Vehicle electronic control apparatus incorporating a plurality of microcomputers and implementing a microcomputer monitoring function
First Claim
1. An electronic control apparatus of a motor vehicle, including a first microcomputer and a second microcomputer, said first microcomputer periodically calculating a value of a target control quantity for use in controlling an actuator of an engine of said vehicle, based on parameter values expressing a current operating condition of the engine, whereinsaid second microcomputer is adapted to monitor operations of said first microcomputer including processing to calculate said target control quantity, each time that said first microcomputer calculates a target control quantity value, said first microcomputer calculates resource inspection data relating to each of respective resources of said first microcomputer which are involved in said calculation, and transmits said resource inspection data to said second microcomputer, and said second microcomputer is adapted to receive said resource inspection data and monitor the functioning of said first microcomputer, based on said resource inspection data.
1 Assignment
0 Petitions
Accused Products
Abstract
A vehicle ECU (Electronic Control Unit) has a main microcomputer and an auxiliary microcomputer, with the main microcomputer periodically executing a processing routine for calculating values such as degrees of throttle opening of the vehicle engine based upon the current operating condition of the engine, wherein the main microcomputer generates resource inspection data during each execution of the routine and transmits the resource inspection data to the auxiliary microcomputer, with the resource inspection data including for example respective checksums for values calculated in successive steps of the routine and information indicating whether all steps of the routine have been actually executed, and with the auxiliary microcomputer monitoring the operation of the main microcomputer based upon the received resource inspection data.
-
Citations
16 Claims
-
1. An electronic control apparatus of a motor vehicle, including a first microcomputer and a second microcomputer, said first microcomputer periodically calculating a value of a target control quantity for use in controlling an actuator of an engine of said vehicle, based on parameter values expressing a current operating condition of the engine, wherein
said second microcomputer is adapted to monitor operations of said first microcomputer including processing to calculate said target control quantity, each time that said first microcomputer calculates a target control quantity value, said first microcomputer calculates resource inspection data relating to each of respective resources of said first microcomputer which are involved in said calculation, and transmits said resource inspection data to said second microcomputer, and said second microcomputer is adapted to receive said resource inspection data and monitor the functioning of said first microcomputer, based on said resource inspection data.
-
2. An electronic control apparatus of a motor vehicle, including a first microcomputer and a second microcomputer, said first microcomputer periodically calculating a value of a target control quantity for use in controlling an actuator of an engine of said vehicle, based on parameter values expressing a current operating condition of the engine, wherein
said second microcomputer is adapted to monitor operations of said first microcomputer including processing to calculate said target control quantity, each time that said first microcomputer calculates a target control quantity value, said first microcomputer calculates resource inspection data relating to each of respective resources of said first microcomputer which are involved in said calculation, and transmits said resource inspection data to said second microcomputer, said second microcomputer is adapted to receive said resource inspection data and monitor the functioning of said first microcomputer, based on said resource inspection data, said first microcomputer includes a RAM (Random Access Memory), with values which are successively derived by said first microcomputer during a processing sequence to calculate said target control quantity being temporarily stored in said RAM, and said first microcomputer is adapted to read out each of said calculated values from said RAM and transmits said each calculated value to said second microcomputer together with an inverse value of said each calculated value, as resource inspection data.
-
3. An electronic control apparatus of a motor vehicle, including a first microcomputer and a second microcomputer, said first microcomputer periodically calculating a value of a target control quantity for use in controlling an actuator of an engine of said vehicle, based on parameter values expressing a current operating condition of the engine, wherein
said second microcomputer is adapted to monitor operations of said first microcomputer including processing to calculate said target control quantity, each time that said first microcomputer calculates a target control quantity value, said first microcomputer calculates resource inspection data relating to each of respective resources of said first microcomputer which are involved in said calculation, and transmits said resource inspection data to said second microcomputer, said second microcomputer is adapted to receive said resource inspection data and monitor the functioning of said first microcomputer, based on said resource inspection data, said first microcomputer includes memory means having calculation processing codes stored therein, with a plurality of said calculation processing codes being read out and utilized by said first microcomputer during a processing sequence to calculate said target control quantity, and said first microcomputer is adapted to calculate a checksum value of said calculation processing codes used in said processing sequence and transmits said checksum value to said second microcomputer, as resource inspection data.
-
5. An electronic control apparatus of a motor vehicle, including a first microcomputer and a second microcomputer, said first microcomputer periodically calculating a value of a target control quantity for use in controlling an actuator of an engine of said vehicle, based on parameter values expressing a current operating condition of the engine, wherein
said second microcomputer is adapted to monitor operations of said first microcomputer including processing to calculate said target control quantity, each time that said first microcomputer calculates a target control quantity value, said first microcomputer calculates resource inspection data relating to each of respective resources of said first microcomputer which are involved in said calculation, and transmits said resource inspection data to said second microcomputer, said second microcomputer is adapted to receive said resource inspection data and monitor the functioning of said first microcomputer, based on said resource inspection data, and said first microcomputer is adapted to initialize a value for use as a processing sequence inspection value, prior to execution of a processing sequence to calculate a target control quantity value, successively update said processing sequence inspection value at each of one or more predetermined timings during said processing sequence, and transmit said processing sequence inspection value to said second microcomputer, as resource inspection data, upon completion of said processing sequence.
-
7. An electronic control apparatus of a motor vehicle, including a first microcomputer and a second microcomputer, said first microcomputer periodically calculating a value of a target control quantity for use in controlling an actuator of an engine of said vehicle, based on parameter values expressing a current operating condition of the engine, wherein
said second microcomputer is adapted to monitor operations of said first microcomputer including processing to calculate said target control quantity, each time that said first microcomputer calculates a target control quantity value, said first microcomputer calculates resource inspection data relating to each of respective resources of said first microcomputer which are involved in said calculation, and transmits said resource inspection data to said second microcomputer, said second microcomputer is adapted to receive said resource inspection data and monitor the functioning of said first microcomputer, based on said resource inspection data, said first microcomputer calculates said target control quantity by combining a plurality of determining factors, said first microcomputer is adapted to calculate resource inspection data sets respectively corresponding to said determining factors, and transmit said resource inspection data sets to said second microcomputer, and said second microcomputer is adapted to judge said resource inspection data sets respectively separately, and said first microcomputer is adapted to initialize a value for use as a processing sequence inspection value, prior to execution of a processing sequence to calculate a target control quantity value, successively update said processing sequence inspection value on completion of each of respective calculation processing stages for deriving said determining factors, and transmit said processing sequence inspection value to said second microcomputer, as resource inspection data, upon completion of said processing sequence.
-
8. An electronic control apparatus of a motor vehicle, including a first microcomputer and a second microcomputer, said first microcomputer periodically calculating a value of a target control quantity for use in controlling an actuator of an engine of said vehicle, based on parameter values expressing a current operating condition of the engine, wherein
said second microcomputer is adapted to monitor operations of said first microcomputer including processing to calculate said target control quantity, each time that said first microcomputer calculates a target control quantity value, said first microcomputer calculates resource inspection data relating to each of respective resources of said first microcomputer which are involved in said calculation, and transmits said resource inspection data to said second microcomputer, said second microcomputer is adapted to receive said resource inspection data and monitor the functioning of said first microcomputer, based on said resource inspection data, and the apparatus further includes data communication means whereby said first microcomputer transmits data to said second microcomputer in data packets, wherein said first microcomputer is adapted to transmit each calculated value of said target control quantity together with resource inspection data relating to calculation of said value, within one of said data packets.
-
10. An electronic control apparatus of a motor vehicle, including a first microcomputer and a second microcomputer, said first microcomputer periodically calculating a value of a target control quantity for use in controlling an actuator of an engine of said vehicle, based on parameter values expressing a current operating condition of the engine, wherein
said second microcomputer is adapted to monitor operations of said first microcomputer including processing to calculate said target control quantity, each time that said first microcomputer calculates a target control quantity value, said first microcomputer calculates resource inspection data relating to each of respective resources of said first microcomputer which are involved in said calculation, and transmits said resource inspection data to said second microcomputer, said second microcomputer is adapted to receive said resource inspection data and monitor the functioning of said first microcomputer, based on said resource inspection data, said first microcomputer calculates said target control quantity by combining a plurality of determining factors, said first microcomputer is adapted to calculate resource inspection data sets respectively corresponding to said plurality of determining factors, during execution of a processing sequence to calculate said target control quantity, and to transmit said resource inspection data sets to said second microcomputer, and said second microcomputer is adapted to judge said resource inspection data sets respectively separately, to determine for each of said determining factors whether or not said determining factor is valid for use in calculating a value of said target control quantity.
-
12. An electronic control apparatus of a motor vehicle, including a first microcomputer and a second microcomputer, the apparatus configured for monitoring of at least one of said microcomputers by the other one thereof, wherein
said first microcomputer is adapted to calculate resource inspection data relating to each of respective resources of said first microcomputer, based on internal processing executed by said first microcomputer, and to transmit said resource inspection data to said second microcomputer, said resource inspection data at least including a data bit which is set to a predetermined value each time a specific part of a processing sequence has been completed, and said second microcomputer is adapted to receive said resource inspection data and monitor the functioning of said first microcomputer, based on said resource inspection data.
-
13. An electronic control apparatus of a motor vehicle, including a first microcomputer and a second microcomputer, said first microcomputer periodically calculating a value of a target control quantity for use in controlling an actuator of an engine of said vehicle, based on parameter values expressing a current operating condition of the engine, wherein
said second microcomputer is adapted to monitor operations of said first microcomputer including processing to calculate said target control quantity, each time that said first microcomputer calculates a target control quantity value, said first microcomputer calculates resource inspection data relating to each of respective resources of said first microcomputer which are involved in said calculation, and transmits said resource inspection data to said second microcomputer, said resource inspection data at least including a data bit which is set to a predetermined value each time a specific part of a processing sequence has been completed, and said second microcomputer is adapted to receive said resource inspection data and monitor the functioning of said first microcomputer, based on said resource inspection data.
-
14. A method of operating an electronic control apparatus of a motor vehicle, the electronic control apparatus including a first microcomputer and a second microcomputer, the method comprising:
-
periodically calculating at the first microcomputer a value of a target control quantity for use in controlling an actuator of an engine of said vehicle, based on parameter values expressing a current operating condition of the engine;
monitoring, at the second microcomputer, operations of said first microcomputer including processing to calculate said target control quantity;
each time that said first microcomputer calculates a target control quantity value, calculating, at the first microcomputer, resource inspection data relating to each of respective resources of said first microcomputer which are involved in said calculation;
transmitting said resource inspection data to said second computer;
receiving, at the second computer, said resource inspection data; and
monitoring, at the second microcomputer, the functioning of said first microcomputer, based on said resource inspection data.
-
-
15. An electronic control apparatus of a motor vehicle, including a microcomputer and a monitoring apparatus, said monitoring apparatus periodically calculating a value of a target control quantity for use in controlling an actuator of an engine of said vehicle, based on parameter value expressing a current operating condition of the engine, wherein
said monitoring apparatus is adapted to monitor operations of said microcomputer including processing to calculate said target control quantity, each time that said microcomputer calculate a target control quantity value, said microcomputer calculates resource inspection data relating to each of respective resources of said microcomputer which are involved in said calculation, and transmits said resource inspection data to said monitoring apparatus, and said monitoring apparatus is adapted to receive said resource inspection data and monitor the functioning of said microcomputer, based on said resource inspection data.
Specification