Vehicle control system and unit for preventing power supply cutoff during re-programming mode

• US 6,138,059 A
• Filed: 02/25/1999
• Issued: 10/24/2000
• Est. Priority Date: 03/10/1998
• Status: Expired due to Term

• Current Assignee: DENSO Corporation
• Original Assignee: DENSO Corporation
• Inventors: Tsuji, Toshio, Mori, Eiji, Ozeki, Yoshifumi
• Primary Examiner(s): Zanelli, Michael J.
• Application Number:
  US09/257,240
• Time in Patent Office: 607 Days
• Field of Search: 701/1, 701/32, 701/33, 701/114, 701/115
• US Class Current: 701/1
• CPC Class Codes: G11C 16/102 External programming circuits, e.g. EPROM programmers; In-circuit programming or reprogramming; EPROM emulators
• CPC Class Codes: G11C 16/30 Power supply circuits
• CPC Class Codes: G11C 5/14 Power supply arrangements , e.g. power down, chip selection or deselection, layout of wirings or power grids, or multiple supply levels

Abstract

A vehicle electronic control unit (ECU) prevents its power supply from being cut off while it is in the process of re-programming data in a re-programmable nonvolatile memory. An ECU includes a microcomputer which, after receiving a re-program request from a re-programming device, determines if an identification code in a flash memory and an identification code from the re-programming device match. If the codes do match, the microcomputer executes re-program processing for overwriting all the data in the flash memory, including a control program. The ECU is supplied with power from a battery by way of a main relay whose contacts are closed when a vehicle ignition switch (IGSW) is turned on or when a drive signal is applied to the relay. When the IGSW starts to operate, the microcomputer outputs the drive signal to the main relay and, when it completes re-program processing and the IGSW is off, the microcomputer stops outputting the drive signal. Thus even if the IGSW is switched off during execution of re-program processing, power to the microcomputer is maintained so that the re-program processing is not interrupted.

Claims

1. A vehicle control unit comprising:

an electronic control unit (ECU) having a re-programmable nonvolatile memory and powered by a vehicle battery, the ECU normally carrying out vehicle control processing in accordance with a control program stored in the nonvolatile memory, and carrying out re-program processing for overwriting data in the nonvolatile memory with re-program data upon receiving a re-program command; and

a power supply regulator located between the ECU and the vehicle battery for supplying power to the ECU from the battery when a designated vehicle switch is closed;

the power supply regulator continuing to supply power to the ECU from the battery until the power supply receives a cutoff command, even if the switch is open;

the ECU detecting the state of the switch after finishing the re-program processing, and outputting the cutoff command to the power supply regulator if the switch is open.

2. The vehicle control unit of claim 1, wherein the nonvolatile memory includes a program for performing the re-program processing stored therein with the control program as re-programmable data, the ECU also including a read/writable volatile memory and, upon receiving the re-program command, transfers the program in the nonvolatile memory to the volatile memory for execution thereof.

3. The vehicle control unit of claim 1, wherein the ECU also includes a non-re-programmable non-volatile memory wherein at least one of the program and an identification code is stored.

4. The vehicle control unit of claim 1, wherein the ECU is further for erasing a predetermined area of the nonvolatile memory corresponding to where the re-program data is to be stored.

5. The vehicle control unit of claim 1, wherein the nonvolatile memory includes an identification code of the control unit stored as re-programmable data with the control program therein, the ECU determining whether an externally-provided identification code and the identification code in the nonvolatile memory match when receiving the re-program command, the ECU carrying out the re-program processing only when the stored and externally-provided identification codes match.

6. The vehicle control unit of claim 1, further comprising other ECUs each for controlling at least one specified vehicle object and each for inhibiting power cutoff through the ECU when re-program processing is being carried out at the respective other ECU.

7. A first vehicle control unit powered by a battery controlled by a second control unit, comprising:

an ECU, including a re-programmable nonvolatile memory, for controlling vehicle devices, and for carrying out re-program processing for overwriting data in the nonvolatile memory with new externally-provided data upon receiving a re-program command,

wherein the ECU outputs to the second control unit a prohibition signal for prohibiting the power supply to the first control unit from being cut off before executing the re-program processing and after receiving the re-program command, and after completing the execution of the re-program processing, outputting to the second control unit a permission signal for permitting the power supply to the first control unit to be cut off.

8. The first vehicle control unit of claim 7, wherein the nonvolatile memory includes a control program for performing the control processing and a program for performing the re-program processing stored therein as re-programmable data, and the ECU includes a read/writable volatile memory and, upon receiving the re-program command, transfers the program in the nonvolatile memory to the volatile memory and executes the program for re-programming.

9. The first vehicle control unit of claim 7, wherein the nonvolatile memory includes a control program for performing the control processing and a control unit identification code stored therein as re-programmable data, the ECU determining whether or not an externally-provided identification code and the identification code in the nonvolatile memory match when receiving the re-program command, and carrying out the re-program processing only when the identification codes match.

10. The first vehicle control unit of claim 7, wherein the second control unit maintains the power supply to the first control unit after receiving the prohibition signal until it receives the permission signal.

11. A vehicle control system comprising:

a power supply relay for connecting a vehicle battery to a vehicle power supply line based on a received drive signal; and

a plurality of control units powered through the supply line by the battery;

a designated control unit among the plurality of control units outputting the drive signal to the power supply relay after a vehicle ignition switch is turned on and until a predetermined power cutoff condition is established; and

at least one control unit other than the designated control unit comprising an ECU having a re-programmable nonvolatile memory and operating on power from the battery, the ECU controlling processing in accordance with a control program stored in the nonvolatile memory;

the ECU carrying out re-program processing for overwriting data in the nonvolatile memory with new externally-provided data upon receiving an external re-program command and, prior to executing the re-program processing, outputting a prohibition signal to the designated control unit for prohibiting cutting off of the power to the at least one control unit;

the ECU, after completing the re-program processing, outputting to the designated control unit a permission signal for permitting cutting off of the power to the at least one control unit, the designated control unit continuing to output the drive signal to the power supply relay until the permission signal is received.

12. A method of controlling data re-programming at an electronic control unit (ECU), comprising the steps of:

receiving a data re-program request;

determining if a received identification code matches a stored identification code;

generating a power supply cutoff prohibition request if the received identification code matches the stored identification code;

storing re-program data;

transmitting a power supply cutoff command if system operation has been terminated and after completion of the step of storing; and

controlling a system object based on the stored re-program data if the system operation has not been terminated.

13. The method of claim 12, further comprising the step of assuming a substantially non-operating state if the received identification code does not match the stored identification code.

14. The method of claim 12, wherein the step of storing re-program data comprises the steps of:

receiving remotely-transmitted re-program data;

erasing a predetermined memory storage area; and

writing the re-program data to the predetermined memory storage area.

15. The method of claim 12, wherein the method is for controlling a vehicle controller, and wherein the steps of transmitting and controlling comprise the steps of:

transmitting a power supply cutoff command if a vehicle ignition switch has been turned off and after completion of the step of storing; and

controlling a vehicle object based on the stored re-program data if the vehicle ignition switch has not been turned off.

16. The method of claim 12, further comprising the step of selectively controlling data re-programming at one or more of a plurality of ECUs in a like manner.