ERROR DETECTING DEVICE AND METHOD OF A DUAL CONTROLLER SYSTEM

• US 20140108896A1
• Filed: 07/06/2011
• Published: 04/17/2014
• Est. Priority Date: 06/07/2011
• Status: Active Grant

• Current Assignee: LS Automotive Technologies., Ltd.
• Original Assignee: Daesung Electric Company Limited (LS Corporation)
• Inventors: Jung, Ji-Hun
• Granted Patent: US 9,003,271 B2
• Time in Patent Office: Days
• US Class Current: 714/819
• CPC Class Codes: B60W 10/20 including control of steering systems
• CPC Class Codes: B60W 2050/0004 In digital systems, e.g. discrete-time systems involving sampling
• CPC Class Codes: B60W 2050/0006 Digital architecture hierarchy
• CPC Class Codes: B60W 2050/0045 using databus protocols
• CPC Class Codes: B60W 2050/021 Means for detecting failure or malfunction
• CPC Class Codes: B60W 50/02 Ensuring safety in case of control system failures, e.g. by diagnosing, circumventing or fixing failures
• CPC Class Codes: B60W 50/0205 Diagnosing or detecting failures; Failure detection models
• CPC Class Codes: G05B 23/0237 based on parallel systems, e.g. comparing signals produced at the same time by same type systems and detect faulty ones by noticing differences among their responses
• CPC Class Codes: G06F 11/0796 Safety measures, i.e. ensuring safe condition in the event of error, e.g. for controlling element
• CPC Class Codes: G06F 11/08 Error detection or correction by redundancy in data representation, e.g. by using checking codes
• CPC Class Codes: G06F 11/1637 using additional compare functionality in one or some but not all of the redundant processing components
• CPC Class Codes: G06F 11/1645 and the comparison itself uses redundant hardware
• CPC Class Codes: G06F 11/1654 where the output of only one of the redundant processing components can drive the attached hardware, e.g. memory or I/O

Abstract

An error detecting device of a dual controller system is provided. The first controller receives a sensing data from a sensor to calculate and generate a first data and outputs a final data if an error is not detected by comparing the first data with a second data transmitted from a second controller. The CAN transceiver receives the final data from the first controller and transmits the final data through a CAN bus. The second controller receives the sensing data from the sensor to calculate and generate a second data and transmits to the first controller an interrupt signal which prevents an output of the final data if an error is detected by comparing the second data with the final data fed back from the CAN transceiver. Accordingly, output transmission to the vehicle is controlled and the stability and reliability of the output data is increased.

Claims

1. An error detecting device of a dual controller system comprising:

a first controller receiving a sensing data from a sensor to calculate and generate a first data and outputting a final data if an error is not detected by comparing the first data with a second data transmitted from a second controller;

a CAN transceiver receiving the final data from the first controller and transmitting the final data through a CAN bus; and

the second controller receiving the sensing data from the sensor to calculate and generate a second data and transmitting to the first controller an interrupt signal which prevents an output of the final data if an error is detected by comparing the second data with the final data fed back from the CAN transceiver.

2. The error detecting device of a dual controller system according to claim 1, wherein the first controller comprises a first calculating unit which receives the sensing data and calculates and generates the first data, a first comparing and controlling unit which compares the first data with the second data to detect the error and transmits an output control signal to a first CAN module if the error is not detected, and the first CAN module which operates according to the output control signal, processes the first data according to a CAN protocol and transmits the final data.

3. The error detecting device of a dual controller system according to claim 2, wherein the second controller comprises a second calculating unit which receives the sensing data and calculates and generates the second data, a second CAN module which processes the final data fed back from the CAN transceiver according to the CAN protocol and transmits a third data, a second comparing unit which compares the second data with the first data transmitted from the first controller to detect the error and compares the second data with the third data transmitted from the second CAN module to detect the error, and a second control unit which transmits the interrupt signal to the first controller if the error is detected at the second comparing unit.

4. The error detecting device of a dual controller system according to claim 3, wherein the first comparing and controlling unit transmits the output control signal to the first CAN module if the error is not detected at the second comparing unit.

5. The error detecting device of a dual controller system according to claim 4 further comprising:

a first communication line connecting the first comparing and controlling unit and the second comparing unit to provide a transmitting line of an electrical signal;

a second communication line connecting the first CAN module and the second control unit to provide a transmitting line of an electrical signal; and

a feedback line feeding back the final data to the second CAN module.

6. The error detecting device of a dual controller system according to claim 1, wherein the sensor is provided as plural and the first and the second controllers receive the sensing data from the plural sensors respectively.

7. An error detecting method of a dual controller system comprising:

receiving a sensing data from a sensor to calculate and generate a first data by a first controller;

receiving a sensing data from the sensor to calculate and generate a second data by a second controller;

comparing the first data with the second data transmitted from the second controller by the first controller and outputting a final data if an error is not detected;

receiving the final data from the first controller and transmitting the final data through a CAN bus a CAN transceiver; and

comparing the second data with the final data fed back from the CAN transceiver by the second controller and transmitting to the first controller an interrupt signal which prevents an output of the final data if an error is detected.

8. The error detecting method of a dual controller system according to claim 7, wherein outputting the final data comprises comparing the first data and the second data by a first comparing and controlling unit to detect the error and transmitting an output control signal to a first CAN module if the error is not detected, and operating according to the output control signal by the first CAN module and processing the first data according to a CAN protocol to transmit the final data.

9. The error detecting method of a dual controller system according to claim 8, wherein transmitting the interrupt signal comprises processing the final data fed back from the CAN transceiver according to the CAN protocol by a second CAN module and transmitting a third data, comparing the second data with the first data transmitted from the first controller to detect the error by a second comparing unit and comparing the second data with the third data transmitted from the second CAN module to detect the error, and transmitting the interrupt signal to the first controller by the second control unit if the error is detected by the second comparing unit.

10. The error detecting method of a dual controller system according to claim 9, wherein transmitting the output control signal by the first comparing and controlling unit comprises transmitting the output control signal to the first CAN module if the error is not detected by the second comparing unit.

11. An error detecting device of a dual controller system comprising:

a first controller transmitting a first data including a sensing data received from a sensor and an indicator, identifying an error of the sensing data and transmitting a first off control signal if the error is detected;

a second controller generating a second data by calculating a sensing data received from the sensor, synchronizing the second data and the first data on the basis of the indicator included in the first data which is fed back from the first controller, and transmitting a second off control signal if the error is detected by comparing the synchronized second data with the first data;

a CAN transceiver receiving the first data from the first controller and transmitting it through a CAN bus; and

an AND switching unit outputting an interrupt signal to deactivate the CAN transceiver if at least one of the first and the second off control signals is input.

12. The error detecting device of a dual controller system according to claim 11, wherein the first controller comprises a first input unit receiving the sensing data from the sensor per first time unit, a first calculating unit receiving the sensing data and calculating to generate the first data, a first control unit sampling the first data to a predetermined times to detect the error and transmitting the first off control signal to the AND switching unit if the error is detected, and a first CAN module operating according to an output control signal of the first control unit and processing and outputting the first data according to a CAN protocol.

13. The error detecting device of a dual controller system according to claim 12, wherein the second controller comprises a second input unit receiving the sensing data from the sensor per the first time unit, a second calculating unit receiving the sensing data and calculating to generate the second data, a second CAN module processing the first data fed back from the first CAN module according to the CAN protocol and outputting the first data per second time unit, a second comparing unit synchronizing the first data and the second data on the basis of the indicator and comparing the synchronized second data with the first data to detect the error, and a second control unit transmitting a second off control signal to the AND switching unit if the error is detected by the second comparing unit.

14. The error detecting device of a dual controller system according to claim 13, wherein the first control unit transmits the output control signal to the first CAN module if the error is not detected.

15. The error detecting device of a dual controller system according to claim 14 further comprising:

a first CAN transceiver control line connecting the first control unit and a first input terminal of the AND switching unit to provide a transmitting line of the first off control signal;

a second CAN transceiver control line connecting the second control unit and a second input terminal of the AND switching unit to provide a transmitting line of the second off control signal; and

a feedback line feeding back the first data output from the first CAN module to the second CAN module.

16. The error detecting device of a dual controller system according to claim 11, wherein the sensor is provided as plural and the first and the second controllers receive the sensing data from the plural sensors respectively.

17. An error detecting method of a dual controller system comprising:

transmitting a first data including a sensing data received from a sensor and an indicator, by a first controller, identifying an error of the sensing data and transmitting a first off control signal if the error is detected;

generating a second data by calculating a sensing data received from the sensor, by a second controller, synchronizing the second data and the first data on the basis of the indicator included in the first data which is fed back from the first controller, and transmitting a second off control signal if the error is detected by comparing the synchronized second data with the first data;

receiving the first data from the first controller by a CAN transceiver and transmitting it through a CAN bus; and

outputting an interrupt signal by an AND switching unit to deactivate the CAN transceiver if at least one of the first and the second off control signals is input.

18. The error detecting method of a dual controller system according to claim 17, wherein transmitting the first off control signal by the first controller comprises receiving the sensing data by a first input unit from the sensor per first time unit, receiving the sensing data by a first calculating unit and calculating to generate the first data including the indicator, sampling the first data by a first control unit to a predetermined times to detect the error and transmitting the first off control signal to the AND switching unit if the error is detected, and operating by a first CAN module according to an output control signal of the first control unit and processing and outputting the first data according to a CAN protocol.

19. The error detecting method of a dual controller system according to claim 18, wherein transmitting the off control signal by the second controller comprises receiving the sensing data by a second input unit from the sensor per the first time unit, receiving the sensing data by a second calculating unit and calculating to generate the second data, processing the first data fed back from the first CAN module according to the CAN protocol by a second CAN module and outputting the first data per second time unit, synchronizing the first data and the second data on the basis of the indicator by a second comparing unit and comparing the synchronized second data with the first data to detect the error, and transmitting a second off control signal to the AND switching unit by a second control unit if the error is detected by the second comparing unit.

20. The error detecting method of a dual controller system according to claim 19 further comprising transmitting the output control signal to the first CAN module by the first control unit if the error is not detected.