Failure sensing device of vehicle control system

• US 7,630,800 B2
• Filed: 01/04/2005
• Issued: 12/08/2009
• Est. Priority Date: 01/19/2004
• Status: Expired due to Fees

• Current Assignee: Toyota Jidosha Kabushiki Kaisha (Toyota Motor Corporation)
• Original Assignee: Toyota Jidosha Kabushiki Kaisha (Toyota Motor Corporation)
• Inventors: Hirano, Hiroyuki, Ito, Ryo
• Primary Examiner(s): KEITH, JACK W
• Application Number:
  US10/577,909
• Publication Number:
  US 20070156310A1
• Time in Patent Office: 1,799 Days
• Field of Search: 701/1, 701/29, 701/31, 701/33, 701/34, 701/36, 701/39, 701/43, 701/62, 701/63, 701/76, 701/92, 701/97, 701/114, 700/21, 700/79, 714/736, 340/438, 340/439
• US Class Current: 701/29
• CPC Class Codes: B60T 8/885 using electrical circuitry
• CPC Class Codes: B60W 10/04 including control of propulsion units
• CPC Class Codes: B60W 10/18 including control of braking systems
• CPC Class Codes: B60W 10/20 including control of steering systems
• CPC Class Codes: B60W 2050/0006 Digital architecture hierarchy
• CPC Class Codes: B60W 50/0205 Diagnosing or detecting failures; Failure detection models
• CPC Class Codes: B60W 50/029 Adapting to failures or work around with other constraints, e.g. circumvention by avoiding use of failed parts
• CPC Class Codes: B60W 50/045 Monitoring control system parameters
• CPC Class Codes: B62D 5/0481 monitoring the steering system, e.g. failures

Abstract

A vehicle control system is configured by basic control units of a power train control unit, a steering control unit and a brake control unit that are arranged in a lower control hierarchy level, a vehicle motion control manager unit that is arranged in a middle control hierarchy level, and a driving support control unit that is arranged in an upper control hierarchy level. The basic control units transmits input data to vehicle motion control manager unit of middle control hierarchy level and/or driving support control unit of upper control hierarchy level, and receives a calculation result of the input data substituted into a predetermined calculation formula at vehicle motion control manager unit and/or driving support control unit. If the input data and the calculation result data are not consistent, it determines that there is a failure in vehicle motion control manager unit and/or driving support control unit.

Claims

1. A failure sensing device of a vehicle control system including a control unit generating a control target based on an operation request for controlling a driving state of a vehicle by manipulating a corresponding actuator using the generated control target, and a processing unit connected to said control unit by a network, for generating and providing to said control unit additional information to be used to modify said operation request or said control target, as necessary, at said control unit, wherein

said failure sensing device is provided to said control unit with smaller control load, and includes

an output portion outputting information to said processing unit with greater control load,

a receiving portion receiving a response corresponding to said information from said processing unit, and

a sensing portion sensing a failure in said processing unit based on said information and said response.

2. The failure sensing device according to claim 1, wherein

said information is input data for calculation at said processing unit, and

said receiving portion receives as a response a calculation result of said input data substituted into a predetermined calculation formula at said processing unit.

3. The failure sensing device according to claim 1, wherein

said control unit further includes a diagnosing portion diagnosing a failure in itself.

4. The failure sensing device according to claim 1, wherein

said control unit is configured by multiplexed calculating units.

5. The failure sensing device according to claim 1, wherein

said control unit further includes a determining portion determining interruption of control in which additional information from said processing unit is reflected, when a failure of said processing unit is sensed by said sensing portion.

6. The failure sensing device according to claim 1, wherein

said control unit is configured by a plurality of control units controlling an operation of a vehicle, and

said control unit further includes a sensing portion sensing a failure in said processing unit based on a plurality of sensing results from sensing portions included in said plurality of control units.

7. The failure sensing device according to claim 6, wherein

priorities as to failure sensing are assigned to said plurality of control units.

8. The failure sensing device according to claim 7, wherein

control units with smaller control loads are given higher priorities.

9. A failure sensing device of a vehicle control system including a control unit generating a control target based on an operation request for controlling a driving state of a vehicle by manipulating a corresponding actuator using the generated control target, and a processing unit connected to said control unit by a network, for generating and providing to said control unit additional information to be used to modify said operation request or said control target, as necessary, at said control unit, wherein

said failure sensing device is provided to said control unit with smaller control load, and includes

an output portion outputting information to said processing unit with greater control load,

a receiving portion receiving a response corresponding to said information from said processing unit and

a sensing portion sensing a failure in said processing unit based on said information and said response, wherein

units in said vehicle control system are hierarchically configured, and

said control unit is arranged hierarchically lower than said processing unit.

10. A failure sensing device of a vehicle control system including a control unit generating a control target based on an operation request for controlling a driving state of a vehicle by manipulating a corresponding actuator using the generated control target, and a processing unit connected to said control unit by a network, for generating and providing to said control unit additional information to be used to modify said operation request or said control target, as necessary, at said control unit wherein

said failure sensing device is provided to said control unit with smaller control load, and includes

outputting means for outputting information to said processing unit with greater control load,

receiving means for receiving a response corresponding to said information from said processing unit, and

sensing means for sensing a failure in said processing unit based on said information and said response.

11. The failure sensing device according to claim 10, wherein

said information is input data for calculation at said processing unit, and

said receiving means includes means for receiving as a response a calculation result of said input data substituted into a predetermined calculation formula at said processing unit.

12. The failure sensing device according to claim 10, wherein

said control unit further includes diagnosing means for diagnosing a failure in itself.

13. The failure sensing device according to claim 10, wherein

said control unit is configured by multiplexed calculating units.

14. The failure sensing device according to claim 10, wherein

said control unit further includes means for determining interruption of control in which additional information from said processing unit is reflected, when a failure of said processing unit is sensed by said sensing means.

15. The failure sensing device according to claim 10, wherein

said control unit is configured by a plurality of control units controlling an operation of a vehicle, and

said control unit further includes means for sensing a failure in said processing unit based on a plurality of sensing results from sensing means included in said plurality of control units.

16. The failure sensing device according to claim 15, wherein priorities as to failure sensing are assigned to said plurality of control units.

17. The failure sensing device according to claim 16, wherein control units with smaller control loads are given higher priorities.

18. A failure sensing device of a vehicle control system including a control unit generating a control target based on an operation request for controlling a driving state of a vehicle by manipulating a corresponding actuator using the generated control target, and a processing unit connected to said control unit by a network, for generating and providing to said control unit additional information to be used to modify said operation request or said control target, as necessary, at said control unit wherein

said failure sensing device is provided to said control unit with smaller control load, and includes

outputting means for outputting information to said processing unit with greater control load,

receiving means for receiving a response corresponding to said information from said processing unit, and

sensing means for sensing a failure in said processing unit based on said information and said response, wherein

units in said vehicle control system are hierarchically configured, and

said control unit is arranged hierarchically lower than said processing unit.