Method for recovering control of a continually resetting control module

• US 20060168468A1
• Filed: 01/24/2005
• Published: 07/27/2006
• Est. Priority Date: 01/24/2005
• Status: Active Grant

• Current Assignee: GM Global Technology Operations LLC (General Motors Company)
• Original Assignee: GM Global Technology Operations Incorporated (Motors Liquidation Co. GUC Trust)
• Inventors: Robinson, Timothy A., Stewart, James H.
• Granted Patent: US 7,350,097 B2
• Time in Patent Office: Days
• US Class Current: 714/5
• CPC Class Codes: B60W 2050/0063 Manual parameter input, manual setting means, manual initialising or calibrating means
• CPC Class Codes: B60W 2050/0066 using buttons or a keyboard connected to the on-board processor
• CPC Class Codes: B60W 2050/0075 Automatic parameter input, automatic initialising or calibrating means
• CPC Class Codes: B60W 2050/0082 for initialising the control system
• CPC Class Codes: B60W 2050/0083 Setting, resetting, calibration
• CPC Class Codes: B60W 50/02 Ensuring safety in case of control system failures, e.g. by diagnosing, circumventing or fixing failures
• CPC Class Codes: B60W 50/0205 Diagnosing or detecting failures; Failure detection models
• CPC Class Codes: B60W 50/04 Monitoring the functioning of the control system
• CPC Class Codes: G05B 19/0428 Safety, monitoring G05B19/0423 takes precedence
• CPC Class Codes: G05B 2219/23307 Initial program loader, ipl, bootstrap loader
• CPC Class Codes: G05B 2219/2637 Vehicle, car, auto, wheelchair

Abstract

A method for recovering control of a continually resetting control module is provided. The method recovers control by monitoring a vehicle'"'"'s communication links for a very short period each time the boot program starts and before control is passed to the application program. Alternatively, control may also be recovered using a running reset counter (RSC) that increments every time the boot program is entered via an abnormal condition. After recovering control, the control module can communicate with an external tool to diagnose and/or reprogram the control module and thereby prevent continual reset.

Claims

1. A method for recovering control of a continually resetting control module comprising:

receiving a vehicle ignition signal;

initializing control module hardware;

monitoring a vehicle communication link for receipt of at least one recovery message;

after said monitoring step, activating a recover mode if said at least one recovery message is received;

after said monitoring step, deactivating said recover mode if said at least one recovery message is not received;

determining whether said recover mode is active;

after said determining step, monitoring said vehicle communication link for a tool message if said recover mode is active, wherein said tool message is adapted to prevent continual reset; and

after said determining step, running an application program if said recover mode is not active.

2. The method of claim 1, wherein said monitoring for at least one recovery message occurs for a first predetermined amount of time to allow transmission of said at least one recovery message.

3. The method of claim 2, further comprising transmitting a response to said at least one recovery message.

4. The method of claim 3, wherein said at least one recovery message includes a first and second recovery message.

5. The method of claim 4, wherein said monitoring for at least one recovery message occurs for a second predetermined amount of time to allow transmission of said second recovery message.

6. The method of claim 5, further comprising transmitting a response to said second recovery message.

7. A method for recovering control of a continually resetting control module comprising:

receiving a vehicle ignition signal;

initializing control module hardware;

providing a running reset counter;

checking said running reset counter;

after said checking step, activating a recover mode if said running reset counter is greater than a predefined limit;

after said checking step, deactivating said recover mode if said running reset counter is less than or equal to a predefined limit;

determining whether said recover mode is active;

after said determining step, monitoring a vehicle communication link for a tool message if said recover mode is active, wherein said tool message is adapted to prevent continual reset; and

after said determining step, running an application program if said recover mode is not active.

8. The method of claim 7, wherein said checking said running reset counter comprises:

determining whether a most recent reset was caused by an unexpected event.

9. The method of claim 8, further comprising:

providing a running reset counter compliment adapted to prevent inadvertent activation of said recover mode.

10. The method of claim 9 further comprising:

storing said running reset counter in a first memory location; and

storing said running reset counter compliment in a second memory location.

11. A method for recovering control of a continually resetting control module comprising:

receiving a vehicle ignition signal;

initializing control module hardware;

monitoring a vehicle communication link for receipt of a plurality of recovery messages;

after said monitoring step, transmitting a response to each of said plurality of recovery messages;

after said monitoring step, activating a recover mode if said plurality of recovery messages are received;

after said monitoring step, deactivating said recover mode if said plurality of recovery messages are not received;

determining whether said recover mode is active;

after said determining step, monitoring said vehicle communication link for a tool message if said recover mode is active, wherein said tool message is adapted to prevent continual reset; and

after said determining step, running an application program if said recover mode is not active.