DE102008030592A1 - Method and device for logging data of at least one control unit - Google Patents

Abstract

The control unit (CU) comprises at least one memory (EEPROM, RAM). A predetermined first selection (CU) and / or of the motor vehicle is detected or determined during operation of the control unit (CU) and stored in a first storage area (EEPROM1) of the at least one memory (EEPROM). For an external memory access to the first memory area (EEPROM1) there is a first memory access authorization. A predetermined second selection (DATA2) of data relating to operation and errors of the control unit (CU) and / or the motor vehicle is detected or determined during operation of the control unit (CU) and in a second memory area (EEPROM2) of the at least one Memory (EEPROM) stored. For an external memory access to the second memory area (EEPROM2) there is a second memory access authorization, wherein the second memory access permission differs from the first memory access permission.

Description

The The invention relates to a method and a device for logging data from at least one control unit in a motor vehicle, wherein the control unit comprises at least one memory.

modern Motor vehicles include a variety of electrical consumers and control devices that monitor the operation of the motor vehicle and Taxes. The control unit can also be used as a control unit of the Motor vehicle be called. The controllers are preferably with each other by means of a data network of the motor vehicle coupled and can thus exchange data with each other. there are connected to the data network next to the controllers as well Actuators and sensors connected.

In the textbook "Vieweg Handbook of Automotive Engineering" by Braess and Seiffert, 4th edition, published by Vieweg Verlag in September 2005, page 611 discloses a control unit in a motor vehicle, which is designed to perform a self-diagnosis and diagnosis of connected components and to inform the driver in case of error and to describe a fault memory, which is associated with the control unit.

The Problem underlying the invention is to provide a method and an apparatus for logging data of at least one Indicate the control unit, the or a reliable Storage of recorded or determined operating and / or error data allows.

The Task is solved by the characteristics of the independent Claims. Advantageous embodiments of the invention are characterized in the subclaims.

The Invention is characterized by a method and a corresponding Device for logging data of at least one control unit in a motor vehicle. The control unit comprises at least one Storage. A given first choice of data, the errors of the Control unit and / or of the motor vehicle is affected during an operation of the control unit detected or determined and in a stored first storage area of the at least one memory. For external memory access to the first memory area There is a first memory access permission. A given second selection of data indicating an operation and / or error of the Control unit and / or of the motor vehicle is affected during the operation of the control unit detected or determined and in a stored second memory area of the at least one memory. For external memory access to the second memory area There is a second memory access permission, where the second memory access permission is different from the first memory access permission.

The detection or determination of the operating and / or error data and their storage in different memory areas of the at least one memory has the advantage that the stored data in the first and second memory area can be used independently of each other. In this case, the first memory access authorization is preferably designed such that preferably only the first memory area is externally accessible with a first interface and the second memory access authorization is designed such that preferably only the second memory area is externally accessible with a second interface. In this case, an external memory access is preferably to be understood as a memory access to the data stored in the respective memory area, which is made from outside the control unit. In this case, an external memory access, for example during a workshop stay of the motor vehicle by means of a diagnostic computer on the first memory area. In particular, by a respective separate access to the first and second memory area by means of the first and second interface preferably a memory access to the second memory area by means of the first interface and preferably a memory access to the first memory area by means of the second interface is not possible, that is, in particular Memory content of the second memory area is protected from access via the first interface. For example, the stored data in the first memory area can be read and / or deleted during memory accesses by means of the first interface, such as e.g. B. in a workshop, while the stored data remain unchanged in the second memory area and so z. B. for an evaluation in the event of a complaint are available. In principle, however, it is also possible for the first and second memory areas to be accessible by means of a common interface. In this case, the second memory area is protected against manipulation by means of the second memory access authorization, which in this case is preferably embodied as encryption or as a password, against tampering with external memory access to the first memory area. The predetermined first selection of the data may differ from the predetermined second selection of the data. In principle, however, it is also possible for the same data of the first and second selection to be predetermined in each case and for these to be respectively stored in the first and second memory area after their detection or determination. Preferably, a manufacturer of the motor vehicle specifies the first selection of the data, while the second selection of the data is preferably of ei a manufacturer of the control unit is specified. The at least one memory is preferably designed as a single component, in order thus to allow reliable access to the data stored in it, in particular when an internal control access due to an error or due to a low or high voltage is no longer possible. The at least one memory is preferably designed as a nonvolatile memory. Alternatively, the control unit may comprise a volatile and a non-volatile memory, wherein during the operation of the control unit, the detected or determined data are stored in the volatile memory and in connection with turning off the control unit, the stored data are copied from the volatile to the non-volatile memory ,

In an advantageous embodiment, a respective first time, each of a first detection or a first determination of data associated with the given second selection of data are determined and in the second memory area of at least saved a memory. Alternatively or in addition becomes a last date, the last one or the last in each case a last determination of data, which the given second selection of the data are determined and determined in the stored second memory area of the at least one memory. Alternatively or additionally, a respective number of Capturing or investigating data that is the predetermined second Selection of the data are assigned, determined and in the second Memory area of the at least one memory stored. This has the advantage that data of the operation and / or data of errors present in the control unit and depending on the Data causes the error reliably and safely detected can be. Depending on the detected causes, the manufacturer of the control unit may be able to to further develop the control unit and reliability the operation of the control unit and / or the motor vehicle to increase.

In a further advantageous embodiment, the detected or determined data of the predetermined second selection of the data Assigned priority. Collected or determined data with lower Priority is provided by collected or determined data higher priority in the second memory area the at least one memory replaced. In particular, are covered or detected low priority data detected by or ascertained data with higher priority in replaced with the second memory area when in the second memory area Exhausted storage space is, so no additional data will be stored anymore can. This has the advantage of having a limited memory size the at least one memory can be used particularly efficiently can and at the same time operating and / or error data with high priority can still be stored in the second memory area. Especially Data of the given second selection of data during the total operating time of the control unit or the motor vehicle detected or determined and in the second memory area of at least saved a memory. This can be data that one or more error cases or the operation of the control unit and / or of the motor vehicle are analyzed and thus For example, causes of errors or causes for fundamental problems of operation of the control unit and / or the motor vehicle are detected.

In a further advantageous embodiment of the device comprises the control unit has a first and a second interface. at The external memory access is the stored data in the first memory area accessible by the first interface. In external memory access, the stored data is in the second memory area accessible by means of the second interface. In this case, the first memory access authorization is designed such that that the external memory access by means of the first interface is limited to the first memory area. this has the advantage that by means of the first interface not the second Memory area is accessible, but only the first memory area.

In a further advantageous embodiment of the device is the second interface designed as a wireless interface. This has the advantage that stored data in the second memory area the at least one memory particularly easy and quick to access are.

In a further advantageous embodiment of the device is the second interface arranged such that these inaccessible is when the control unit is intended in is installed in the motor vehicle. This has the advantage that the stored data in the second memory area particularly reliable and safely protected against manipulation and deletion are.

In a further advantageous embodiment of the device is the second interface arranged such that the second interface at least completely as intended closed housing of the control unit inaccessible is. This has the advantage that the stored data in the second Memory area particularly reliable and safe from manipulation and deletion are protected, in particular, if at least partially the housing of the control unit is removed.

embodiments The invention are described in more detail below with reference to the schematic drawings explained. Show it:

1 a schematic representation of a control unit,

2a - 2 B Flowcharts.

elements the same construction or function are cross-figurative marked with the same reference numerals.

In 1 is a control unit CU shown, which is preferably designed as an electronic control unit in a motor vehicle, such. B. as a gateway control unit. The control unit CU comprises an error detection unit CEM and a detection unit GEM. The error detection unit CEM and / or the detection unit GEM are embodied, for example, as hardware units and / or as programs which are executed, for example, by means of a microcontroller of the control unit CU. The error detection unit CEM is coupled to a nonvolatile memory EEPROM and thus has access to data stored in the nonvolatile memory EEPROM. The detection unit GEM is coupled to a volatile memory RAM and the nonvolatile memory EEPROM and thus has access to data stored in the volatile and nonvolatile memory RAM and EEPROM. The nonvolatile memory EEPROM is preferably designed as an electrically erasable and programmable memory. The error detection unit CEM is a first memory area EEPROMI of the nonvolatile memory EEPROM and the detection unit GEM is assigned a second memory area EEPROM2 of the nonvolatile memory EEPROM. In principle, it is also possible to form the first and second memory areas EEPROM1 and EEPROM2 as separate, non-volatile memories. The volatile memory RAM is preferably designed as a random access memory. Alternatively, the volatile memory RAM may also be formed as a memory area of a volatile memory. Other embodiments of the volatile memory RAM and / or the nonvolatile memory EEPROM known to a person skilled in the art can also be used.

Of the Error detection unit CEM is a first interface IF1 and the detection unit GEM is assigned a second interface IF2. The first and second interfaces IF1 and IF2 can be used as diagnostic interfaces can be referred to, for example, as a controller area network interface or designed as a wireless interface. The first and second Interface IF1 and IF2 enable external memory accesses to the respective memory area of the non-volatile Memory EEPROM. But also other, known to those skilled embodiments the first and second interfaces IF1 and IF2 are usable.

Of the Error detection unit CEM and the detection unit GEM is the Further assigned a data interface CAN, by means of which the error detection unit CEM and the detection unit GEM with coupled to a data network of the motor vehicle. By means of Data interface CAN can transfer data with other control units and / or Sensors and / or actuators of the motor vehicle are exchanged.

The Error detection unit CEM is formed, a faulty Recognize operation of the control unit CU and / or the motor vehicle and in case of error, a predetermined first selection DATA1 of data, the concern or detect the error and in the first Memory area EEPROM1 of the nonvolatile memory EEPROM save. Data representing errors of the control unit CU and / or the Motor vehicle are in the further description as Error data ERRDATA called. The first selection becomes DATA1 of data detectable by the error detection unit CEM or can be determined, preferably by a manufacturer of the motor vehicle specified.

Of the first memory area EEPROM1 of the nonvolatile memory EEPROM is accessible by means of the first interface IF1. Prefers the first memory area EEPROM1 is also referred to as a fault memory. During a workshop stay of the motor vehicle Preferably, the first memory area EEPROM1 by means of first interface IF1 coupled to a diagnostic computer and with this the stored data from the first memory area EEPROM1 is read out and / or deleted when error entries are present and assigned to the error entries Errors on the motor vehicle have been corrected.

The detection unit GEM is designed to detect or determine operating data ODATA of the control unit CU and / or of the motor vehicle and error data ERRDATA. Operating times of the control unit CU for over, under and normal voltage and / or a number of reprogrammings of the control unit CU and / or a printed circuit board temperature and / or a number of workshop stays of the motor vehicle are detected as operating data ODATA by means of the detection unit GEM. As error data ERRDATA, substantially all an operating period of the control unit CU influencing variables, such. B. short-circuit currents detected or determined. The predetermined second selection DATA2 of data which is detected or determined by means of the detection unit GEM, is preferably specified by a manufacturer of the control unit CU. Detected or determined operating ODATA and / or error data ERRDATA of the second selection DATA2 are stored in the second memory area EEPROM2.

Of the second memory area EEPROM2 of the nonvolatile memory EEPROM is preferably via the first interface IF1 not accessible and therefore not during, for example a workshop stay of the motor vehicle readable and / or erasable. Thus, a first memory access permission is required for external memory access to the first memory area exists, designed such that external memory accesses by means of the first interface limited to stored data of the first memory area are. The second memory area EEPROM2 is preferably only via the second interface IF2 accessible by means of a diagnostic computer. For example, a first data protocol differs with the stored error data ERRDATA in the first memory area EEPROM1 are accessible by means of diagnostic computer, from a second Data log with which the operating ODATA and / or error data ERRDATA in the second memory area EEPROM2 by means of the diagnostic computer are accessible. The first data protocol is the first Memory access authorization of the first memory area and the second data protocol has a second memory access permission of the second memory area. As a result, typically the Diagnostic computer, with the first memory area EEPROM1 can not be accessed, not on the second memory area EEPROM2 access. Furthermore, the second interface IF2 is preferred usable only when the control unit CU from the motor vehicle is expanded and / or a housing of the control unit CU at least partially removed.

in principle The first and second interfaces IF1 and IF2 may also be physically be designed as a common interface, by means of which the first and second memory areas EEPROM1 and EEPROM2 are accessible are. The first memory access authorization exists to be external to be able to access the first memory area EEPROM1. Furthermore, the second memory access permission exists to be external by means of the common interface to the second memory area to be able to access. The first one is different Memory access permission from the second memory access permission, such that the external memory access by means of the first memory access authorization preferably limited only to the first memory area EEPROM1 is. For example, the respective memory access permissions designed as encryption or password protection.

in principle the same error data ERRDATA can also be given first and the predetermined second selection DATA1 and DATA2 the Be assigned data, so that this means of the error detection unit CEM and detected or determined by the detection unit GEM and in each case in the first and second memory area EEPROM1 and EEPROM2 are stored. The fault detection unit CEM and the detection unit GEM may be units that are independent of each other the control unit CU are called, which are essentially independent from each other data, according to the given first or the predetermined second selection DATA1 or DATA2 of the data capture or determine and in the first and second memory area EEPROM1 or EEPROM2 of the non-volatile memory EEPROM store.

The Detection unit GEM is preferably designed such that detected or determined operating ODATA and / or error data ERRDATA during an operation of the control unit CU in the volatile memory To save RAM. Here are preferred in connection with a Turn off the control unit CU the respective data from the volatile Memory RAM copied to the second memory area EEPROM2. These Driving the volatile memory RAM and the second memory area EEPROM2 of the nonvolatile memory EEPROM allows a particularly rapid storage of the recorded or determined operational ODATA and / or error data ERRDATA. Basically another volatile memory also the error detection unit CEM be assigned and the other volatile memory analogous to the volatile memory of the detection unit GEM be controlled.

The Error detection unit CEM and the detection unit GEM can also as a device for logging data of at least one Control unit CU be designated.

The error detection unit CEM is preferably designed to process a first program that is based on the 2a is explained in more detail. In a step S1, the first program is started during the operation of the control unit CU and preferably close to the start of operation of the control unit CU. In a step S2, in the event of an error, the control unit CU and / or the motor vehicle error data ERRDATA, such. B. a short-circuit current detected or determined. Alternatively, the error data ERRDATA may also include data representing how and when a component of the control unit CU and / or the motor vehicle is operated with errors. The error data ERRDATA can be detected, for example, by means of the data interface CAN or by means of a or a plurality of peripheral units, which are coupled, for example, with sensors and are designed to provide acquired data of the sensors of the error detection unit CEM. In a step S4, it is checked whether the detected or determined error data ERRDATA is assigned to the predefined first selection DATA1 of the data. If the detected or determined error data ERRDATA are not specified for the first selection DATA1, the first program is ended in a step S8. If the first selection DATA1 includes the detected or determined error data ERRDATA, then in a step S6 the error data ERRDATA associated with the predetermined first selection is stored in the first memory area EEPROM1 of the nonvolatile memory EEPROM. The stored error data ERRDATA are preferably readable via a diagnostic computer, for example, during a workshop stay of the motor vehicle and serve to detect faulty components of the motor vehicle. The stored error data ERRDATA are preferably deleted after the repair of the faulty components by means of the diagnostic computer and are no longer available for further error analyzes. In this case, the diagnostic computer is authorized to access the stored data in the first memory area EEPROM1. In step S8, the first program is ended. Alternatively, the first program may be restarted in step S2.

The detection unit GEM is preferably designed to process a second program that is based on the 2 B is explained in more detail. In a step S10, the second program is started during operation of the control unit CU and, in particular, close to the start of operation of the control unit CU. In a step S12, operating data ODATA and error data ERRDATA are detected or determined. The operating ODATA and / or error data ERRDATA can be detected or determined, for example, by means of the data interface CAN or by means of one or more peripheral units. In a step S14, it is checked whether the detected or determined operating ODATA and / or error data ERRDATA are assigned to the predetermined second selection DATA2 of data. Typically, the second selection DATA2 of data is given by the manufacturer of the control unit CU and not by the manufacturer of the motor vehicle. If the detected or determined operating ODATA and / or error data ERRDATA are not specified for the second selection DATA2 of data, the program is ended in a step S18. If the second selection DATA2 of data comprises the acquired or determined operating ODATA and / or error data ERRDATA, then in a step S16 the operating ODATA and / or error data ERRDATA associated with the predetermined second selection are stored in the second memory area EEPROM2 of FIG non-volatile memory EEPROM stored. Alternatively, the detected or determined operating ODATA and / or error data ERRDATA can also be stored in the volatile memory RAM during the operation of the control unit CU and copied to the second memory area EEPROM2 of the nonvolatile memory EEPROM in connection with a switch-off of the control unit CU. The copying is basically also applicable to the first program, if another volatile memory is present and assigned to the error detection unit CEM. The stored operating ODATA and / or error data ERRDATA are preferably also readable via a diagnostic computer. The stored operating ODATA and / or error data ERRDATA can preferably not be read out or deleted in the workshop because a diagnostic computer used in the workshop preferably has no memory access authorization to access the stored data of the second memory area EEPROM2 of the nonvolatile memory EEPROM. If a separate second interface IF2 is used as the second memory access authorization for the external memory access to the second memory area EEPROM2, then the stored operating ODATA and / or error data ERRDATA in the second memory area EEPROM2 are preferably accessible if the example control unit CU is removed and / or at least partially a housing of the control unit CU is removed. Alternatively, the second interface IF2 but also as a wireless interface, such. B. as GSM, GPRS or WLAN interface, be formed. The operating ODATA and / or error data ERRDATA stored in the second memory area EEPROM2 are preferably used by the manufacturer of the control unit CU to detect errors in the control unit CU or to exclude errors in the control unit CU. The operating ODATA and / or error data ERRDATA are preferably detected or determined during the entire operating period of the control unit CU or of the motor vehicle and stored in the second memory area EEPROM2 of the nonvolatile memory EEPROM. A deletion of the stored operating ODATA and / or error data ERRDATA is thus preferably not carried out, so that ideally operating ODATA and / or error data ERRDATA can be documented without gaps since the time of a first startup of the control unit CU and / or of the motor vehicle. Furthermore, based on the detected and / or determined operating ODATA and / or error data ERRDATA in the second memory area EEPROM2, a total operating time of the control unit and / or of the motor vehicle can be determined. Preferably, a first time of a first detection or determination of the respective operating ODATA and / or Feh lerdaten ERRDATA and / or a last time point of a last detection or determination of the respective operating ODATA and / or error data ERRDATA and / or a number of detections or investigations of the respective operating ODATA and / or error data ERRDATA determined and stored in the second memory area EEPROM2.

A such detection and determination of the operating ODATA and / or Error data ERRDATA over the entire operating time of the Control unit CU or the motor vehicle has the advantage that basic technical problems, in particular the control unit CU, for example repeatedly lead to malfunction, by the manufacturer the control unit CU easily recognized and in a further development the control unit CU or troubleshooting can be solved. In particular, where appropriate, in the area of responsibility the manufacturer of the control unit CU lying malfunctions of Such differences are the responsibility of the manufacturer of the motor vehicle.

In In step S18, the second program is ended. Alternatively, you can the second program can also be started again in step S12.

The Operating ODATA and / or error data ERRDATA may also be provided each assigned priorities. This is special then advantageous if an available memory size the second memory area EEPROM2 or the volatile Memory RAM for the number of operating and / or error data ODATA and / or ERRDATA is insufficient. Thus, you can Data entries of operating ODATA and / or error data Low priority ERRDATA through operational ODATA and / or ERRDATA error data will be replaced, giving it a higher priority have, and thus the respective memory used more efficiently become.

The Error detection unit CEM and the detection unit GEM are preferable arranged in a control unit already installed in the motor vehicle, so z. In a gateway control unit. Here are by means of Detection unit GEM preferably data, the control unit CU are assigned, detected or determined and in the second memory area EEPROM2 stored. Alternatively, the error detection unit CEM and the detection unit GEM but also in a separate control unit be arranged, which is coupled to the data network. Consequently can also be used by the GEM ODATA and / or error data ERRDATA other with the data network coupled control units detected or determined and in the second Memory area EEPROM2 are stored. This has the advantage that even with an exchange of control units of the motor vehicle, not the fault detection unit OEM and the detection unit GEM continue to include the collected or identified data for To be available.

CAN

Data Interface

CEM

Error detection unit

CU

control unit

DATA1

first selection

DATA2

second selection

EEPROM

nonvolatile Storage

EEPROM1

first storage area

EEPROM2

second storage area

GEM

acquisition unit

ErrData

error data

IF1

first interface

IF2

second interface

R.A.M.

volatile Storage

ODATA

operating data

QUOTES INCLUDE IN THE DESCRIPTION

This list The documents listed by the applicant have been automated generated and is solely for better information recorded by the reader. The list is not part of the German Patent or utility model application. The DPMA takes over no liability for any errors or omissions.

Cited non-patent literature

• - "Vieweg Handbook of Automotive Engineering" by Braess and Seiffert, 4th edition, published by Vieweg Verlag in September 2005, page 611 [0003]

Claims (8)

Method for logging data at least a control unit (CU) in a motor vehicle, wherein the control unit (CU) at least one memory (EEPROM, RAM), in which - one given first selection (DATA1) of data, the errors of the control unit (CU) and / or the motor vehicle, during a Operation of the control unit (CU) is detected or determined and in a first memory area (EEPROM1) of the at least one memory (EEPROM), being used for external memory access to the first memory area (EEPROM1) a first memory access permission consists, A predetermined second selection (DATA2) data indicating operation and / or error of the control unit (CU) and / or of the motor vehicle during operation the control unit (CU) is detected or determined and in one second memory area (EEPROM2) of the at least one memory (EEPROM) is stored, where for an external memory access to the second memory area (EEPROM2) a second memory access permission where the second memory access permission of the first memory access permission is different. The method of claim 1, wherein - one respective first time, that of a respective first detection or a respective first determination of data, the predetermined second selection (DATA2) of the data are assigned, is determined and in the second memory area (EEPROM2) of the at least one memory (EEPROM) is stored, and / or - a respective one Last time, one of each last collection or one each last determination of data corresponding to the given second selection (DATA2) associated with the data is determined and in the second memory area (EEPROM2) of the at least one memory (EEPROM) is stored, and or - a respective number of observations or Investigations of data corresponding to the given second selection (DATA2) the data are assigned, is determined and in the second memory area (EEPROM2) the at least one memory (EEPROM) is stored. The method of claim 3, wherein the detected or determined data of the predetermined second selection (DATA2) the data is assigned a priority and captured or detected low priority data by detected or ascertained data with higher priority in the second memory area (EEPROM2) of the at least one memory (EEPROM) be replaced. Device for logging data at least a control unit (CU) in a motor vehicle, wherein the control unit (CU) comprises at least one memory (EEPROM, RAM), wherein the device is trained, - a predetermined first choice (DATA1) of data, the errors of the control unit (CU) and / or the motor vehicle affect during operation of the control unit (CU) to detect or determine and in a first memory area (EEPROM1) of the at least one memory (EEPROM) store, wherein for external memory access to the first memory area (EEPROM1) of the at least one memory (EEPROM) has a first memory access authorization consists, A predetermined second selection (DATA2) data indicating operation and / or error of the control unit (CU) and / or of the motor vehicle during operation the control unit (CU) to detect or in one second memory area (EEPROM2) of the at least one memory (EEPROM) store, taking for an external memory access to the second memory area (EEPROM2) a second memory access authorization where the second memory access permission of the first memory access permission is different. Apparatus according to claim 4, wherein the control unit (CU) a first interface (IF1) and a second interface (IF2) and the device is designed, - at the external memory access via the first interface (IF1) to the stored data in the first memory area (EEPROM1) to access, - in the external memory access means the second interface (IF2) to the stored data in the second memory area (EEPROM2) to access - at the first memory access authorization is designed in such a way that the external memory access by means of the first interface (IF1) limited to the first memory area (EEPROM1) is. Apparatus according to claim 5, wherein the second interface (IF2) is designed as a wireless interface. Apparatus according to claim 5 or 6, wherein the second Interface (IF2) is arranged such that it is inaccessible is when the control unit (CU) is intended in is installed in the motor vehicle. Device according to one of claims 5 to 7, in which the second interface (IF2) is arranged such that the second interface (IF2), at least when intended, complete closed housing of the control unit (CU) inaccessible is.