JP2008265618A - On-vehicle electronic control device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an on-vehicle electronic control device enabling wasteful repair and unnecessary part replacement to be avoided while the cause of trouble is determined according to the result of self-diagnosis by operating in association with the other on-vehicle electronic control devices. <P>SOLUTION: This on-vehicle electronic control device 1A operated in association with the other on-vehicle electronic control devices 1B, 1C comprises a state recording means 10A for recording the state of the on-vehicle electronic control device 1A while distinguishing between a trouble state and a functionally temporary stop state. The on-vehicle electronic control device further comprises a state detection means 11A for detecting the trouble states or the functionally temporary stop states of the other on-vehicle electronic control devices 1B, 1C positioned on the upstream side of a data flow. The state recording means 10A records the state of the on-vehicle electronic control device 1A according to the result of detection by the state detection means 11A. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to an in-vehicle electronic control device that operates in cooperation with another in-vehicle electronic control device, and in particular, while allowing a diagnostic machine to identify the cause of an abnormality based on a self-diagnosis result, wasteful repair The present invention relates to an in-vehicle electronic control device that can avoid unnecessary parts replacement.

  Conventionally, when cooperative operation is performed by transmitting and receiving data between multiple ECUs (Electronic Control Units), other ECUs have detected an abnormality in a chain due to an abnormality in one ECU. Even if it exists, the vehicle-mounted electronic control system which enabled it to identify the cause of abnormality easily and appropriately using a special diagnostic machine, without using complicated judgment logic is known (for example, refer to patent documents 1). ).

  This in-vehicle electronic control system stores the abnormality diagnosis result obtained by each ECU through self-diagnosis for each ECU, and when each ECU receives a command for reading out the abnormality diagnosis result from a dedicated diagnostic machine, It is made to confirm whether the thing derived from the abnormality diagnosis result of other ECU is contained in own abnormality diagnosis result.

  And when the thing derived from the abnormality diagnosis result of other ECU is included in the own abnormality diagnosis result, the abnormality diagnosis result stored in the other ECU is read out from the other ECU and read out. The abnormality diagnosis result is output to the diagnostic machine.

In this way, by allowing each ECU to record the abnormality diagnosis result so that the abnormality diagnosis result can be traced from the downstream to the upstream of the data flow, the mechanic can easily and appropriately use the dedicated diagnostic machine. Be able to identify the cause of the abnormality.
JP 2006-335150 A

  However, the in-vehicle electronic control system described in Patent Document 1 can cause the mechanic to easily and appropriately specify the cause of the abnormality, but the mechanic determines whether the cause of the cause or the ECU needs to be replaced. May not be able to provide information for making an appropriate determination, which may lead to unnecessary repairs and unnecessary parts replacement.

  In view of the above points, the present invention operates in cooperation with other on-vehicle electronic control devices, and can identify the cause of an abnormality based on the self-diagnosis result, but it is unnecessary repair and unnecessary. It is an object of the present invention to provide an in-vehicle electronic control device that can avoid parts replacement.

  In order to achieve the above object, an in-vehicle electronic control device according to the first invention is an in-vehicle electronic control device that operates in cooperation with other in-vehicle electronic control devices, and has a failure state and a function suspended state. It is characterized by comprising status recording means for recording the status of the in-vehicle electronic control device while distinguishing.

  This makes it possible to avoid unnecessary repairs and unnecessary parts replacement while allowing the cause of the abnormality to be specified based on the self-diagnosis result.

  The second invention is an in-vehicle electronic control device according to the first invention, comprising a state detection means for detecting a failure state or a function pause state of another in-vehicle electronic control device located upstream of the data flow. Further, the state recording unit records the state of the in-vehicle electronic control unit based on the detection result of the state detection unit.

  This makes it possible to identify whether or not the abnormality is due to a failure state or a function suspension state of another in-vehicle electronic control device located upstream in the data flow. Can be prevented.

  Moreover, 3rd invention is the vehicle-mounted electronic control apparatus which concerns on 2nd invention, Comprising: It determines whether the said vehicle-mounted electronic control apparatus is made into a function suspension state based on the detection result of the said state detection means. A state determination unit, and the state recording unit records the state of the in-vehicle electronic control device based on a detection result of the state detection unit when it is determined that the in-vehicle electronic control unit is in a function suspension state. It is characterized by doing.

  As a result, if the device itself cannot operate normally due to a failure state or a function suspension state of another on-vehicle electronic control device located upstream of the data flow, its own abnormality is a failure state of another on-vehicle electronic control device upstream or It is possible to clarify that it originates from the function pause state, and to prevent it from being repaired by mistake or replacing parts.

  The fourth invention is an on-vehicle electronic control device according to any one of the first to third inventions, and notifies the state of the on-vehicle electronic control device to another electronic control device located downstream of the data flow. It is further characterized by further comprising state notification means.

  As a result, it is possible to specify that the cause of the abnormality of the other in-vehicle electronic control device located downstream of the data flow is its own failure state or function pause state, and the other in-vehicle electronic control device located downstream Can be prevented from being accidentally repaired or replaced.

  By the above-described means, the present invention operates in cooperation with other on-vehicle electronic control devices, and allows the cause of the abnormality to be specified based on the self-diagnosis result, but also wasteful repairs and unnecessary parts. It is possible to provide an in-vehicle electronic control device that can avoid replacement.

  Hereinafter, the best mode for carrying out the present invention will be described with reference to the drawings.

  FIG. 1 is a block diagram illustrating a configuration example of an in-vehicle electronic control system including an in-vehicle electronic control unit (ECU) according to the present invention. The in-vehicle electronic control system 100 includes a CAN (Controller Area Network) and a LIN (Local Interconnect Network). ) Or the like, and is composed of three ECUs 1A, 1B, 1C connected to each other via an in-vehicle LAN (Local Area Network) 50.

  Each of the ECUs 1A, 1B, and 1C is connected to sensors 2A, 2B, and 2C serving as various information input units and actuators 3A, 3B, and 3C serving as various information output units via dedicated lines such as serial cables. Connected to each other and executing predetermined calculations independently, for example, individually realizing inter-vehicle distance control, lane keeping control, parking support control, etc., or exchange data between ECUs and cooperate with each other However, inter-vehicle distance control, lane keeping control, parking support control, etc. are realized in an integrated manner.

  Each of the ECUs 1A, 1B, and 1C may have a configuration in which a plurality of sensors or a plurality of actuators are connected, or may have a configuration in which no sensors or actuators are connected.

  Moreover, the vehicle-mounted electronic control system 100 may be comprised from 2 or 4 or more ECU.

  FIG. 2 is a block diagram illustrating a configuration example of the ECU 1A. The ECU 1A includes a CPU (Central Processing Unit), a RAM (Random Access Memory), a ROM (Read Only Memory), an NVRAM (Non-Volatile RAM), and the like. For example, the CPU causes the CPU to execute processing corresponding to each means while storing programs corresponding to each of the state recording unit 10A, the state detection unit 11A, the state determination unit 12A, and the state notification unit 13A in the ROM. . The ECUs 1B and 1C have the same configuration, and the subscript “A” is replaced with “B” or “C” for each component.

  The state recording unit 10A is a unit for recording the state of the ECU 1A while distinguishing between a failure state and a function suspension state. For example, the state recording unit 10A records the state of the ECU 1A in the NVRAM while assigning a predetermined DTC (Diagnostic Trouble Code). To do. Note that the state recording unit 10A may store the state of the ECU 1A in a RAM that can hold the memory as long as it is connected to the vehicle-mounted battery.

  “Failure state” refers to a state in which various controls by each ECU no longer function passively. For example, a state in which information cannot be acquired from the sensor 2A due to a disconnection or short circuit of a dedicated line, or from the actuator 3A There are a state where feedback cannot be obtained, a state where an abnormal value is acquired due to a failure of the sensor 2A, a state where the actuator 3A operates abnormally due to a failure of the actuator 3A, and the like.

  The “function pause state” refers to a state in which various controls by each ECU are not allowed to function actively. For example, a running state (including speed, acceleration, steering angle, etc.) or a running environment. Actively stop the control of each ECU based on the driving position in the vicinity of an intersection or in a city area (identified using GPS (Global Positioning System) or electronic map data) or weather conditions) There is a state that was let.

  Further, in the “function temporarily stopped state”, for example, the sensor 2A or the actuator 3A is used to avoid failure of the sensor 2A or the actuator 3A due to a high temperature or the like based on the temperature or the use frequency of the sensor 2A or the actuator 3A. This includes a state in which is stopped in advance.

  Furthermore, in the “function paused state”, when the cooperating other ECU is in a failure state or a function paused state and appropriate information cannot be obtained from the other ECU, the attached actuator is inappropriately driven. A state in which all or a part of the control of the ECU itself is stopped in advance so as not to be interrupted may be included.

  The state recording unit 10A sets the value of the failure state flag or the function suspension state flag stored in the NVRAM to “0 (failure state or function suspension state) when the ECU 1A enters the failure state or the function suspension state. It is possible to switch from “1” (indicating that it is in a failure state or a function suspension state) to allow other ECUs to grasp the state of the ECU 1A.

  FIG. 3 is a diagram illustrating a configuration example of a storage area in the NVRAM included in the ECU 1A. The NVRAM included in the ECU 1A includes a function pause state flag and a failure state flag corresponding to the ECU 1A itself, and a coordinated operation of the ECU 1B and the ECU 1C. A function pause state flag and a failure state flag corresponding to each are stored. The same applies to the NVRAM included in each of the ECU 1B and ECU 1C.

  The state detection unit 11A is a unit for detecting a failure state or a function suspension state of another on-vehicle electronic control device located upstream of the data flow.

  The “data flow” refers to a data flow when a plurality of ECUs operate in cooperation. For example, the ECU 1B executes a predetermined calculation based on information acquired by the sensor 2B, and the calculated value and the sensor 2A When the ECU 1A executes a predetermined calculation based on the information acquired by the ECU 1A to drive the actuator 3A, the ECU 1B is located upstream of the ECU 1A and the ECU 1A is located downstream of the ECU 1B in the data flow.

  The state detection unit 11A, for example, when receiving an abnormal signal from the ECU 1B or when it cannot receive a signal to be received from the EC 1B, the failure state flag or function temporary stored in the NVRAM in the ECU 1B by the state recording unit 10B of the ECU 1B. Referring to the value of the stop state flag, when the value of the failure state flag is “1”, it is detected that the ECU 1B is in the failure state. On the other hand, when the value of the function temporary stop state flag is “1” The ECU 1B detects that the function is temporarily stopped.

  Further, the state detection unit 11A detects that the ECU 1B is in a failure state or a function temporarily stopped state based on the state of the ECU 1B notified by a state notification unit 13B (which is included in the upstream ECU 1B) described later. You may do it.

  Further, the state detection unit 11A outputs a detection result to a state determination unit 12A described later, and after determining whether the ECU 1A is in a function pause state, the state recording unit 10A instructs the “upstream ECU 1B. "ECU 1A itself is in a function paused state because it is in a fault state" and "ECU 1A itself has been placed in a function pause state because upstream ECU 1B is in a function pause state" are recorded in NVRAM in ECU 1A as DTC. Or you may.

  The state determination unit 12A is a unit for determining whether or not the ECU 1A is in a function pause state based on the detection result of the state detection unit 11A. For example, the ECU 1B located upstream of the data flow by the state detection unit 11A. Is detected as a failure state or a function suspended state, it is determined whether or not the ECU 1A is in a function suspended state by referring to a LUT (Look Up Table) stored in the ROM of the ECU 1A.

  Note that “LUT” is a countermeasure (upstream) when an upstream ECU is in a failure state or a function suspension state under predetermined conditions (for example, configured by speed, acceleration, steering angle, vehicle position, etc.). There are a method of replacing the output from the ECU with a predetermined standard value and continuing the control that it is in charge of, a method of degenerating the control that it is in charge of, or a method of interrupting the control that it is in charge of). It is a reference table memorized automatically.

  For example, when the vehicle is traveling at a low speed and the state detection unit 11A detects that the ECU 1B is in a function pause state, the state determination unit 12A determines that the ECU 1A has a function temporarily because the degree of influence on the control of the ECU 1A is small. It is determined that there is no need to enter the stop state, and the control of the ECU 1A is continued while substituting the output of the ECU 1B with a predetermined standard value.

  On the other hand, for example, when the vehicle is traveling at a high speed, the state determination unit 12A determines that the ECU 1A has a large influence on the control of the ECU 1A when the state detection unit 11A detects that the ECU 1B is in the function pause state. It is determined that the function should be temporarily stopped, and the control of the ECU 1A is temporarily stopped.

  In this case, the state determination unit 12A sets the value of the function pause state flag stored in the NVRAM of the ECU 1A to “1” by the state recording unit 10A, and the other ECU determines that the ECU 1A is in the function pause state. To be able to grasp.

  The state notification means 13A is a means for notifying the state of the ECU 1A to other electronic control devices located downstream of the data flow. For example, when the ECU 1A is in a failure state or a function suspension state, this is notified. Is transmitted to another ECU downstream, and the failure state flag or the function suspension state flag stored in the NVRAM in the other ECU is switched from “0” to “1”.

  In addition, when the failure state or the function pause state of the ECU 1A is canceled, the state notification unit 13A transmits a signal indicating that to the other ECUs downstream, and the failure state stored in the NVRAM in the other ECUs The flag or the function pause state flag is switched from “1” to “0”.

  Next, referring to FIG. 4, a process (hereinafter referred to as “DTC recording process”) in which the in-vehicle electronic control system 100 causes each ECU to record DTC will be described. FIG. 4 is a schematic diagram showing the flow of DTC recording processing. When data is transmitted in the order of ECU 1C, ECU 1B, and ECU 1A and the actuator 3A is driven while operating the three ECUs in cooperation, the ECU 1C and the sensor The state where disconnection has occurred between 2C is shown.

  When the output of the sensor 2C cannot be detected, the ECU 1C records the DTC indicating “sensor abnormality” in the NVRAM of the ECU 1C by the state recording unit 10C.

  Further, the ECU 1C sets the value of the failure state flag corresponding to the ECU 1C stored in the NVRAM to “1”, and causes the ECU 1B to refer to the value of the failure state flag corresponding to the ECU 1C stored in the NVRAM. The ECU 1B can grasp that the ECU 1C is in a failure state.

  Further, the ECU 1C causes the state notification means 13C to set the value of the failure state flag corresponding to the ECU 1C stored in the NVRAM of the ECU 1B to “1”, and the value of the failure state flag corresponding to the ECU 1C stored in the NVRAM of the ECU 1B. By referring to the ECU 1B, the ECU 1B may be able to grasp that the ECU 1C is in a failure state.

  The ECU 1C updates the failure state flag corresponding to the ECU 1C stored in the NVRAM of the ECU 1C by the state recording unit 10C, and updates the failure state flag corresponding to the ECU 1C stored in the NVRAM of the ECU 1B by the state notification unit 13C. Both of these updates may be executed, or only one of the updates may be executed.

  When the update by the state notification means 13C is omitted, each ECU need only prepare a failure state flag corresponding to itself stored in its own NVRAM, simplify the update process, and increase the storage capacity of the NVRAM. Can be reduced.

  On the other hand, when the output of the ECU 1C cannot be detected or when an abnormal output from the ECU 1C is detected, the ECU 1B refers to the failure state flag corresponding to the ECU 1C stored in the NVRAM of the ECU 1C by the state detection unit 11B. It is made to detect what state is.

  When the value of the failure state flag corresponding to the ECU 1C stored in the NVRAM of the ECU 1C is “1”, the ECU 1B causes the state recording means 10B to display a DTC indicating “abnormality due to the failure state of the upstream ECU 1C”. Record in NVRAM.

  Further, the ECU 1B refers to the failure state flag corresponding to the ECU 1C stored in the NVRAM of the ECU 1B by the state detection unit 11B, detects that the ECU 1C is in a failure state, and then detects the “upstream ECU 1C by the state recording unit 10B. DTC indicating “abnormality due to the failure state” may be recorded in the NVRAM of the ECU 1B.

  When the output of the ECU 1C cannot be detected or when an abnormal output from the ECU 1C is detected, the ECU 1B immediately detects “upstream” by the state recording unit 10B without detecting the state of the ECU 1C by the state detection unit 11B. The DTC indicating “the abnormality of the ECU 1C” may be recorded in the NVRAM of the ECU 1B. This is because there is no change in the abnormality originating in the ECU 1C.

  Further, the ECU 1B determines whether or not to place the ECU 1B itself in a function paused state based on the detection result of the state detection unit 11B by the state judging unit 12B. The value of the function temporary stop state flag corresponding to the ECU 1B stored in the NVRAM of the ECU 1B itself is set to “1” by the recording unit 10B.

  Further, the ECU 1B causes the state notification means 13B to set the value of the failure state flag corresponding to the ECU 1B stored in the NVRAM of the ECU 1A to “1”, and the value of the failure state flag corresponding to the ECU 1B stored in the NVRAM of the ECU 1A. By referring to the ECU 1A, the ECU 1A may be able to grasp that the ECU 1B is in a failure state.

  On the other hand, when the output of the ECU 1B cannot be detected or when an abnormal output from the ECU 1B is detected, the ECU 1A sets a failure state flag corresponding to the ECU 1B stored in the NVRAM of the ECU 1B by the state detection means 11A. Reference is made to detect what state the ECU 1B is in.

  When the value of the failure state flag corresponding to the ECU 1B stored in the NVRAM of the ECU 1B is “1”, the ECU 1A displays a DTC indicating “abnormality due to the failure state of the upstream ECU 1B” by the state recording unit 10A. Record in NVRAM.

  Further, the ECU 1A refers to the failure state flag corresponding to the ECU 1B stored in the NVRAM of the ECU 1A by the state detection unit 11A, detects that the ECU 1B is in the failure state, and then detects the “upstream ECU 1B by the state recording unit 10A. The DTC indicating “abnormality due to the failure state” may be recorded in the NVRAM of the ECU 1A.

  When the output of the ECU 1B cannot be detected or when an abnormal output from the ECU 1B is detected, the ECU 1A immediately detects “upstream” by the state recording unit 10A without detecting the state of the ECU 1B by the state detection unit 11A. A DTC indicating "abnormality of ECU 1B" may be recorded in NVRAM of ECU 1A. This is because there is no change in the abnormality originating in the ECU 1B.

  Furthermore, the ECU 1A determines whether or not the ECU 1A itself is to be in a function pause state based on the detection result of the state detector 11A by the state determination means 12A. The value of the function suspension state flag corresponding to the ECU 1A stored in the NVRAM of the ECU 1A is set to “1” by the recording unit 10A.

  Thereby, the vehicle-mounted electronic control system 100 specifies that the disconnection between the ECU 1C and the sensor 2C is the cause of the abnormality in the vehicle-mounted electronic control system 100 when the DTC of each ECU is read by the diagnostic machine. In addition, it is possible to confirm that the abnormality of the ECU 1B and the ECU 1A is caused by the ECU 1C, and while recommending the repair or replacement of the sensor 2C, it is possible to prevent the ECU 1B or the ECU 1A from being erroneously replaced. be able to.

  Next, another DTC recording process will be described with reference to FIG. FIG. 5 is a diagram showing the flow of another DTC recording process. When data is transmitted in the order of the ECU 1C, ECU 1B, and ECU 1A to drive the actuator 3A while operating the three ECUs in cooperation, the sensor 2C Is a state in which is actively stopped.

  When the operation of the sensor 2C is actively stopped, the ECU 1C records the DTC indicating “function pause” in the NVRAM of the ECU 1C by the state recording unit 10C.

  Further, the ECU 1C sets the value of the function pause state flag corresponding to the ECU 1C stored in the NVRAM to “1”, and causes the ECU 1B to refer to the value of the function pause state flag stored in the NVRAM. Then, the ECU 1B can grasp that the ECU 1C is in the function pause state.

  Further, the ECU 1C sets the value of the function suspension state flag corresponding to the ECU 1C stored in the NVRAM of the ECU 1B by the state notification means 13C to “1”, and makes the ECU 1B refer to the value, thereby causing the ECU 1C to temporarily function. The ECU 1B may be able to grasp that the vehicle is stopped.

  The ECU 1C updates the function suspension state flag corresponding to the ECU 1C stored in the NVRAM of the ECU 1C by the state recording means 10C, and the state notification of the function suspension state flag corresponding to the ECU 1C stored in the NVRAM of the ECU 1B. Both updates by the means 13C may be executed, or only one of the updates may be executed.

  When the update by the state notification means 13C is omitted, each ECU need only prepare a function pause state flag corresponding to itself stored in its own NVRAM, simplify the update process, and store the NVRAM. The capacity can be reduced.

  On the other hand, when the output of the ECU 1C cannot be detected or when an abnormal output from the ECU 1C is detected, the ECU 1B refers to the function temporary stop flag corresponding to the ECU 1C stored in the NVRAM of the ECU 1C by the state detection unit 11B. The ECU 1C detects what state it is.

  When the value of the function pause state flag corresponding to ECU 1C stored in NVRAM of ECU 1C is “1”, ECU 1B indicates “abnormality due to function pause state of upstream ECU 1C” by state recording means 10B. DTC is recorded in NVRAM of ECU1B.

  Further, the ECU 1B refers to the function suspension state flag corresponding to the ECU 1C stored in the NVRAM of the ECU 1B by the state detection unit 11B, detects that the ECU 1C is in the function suspension state, and then uses the state recording unit 10B. A DTC indicating “abnormality due to the function suspension state of the upstream ECU 1C” may be recorded in the NVRAM of the ECU 1B.

  When the output of the ECU 1C cannot be detected or when an abnormal output from the ECU 1C is detected, the ECU 1B immediately detects “upstream” by the state recording unit 10B without detecting the state of the ECU 1C by the state detection unit 11B. The DTC indicating “the abnormality of the ECU 1C” may be recorded in the NVRAM of the ECU 1B. This is because there is no change in the abnormality originating in the ECU 1C.

  Further, the ECU 1B determines whether or not to place the ECU 1B itself in a function paused state based on the detection result of the state detection unit 11B by the state judging unit 12B. The value of the function temporary stop state flag corresponding to the ECU 1B stored in the NVRAM of the ECU 1B itself is set to “1” by the recording unit 10B.

  Further, the ECU 1B causes the state notifying unit 13B to set the value of the function suspension state flag corresponding to the ECU 1B stored in the NVRAM of the ECU 1A to “1”, and the function suspension corresponding to the ECU 1B stored in the NVRAM of the ECU 1A. By making the ECU 1A refer to the value of the state flag, the ECU 1A may be able to grasp that the ECU 1B itself is in the function pause state.

  On the other hand, the ECU 1A, like the ECU 1B, cannot detect the output of the ECU 1B, or detects an abnormal output from the ECU 1B, the function temporary stop state corresponding to the ECU 1B stored in the NVRAM of the ECU 1B by the state detection means 11A. The ECU 1B is detected with reference to the flag.

  When the value of the function pause state flag corresponding to ECU 1B stored in NVRAM of ECU 1B is “1”, ECU 1A indicates “abnormality due to function pause state of upstream ECU 1B” by state recording means 10A. The DTC is recorded in the NVRAM of the ECU 1A.

  Further, the ECU 1A refers to the function suspension state flag corresponding to the ECU 1B stored in the NVRAM of the ECU 1A by the state detection unit 11A, detects that the ECU 1B is in the function suspension state, and then uses the state recording unit 10A. A DTC indicating “abnormality due to the function suspension state of the upstream ECU 1B” may be recorded in the NVRAM of the ECU 1A.

  When the output of the ECU 1B cannot be detected or when an abnormal output from the ECU 1B is detected, the ECU 1A immediately detects “upstream” by the state recording unit 10A without detecting the state of the ECU 1B by the state detection unit 11A. A DTC indicating "abnormality of ECU 1B" may be recorded in NVRAM of ECU 1A. This is because there is no change in the abnormality derived from ETC1B.

  Furthermore, the ECU 1A determines whether or not the ECU 1A itself is to be in a function pause state based on the detection result of the state detector 11A by the state determination means 12A. The value of the function suspension state flag corresponding to the ECU 1A stored in the NVRAM of the ECU 1A is set to “1” by the recording unit 10A.

  As a result, when the DTC of each ECU is read by the diagnostic machine, the in-vehicle electronic control system 100 is abnormal in that the ECU 1C is in a function pause state (actually similar to the abnormality seen for failure avoidance). And the fact that the abnormality of the ECU 1B and the ECU 1A is also derived from the ECU 1C, the ECU 1C, the ECU 1B, or the ECU 1A is erroneously replaced. Can be prevented.

  Although the preferred embodiments of the present invention have been described in detail above, the present invention is not limited to the above-described embodiments, and various modifications and substitutions can be made to the above-described embodiments without departing from the scope of the present invention. Can be added.

  For example, in the above-described embodiment, the in-vehicle electronic control system 100 expresses the state of each ECU as a “failure state” and a “function pause state”, but a “waiting state” may be added. The “waiting state” refers to a state where each ECU is activated and cannot perform various controls.

  In addition, the in-vehicle electronic control system 100 causes each ECU to know the state of each ECU via a failure state flag or a function pause state flag stored in the NVRAM of each ECU, but without using these flags. In addition, a bit indicating the state of each ECU may be included in a part of a signal transmitted and received by each ECU so that the states of the respective ECUs are mutually grasped.

It is a block diagram which shows the structural example of the vehicle-mounted electronic control system containing ECU which concerns on this invention. It is a block diagram which shows the structural example of ECU. It is a figure which shows the structural example of the storage area in NVRAM. FIG. 6 is a diagram (part 1) illustrating a flow of DTC recording processing. FIG. 10 is a diagram (part 2) illustrating the flow of the DTC recording process.

Explanation of symbols

1A, 1B, 1C ECU
2A, 2B, 2C Sensor 3A, 3B, 3C Actuator 10A Status recording means 11A Status detection means 12A Status determination means 13A Status notification means 50 In-vehicle LAN
100 In-vehicle electronic control system

Claims (4)

An in-vehicle electronic control device that operates in cooperation with another in-vehicle electronic control device,
Comprising a state recording means for recording the state of the in-vehicle electronic control device while distinguishing between a failure state and a function suspension state;
An on-vehicle electronic control device characterized by that. It further comprises state detection means for detecting a failure state or a function suspension state of another on-vehicle electronic control device located upstream of the data flow,
The state recording means records the state of the in-vehicle electronic control device based on the detection result of the state detection means.
The on-vehicle electronic control device according to claim 1. A state determination unit that determines whether or not the in-vehicle electronic control device is in a function pause state based on a detection result of the state detection unit;
The state recording means records the state of the in-vehicle electronic control device based on the detection result of the state detection means when it is determined that the in-vehicle electronic control device is in a function pause state.
The on-vehicle electronic control device according to claim 2. A state notification means for notifying the state of the on-vehicle electronic control device to another electronic control device located downstream of the data flow;
The in-vehicle electronic control device according to any one of claims 1 to 3 characterized by things.

Images