Electronic control apparatus provided with plural microcomputers for electronically controlling electronic devices mounted in vehicle

• US 8,281,167 B2
• Filed: 01/09/2009
• Issued: 10/02/2012
• Est. Priority Date: 01/11/2008
• Status: Active Grant

• Current Assignee: DENSO Corporation
• Original Assignee: DENSO Corporation
• Inventors: Nakamura, Michio, Itabashi, Toru
• Primary Examiner(s): Cao, Chun
• Assistant Examiner(s): Prifti, Aurel
• Application Number:
  US12/351,186
• Publication Number:
  US 20090183018A1
• Time in Patent Office: 1,362 Days
• Field of Search: 701/48, 701/36, 180/65.1, 320/104, 455/209, 307/9.1
• US Class Current: 713/320
• CPC Class Codes: B60W 50/04 Monitoring the functioning of the control system
• CPC Class Codes: G06F 11/0739 in a data processing system embedded in automotive or aircraft systems
• CPC Class Codes: G06F 11/0757 by exceeding a time limit, i.e. time-out, e.g. watchdogs

Abstract

In an electronic control apparatus for vehicles, there is provided a main microcomputer activated when a given activation condition is met and a sub-microcomputer to which a power control signal controlling power supply to the sub-microcomputer is supplied. A first power supply unit supplies, via a first supply line, power supply voltage to the main microcomputer for activation, and a second power supply unit supplies, via a second supply line different from the first supply line, power supply voltage to the sub-microcomputer for activation when the sub-microcomputer receives the power control signal. The main microcomputer determines whether or not the sub-microcomputer should be made to operate and performs a switchover between output and non-output of the power control signal to the second power supply unit based on the determined results, whereby the power supply to the sub-microcomputer is controlled.

Claims

1. An electronic control apparatus for vehicles, comprising

a main microcomputer which is activated when a given activation condition is met;

a sub-microcomputer to which power supply voltage is supplied based on a power control signal controlling power supply to the sub-microcomputer, the power control signal being outputted by the main microcomputer;

a first power supply unit that supplies, via a first supply line, power supply voltage to the main microcomputer to activate the main microcomputer; and

a second power supply unit that supplies, via a second supply line different from the first supply line, power supply voltage to the sub-microcomputer to activate the sub-microcomputer, when the second power supply unit receives the power control signal from the main microcomputer, wherein

the main microcomputer includes determining means for determining whether or not the sub-microcomputer should be made to operate and switching means for performing a switchover between output and non-output of the power control signal to the second power supply unit based on results of the determining means whereby the power supply to the sub-microcomputer is controlled;

the first power supply unit includes

means for receiving a further power control signal controlling power supply to the main microcomputer and

means for switching an operation mode of an operating power supply voltage to the main microcomputer from a low-power output mode enabling a small amount of power to be outputted to a high-power output mode enabling a high amount of power to be outputted higher than the small amount of power; and

the main microcomputer includes means for operating in a waiting mode with power consumed less than in a normal operation mode of the main microcomputer, depending on the operating power supply voltage from the first power supply unit operating in the low-power output mode, until the determining means determines that an activation condition has been met, and

means for outputting the further power control signal to the first power supply unit when it is determined that the activation condition has been met in the waiting mode, allowing the first power supply unit to transit from the waiting mode the normal operation mode.

2. The apparatus of claim 1, wherein the main microcomputer is operable on a power supply voltage lower than a power supply voltage on which the sub-microcomputer is operable.

3. The apparatus of claim 2, wherein the main microcomputer includes monitoring means for monitoring whether or not the sub-microcomputer is in operation in a normal state thereof.

4. The apparatus of claim 3, wherein the monitoring means in the main microcomputer is configured to monitor operation of the sub-microcomputer while the power control signal is supplied to the second power supply unit.

5. The apparatus of claim 1, wherein the main microcomputer includes monitoring means for monitoring whether or not the sub-microcomputer is in operation in a normal state thereof.

6. The apparatus of claim 5, wherein the monitoring means in the main microcomputer is configured to monitor an operation of the sub-microcomputer while the power control signal is supplied to the second power supply unit.

7. The apparatus of claim 1, comprising

monitoring means for monitoring whether or not the main microcomputer is in operation in a normal state thereof,

wherein the monitoring means is configured to monitor an operation of the main microcomputer while the main microcomputer detects the activation thereof.

8. The apparatus of claim 7, wherein the monitoring means is placed separately from the main microcomputer.

9. The apparatus of claim 1, wherein

the main microcomputer includes means for monitoring power supply voltage to on-vehicle devices which are controlled by the apparatus, and

means for outputting the power control signal on condition that the monitored power supply voltage to the on-vehicle devices is continuously equal to or higher than a given amount for a predetermined period of time or more.

10. The apparatus of claim 9, wherein the main microcomputer includes means for commanding the power control signal to stop on condition that the monitored power supply voltage is continuously equal to or less than a given amount for a predetermined period of time or more.

11. The apparatus of claim 1, wherein

the sub-microcomputer includes

further determining means for determining whether or not the sub-microcomputer is able to stop an operation thereof, and

means for outputting a power cutoff allowing signal to the main microcomputer, and

the main microcomputer includes

means for stopping the output of the power control signal in response to reception of the power cutoff allowing signal from the sub-microcomputer.

12. The apparatus of claim 11, wherein

the main microcomputer includes

means for determining the sub-microcomputer is malfunctioning so as to be impossible to return to a normal operation state thereof, and

means for stopping the output of the power control signal regardless of reception of the power cutoff allowing signal, provided that it is determined that the sub-microcomputer is malfunctioning so as to be impossible to return to the normal operation state thereof.

13. The apparatus of claim 1, wherein

the power cutoff allowing signal is a signal outputted from an output port of the sub-microcomputer, the output port being connected to the main microcomputer via a signal line electrically pulled up to a voltage indicating non-allowance of cutting off the power supply.

14. The apparatus of claim 13, wherein

the power cutoff allowing signal is a signal transmitted from the sub-microcomputer to the main microcomputer using serial communication and

the main microcomputer includes means for allowing the output of the power control signal when a malfunction occurs in communication with the sub-microcomputer.

15. The apparatus of claim 1, wherein

the sub-microcomputer includes monitoring means for monitoring whether or not the main microcomputer is in a normal operation.

16. The apparatus of claim 15, wherein

the sub-microcomputer includes means for stopping the output of the operating power supply voltages to the first and second power supply units, when it is determined that the main microcomputer is malfunctioning so as to be impossible to return to a normal operation state thereof based on monitored results of the monitoring means.

17. The apparatus of claim 1, wherein the main microcomputer includes monitoring means for monitoring whether or not the sub-microcomputer is in operation in a normal state thereof.

18. The apparatus of claim 17, wherein the monitoring means in the main microcomputer is configured to monitor operation of the sub-microcomputer while the power control signal is supplied to the second power supply unit.

19. The apparatus of claim 1, wherein

the main microcomputer is activated when the given activation condition that a signal is sent from an operation/input-system electronic control unit (ECU) or a start switch signal changes to its active level is met.

20. The apparatus of claim 1, wherein

the main microcomputer is configured to decide that the sub-microcomputer should start if power supply voltage to a travel-system electronic control unit (ECU) is continuously equal to or higher than a given threshold for a given period of time.

21. The apparatus of claim 1, wherein

the apparatus is able to receive a start switch signal indicting on/off states of a push type of start switch operated by a driver to command a start/stop of an ignition-system power supply and a start of an engine of the vehicle.