking said operation of said microprocessor, based on which said microprocessor executes predetermined arithmetic processing, and solutions determined by said check data, said check data being directly applicable, without being modified, for checking operations of microprocessors of all of the predetermined control systems operating on different arithmetic programs, and (ii) determining means for comparing between results of said predetermined arithmetic processing executed by said microprocessor based on said check data and said solutions stored in said second memory means, and for determining that an abnormality exists in said microprocessor when said results of said predetermined arithmetic processing and said solutions do not agree.

2. An electronic control unit as claimed in claim 1, wherein said monitoring means includes output means, connected to said actuator of said control system, for outputting a signal commanding inhibition of operation of said actuator when said determining means determines that said abnormality exists in said microprocessor.

3. An electronic control unit as claimed in claim 1, including input means for inputting a signal indicative of operation of said actuator to said monitoring means.

4. An electronic control unit as claimed in claim 3, wherein said monitoring means includes output means for outputting a signal commanding inhibition of said operation of said actuator when said signal indicative of said operation of said actuator indicates that an abnormality exists in said actuator.

5. An electronic control unit as claimed in claim 1, including input means for inputting a signal indicative of operation of said at least one external sensor to said monitoring means.

6. An electronic control unit as claimed in claim 5, wherein said monitoring means includes output means for outputting a signal commanding inhibition of operation of said actuator when said signal indicative of said operation of said at least one external sensor indicates that an abnormality exists in said at least one external sensor.

7. An electronic control unit for an automotive vehicle, comprising:

a first microprocessor having first memory means for storing one of a plurality of predetermined arithmetic programs for controlling respective predetermined control systems, said first microprocessor being connected to at least one external sensor and an actuator of a corresponding one of said predetermined control systems, said first microprocessor arithmetically processing information from said at least one external sensor based on said one of said plurality of predetermined arithmetic programs stored in said first memory means, and said first microprocessor delivering a control signal as a result of said arithmetic processing to said actuator; and

a second microprocessor connected to said first microprocessor exclusively for delivering and receiving data to and from said first microprocessor and thereby monitoring operation of said first microprocessor;

wherein said second microprocessor includes;

(i) second memory means for storing both check data for checking said operation of said first microprocessor, based on which said first microprocessor executes predetermined arithmetic processing, and solutions determined by said check data, said check data being directly applicable, without being modified, for checking operations of microprocessors of all of the predetermined control systems operating on different arithmetic programs, and (ii) determining means for comparing between results of said predetermined arithmetic processing executed by said first microprocessor based on said check data and said solutions stored in said second memory means, and for determining that an abnormality exists in said first microprocessor when said results of said predetermined arithmetic processing and said solutions do not agree.