DE102006012987B4 - Electric control device - Google Patents

Abstract

An electrical control device comprising: an electrical control unit (100, 300, 600, 900) having a microprocessor (120, 320, 620, 920) to control electrical loads (30a-30n, 50a-50n, 305a, 70a-70n) in Correspondence with the content of a control program (122a, 322a, 622a, 922a) stored in a program memory (122, 322, 622, 922) and operating states of input sensors (40a-40n, 106, 60a-60n, 305a, 606 , 80a-80n, 906) and is fed by an external energy supply (101, 301, 601, 901); a common ring bus (59, 79) to which one ends of the plural electrical loads (30a-30n, 50a-50n, 305a, 70a-70n) or the input sensors (40a-40n, 60a-60n, 80a-80n) are successively connected are; first and second common terminals (107, 108, 307, 308, 607, 608, 907, 908); a test switch element (191, 391, 691, 991); an element voltage monitor circuit (198, 326, 699a, 699b, 926); Abnormality detection means (210, 410, 510, 710, 810); and anomaly processing means (218, 518, 818), the electrical control device being configured to ...

Description

Background of the invention

1. FIELD OF THE INVENTION

The present invention relates to an electric control device such as an electric control device in a vehicle, such as a motor control device or a transmission control device, to an electric control device having an interruption detection function to a common bus to which many electrical loads or input sensors are connected.

2. DESCRIPTION OF THE PRIOR ART

In a conventional power feeding control circuit for an electric load, it has been widely put into practical use that the disconnection / short circuit abnormality of a load wiring is detected and any abnormality processing including at least one abnormal message is performed. For example, according to "TROUBLE DETECTING DEVICE FOR SOLENOID", disclosed in JP 8-293414 A (Paragraphs 0024 to 0028, 2 ), in a power feed control for an electric load such as a solenoid through a transistor, discloses a concept in which a switching control instruction of the transistor is compared with a power feed voltage level to the electric load, so that the presence or absence of the open / short circuit abnormality identifies the electric load becomes.

According to JP 2000-312142 A (Summary, 1 Incidentally, "INTELLIGENT POWER SWITCH" discloses an N-MOS field-effect transistor which performs an overcurrent limitation by using a current detection resistor provided in a current mirror circuit to perform ON / OFF control of a main transistor and overheats the main transistor Using a temperature sensing element makes.

On the other hand, with respect to the open / short circuit detection of an input sensor circuit, various means may be used. According to JP 11-283456 A (Summary, 1 ) "SWITCH, INFORMATION DETECTION DEVICE HAVING THE SAME, AND CONNECTED STATE DETECTION DEVICE FOR CONNECTOR". B. discloses a means in which a switch having as an input / output terminal pair both sides of a switch element to switch between a conductive state and a non-conductive state becomes an electric element connected in parallel with the switch element, provided that, with respect to an input signal input between the input / output terminal pair, an output signal according to a fault state in addition to an ON state in which the switch element is in the conductive state and an OFF state in which the Switch element in the non-conductive state is output.

According to JP 8-293414 A (Paragraphs 0024 to 0028, 2 ) and JP 11-283456 A (Summary, 1 In addition to the open / short circuit abnormality of an electric load or an input sensor itself, wiring abnormalities of respective parts including a common wiring can also be detected, however, there is a problem that when a common bus section as a common line, with one Ends connected by many electrical loads or input sensors is broken, all input / output control functions are lost.

According to JP 2000-312142 A (Summary, 1 In addition, in a power transistor as an overheating self-holding type semiconductor switch connected to an electric load, the main purpose is to interrupt a current to the power transistor at the time of occurrence of an overcurrent, and the detection of the open / short circuit abnormality becomes not stated.

DE 100 02 537 A1 discloses for detecting a faulty ground connection in an electrical device of a motor vehicle, a method in which a measured value of a vehicle ground connected detection circuit is determined and compared with a definable reference value. A faulty ground connection is detected if the measured value is above the reference value.

EP 0 980 005 A1 describes an occupant protection system in which a faulty ground connection in the ignition circuit of the occupant protection system is detected by a non-triggering test current causes a potential change, which is compared with a threshold value. The threshold value is exceeded if the test current flows through a second ground potential terminal with a higher output resistance instead of a first ground potential terminal.

In WO 02/077594 A1 is described against the background of an insert in an active passenger restraint system, a circuit arrangement in which a plurality of sensor elements are interconnected in matrix interconnection. Such matrix interconnections are used as passenger seat sensor mats for detecting the weight force generated by a passenger. In order to detect line breaks, the row and column conductors, between which the sensors are interconnected, are connected at one end to an evaluation circuit. The other end is returned to the evaluation circuit via a return conductor. If a line break occurs in the returned row or column conductors, the sensors contacted before the interruption can be read out via the row and column conductors, while the sensors located behind the interruption can be read out via the return conductor.

SUMMARY OF THE INVENTION

The invention has been made to solve the problems as described above, and has an object to provide an electric control apparatus in which even if an interruption abnormality occurs somewhere along a common bus portion to which one ends of many external electrical loads or input sensors are connected if the interruption occurs in one place, normal input / output control can be continued, and an anomaly condition is quickly detected and an abnormal message can be performed.

An electric control apparatus of the invention includes an electric control unit having a microprocessor for controlling electric loads in accordance with a content of a control program stored in a program memory and operating states of input sensors, and is supplied from an external power supply, a common one A ring bus to which one ends of the plural electrical loads or the input sensors are successively connected, first and second common terminals, a test switch element, an element voltage monitoring circuit, anomaly detection means and anomaly processing means, the first common terminal is connected to one of positive and negative power supply terminals of the electric control unit and is connected to the second common terminal through the common ring bus, the second common terminal and the first common terminal are together r connected through the test switch element, the second common terminal is connected to the other one of the positive and negative power supply terminals of the electric control unit by a bias resistor, the test switch element is in a position of one of the positive and negative power supply terminals of the electric control unit, and is a switch element, to connect or disconnect the first and second common terminals in response to a switching operation of the test switch element, the element voltage monitoring circuit is a circuit for measuring the size of a terminal potential of the test switch element on a connecting side to the second common terminal judging abnormality detecting means; that the common ring bus is broken when a measurement potential by the element voltage monitoring circuit at a time when the Prüfschalterele is temporarily open, equivalent to a potential of the other of the positive and negative power supply terminals of the electric control unit, and the abnormality processing means performs an abnormal message in response to an interruption judgment of the abnormality detecting means.

The electric control device of the invention includes a simple and multiple safety function in which, in the case where a break occurs somewhere in a common ring bus location, one end of many electrical loads or input sensors are connected, regardless of the location of occurrence of all electrical Loads or input sensors can continue to operate normally, and the abnormal condition is detected by temporarily opening the test switch element, and when the interruption abnormality occurs, the abnormal message is performed so that the maintenance check can be advanced, and accordingly, there is an effect that improves safety can be.

Incidentally, in the case where the test switch element is provided only on the second common terminal side, in a normal state of the common ring bus, most of the current flows to the first common terminal where a voltage drop is small and the current flowing to the first common terminal Test switch element flows, is small, and therefore there is an effect that also heat generation is suppressed.

The dependent claims are further advantageous developments removed.

The foregoing and other objects, aspects and advantages of the present invention will become more apparent from the following detailed description of the present invention when taken in conjunction with the accompanying drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

1 Fig. 10 is a circuit block diagram showing an electric control device of Embodiment 1 of the invention.

2 FIG. 14 is a flowchart for explaining the operation of the electric control device of Embodiment 1. FIG.

3 Fig. 10 is a circuit block diagram showing an electric control device of Embodiment 2 of the invention.

4 FIG. 10 is the first half of a flowchart for explaining the operation of the electric control device of Embodiment 1. FIG.

5 FIG. 14 is the second half of the flowchart for explaining the electric control device of Embodiment 2. FIG.

6 Fig. 10 is a circuit block diagram showing an electric control device of Embodiment 3 of the invention.

7 FIG. 10 is the first half of a flowchart for explaining the operation of the electric control device of Embodiment 3. FIG.

8th FIG. 14 is the second half of the flowchart for explaining the operation of the electric control device of Embodiment 3. FIG.

9 Fig. 10 is a circuit block diagram showing an electric control device of Embodiment 4 of the invention.

DETAILED DESCRIPTION OF THE INVENTION

Embodiment 1

(1) Detailed description of the structure

1 Fig. 10 is a circuit diagram showing an electric control device of Embodiment 1 of the invention. In 1 forms an electrical control unit 100 z. B. a vehicle engine control device, and is with a drive power supply through an output contact 102 a power supply relay from an external power supply 101 like a battery in the vehicle connected between a positive feed connection 110 and a negative feed connection 109 is provided. Although the output contact 102 is closed immediately when a power switch, not shown, is closed, a delay return operation is performed, in which even when the power switch is opened, the power supply to the electric control unit 100 continues for a specified delay time.

An alarm display 103 , a load / sensor group 105 , the electrical loads 30a to 30n and various input sensors 40a to 40n contains to perform ON / OFF operations and various analog sensors 106 to generate analog signals are on the outside of the electrical control unit 100 mounted, which is contained in a sealed housing, and respective input / output means are connected to the electric control unit 100 connected by removable / attachable connectors, not shown. The negative connections of the electrical loads 30a to 30n and the input sensors 40a to 40n are consecutive with the common ring bus 59 from one end 57 to the other end 58 connected, that one end 57 of the common ring bus 59 is with a first common connection 107 the electrical control unit 100 connected, and the other end 58 of the common ring bus 59 is with the second common connection 108 the electrical control unit 100 connected. Incidentally, in Embodiment 1, each of the first and second common terminals is used 107 and 108 two pins of connectors in parallel, and is constructed to raise the contact reliability.

As the construction of the inside of the electric control unit 100 generates a constant voltage power supply circuit 111 a control voltage Vcc = 5 V based on a power supply voltage GS 10 to 16 V of the external power supply 101 which is supplied to a positive power supply terminal Vb, and supplies the stabilized voltage to respective parts including a microprocessor thereafter 120 to. A digital input interface circuit 114 is between the input sensors 40a to 40n and digital input ports of the microprocessor 120 and is a circuit including a voltage level conversion function and a noise filter function. Incidentally, positive connections are the input sensors 40a to 40n with the positive power supply terminal Vb by pull-up resistors (pull-up resistors) 114a to 114n connected.

An analog input interface circuit 116 is between the analog input sensor 106 and an analog input port of the microprocessor 120 connected, and is a circuit containing a noise filter function. The microprocessor 120 is over a bus with a RAM memory 121 for arithmetic processing, a program memory 122 from Z. A non-volatile flash memory, a multi-channel AD converter 126 and a data store 129 from Z. For example, a non- Volatile EEPROM memory, and works in collaboration with it. The program memory 122 stores in addition to an input / output control program 122a as the electric control unit 100 an anomaly detection program 122b as an anomaly-detecting means 210 , what later in 2 and an anomaly processing program 122c as an anomaly processing agent 218 ,

A drive control circuit 130a between the negative power supply terminal Vb and the positive terminal of the electric load 30a is connected, contains a commutation diode 133 , which are parallel to a drive transistor 131 and the electrical load 30a connected is. An idle ballast resistor 134 is between emitter and base terminals of the drive transistor 131 a PNP power transistor, and a base terminal is connected to a ground circuit GND connected to a negative power supply terminal through a base resistor 135 and an auxiliary transistor 136 connected is. The auxiliary transistor 136 is connected to a drive instruction output terminal DR1 of the microprocessor 120 by a drive resistor 137 connected, and an open circuit ballast resistor 138 is between base and emitter terminals of the auxiliary transistor 136 connected to an NPN transistor.

A drive control circuit 130n between the positive power supply terminal Vb and the positive terminal of the electric load 30n is quite similar to the drive control circuit 130a and is connected to a drive instruction output terminal DRn of the microprocessor 120 connected. Incidentally, the drive control circuits lead 130a to 130n only feed / stop ON / OFF operations to the electrical loads 30a to 30n by, or are control circuits in the case where ON / OFF duty control is performed to supply a desired load voltage corresponding to a variation in the power supply voltage.

A test control circuit 190 contains a test switch element 191 that between the second common connection 108 and the ground circuit GND is connected, a drive resistor 193 between a gate terminal of the test switch element 191 an N-channel field effect power transistor and a test instruction output terminal CH1 of the microprocessor 120 connected, and an open circuit ballast resistor 194 which is connected between gate and source terminals. A drain connection as a positive terminal of the test switch element 191 is connected to the positive power supply terminal Vb by a bias resistor 195 connected, and controls a transistor 198 as an element voltage monitoring circuit by a base resistor 197 as a monitoring input resistance. A collector terminal of the transistor 198 of an NPN transistor is connected to a control power supply terminal Vcc through a pull-up resistor 199 is connected to a monitoring signal input terminal MN1 of the microprocessor 120 connected.

Incidentally, the first joint connection 107 with the ground circuit GND in the electric control unit 100 directly connected, and this ground circuit GND is connected to the negative terminal of the external power supply 101 through the negative feed connection 109 connected. In addition, the common ring bus to the electrical loads 30a to 30n and the common ring bus to the input sensors 40a to 40n disconnected, and the test control circuit 190 can be provided for each of them.

(2) Detailed description of function and operation

Next, the function and operation of the electric control device of Embodiment 1 of the invention, as shown in FIG 1 3, is described on the basis of a flowchart which is shown in FIG 2 will be shown. In the construction of 1 will if the output contact 102 is closed, the microprocessor 120 from the constant voltage power supply circuit 111 fed and starts to work. The power supply control of the drive control circuits 130a to 130n will be in accordance with the operating conditions of the input sensors 40a to 40n and 106 , the signal levels and contents of the input / output control program 122a carried out, and the drive control to the electrical loads 30a to 30n is carried out.

The logic level of the test instruction CH1 of the microprocessor 120 is normally "H", and the test switch element 191 is normally closed, and when a negative line interruption abnormality occurs, e.g. In the case where the common ring bus 59 in the load / sensor group 105 is interrupted somewhere, or in the case where both terminals of the connecting pins of the first common terminal 107 have a bad connection, or in the case where both terminals of the connection pins of the second common terminal 108 have a bad connection with respect to the interruption position as a boundary, load currents of an electrical load group and sensor currents flow from an input sensor of the first one common connection 107 to the ground circuit GND, and load currents of the other electrical load group and sensor currents of the other input sensors flow from the second common terminal 108 through the test switch element 191 to the ground circuit GND. Thus, the respective electrical loads 30a to 30n and the input sensors 40a to 40n maintain the normal connection state.

On the other hand, the check instruction CH1 of the microprocessor becomes 120 periodically currently the logic level "L" based on the anomaly detection program 122b , and the test switch element 191 is currently open. In the case where the interruption abnormality of the negative line has occurred at the time when the test switch element 191 is open, the potential of the positive terminal (drain terminal) of the Prüfschalterelementes 191 by the bias resistor 195 pulled up and is almost equal to the power supply voltage Vb, the transistor 198 as the element voltage monitoring circuit is energized and by the bias resistor 195 and the base resistance 197 as the monitoring input resistance, and the monitoring signal MN1 of the microprocessor 120 the logic level becomes "L" and samples the abnormal state of the negative line.

In the case where the interruption abnormality of the negative conduction has not occurred at the time when the test switch element 191 by the way, is the positive terminal (drain terminal) of the test switch element 191 from the second common port 108 over the common ring bus 59 and through the first common connection 107 connected to the ground circuit GND, the transistor 198 as the element voltage monitoring circuit becomes non-conductive, and the monitoring signal MN1 of the microprocessor 120 maintains the logic level "H" and samples the normal state of the negative line.

In 2 showing the flowchart of the previous test operation is step 200 a start step of an abnormality judgment operation of the common ring bus 59 through the microprocessor 120 , and this starting step is performed at a rate of e.g. B. activated once per 100 ms periodically. The subsequent step 201 is a step for changing the logic level of the test instruction CH1 from "H" to "L" to the test switch element 191 to open, and the subsequent step 202 is a step to waiting for a response for z. About 1 ms, and in this waiting time the test control circuit closes 190 the logic change from the opening of the Prüfschalterelementes 191 results.

In the subsequent step 203 It is judged whether the logic level of the monitor signal MN1 is "L", and if the judgment is NO, a shift to step 204 is performed, and if YES, a shift becomes step 205 carried out. step 204 is a count processing step of the number of times of occurrence of an error, wherein step 200 is activated periodically, and every time a routine occurs in which the judgment of step 203 Is NO, z. For example, add 1 to the current value of the error counter. step 205 is a step to initialize the current value of the error counter that is in step 204 is added and counted on z. Eg 0.

step 206 , then to step 204 or step 205 is executed, a step of returning the logic level of the test instruction CH1 made to the logic level "L" to "H". The subsequent step 207 is a step of judging whether or not the current value of the error counter shown in step 204 is counted, z. 3, and if not exceeded, a shift becomes an operation end step 209 performed, and if exceeded, a shift becomes step 208 carried out.

In step 208 For example, in order to remember the anomaly occurrence determination, an anomaly flag occurring in the RAM memory 121 is provided, set. The subsequent step 215 is a step for generating an abnormality notification instruction DSP to the alarm display 103 to activate, and to carry out the control stop of the electrical loads 30a to 30n as required. The subsequent step 216 Fig. 13 is a step for judging whether a timing is such that an abnormality occurrence history is to be stored. In the assessment step 216 a judgment of YES is made, e.g. In a specified delay feeding period after the power supply switch is opened, and a shift goes to step 217 is performed, and when the power switch has been closed, a judgment of NO is made, and it becomes a shift to step 209 carried out.

In step 217 becomes the abnormality occurrence information stored in the RAM 121 in step 208 is stored, transferred to and stored in the non-volatile data memory 129 , and then the feed to the electrical control unit 100 stopped. If the assessment in step 207 or step 216 NO, or subsequently to step 217 , a shift becomes the operation end step 209 carried out. However, when the power switch is closed, waiting for a specified time is performed, and after another control program is executed during it, a shift to the initial step 200 carried out. A process block 218 , the step 215 until step 217 contains is an anomaly processing agent.

There is also a process block 210 , the step 201 until step 208 contains, an anomaly detection means.

By the way, the error counter that is in step 204 is added and counted, to be made to a subtraction counter, and in this case, in step 205 z. 3 is set as the initial value, and when the current value of the error counter is reduced to 0, an abnormality occurrence determination judgment is made in step 207 carried out. In addition, immediately after the power switch is turned on, the error counter and the abnormality occurrence abnormality flag are reset.

(3) main point and feature

As apparent from the above explanation, the electric control device according to Embodiment 1 of the invention includes the electric control unit 100 with the microprocessor 120 to the electrical loads 30a to 30n in accordance with the content of the control program 122a that in the program memory 122 is stored, and the operating conditions of the input sensors 40a to 40n and 160 to control, and is powered by the external power supply 101 , the common ring bus 59 to which one ends of the plural electrical loads or the input sensors are successively connected, the first and second common terminals 107 and 108 , the test switch element 191 , the element voltage monitoring circuit 198 , the anomaly detection means 210 and the anomaly processing agent 218 , The first joint connection 107 is with either of the positive and negative power supply terminals of the electric control unit 100 connected and is connected to the second common connection 108 through the common ring bus 59 connected, the second common connection 108 and the first joint connection 107 are connected to each other through the test switch element 191 connected, and the second common connection 108 is with the other of the positive and negative power supply terminals of the electric control unit 100 by the bias resistor 195 connected.

The test switch element 191 is in the position of one of the positive and negative power supply terminals of the electric control unit 100 and is the switch element around the first and second common terminals 107 and 108 in response to the switching operation of the test switch element 191 to connect or disconnect the element voltage monitoring circuit 198 is the circuit to the size of the connection potential of the test switch element 191 on the connecting side to the second common connection 118 to measure, the anomaly-detecting means 210 judged that the common ring bus 59 is interrupted when the measurement potential by the element voltage monitoring circuit 198 in time, when the test switch element 191 is temporarily open, equivalent to the potential of the other of the positive and negative power supply terminals of the electric control unit 100 is, and the anomaly processing agent 218 performs the anomaly message in response to the interruption judgment of the anomaly detection means 210 by.

In addition, the program memory contains 122 the program 122b as the anomaly-detecting means 210 and the program 122c as the anomaly processing agent 218 , the microprocessor 120 The test instruction CH1 guides the test switch element 191 to, and the monitoring information by the element voltage monitoring circuit 198 becomes the microprocessor 120 entered.

Accordingly, there is a feature that the hardware structure for the abnormality detection is simplified, and the entire device becomes small and inexpensive.

Besides, the first common connection is 107 connected directly to the grounding circuit connected to the negative power supply connection of the electric control unit 100 is connected, and is connected to the second common connection 108 through the common ring bus 59 connected, with which the one ends of the many electrical loads 30a to 30n successively connected, the second common terminal 108 is connected to the grounding circuit of the electric control unit 100 through the test switch element 191 is connected to the power supply circuit for the positive potential by the bias resistor 195 connected, the negative end of the Prüfschalterelementes 191 is connected to the ground circuit, the positive end is connected to the ground circuit through the common ring bus 59 and the first common connection 107 from the second common port 108 connected, and the anomaly-detecting means 210 judges that if the positive end potential at the time when the test switch element 191 is temporarily open, a specified threshold or higher is the common ring bus 59 is interrupted. With respect to the drive-type upstream electrical loads, accordingly, the reliability of the grounding wiring can be improved.

Besides, the first common connection is 107 connected directly to the grounding circuit connected to the negative power supply connection of the electric control unit 100 is connected, and is connected to the second common connection 108 through the common ring bus 59 connected to the one ends of the many input sensors 40a to 40n successively connected, the second common terminal 108 is connected to the grounding circuit of the electric control unit 100 through the test switch element 191 and is connected to the power supply circuit for the positive potential by the bias resistor 195 connected, the negative end of the Prüfschalterelementes 191 is connected to the ground circuit, the positive end is from the second common terminal 108 through the common ring bus 59 and the first common connection 107 connected to the ground circuit, and the anomaly detecting means 210 judges that if the positive end potential at the time when the test switch element 191 is temporarily open, a specified threshold or higher is the common ring bus 59 is interrupted.

With respect to the sink-type input sensors, accordingly, the reliability of the grounding wiring can be improved.

Embodiment 2

(1) Detailed description of the structure

3 Fig. 10 is a circuit block diagram showing an electric control device of Embodiment 3 of the invention. By the way, the in 3 has been shown in such a manner that the invention is applied to electric loads of GS 5 V and analog input sensors, and in addition to an interruption abnormality of a common ring bus, a short circuit / disconnection abnormality of a test switch element can be detected.

In 3 forms an electrical control unit 300 z. B. a vehicle engine control device, and a drive power supply is between a positive feed terminal 310 and a negative feed connection 309 through an output contact 302 a power supply relay from an external power supply 301 connected to a battery in the vehicle. When an unillustrated power switch is closed, the output contact becomes 302 closed immediately, however, a delay return operation is performed in which even if the power switch is opened, feeding to the electric control unit 300 is maintained for a specified delay time.

An alarm display 303 , a load / sensor group 305a an electrical load of a GS-12V system and an input sensor of an ON / OFF operation, and a load / sensor group 305b including electrical loads of a GS-5V system 50a to 50n and analog input sensors 60a to 60n are on the outside of the electrical control unit 300 mounted, which is contained in a sealed housing, and respective input / output means are connected to the electric control unit 300 connected by non-shown detachable / attachable connectors. Connections of a negative side of the electrical loads 50a to 50n and the analog input sensors 60a to 60n are with a common ring bus 59 from one end 57 to the other end 58 connected consecutively, the one end 57 of the common ring bus 59 is with a first common connection 307 the electrical control unit 300 connected, and the other end 58 of the common ring bus 59 is with a second common connection 308 the electrical control unit 300 connected.

As the internal structure of the electric control unit 300 generates a constant voltage power supply circuit 311 a voltage Vcc = 5 V based on a power supply voltage GS 10 to 16 V of the external power supply 301 which is supplied to a positive power supply terminal Vb, and supplies the stabilized voltage to respective parts including a microprocessor mentioned later 320 to. A digital output interface circuit 313 is between the load / sensor group 305a and a digital output port of the microprocessor 320 and is a power transistor to convert a voltage level.

A digital input interface circuit 314 is between the load / sensor group 305a and a digital input port of the microprocessor 320 and is a circuit including a voltage level conversion function and a noise filter function. A digital output interface circuit 315 is between basic circuits of driving transistors of the electrical loads 50a to 50n and drive instruction output terminals DR1 to DRn of the microprocessor 320 connected. By the way, the driving transistors are the electrical loads 50a to 50n with a positive power supply terminal Vcc as an output terminal of the constant-voltage power supply circuit 311 connected.

An analog input interface circuit 316 is between the analog input sensors 60a to 60n and analog input ports AI1 to AIn of the microprocessor 320 connected, and is a circuit including one Noise filtering function. Incidentally, the analog input sensor 60a z. For example, a potential meter (variable resistor) to detect a depression degree of a not-shown accelerator pedal, the control power supply voltage Vcc is applied to the voltmeter, and an output voltage obtained from a floating terminal is output to the microprocessor as an analog signal 320 is fed through a multichannel AD converter 326 digitally converted.

The microprocessor 320 is over a bus with a RAM memory 321 for arithmetic processing, a program memory 322 from Z. A non-volatile flash memory, the multi-channel AD converter 326 and a data store 329 from Z. B. connected to a non-volatile EEPROM memory, and works in collaboration with it. The program memory 322 stores in addition to an input / output control program 322a as the electric control unit 300 an anomaly detection program 322b as anomaly detection means 410 . 510 , what later in 4 and 5 and an anomaly processing program 322c as an anomaly processing agent 518 ,

A test control circuit 390 contains a test switch element 391 that between the second common connection 308 and the ground circuit GND is connected, a backflow prevention diode 392 connected to a collector terminal of the test switch element 391 of an NPN power transistor connected in series, a driving resistor 393 between a base terminal and a test instruction output terminal CH2 of the microprocessor 320 connected, and an open circuit ballast resistor 394 which is connected between the base and emitter terminals. The collector terminal as the positive terminal of the test switch element 391 is by a bias resistor 395 with the positive power supply terminal Vcc as the output terminal of the constant voltage power supply circuit 311 connected. A voltage dividing resistor 396 is parallel to the backflow prevention diode 392 connected, and the potential of the collector terminal is connected to a monitoring signal input terminal MN2 of the microprocessor 320 by a monitoring input resistance 397 connected.

The monitor input signal MN2 is converted to a digital value by the multichannel AD converter 326 converts, and the judgment of large, medium and small levels is in the microprocessor 320 carried out. Incidentally, the first joint connection 307 with the ground circuit GND in the electric control unit 300 directly connected, and the ground circuit GND is connected to the negative terminal of the external power supply 301 through the feed side of the negative side 309 connected. In addition, the common ring bus to the electrical loads 50a to 50n and the common ring bus to the input sensors 60a to 60n disconnected, and the test control circuit 390 can be provided for each of them. In this case, a test switch element and a backflow prevention diode are connected to each of the first and second common terminals to which the common ring bus is connected to the analog input sensors, and the voltage levels of the divided buses at the time when the common ring bus is broken can be made uniform be made.

(2) Detailed description of function and operation

Next, the function and operation of the electric control device of the second embodiment 2 of the invention, as shown in FIG 3 is described based on flowcharts described in FIG 4 and 5 to be shown. In the construction of 3 will if the output contact 302 is closed, the microprocessor 320 from the constant voltage power supply circuit 311 energized and begins to operate, and the drive control to the respective electrical loads ( 305a and 50a to 50n ) is determined in accordance with the operating states of the respective input sensors ( 305a and 60a to 60n ), the signal levels and contents of the input / output control program 322a executed.

The logic level of the test instruction CH2 of the microprocessor 320 is normally "H", and the test switch element 391 is normally closed, and when a negative line interruption abnormality occurs, e.g. In the case where the common ring bus 59 in the load / sensor group 305b is interrupted somewhere, or in the case where the connecting pin of the first common connection 307 has a bad connection, or in the case where the connection pin of the second common connection 308 Therefore, if the connection is bad, with respect to the disconnection position as a boundary, load currents and sensor currents of a load / sensor group flow from the first common terminal 307 to the ground circuit GND, and load currents and sensor currents of the other load / sensor group flow from the second common terminal 308 through the backflow prevention diode 392 and the test switch element 391 to the ground circuit GND. Thus, the electrical loads 50a to 50n and the analog input sensors 60a to 60n maintain the normal state.

On the other hand, the logic level of the check instruction CH2 of the microprocessor becomes 320 periodically momentarily "L" based on the anomaly detection program 322b , and the test switch element 391 is currently open. In the case where the interruption abnormality of the negative line has occurred at the time when the test switch element 391 is opened, the potential of the positive terminal (collector terminal) of the test switch element becomes 391 by the bias resistor 391 pulled up and is almost equal to the power supply voltage Vcc, and the monitoring signal MN2 of the microprocessor 320 becomes a high voltage level and samples the abnormal state of the negative line. In the case where the interruption abnormality of the negative conduction has not occurred in time when the test switch element 391 opened, has the positive connection (collector connection) of the test switch element 391 Incidentally, an intermediate voltage level caused by voltage division with the bias resistor 395 and the voltage dividing resistor 396 is received, and the monitoring signal MN2 of the microprocessor 320 samples the normal state of the negative line.

In the case, however, of an interruption abnormality in which the test switch element 391 can not be closed, even if the logic level of the test instruction CH2 is made "H", the positive end potential of the test switch element becomes 391 not the low voltage level. In contrast, in the case of the short circuit anomaly, in which the test switch element 391 can not be opened, even if the logic level of the test instruction CH2 "L" is made, the positive end potential of the test switch element 391 not the high voltage level or the intermediate voltage level. Thus, in addition to the interruption anomaly of the common ring bus, too 59 the state of element abnormality of the test switch element 391 be recorded.

In 4 that shows the first half of the flowchart of the test operation is step 400 a start step of an abnormality judgment operation of the common ring bus 59 through the microprocessor 320 , and this starting step is periodically at a rate of z. B. activated once per 100 ms. The subsequent step 401 is a step for changing the logic level of the test instruction CH2 from "H" to "L" and opening the test switch element 391 , The subsequent step 402 is a step to waiting for a response for z. About 1 ms, and in this waiting time the test switch element closes 390 the logic change from the opening of the Prüfschalterelementes 391 results.

In a subsequent step 403a It is judged whether the voltage level of the monitor signal MN2 has become the intermediate voltage M, and if the judgment is YES, a shift becomes step 405 performed, and if NO, a shift to step 403b carried out. In step 403b It is judged whether the voltage level of the monitor signal MN2 has become the high level "H", and if the judgment is YES, a shift to step 404a and if NO and it is the low voltage "L", a shift becomes step 404b carried out. Incidentally, the intermediate voltage here is a voltage (0.9 × Vd to 1.1 × Vd) within a range of ± 10% centered around a divided voltage Vd = Vcc × R396 / (R395 ÷ R396) when the resistance value of the bias resistor 395 R395 is and the resistance of the voltage dividing resistor 396 R396 is. Incidentally, a voltage region exceeding the intermediate voltage is called a high voltage, and a voltage region smaller than the intermediate voltage is called a low voltage.

Accordingly, the relocation comes to step 404a in the interruption abnormality of the negative line, the shift to step 404b occurs in the short circuit anomaly of the test switch element 391 on, and the shift to step 405 enters the normal state in which an abnormality by the test corresponding to the opening instruction of the Prüfschalterelementes 391 can not be found. step 404a is a count processing step of the number of times of occurrence of a negative line interruption abnormality, wherein step 400 is activated periodically and every time a routine occurs in which the judgment of step 403a NO is and the judgment of step 403b YES, z. 3 adds to the current value of the first error counter CNT1. step 404b is a count processing step of the number of times of occurrence of an element abnormality, wherein Step 400 is activated periodically and every time a routine occurs in which the judgment of step 403a NO is and the judgment of step 403b Is NO, z. 3 adds to the current value of the second error counter CNT2.

step 405 is a step to subtract z. B. 1 of the current one Value of the error counter CNT1, CNT2, in step 404a . 404b is added and counted, and the subtraction is controlled so that the current value of the error counter CNT1, CNT2 does not become 0 or smaller. step 406 , then to step 404a , Step 404b or step 405 is executed, is a step for returning the logic level of the test instruction CH2, which in step 401 to logic level "L", to "H". The subsequent step 407 is a step of judging whether or not the current value of the error counter CNT1, CNT2 obtained in step 404a . 404b is counted, z. B. 11, and if not exceeded, a shift to step 502 from 5 performed, and if exceeded, a shift becomes step 408 carried out.

In step 408 With respect to each of the error counters CNT1 and CNT2, in order to memorize the abnormality occurrence determination, the anomaly flag residing in the RAM is set 321 is provided and corresponds to the exceeding error counter set, and there is a shift to step 502 from 5 carried out. By the way, it's a step block 409 including steps 404a . 404b and 405 an addition subtraction means to the error counter. In addition, a step block corresponds 410 , the step 401 until step 408 contains the first half of the anomaly detection tool.

In 5 showing the second half of the flowchart of the test operation is step 502 a step to wait for a response for e.g. 1 ms, and during this waiting period the test control circuit closes 390 the logic change, from the closing control of the Prüfschalterelementes 391 in step 406 results. In a subsequent step 503a It is judged whether the voltage level of the monitor signal MN2 has become the low voltage "L", and if the judgment is YES, a shift becomes to step 505 performed, and if NO, a shift to step 503b carried out. In step 503b It is judged whether the voltage level of the monitor signal MN2 has become the high voltage "H", and if the judgment is YES, a shift becomes to step 504a is performed, and if NO and it is the intermediate voltage "M", a shift becomes step 504b carried out.

Accordingly, the shift points to step 504a the state in which the interruption abnormality of the negative line and the interruption abnormality of the test switch element 391 occur simultaneously, the shift to step 504b indicates the state in which the interruption abnormality of the test switch element 391 occurs, and the shift to step 505 indicates the normal state in which the abnormality by the test corresponding to the closing instruction of the Prüfschalterelementes 391 can not be found. step 504a is a count processing step of the number of times of occurrence of an abnormality, wherein Step 400 is activated periodically and every time a routine occurs in which the judgment of step 503a NO is and the judgment of step 503b YES, z. 3 adds to the current value of the first error counter CNT1 and that of the second error counter CNT2. step 504b is a count processing step of the number of times of occurrence of an element abnormality, wherein Step 400 is activated periodically and every time a routine occurs in which the judgment of step 503a NO is and the judgment of step 503b Is NO, z. 3 adds to the current value of the second error counter CNT2.

step 505 is a step to subtract z. B. 1 of the current value of the error counter CNT1, CNT2, in step 504a . 504b is added and counted, and the subtraction is controlled so that the current value of the error counter CNT1, CNT2 does not become 0 or smaller. Incidentally, the error counter CNT1 to detect the interruption abnormality of the negative line, in step 404a and step 504a is added and counted while the error counter CNT2 to detect the element anomaly in step 404b and steps 504a and 504b is added and counted, and in both of them the subtraction processing is performed every time step 405 or step 505 is carried out.

step 507 , then to step 504a , Step 504b or step 505 is executed, a step of judging whether the current value of the error counter CNT1, CNT2, the in step 504a . 504b is counted, z. B. 11, and if not exceeded, a shift to step 513 performed, and if exceeded, a shift becomes step 508 carried out. In step 508 With respect to each of the error counters CNT1 and CNT2, in order to memorize the abnormality occurrence determination, the anomaly flag residing in the RAM is set 321 is provided and corresponds to the exceeding error counter set, and there is a shift to step 513 carried out. Incidentally, a step block 509 , the steps 504a . 504b and 505 contains an addition subtraction means to the error counter. In addition, a step block corresponds 510 , the step 502 until step 508 contains the second half of the anomaly detection tool.

In step 513 it is judged whether the anomaly flag in step 408 or step 508 is set, and if the anomaly flag is not set, a shift becomes an operation end step 514 is performed, and if the anomaly flag is set, a shift becomes step 515 carried out. step 515 is a step for generating an abnormality notification instruction DSP to the alarm display 303 to activate, and to perform the Ansteuerstopps the electrical load, as the need arises. The subsequent step 516 is a step of judging whether a timing is such that an abnormality occurrence history is to be stored, and in the judging step 516 is a YES judgment in z. A specified delay feed period performed after the power switch is opened, and it is a shift to step 517 carried out. When the power switch has been closed, a NO judgment is made, and a shift to step 514 carried out.

In step 517 The abnormality occurrence information corresponding to each of the error counters CNT1 and CNT2 is stored in the RAM 321 in step 408 or step 508 , transferred to and stored in the non-volatile data store 329 , and then an infeed to the electric control unit 300 stopped. Although the shift to the operation end step 514 is performed when the assessment in step 513 or step 516 NO is or next to step 517 When the power switch is closed, waiting is performed for a specified time, another control program is executed during it, and it becomes a shift to the initial step 400 carried out. A step block 518 , the step 515 until step 517 contains, becomes an abnormality processing agent.

Incidentally, the error counter CNT1, CNT2, in step 404a . 404b or step 504a . 504b is added and counted to be made to a subtraction counter. In this case, the addition upper limit in step 405 . 505 z. 13, and when the current value of the error counter is reduced to 0, an abnormality occurrence determination judgment is made in step 408 . 508 carried out. In addition, in the case of the subtraction counter system as stated above, the error counter is set to an initial value of 13 immediately after the power switch is turned on, and the abnormality occurrence flag anomaly flag is reset.

(3) main point and feature

As apparent from the above description, the electric control device according to Embodiment 2 of the invention includes the electric control unit 300 with the microprocessor 320 to the electrical loads 50a to 50n and 305a in accordance with the content of the control program 322a that in the program memory 322 is stored, and the operating conditions of the input sensors 60a to 60n and 305a to control / control, and is provided by the external power supply 301 fed, the common ring bus 59 to which one ends of the many electrical loads 50a to 50n or the input sensors 60a to 60n successively connected, the first and second common terminals 307 and 308 , the test switch element 391 , the element voltage monitoring circuit (multi-channel AD converter) 326 , the anomaly detection means 410 and 510 and the anomaly processing agent 518 , The first joint connection 307 is with one of the positive and negative power supply terminals of the electric control unit 300 connected, and is connected to the second common connection 308 through the common ring bus 59 connected, the second common connection 308 and the first joint connection 307 are connected to each other through the test switch element 391 connected, and the second common connection 308 is with the other of the positive and negative power supply terminals of the electric control unit 300 by the bias resistor 395 connected.

In addition, the program memory contains 322 the program 322b as the anomaly-detecting means 410 and 510 , and the program 322c as the anomaly processing agent 518 , the microprocessor 320 the test instruction CH2 guides the test switch element 391 to, and the monitoring information by the element voltage monitoring circuit 326 becomes the microprocessor 320 entered.

Accordingly, the hardware structure for the abnormality detection is simplified, and the entire device becomes small and inexpensive.

Besides, the first common connection is 307 connected directly to the earthing circuit connected to the negative power supply connection of the electric control unit 300 is connected, and is connected to the second common connection 308 through the common ring bus 59 connected to which one ends of the many electrical loads 50a to 50n are connected consecutively. The second common connection 308 is connected to the grounding circuit of the electric control unit 300 through the test switch element 391 connected, and is connected to the positive power supply circuit by the bias resistor 395 connected. The negative end of the test switch element 391 is connected to the ground circuit, and the positive end is connected to the ground circuit through the common ring bus 59 and the first common connection 307 from the second common port 308 connected. The anomaly detection means 410 judged that the common ring bus 59 is interrupted when the positive end potential at the time when the test switch element 391 is temporarily open, a specified value or higher.

With respect to the drive-type upstream electrical loads, accordingly, the reliability of the grounding wiring can be improved.

Besides, the first common connection is 307 connected directly to the earthing circuit connected to the negative power supply connection of the electric control unit 300 is connected, and is connected to the second common connection 308 through the common ring bus 59 connected to the one ends of the many input sensors 60a to 60n are connected consecutively. The second common connection 308 is connected to the grounding circuit of the electric control unit 300 through the test switch element 391 is connected to the power supply circuit for the positive potential by the bias resistor 395 connected. The negative end of the test switch element 391 is connected to the ground circuit, and the positive end is connected to the ground circuit of the second common terminal 308 through the common ring bus 59 and the first common connection 307 connected. The anomaly detection means 410 judged that the common ring bus 59 is interrupted when the positive end potential at the time when the test switch element 391 is temporarily open, a specified threshold or higher.

With respect to the analog sensors of a common type of grounding, accordingly, the reliability of the grounding wiring can be improved.

In addition, the backflow prevention diode is 392 between the connection point between the positive end of the test switch element 391 and the bias resistor 395 and the second common port 308 connected, the voltage dividing resistor 396 is with the reflux prevention diode 392 connected in parallel, the anomaly output means 410 . 510 contains the pair of elemental anomaly discriminators 403b . 503b corresponding to a case where the test switch element 391 is opened, and in a case where it is closed, the element abnormality discriminating means 403b . 503b judges that the test switch element 391 in the short circuit anomaly and can not be opened in the case where the positive end potential at the time when the opening instruction to the test switch element 391 is less than a specified value, and judges that the test switch element 391 in the interrupt anomaly and can not be closed in the case where the positive end potential in the time when the closing instruction to the Prüfschalterelement 391 is given a potential equivalent to the divided voltage by the bias resistor 395 and the voltage dividing resistor 396 is. Accordingly, not only the interruption anomaly of the common ring bus but also the abnormality state of the test switch element can be detected.

The element voltage monitoring circuit includes the multi-channel AD converter 326 , and the multichannel AD converter 326 gives the digital conversion value of the voltage proportional to the monitoring end potential of the test switch element 391 to the microprocessor 320 one.

Accordingly, monitoring of the element voltage with high accuracy can be performed by using the multi-channel AD converter used for the analog input sensor, and the judgment threshold level can be easily changed and tuned by the control constant stored in the program memory.

The anomaly detection means 410 . 510 contains the pair of addition / subtraction agents 409 . 509 corresponding to a case where the test switch element 391 is open, and a case where it is closed, and the abnormality occurrence determination means 408 . 508 , the addition / subtraction agent 409 . 509 adds or subtracts the second variation value when the anomaly detecting means 410 . 510 judges that there is an anomaly, and subtracts or adds the first variation value to perform the addition / subtraction correction on the current value memory so as to cancel each other when the abnormality detecting means 410 . 510 judges that there is no anomaly, and stops the addition / subtraction correction with the first variation value in the specified normal side limit value, if the judgment of no abnormality continues, the abnormality occurrence determination means 408 . 508 is a means for generating the anomaly detection signal when the present value of the addition / subtraction means 409 . 509 exceeds the anomaly side limit value by the accumulation of the first and second variation values, and the second variation value is a value larger than the first variation value and is set to be a value smaller than the permission accumulation value than the difference between the abnormality side limit value and the normal side limit value.

Accordingly, various anomaly detection results at the time when the test switch element is opened or closed are combined and the abnormality occurrence can be determined. Even if the permission accumulation value is made a sufficiently large value to prevent a sensitive abnormality judgment from being made to a sporadic / chronic error when the fatal / continuous error occurs once, by the second variation value as the value larger than the first one Is variation value, moreover, the present value of the addition / subtraction means rapidly exceeds the anomaly side limit value, and the anomaly occurrence is determined, and therefore, the safe and extremely reliable control device can be obtained.

The anomaly processing agent 518 Using the anomaly detection means 410 . 510 added contains the anomaly message means 515 , and the anomaly message means 515 is a means for generating the abnormality notification instruction when the abnormality occurrence determination means 408 . 508 generates the anomaly detection signal.

Accordingly, the abnormal alarm is not unnecessarily given by erroneous judgment for a noise error operation or the like, and when the interruption anomaly occurs, the abnormal message is rapidly performed, the maintenance can be assisted, and the safety can be improved.

The anomaly processing agent 518 Using the anomaly detection means 410 . 510 is added contains the anomaly history storage means 517 , the anomaly history storage agent 517 performs the discrimination storage according to the anomaly content when the abnormality occurrence determination means 408 . 508 generates the abnormality detection signal, and at the time of power supply interruption, the abnormality history storage means discriminates between the common ring bus interruption abnormality and the elemental anomaly, and transfers and stores it in the non-volatile data memory 329 through the microprocessor 320 ,

Accordingly, there are features that the anomaly history information is read out by an external tool, the inspection and maintenance can be performed efficiently according to the anomaly content, and the abnormality history information is stored even when the power supply is interrupted.

Embodiment 3

(1) Detailed description of the structure

6 Fig. 10 is a circuit block diagram showing an electric control device of Embodiment 3 of the invention. Although the device of 6 essentially similar to that of 1 Incidentally, the structure is such that, in addition to an interruption abnormality of a common ring bus, a short circuit / disconnection abnormality of a test switch element can be detected, and an overcurrent protection circuit for the test switch element is added.

In 6 forms an electrical control unit 600 z. B. a vehicle engine control device, and a drive power supply is between a feed terminal of a positive side 610 and a feed side of a negative side 609 from an external power supply 601 through an output contact 602 a power supply relay connected. Although the output contact 602 is closed immediately when a non-shown power supply switch is closed, a delay return operation is performed in which even if the power switch is opened, a supply to the electric control unit 600 continues for a specified delay time.

An alarm display 603 , a load / sensor group 605 , the electrical loads 30a to 30n and various input sensors 40a to 40n contains to perform ON / OFF operations and various analog input sensors 606 to generate analog signals are on the outside of the electrical control unit 609 mounted, which is housed in a sealed housing, and respective input / output means are connected to the electrical control unit 600 connected by non-shown detachable / attachable connectors. Negative side connections of electrical loads 30a to 30n and the input sensors 40a to 40n are consecutive with a common ring bus 59 from one end 57 to the other end 58 connected, that one end 57 of the common ring bus 59 is with a first common connection 607 the electrical control unit 600 connected, and the other end 58 of the common ring bus 59 is with a second common connection 608 the electrical control unit 600 connected.

As the internal structure of the electric control unit 600 A non-illustrated constant-voltage power supply circuit generates a control voltage Vcc = 5 V based on a power supply voltage GS 10 to 16 V of the external power supply 601 which is supplied to a positive power supply terminal Vb, and supplies the stabilized voltage to respective parts including a microprocessor to be mentioned later 620 to. A digital input interface circuit not shown is between the input sensors 40a to 40n and digital input ports of the microprocessor 620 and is a circuit including a voltage level conversion function and a noise filter function. By the way, connectors are the positive side of the input sensors 40a to 40n connected to the positive power supply terminal Vb by pull-up resistors (not shown).

An analog input interface circuit 616 is between the analog input sensors 606 and analog input ports of the microprocessor 620 connected, and is a circuit containing a noise filter function. The microprocessor 620 is over a bus with a RAM memory 621 for arithmetic processing, a program memory 622 from Z. A non-volatile flash memory, a multi-channel AD converter 626 and a data store 629 from Z. B. connected to a non-volatile EEPROM and works in collaboration with it. The program memory 622 stores, in addition to an input / output control program 622a as the electric control unit 600 , an anomaly detection program 622b as anomaly detection means 710 . 810 , what later in 7 and 8th and an anamaly processing program 622c as an anomaly processing agent 818 ,

A not shown drive control circuit is connected between the positive power supply terminal Vb and the positive-side terminals of the electric loads 30a to 30n is connected by a drive instruction output of the microprocessor 620 controlled controlled.

A test control circuit 690 contains a test switch element 691 that between the second common connection 608 and the ground circuit GND is connected, a backflow prevention diode 692 between a drain terminal of the test switch element 691 an N-channel field effect power transistor and the second common terminal 608 is connected, a voltage suppression diode 693 , which is connected between drain and gate terminals, and a current detection resistor 694 which is connected to a current mirror circuit.

A constant current control circuit 90a contains a first drive resistor 91a and a conduction control transistor 92 an N-MOS field effect transistor. A drain of the line drive transistor 90 is connected to a gate terminal of the power transistor 691 through the first drive resistor 91a connected, a second drive resistor 91b that with the first drive resistor 91a is connected in series with a test instruction output terminal CH3 of the microprocessor 620 connected, a source terminal of the line control transistor 92 is connected to the ground circuit GND, and a gate terminal is connected to the current detection resistor 694 connected.

Incidentally, the constant current control circuit operates 90a with the line control transistor 92 together, in response to the detection voltage of the current detection resistor 694 operates, and controls the conduction state of the power transistor 691 such that a load current leading to the power transistor 691 does not flow equal to or greater than a control threshold current Ic of a value greater than a specified reference current value Ir corresponding to a rated current of the power transistor 691 , and is a negative feedback circuit to the end-to-end voltage of the power transistor 691 to be a value that is not smaller than a specified logical judgment voltage when the abnormality of an interruption and a short-circuit to the power side in the common ring bus 59 occurs.

The current detection resistor 694 is connected in series with the current mirror circuit, wherein a small current proportional to the drain current of the power transistor 691 flows. The current detection resistor 694 is configured such that a first end-to-end voltage E1 = Rr × Ir / n is generated when a reference current Ir to the power transistor 691 flows, and a second end-to-end voltage E2 = Rr × Ic / n is generated when the control threshold current Ic to the power transistor 691 flows. Here, Rr is a resistance value of the current detection resistor 694 , n is a current mirror ratio, the first end-to-end voltage E1 is set to a value not higher than a gate-off voltage Voff (eg, GS 2 V) of the line drive transistor 92 and the second end-to-end voltage E2 is set to a value not smaller than a gate-on voltage Von (eg, GS 4 V) of the line drive transistor 92 is.

An overheat shutdown circuit 90b mainly contains a turn-off control transistor 93 an N-MOS field effect transistor, a comparison amplifier 94 and a temperature sensing element 96 , a drain terminal of the turn-off control transistor 93 is with a connection point between the first and second drive resistors 91a and 91b connected, a source terminal is connected to the ground circuit GND and a gate terminal is connected to an output terminal of the comparison amplifier 94 connected. The temperature sensing element 96 is with a voltage dividing resistor 95 connected in series, and is between the test instruction output terminal CH3 of the microprocessor 620 and the ground circuit GND. A reference voltage 97 is applied to an inverting input terminal of the comparison amplifier 94 is applied, and a non-inverting input terminal is connected to a connection point between the temperature detection element 96 and the voltage dividing resistor 95 connected, and is connected to an output terminal of the comparison amplifier 94 through a positive feedback resistor 98 connected.

Incidentally, the temperature detecting element detects 96 a temperature near the power transistor 691 , As the temperature rises, the potential of the non-inverting input of the comparator amplifier increases 94 to, and if the value of the reference voltage 97 is exceeded, which is applied to the inverting input terminal, the output logic of the comparison amplifier 94 the high level, and the turn-off control transistor 93 is closed, and consequently the power transistor 691 open. If the output logic of the comparison amplifier 94 becomes the high level, the voltage of the non-inverting terminal increases by the positive feedback resistance 98 on, and the output logic of the comparison amplifier 94 is kept at the high level.

The drain terminal of the power transistor 691 as the test switch element is connected to the positive power supply terminal Vb by a bias resistor 695 pulled up, and a voltage-sharing resistor 696 is with the reflux prevention diode 692 connected in parallel. Voltage dividing resistors 697a and 697b and voltage dividing resistors 698a and 698b Generate first and second threshold voltages V1 and V2 in proportion to the driving power supply voltage Vb, and they become comparison input terminals of first and second comparison judgment circuits 699a and 699b entered. The other comparison input terminals of the first and second comparison judging circuits 699a and 699b are connected to the drain terminal of the test switch element 691 and comparison output terminals are connected to monitor signal input terminals MN3a and MN3b of the microprocessor 620 connected. Incidentally, the first and second comparison judging circuits become 699a and 699b Element voltage monitoring circuits, and the large, medium and small levels of the monitor voltage can be judged by a combination of the logic levels of the monitor signals MN3a and MN3b.

(2) Detailed description of function and operation

The function and operation of the electric control device according to Embodiment 3, as shown in FIG 6 is constructed on the basis of flowcharts shown in FIG 7 and 8th to be shown. When the output contact 602 in 6 is closed first, the microprocessor 620 powered by a constant voltage power supply circuit, not shown, and starts to operate and drive control to the electrical loads 30a to 30n will be in accordance with the operating conditions of the input sensors 40a to 40n . 606 , the signal levels and contents of the input / output control program 622a executed.

The logic level of the test instruction CH3 of the microprocessor 620 is normally "H", and the test switch element 691 is normally closed, and when a negative line interruption abnormality occurs, e.g. In the case where the common ring bus 59 in the load / sensor group 605 is interrupted somewhere, or in the case where the connecting pin of the first common connection 607 has a bad connection, or in the case where the connection pin of the second common connection 608 Therefore, if the connection is bad, with respect to the disconnection position as a boundary, load currents and sensor currents of a load / sensor group flow from the first common terminal 607 to the ground circuit GND, and load currents and sensor currents of the other load / sensor group flow from the second common terminal 608 through the backflow prevention diode 692 and the test switch element 691 to the ground circuit GND. Thus, the electrical loads 30a to 30n and the input sensors 40a to 40n maintain the normal conditions.

On the other hand, the test instruction becomes CH3 of the microprocessor 620 periodically currently the logic level "L" based on the anomaly detection program 622b , and the test switch element 691 is currently open. In the case where the interruption abnormality of the negative line has occurred when the test switch element 691 is open, the potential of the positive terminal (drain terminal) of the Prüfschalterelementes 691 by the bias resistor 695 pulled up to become almost equal to the power supply voltage Vb, and the monitoring signal MN3a of the microprocessor 620 becomes the high voltage level and samples the abnormal state of the negative line.

Incidentally, in the case where the interruption abnormality of the negative conduction did not occur when the test switch element 691 is open, has the positive terminal (drain terminal) of the test switch element 691 the intermediate voltage level caused by voltage division with the bias resistor 695 and the voltage dividing resistor 696 is obtained, and the monitoring signal MN3b of the microprocessor 620 becomes the high voltage level and samples the normal state of the negative line.

In the case of the interruption anomaly, however, in which the test switch element 691 can not be closed, even if the logic level of the test instruction CH3 is made "H", the positive end potential of the Test switch element 691 not the low voltage level. On the other hand, in the case of the short circuit abnormality in which the test switch element 691 can not be opened, even if the logic level of the test instruction CH3 is made "L", the positive potential of the test switch element becomes 691 not the high voltage level or the intermediate voltage level, and therefore, in addition to the interruption anomaly of the common ring bus 59 also the element anomaly state of the test switch element 691 be recorded.

In addition, in the interruption state of the common ring bus 59 in the case where the short circuit abnormality occurs to the power side, wherein the other end 58 of the common ring bus 59 in mixed contact with the positive power line, although the logic level of the test instruction CH3 is "H", the potential of the positive terminal (drain terminal) of the test switch element comes 691 the "H" level, and the abnormality state of the short-circuit to the power side is detected.

In 7 that shows the first half of the flowchart of the test operation is step 700 a start step of an abnormality judgment operation of the common ring bus 59 through the microprocessor 620 , and this starting step is periodically at a rate of z. B. activated once per 100 ms. The subsequent step 701 is a step for changing the logic level of the test instruction CH3 from "H" to "L" to the test switch element 691 to open, and the subsequent step 702 is a step to waiting for a response for z. About 1 ms, and during this waiting period the test control circuit closes 690 the logic change from the opening of the Prüfschalterelementes 691 results. The subsequent step 703a judges whether the logic state of the monitor signal MN3a, MN3b has become an intermediate voltage "M", and if the judgment is YES, a shift to step 705 performed, and if NO, a shift to step 703b carried out.

In step 703b It is judged whether the logic state of the monitor signal MN3a has become the high voltage "H", and if the judgment is YES, a shift to step 704a and if NO and it is the low voltage "L", a shift becomes step 704b carried out. Incidentally, the intermediate voltage here is a voltage (0.9 × Vd to 1.1 × Vd) within a range of ± 10%, which is centered around a divided voltage Vd = Vb × R696 / (R695 + R696) when the Resistance value of the bias resistor 695 R695 is and the resistance of the voltage dividing resistor 696 R696 is. The logic level of the monitor signal MN3a becomes "H" in a high voltage region exceeding the intermediate voltage, and the logic level of the monitor signal MN3b becomes "L" in a low voltage region smaller than the intermediate voltage. In the intermediate voltage region, the logic level of the monitor signal MN3a is "L", and the logic level of the monitor signal MN3b becomes "H".

Accordingly, the relocation comes to step 704a in the interruption abnormality of the negative line, the shift to step 704b occurs in the short circuit anomaly of the test switch element 691 on, and the shift to step 705 occurs in the normal state in which an abnormality by the test according to the opening instruction of the Prüfschalterelementes 691 can not be found. step 704a is a count processing step of the number of times of occurrence of the negative line interruption abnormality, wherein step 700 is activated periodically, and every time a routine occurs in which the judgment of step 703a NO is and the judgment of step 703b YES, z. 1 adds to the current value of the first error counter CNT1. step 704b is a count processing step of the number of times of occurrence of an elemental abnormality, wherein Step 700 is activated periodically, and every time a routine occurs in which the judgment of step 703a NO is and the judgment of step 703b Is NO, z. B. 1 is added to the current value of the second error counter CNT2. In step 705 a first reset flag is set to the error counter CNT1, CNT2, and if a second reset flag also in a step to be mentioned later 805 is set, the error counter CNT1, CNT2 in step 812 reset, and the current value becomes 0.

step 706 , then to step 704a , Step 704b or step 705 is executed, is a step for returning the logic level of the test instruction CH3, which in step 701 to logic level "L", to "H". The subsequent step 707 is a step of judging whether the current value of the error counter CNT1, CNT2, counted in step 704a . 704b , z. B. exceeds 3, and if not exceeded, a shift to step 802 from 8th performed, and if exceeded, a shift becomes step 708 carried out.

In order to memorize the anomaly occurrence determination with respect to each of the error counters CNT1 and CNT2, in step 708 an anomaly flag stored in the RAM 621 is provided and corresponds to the exceeding error counter, set, and then a shift to step 802 from 8th carried out. By the way, it's a step block 709 , the steps 704a and 704b contains one Counting means to the error counter. In addition, a step block corresponds 710 , the step 701 until step 708 contains the first half of the anomaly detection tool.

In 8th showing the second half of the flowchart of the test operation is step 802 a step to wait for a response for e.g. About 1 ms, and during this waiting period the test control circuit closes 690 the logic change that comes from closing the Prüfschalterelementes 691 in step 706 results. In a subsequent step 803a It is judged whether the logic level of the monitor signal MN3b is "L", and if the judgment is YES, it is judged that the low voltage state occurs and a shift to step 805 is performed, and if the judgment is NO, a shift becomes step 803b carried out. In step 803b It is judged whether the logic level of the monitor signal MN3a is "H", and if the judgment is YES, it is judged that the high voltage state occurs, and a shift to step 804a is performed, and if the judgment is NO, it is judged that the intermediate voltage state occurs, and a shift to step 804b carried out.

Accordingly, the relocation comes to step 804a in the state where the negative-line interruption abnormality occurs and the short-circuit abnormality occurs to the power side, and the shift to step 804b occurs in the interruption anomaly of the test switch element 691 on, and the shift to step 805 occurs in the normal state where the abnormality is detected by the check corresponding to the closing instruction of the test switch element 691 can not be found. step 804a is a count processing step of the number of times of an abnormality occurrence, wherein Step 700 is activated periodically and every time a routine occurs in which the judgment of step 803a NO is and the judgment of step 803b YES, z. 1 adds to the current values of the first and second error counters CNT1 and CNT2. step 804b is a count processing step of the number of times of occurrence of the elemental anomaly, wherein Step 700 is activated periodically and every time a routine occurs in which the judgment of step 803a NO is and the judgment of step 803b NO, z. B. 1 is added to the current value of the second error counter CNT2.

In step 805 is set a second reset flag for the error counter CNT1 and CNT2, and if the first reset flag in the previous step 705 is set, the error counters CNT1 and CNT2 in step 812 is reset, and the present value becomes 0. Incidentally, the error counter CNT1 becomes to detect the interruption abnormality of the negative line in step 704a and step 804a is added and counted, and the error counter CNT2 for detecting the element abnormality becomes in step 704b and steps 804a and 804b added and counted, and in both of them, the reset processing in step 812 performed as the first and second reset flags in step 705 and step 805 are set.

step 806 then becomes step 804a or step 804b is executed, and is a step for establishing the logic level of the test instruction CH3 to "L" to the test switch element 691 to give an opening instruction.

step 807 , then to step 805 or step 806 is executed, a step of judging whether the current value of the error counter CNT1, CNT2, the in step 804a . 804b is counted, z. B. exceeds 3, and if not exceeded, a shift to step 811 performed, and if exceeded, a shift becomes step 808 carried out.

In step 808 For example, in order to memorize the abnormal occurrence determination with respect to each of the error counters CNT1 and CNT2, an abnormality flag occurring in the RAM is set 621 is provided and corresponds to the exceeding error counter, set, and it is a shift to step 811 carried out.

By the way, it's a step block 809 , the steps 804a and 804b contains a counting means for the error counter. A step block 810 , the step 802 until step 808 contains, corresponds to the second half of the anomaly detection means.

In step 811 it is judged whether the reset flags in step 705 and step 805 are set, and if both are set, a shift becomes step 812 is performed, and the current values of the error counters CNT1 and CNT2 are reset, and the first and second reset flags generated in steps 705 and 805 are set are reset. If the assessment in step 811 NO is or in step 813 , then to step 812 is performed, it is judged whether the anomaly flag in step 708 or step 808 is set, and if the anomaly flag is not set, a shift becomes an operation end step 814 is performed, and if the anomaly flag is set, a shift becomes step 815 carried out.

step 815 is a step for generating an abnormality notification instruction DSP to the alarm display 603 to activate, and to perform the Ansteuerstopps the electrical load, as the need arises. Of the subsequent step 816 is a step of judging whether a timing is such that an abnormality occurrence history is to be stored, and in the judging step 816 z. For example, a judgment of YES is made in a specified delay feeding period after the power supply switch is opened, and a shift becomes to step 817 is performed, and when the power switch has been closed, a judgment of NO is made and a shift to step 814 carried out. In step 817 is the abnormality occurrence information corresponding to each of the error counters CNT1 and CNT2 stored in the RAM 621 in step 708 or step 808 stored, transferred and stored in the non-volatile memory 629 , and then the feed to the electrical control unit 600 stopped.

If the assessment in step 813 or step 816 NO, or subsequently to step 817 , a shift becomes the operation end step 814 carried out. However, when the power switch has been closed, waiting is performed for a specified time, during which another control program is performed, and then a shift to the initial step 700 carried out. A step block 818 , the step 815 until step 817 contains is an anomaly processing agent. Incidentally, the error counters CNT1 and CNT2, in steps 704a and 704b and steps 804a and 804b be added and counted, be made to subtraction counters, and in this case, an initial value, which in step 812 reset, z. 3, and if the current value of the error counter is reduced to 0 in step 708 . 808 , an abnormality occurrence determination judgment is performed. In this case, immediately after the power switch is turned on, the initial value 3 is set in the error counter, and the abnormality occurrence abnormality flag is reset.

(3) main point and feature

As apparent from the above description, the electric control device according to Embodiment 3 includes the electric control unit 600 with the microprocessor 620 to the electrical loads 30a to 30n in accordance with the content of the control program 622a that in the program memory 622 is stored, and the operating states of the input sensors 40a to 40n and 606 to control / control and from the external energy supply 601 is fed, the common ring bus 59 with which one ends of the many electrical loads 30a to 30n or the input sensors 40a to 40n successively connected, the first and second common terminals 607 and 608 , the test switch element 691 , the element voltage monitoring circuits 699a and 699b , the anomaly detection means 710 and 810 and the anomaly processing agent 818 , the first common connection 607 is with one of the positive and negative power supply terminals of the electric control unit 600 connected and is connected to the second common connection 608 through the common ring bus 59 connected, the second common connection 608 and the first joint connection 607 are connected to each other through the test switch element 691 connected, the second common connection 608 is with the other of the positive and negative power supply terminals of the electric control unit 600 by the bias resistor 695 connected, the test switch element 691 is in a position of one of the positive and negative power supply terminals of the electric control unit 600 and is the switch element around the first and second common terminals 607 and 608 in response to the switching operation of the test switch element 691 to connect or disconnect the element voltage monitoring circuit 699a . 699b is the circuit to the size of a connection potential of the test switch element 691 on the connecting side to the second common connection 608 to measure, the anomaly-detecting means 710 . 810 judged that the common ring bus 59 is interrupted when the measurement potential by the element voltage monitoring circuit 699a . 699b in time, when the test switch element 691 is temporarily open, the potential of the other of the positive and negative power supply terminals of the electric control unit 600 is equivalent, and the anomaly processing means 818 performs the anomaly message in response to the interruption judgment of the anomaly detection means 710 . 810 by.

In addition, the test switch element contains 691 the current detection resistor 694 , the constant current control circuit 90a and the overheat shutdown circuit 90b , and is composed of the N-channel field effect power transistor having the drain terminal as the positive terminal and the source terminal as the negative terminal, and the abnormality detecting means 710 . 810 contains the elemental abnormality discriminator 703a . 803b ,

The constant current control circuit 90a contains the line control transistor 92 which is in accordance with the detection voltage of the current detection resistor 694 operates, and is the negative feedback control circuit, in which the conduction state of the power transistor 691 linearly controlled so that the current leading to the power transistor 691 does not flow, that is is not smaller than the control threshold current than the value that is greater than the specified reference current value corresponding to the rated current of the power transistor 691 , and in the interruption state of the common ring bus 59 when the short circuit abnormality occurs to the power side, wherein the wiring on the side of the second common terminal 608 comes in mixed contact with the power line, the end-to-end voltage of the power transistor 691 is held at a value not smaller than the specified logical judgment voltage.

The current detection resistor 694 is connected in series with the current mirror circuit, in which a small current proportional to the drain current of the power transistor 691 flows, the current detection resistor 694 generates the first end-to-end voltage when the reference current to the power transistor 691 flows, and generates the second end-to-end voltage when the control threshold current to the power transistor 691 the first end-to-end voltage becomes not higher than the gate-off voltage of the conduction control transistor 92 is set, and the second end-to-end voltage is set to a value not smaller than the gate-on voltage of the conduction control transistor 92 is.

The overheat shutdown circuit 90b is the comparison control circuit which is the temperature detection element 96 to the temperature near the power transistor 691 and the turn-off control transistor 93 contains, and turns on the power transistor 691 off when the temperature is near the power transistor 691 exceeds a specified temperature. The Element Anomaly Distinguishing Agent 803b is the means of judging that the power transistor 691 is in the interrupt anomaly and can not be closed or in the overcurrent excitation state because of the short-circuit anomaly to the power side when the potential of the positive terminal at the time when the close instruction to the power transistor 691 when the test switch element is given, is a specified threshold or higher.

Accordingly, the judgment on the presence or absence of the interruption abnormality state / short state abnormality state to the power side can be performed by the combination of the logic level of the control output signal and the logic level of the state detection signal, and if the short circuit abnormality occurs to the power side, the power transistor performs an intermittent operation not through, and the end-to-end voltage of the power transistor is a specified logical judgment voltage or higher and is stable, and therefore the detection of the anomaly state is stably operated, and the presence or absence of the abnormality can be judged quickly.

In addition, the linear control is performed so that when the short-circuit anomaly occurs to the power side, the power transistor has the control threshold current or less, and accordingly, compared to a system of on / off control of the power transistor, an overcurrent load is applied to the power transistor is reduced, and the power loss generated in the power transistor becomes large, and therefore the overheat shutdown circuit is operated quickly, and the burn-out of the power transistor can be prevented.

Further, the power loss by the current detection resistor is greatly reduced, and the heat generation can be suppressed, and further, the flowing current of the power transistor can be linearly controlled by the simple control circuit.

The anomaly opening instruction means 806 becomes the element abnormality discriminator 803b added, and the anomaly opening instruction means 806 is the agent that works when the element anomaly discriminator 803b the short circuit abnormality to the power side in the common ring bus 59 or the interruption anomaly in the test switch element 691 detected, and the opening instruction to the Prüfschalterelement 691 supplies.

Accordingly, when the abnormality of the short-circuit to the power side occurs in the common ring bus, it is possible to prevent the test switch element from burning out.

The element voltage monitoring circuit includes the first and second comparison judging circuits 699a and 699b , The first, second comparison judging circuit 699a . 699b is a circuit that makes the voltage proportional to the monitoring end potential of the test switch element 691 with the first, second threshold voltage V1, V2 proportional to the power supply voltage in the electrical control unit 600 compares and the comparison result to the microprocessor 620 enters. The first threshold voltage V1 is a voltage smaller than the power supply circuit and higher than a voltage obtained by dividing the Power supply voltage through the bias resistor 695 and the voltage dividing resistor 696 is obtained. The second threshold voltage V2 is a voltage smaller than a voltage obtained by dividing the power supply voltage by the bias resistor 695 and the voltage dividing resistor 696 is obtained.

Accordingly, as compared with the case where the multi-channel AD converter is used, the number of analog input parts can be reduced, and the control load for the comparison judgment by the microprocessor can be reduced.

The anomaly detection means 710 . 810 contains the pair of counting means 709 . 809 corresponding to the case where the test switch element 691 is open and the case where it is closed, the reset means 812 and the anomaly occurrence determining agent 708 . 808 , The counting means 709 . 809 is the error counter to increase or decrease the current value when the anomaly detection means 710 . 810 judges that there is an abnormality after the test switch element 691 opened or closed. The reset agent 812 is the means for resetting the current value of the error counter to the initial value when the anomaly detecting means 710 . 810 judges that there is no abnormality after the test switch element 691 opened or closed. The anomaly occurrence determinant 708 . 808 is a means for generating the anomaly detection signal when the current value of the error counter exceeds the specified anomaly side limit.

Accordingly, the occurrence of the abnormality can be determined by combining various anomaly detection results at the time when the test switch element is opened and closed.

The anomaly processing agent 818 Using the anomaly detection means 710 . 810 added contains the anomaly message means 815 , and the anomaly message means 815 is a means for generating the abnormality notification instruction DSP to the alarm display 603 and the like, when the anomaly occurrence determining means 708 . 808 generates the anomaly detection signal.

The anomaly processing agent 818 Using the anomaly detection means 710 . 810 is added, further includes the anomaly history storage means 817 , and the anomaly history storage means 817 performs discrimination storage according to the anomaly content when the abnormality occurrence determination means 708 . 808 generates the abnormality detection signal, and in the time of the power-supply cutoff, the means discriminates between at least the interrupt anomaly and the element anomaly, and transfers and stores it in the nonvolatile data memory 629 through the microprocessor 620 ,

Embodiment 4

(1) Detailed description of the structure

9 Fig. 10 is a circuit block diagram showing an electric control device of Embodiment 4 of the invention. Although the of 9 similar to that of 1 Incidentally, in addition to the interruption abnormality of a common ring bus, a short circuit / disconnection abnormality of a test switch element can be detected, and the common ring bus is used as a positive power line.

In 9 forms an electrical control unit 900 z. B. a vehicle engine control device, and a drive power supply is between a feed terminal of the positive side 910 and a negative side feed terminal 909 from an external power supply 901 a battery in the vehicle through an output contact 902 a power supply relay connected. When an unillustrated power switch is closed, the output contact becomes 902 closed immediately, however, a delay feedback operation is performed in which even if the power switch is opened, feeding to the electric control unit 900 during a specified delay time.

An alarm display 903 , a load / sensor group 905 including electrical loads 70a to 70n from a GS-12V system and input sensors 80a to 80n of ON / OFF operations and an analogue input sensor 906 are on the outside of the electrical control unit 900 mounted, and respective input / output means are connected to the electrical control unit 900 connected by detachable / attachable connectors, not shown. Positive connections of the electrical loads 70a to 70n and the input sensors 80a to 80n are with a common ring bus 79 from one end 77 to the other end 78 connected consecutively, the one end 77 of the common ring bus 79 is with a first common connection 907 the electrical control unit 900 connected, and the other end 78 of the common ring bus 79 is with a second common connection 908 the electrical control unit 900 connected.

As the internal structure of the electric control unit 900 generates a constant voltage power supply circuit 911 a control voltage Vcc = 5 V based on a power supply voltage GS 10 to 16 V of the external power supply 901 , which is supplied to a positive power supply terminal Vb, and supplies the stabilized voltage to respective parts including a microprocessor to be mentioned later 920 to. An analog input interface circuit 916 is between the analog input sensor 906 and an analog input port of the microprocessor 920 connected, and is a circuit including a noise filter function. A digital input interface circuit 918 is between the input sensors 80a to 80n and digital input ports DI1 to DIn of the microprocessor 920 and is a circuit including a voltage level conversion function and a noise filter function.

Incidentally, pull-down resistors 918a to 118n between negative terminals of the input sensors 80a to 80n and the ground circuit GND. Each of the drive control circuits 970a to 970n as a digital output interface circuit includes a drive transistor 971 that between the negative terminal of the electrical loads 70a to 70n and the ground circuit GND is connected, a commutation diode 973 that with one of the electrical loads 70a to 70n connected in parallel, an open circuit ballast resistor 974 , between the base and emitter terminals of the drive transistor 971 a NPN power transistor is connected, and a driving resistor 975 between one of the drive instruction output terminals DR1 to DRn of the microprocessor 920 and a base terminal of the drive transistor 971 connected is.

The microprocessor 920 is over a bus with a RAM memory 921 for arithmetic processing, a program memory 922 from Z. A non-volatile flash memory, a multi-channel AD converter 926 and a data store 929 from Z. B. connected to a non-volatile EEPROM memory and works in collaboration with it. The program memory 922 stores, in addition to an input / output control program 922a as the electronic control unit 900 , an anomaly detection program 922b as anomaly detection device, an anomaly processing program 922c as abnormality processing means and the like.

A test control circuit 990 contains a test switch element 991 that between the second common connection 908 and the positive power supply terminal Vb, a backflow prevention diode 992 connected to a collector terminal of the test switch element 991 a PNP power transistor connected in series, a serial circuit of a base resistor 993a and an auxiliary transistor 993B , which is connected between a base terminal and the ground circuit GND, a driving resistor 993c between a base terminal of the auxiliary transistor 993B an NPN transistor and a test instruction output terminal CH4 of the microprocessor 920 is connected, an open circuit ballast resistor 994a between the base and emitter terminals of the test switch element 991 connected, and an open circuit ballast resistor 994B between the base and emitter terminals of the auxiliary transistor 993B connected is.

A bias resistor 995 is between a collector terminal of the test switch element 991 and the ground GND connected, a voltage dividing resistor 996 is with the reflux prevention diode 992 connected in parallel, voltage dividing resistors 997A and 997b , which are connected in series with each other, are connected to the bias resistor 995 connected in parallel, and a monitoring input resistance 997C is between a connection point between the voltage dividing resistors 997A and 997b and a supervisory signal input terminal MN4 of the microprocessor 920 connected. The monitor input signal MN4 is passed through the multichannel AD converter 926 is converted to a digital value, and the judgment of large, medium and small levels is in the microprocessor 920 carried out. Incidentally, the first joint connection 907 with the positive power supply terminal Vb in the electric control unit 900 directly connected, and the ground circuit GND in the electric control unit 900 is with the negative connection of the external power supply 901 through the negative feed connection 909 connected. In addition, the common ring bus to the electrical loads 70a to 70n and the common ring bus to the input sensors 80a to 80n disconnected, and the test control circuit 990 can be provided for each of them.

(2) Detailed description of function and operation

When in 9 the output contact 902 is closed, the microprocessor 920 from the constant voltage power supply circuit 911 fed and starts to work, and driving control to the electrical loads 70a to 70n will be in accordance with the operating conditions of the input sensors 80a to 80n and 906 , the signal levels and contents of the input / output control program 922a executed.

The logic level of the test instruction CH4 of the microprocessor 929 is normally "H", and the test switch element 991 is normally closed, and when a positive line interruption abnormality occurs, e.g. In the case where the common ring bus 79 in the load / sensor group 905 somewhere is interrupted, or in a case where a connecting pin of the first common terminal 907 has a bad connection, or in a case where a connection pin of the second common connection 908 has a bad connection with respect to the interruption position as a limit, load currents and sensor currents of a load / sensor group flow from the first common terminal 907 to the ground circuit GND, and load currents and sensor currents of the other load / sensor group flow to the ground circuit GND from the positive power supply terminal Vb through the test switch element 991 and the backflow prevention diode 992 and from the second common port 908 through the load / sensor. Thus, the electrical loads 70a to 70n and the input sensors 80a to 80n maintain the normal conditions.

On the other hand, the test instruction becomes CH4 of the microprocessor 920 periodically currently the logic level "L" based on the anomaly detection program 922b , and the test switch element 991 is currently open. In the case where the interruption abnormality of the positive line has occurred when the test switch element 991 opened, the potential of the negative terminal (collector terminal) of the test switch element becomes 991 by the bias resistor 991 pulled down and becomes the ground level, and the monitoring signal MN4 of the microprocessor 920 becomes the low voltage level and samples the abnormal state of the positive line. In the case where the interruption abnormality of the positive line has not occurred when the test switch element 991 has the negative terminal (collector terminal) of the test switch element 991 Incidentally, an intermediate voltage level caused by voltage division with the voltage dividing resistor 996 and the bias resistor 995 is received, and the monitoring signal MN4 of the microprocessor 920 samples the normal state of the positive line.

In the case of the interruption anomaly, however, in which the test switch element 991 can not be closed even if the logic level of the test instruction "H" is made, becomes the negative end potential of the test switch element 991 not the high voltage level, whereas in the case of the short circuit anomaly in which the test switch element 991 can not be opened, even if the logic level of the test instruction CH4 is made "L", the negative terminal potential of the test switch element becomes 991 not the low voltage level or the intermediate voltage level, and therefore may also be in addition to the interruption anomaly of the common ring bus 79 the state of element abnormality of the test switch element 991 be recorded. The flowchart of the control operation in this embodiment is substantially the same as the case of FIG 4 and 5 , and the program memory 922 contains a control program as the elemental anomaly discriminating means belonging to the anomaly detecting program 922b as the anomaly detecting means is added.

(3) main point and feature

As apparent from the above description, the electric control device according to Embodiment 4 includes the electric control unit 900 with the microprocessor 920 to the electrical loads 70a to 70n in accordance with the content of the control program 922a that in the program memory 922 is stored, and the operating conditions of the input sensors 80a to 80n and 906 to control / control, and is provided by the external power supply 901 fed, the common ring bus 79 with which one ends of the many electrical loads 70a to 70n or the input sensors 80a to 80n successively connected, the first and second common terminals 907 and 908 , the test switch element 991 , the element voltage monitoring circuit (multi-channel AD converter) 926 , the anomaly-detecting agent and the abnormal processing agent, the first joint terminal 907 is with one of the positive and negative power supply terminals of the electric control unit 900 connected and is connected to the second common connection 908 through the common ring bus 79 connected, the second common connection 908 and the first joint connection 907 are connected to each other through the test switch element 991 connected, the second common connection 908 is with the other of the positive and negative power supply terminals of the electric control unit 900 by the bias resistor 995 connected, the test switch element 991 is in a position of one of the positive and negative power supply terminals of the electric control unit 900 and is the switch element around the first and second common terminals 907 and 908 in response to the switching operation of the test switch element 991 to connect or disconnect the element voltage monitoring circuit 926 is the circuit to the size of the connection potential of the test switch element 991 on the connecting side to the second common connection 908 To measure, the anomaly sensing device judges that the common ring bus 79 is interrupted when the measurement potential by the element voltage monitoring circuit 926 in time, when the test switch element 991 is temporarily open, the potential of the other of the positive and negative power supply connections of the electric control unit 900 is equivalent, and the abnormality processing means performs the abnormal message in response to the interrupt judgment of the abnormality detecting means.

The program memory 922 contains the program 922b as the anomaly-detecting means, and the program 922c as the anomaly processing agent. The microprocessor 920 the test instruction CH4 guides the test switch element 991 to, and the monitoring information by the element voltage monitoring circuit (multi-channel AD converter) 926 becomes the microprocessor 920 entered.

The first joint connection 907 is to the positive power supply terminal Vb of the electric control unit 900 connected, and is connected to the second common connection 908 the electrical control unit 900 through the common ring bus 79 Connected to the one ends of the many electrical loads 70a to 70n are connected consecutively. The second common connection 908 and the first joint connection 907 are connected to each other through the test switch element 991 connected, and the second common connection 908 is connected to the negative power supply circuit GND of the electric control unit 900 by the bias resistor 995 connected.

The test switch element 991 is in the position of the positive power supply terminal Vb of the electric control unit 900 , and is the switch element around the first and second common terminals 907 and 908 in accordance with the switching operation of the test switch element 991 to connect or disconnect. The abnormality detecting means includes the interruption abnormality detecting means for judging that the common ring bus 79 is interrupted when the potential of the second common connection 908 at the time when the test switch element 991 is temporarily opened, the potential of the negative power supply circuit GND of the electric control unit 900 is equivalent.

Accordingly, the common ring bus can also be provided for the electrical load of the common wiring of the plus side. Incidentally, in the case of the plus side common wiring electrical load, a low-cost NPN transistor or an N-channel field effect transistor may be used as the driving switch element of the electric load.

The first joint connection 907 is to the positive power supply terminal Vb of the electric control unit 900 connected, and is connected to the second common connection 908 through the common ring bus 79 connected to the one ends of the many input sensors 80a to 80n are connected consecutively. The second common connection 908 and the first joint connection 907 are connected to each other through the test switch element 991 connected, and the second common connection 908 is connected to the negative power supply circuit GND of the electric control unit 900 by the bias resistor 995 connected.

The test switch element 991 is in the position of the positive power supply terminal Vb of the electric control unit 900 , and is the switch element around the first and second common terminals 907 and 908 in accordance with the switching operation of the test switch element 991 to connect or disconnect.

The abnormality detecting means includes the interruption abnormality detecting means for judging that the common ring bus 79 is interrupted when the potential of the second common connection 908 at the time when the test switch element 991 is temporarily opened, the potential of the negative power supply circuit GND of the electric control unit 900 is equivalent.

Accordingly, the common ring bus can also be provided for the input sensor of common wiring of the plus side.

The reflux prevention diode 992 is between the connection point between the negative end of the test switch element 991 and the bias resistor 995 and the second common port 908 connected, the voltage dividing resistor 996 is with the reflux prevention diode 992 in parallel, and the abnormality detecting means includes the pair of element abnormality discriminating means corresponding to a case where the test switch element 901 is open, and a case where it is closed.

The element abnormality discriminating means judges that the switch element is in the short circuit abnormality and can not be opened when the negative end potential in the time when the opening instruction to the test switch element 991 is given, is a specified threshold or higher, and judges that the test switch element 991 in the interrupt anomaly and can not be closed when the negative end potential in the time when the closing instruction to the test switch element 991 is given a potential equivalent of the divided voltage by the bias resistor 995 and the voltage dividing resistor 996 is.

Accordingly, not only the interruption anomaly but also the abnormality state of the test switch element can be detected.

The element voltage monitoring circuit includes the multi-channel AD converter 926 , and the multichannel AD converter 926 gives a digital conversion value of a voltage proportional to the monitoring end potential of the test switch element 991 to the microprocessor 920 one.

Claims (16)

An electrical control device, comprising: an electrical control unit ( 100 . 300 . 600 . 900 ) with a microprocessor ( 120 . 320 . 620 . 920 ) to electrical loads ( 30a - 30n . 50a - 50n . 305a . 70a - 70n ) in accordance with the content of a control program ( 122a . 322a . 622a . 922a ) stored in a program memory ( 122 . 322 . 622 . 922 ) and operating states of input sensors ( 40a - 40n . 106 . 60a - 60n . 305a . 606 . 80a - 80n . 906 ), and from an external energy supply ( 101 . 301 . 601 . 901 ) is fed; a common ring bus ( 59 . 79 ), with which one ends of the many electrical loads ( 30a - 30n . 50a - 50n . 305a . 70a - 70n ) or the input sensors ( 40a - 40n, 60a - 60n . 80a - 80n ) are connected successively; first and second common connections ( 107 . 108 . 307 . 308 . 607 . 608 . 907 . 908 ); a test switch element ( 191 . 391 . 691 . 991 ); an element voltage monitoring circuit ( 198 . 326 . 699a . 699b . 926 ); Anomaly detection means ( 210 . 410 . 510 . 710 . 810 ); and anomaly processing means ( 218 . 518 . 818 ), wherein the electrical control device is designed such that the first common connection ( 107 . 307 . 607 . 907 ) with one of positive and negative power supply terminals of the electric control unit ( 100 . 300 . 600 . 900 ) and the second common connection ( 108 . 308 . 608 . 908 ) through the common ring bus ( 59 . 79 ), the second common port ( 108 . 308 . 608 . 908 ) and the first common connection ( 107 . 307 . 607 . 907 ) with each other through the test switch element ( 191 . 391 . 691 . 991 ), the second common connection ( 108 . 308 . 608 . 908 ) with the other of the positive and negative power supply terminals of the electric control unit ( 100 . 300 . 600 . 900 ) by the bias resistor ( 195 . 395 . 695 . 995 ), the test switch element ( 191 . 391 . 691 . 991 ) in a position of one of the positive and negative power supply terminals of the electric control unit ( 100 . 300 . 600 . 900 ) and the switch element is to connect the first and second common terminals ( 107 . 108 . 307 . 308 . 607 . 608 . 907 . 908 ) in response to a switching operation of the test switch element ( 191 . 391 . 691 . 991 ) to connect or disconnect the element voltage monitoring circuit ( 198 . 326 . 699a . 699b . 926 ) the circuit is to a size of a connection potential of the test switch element ( 191 . 391 . 691 . 991 ) on a connecting side to the second common connection ( 108 . 308 . 608 . 908 ), the anomaly detecting means ( 210 . 410 . 510 . 710 . 810 ) judges that the common ring bus ( 59 . 79 ) is interrupted when a measurement potential by the element voltage monitoring circuit ( 198 . 326 . 699a . 699b . 926 ) in the time when the test switch element ( 191 . 391 . 691 . 991 ) is temporarily opened, a potential of the other of the positive and negative power supply terminals of the electric control unit ( 100 . 300 . 600 . 900 ) and the abnormality processing means ( 218 . 518 . 818 ) an abnormal message in response to an interrupt judgment of the abnormality detecting means ( 210 . 410 . 510 . 710 . 810 ). The electric control device according to claim 1, characterized in that the program memory ( 122 . 322 . 622 . 922 ) a program ( 122b . 322b . 622b . 922b ) as the anomaly detecting means ( 210 . 410 . 510 . 710 . 810 ) and a program ( 122c . 322c . 622c . 922c ) as the abnormality processing means ( 218 . 518 . 818 ), the microprocessor ( 120 . 320 . 620 . 920 ) a test instruction (CH1, CH2, CH3, CH4) the test switch element ( 191 . 391 . 691 . 991 ), and monitoring information by the element voltage monitoring circuit ( 198 . 326 . 699a . 699b . 926 ) to the microprocessor ( 120 . 320 . 620 . 920 ) is entered. The electrical control device according to claim 1 or 2, characterized in that the first common connection ( 107 . 307 . 607 ) is directly connected to a ground circuit connected to the negative power supply terminal of the electric control unit ( 100 . 300 . 600 ) and the second common connection ( 108 . 308 . 608 ) through the common ring bus ( 59 ), with which one ends of the many electrical loads ( 30a - 30n . 50a - 50n ) are connected successively, the second common connection ( 108 . 308 . 608 ) with the grounding circuit of the electrical control unit ( 100 . 300 . 600 ) through the test switch element ( 191 . 391 . 691 ) and with a Power supply circuit for the positive potential by the bias resistor ( 195 . 395 . 695 ), a negative end of the test switch element ( 191 . 391 . 691 ) is connected to the ground circuit, a positive end to the ground circuit of the second common terminal ( 108 . 308 . 608 ) through the common ring bus ( 59 ) and the first common connection ( 107 . 307 . 607 ) and the anomaly detecting means ( 210 . 410 . 710 ) judges that the common ring bus ( 59 ) is interrupted when the positive end potential at a time when the test switch element ( 191 . 391 . 691 ) is temporarily open, is a specified threshold or higher. The electrical control device according to claim 1 or 2, characterized in that the first common connection ( 107 . 307 . 607 ) is directly connected to the ground circuit connected to the negative power supply terminal of the electrical control unit ( 100 . 300 . 600 ) and the second common connection ( 108 . 308 . 608 ) through the common ring bus ( 59 ), with which one ends of the many input sensors ( 40a - 40n . 60a - 60n ) are connected successively, the second common connection ( 108 . 308 . 608 ) with the grounding circuit of the electrical control unit ( 100 . 300 . 600 ) through the test switch element ( 191 . 391 . 691 ), and with a positive potential power supply circuit through the bias resistor (FIG. 195 . 395 . 695 ), a negative end of the test switch element ( 191 . 391 . 691 ) is connected to the ground circuit, a positive end of the second common terminal ( 108 . 308 . 608 ) through the common ring bus ( 59 ) and the first common connection ( 107 . 307 . 607 ) is connected to the ground circuit, and the abnormality detecting means ( 210 . 410 . 710 ) judges that the common ring bus ( 59 ) is interrupted when the positive end potential at a time when the test switch element ( 191 . 391 . 691 ) is temporarily open, is a specified threshold or higher. The electrical control device according to claim 1 or 2, characterized in that the first common connection ( 307 . 607 ) is directly connected to a ground circuit connected to the negative power supply terminal of the electric control unit ( 300 . 600 ) and the second common connection ( 308 . 608 ) through the common ring bus ( 59 ), with which one ends of the many electrical loads ( 30a - 30n . 50a - 50n ) or the many input sensors ( 40a - 40n . 60a - 60n ) are connected successively, the second common connection ( 308 . 608 ) with the grounding circuit of the electrical control unit ( 300 . 600 ) through the test switch element ( 391 . 691 ), and with a positive potential power supply circuit through the bias resistor (FIG. 395 . 695 ), a backflow prevention diode ( 392 . 692 ) between a connection point between the positive end of the test switch element ( 391 . 691 ) and the bias resistor ( 395 . 695 ) and the second common connection ( 308 . 608 ), a voltage dividing resistor ( 396 . 696 ) with the backflow prevention diode ( 392 . 692 ) is connected in parallel, the abnormality output means ( 410 . 510 . 710 . 810 ) a pair of elemental anomaly discriminating means ( 403b . 503b . 703b . 803b ) corresponding to a case where the test switch element ( 391 . 691 ), and a case where it is closed contains the elemental abnormality discriminating means ( 403b . 503b . 703b . 803b ) judges that the test switch element ( 391 . 691 ) is in a short circuit anomaly and can not be opened when the positive end potential at a time when an opening instruction to the test switch element (FIG. 391 . 691 ) is less than a specified value, and judges that the test switch element ( 391 . 691 ) is in an interruption anomaly and can not be closed when the positive end potential at a time when a closing instruction to the test switch element ( 391 . 691 ), a potential equivalent to a divided voltage by the bias resistance ( 395 . 695 ) and the voltage dividing resistor ( 396 . 696 ). The electrical control device according to claim 1 or 2, characterized in that the first common connection ( 607 ) is directly connected to a ground circuit connected to the negative power supply terminal of the electric control unit ( 600 ) and the second common connection ( 608 ) through the common ring bus ( 59 ), with which one ends of the many electrical loads ( 30a - 30n ) or the many input sensors ( 40a - 40n ) are connected successively, the second common connection ( 608 ) with the grounding circuit of the electrical control unit ( 600 ) through the test switch element ( 691 ), and with a positive potential power supply circuit through the bias resistor (FIG. 695 ), the test switch element ( 691 ) a current sensing resistor ( 694 ), a constant current control circuit ( 90a ) and an overheat shutdown circuit ( 90b ), and is composed of an N-channel field effect power transistor having a drain terminal as a positive terminal and a source terminal as a negative terminal Connection, the anomaly detection means ( 710 . 810 ) an elemental abnormality discriminating means ( 803b ), the constant current control circuit ( 90a ) a line control transistor ( 92 ) which is in accordance with a detection voltage of the current detection resistor ( 694 ) and is a negative feedback control circuit in which a conduction state of the power transistor ( 691 ) is controlled linearly such that a current which is connected to the power transistor ( 691 ) does not become a current that is not smaller than a control threshold current than a value that is greater than a specified reference current value corresponding to a rated current of the power transistor ( 691 ), and in an interruption state of the common ring bus ( 59 ) when an abnormality of a short-circuit to the power side occurs, wherein a wiring on one side of the second common terminal (FIG. 608 ) comes in mixed contact with a power line, an end-to-end voltage of the power transistor ( 691 ) is held at a value not smaller than a specified logical judgment voltage, the current detection resistor ( 694 ) is connected in series with a current mirror circuit in which a small current proportional to a drain current of the power transistor ( 691 ), the current sensing resistor ( 694 ) generates a first end-to-end voltage when the reference current to the power transistor ( 691 ), and generates a second end-to-end voltage when the control threshold current to the power transistor ( 691 ) flows, the first end-to-end voltage to a value not higher than a gate-off voltage of the line control transistor ( 92 ), the second end-to-end voltage is set to a value not smaller than a gate-on voltage of the conduction control transistor ( 92 ), the overheat shutdown circuit ( 90b ) is a comparison control circuit comprising a temperature sensing element ( 96 ) to a temperature in the vicinity of the power transistor ( 691 ) and a turn-off control transistor ( 93 ), and the power transistor ( 691 ) turns off when the temperature near the power transistor ( 691 ) exceeds a specified temperature, the elemental abnormality discriminating means ( 803b ) is a means for judging that if a positive terminal potential at a time when a closing instruction to the power transistor ( 691 ) as the test switch element is given, is a specified threshold or higher, the power transistor ( 691 ) is in an interruption anomaly and is not closed or in an overcurrent excitation state because of the short circuit abnormality to the power side. The electric control device according to claim 6, characterized in that said abnormality opening instructing means (16) 806 ) the elemental abnormality discriminating means ( 803b ), and the abnormality-opening instructing means ( 806 ) is a means working when the element abnormality discriminating means ( 803b ) the short circuit to the power side anomaly in the common ring bus ( 59 ) or the interruption anomaly of the test switch element ( 691 ) and the opening instruction to the test switch element ( 691 ) feeds. The electrical control device according to claim 1 or 2, characterized in that the first common connection ( 907 ) with a positive power supply connection of the electrical control unit ( 900 ) and to the second common connection ( 908 ) through the common ring bus ( 79 ) is connected externally, with which the one ends of the electrical loads ( 70a - 70n ) are connected successively, the second common connection ( 908 ) and the first common connection ( 907 ) with each other through the test switch element ( 991 ), the second common connection ( 908 ) with a negative power supply circuit of electrical control unit ( 900 ) by the bias resistor ( 995 ), the test switch element ( 991 ) in a position of the positive power supply terminal of the electric control unit ( 900 ) and the switch element is to connect the first and second common terminals ( 907 . 908 ) in response to a switching operation of the test switch element ( 991 ) to connect or disconnect the anomaly detecting means ( 922b ) Interrupt anomaly detection means for judging that the common ring bus ( 79 ) is interrupted when a potential of the second common terminal ( 908 ) at a time when the test switch element ( 991 ) is temporarily opened, a potential of the negative power supply circuit of the electric control unit ( 900 ) is equivalent. The electrical control device according to claim 1 or 2, characterized in that the first common connection ( 907 ) with a positive power supply connection of the electrical control unit ( 900 ) and the second common connection ( 908 ) through the common ring bus ( 79 ), with which one ends of the many input sensors ( 80a - 80n ) are connected successively, the second common connection ( 908 ) and the first common connection ( 907 ) with each other through the test switch element ( 991 ), the second common connection ( 908 ) with a negative power supply circuit of the electrical control unit ( 900 ) by the bias resistor ( 995 ), the test switch element ( 991 ) in a position of the positive power supply terminal of the electric control unit ( 900 ) and the switch element is to connect the first and second common terminals ( 907 . 908 ) in accordance with a switching operation of the test switch element ( 991 ) or disconnect the anomaly detecting means ( 922b ) Interrupt anomaly detection means for judging that the common ring bus ( 79 ) is interrupted when a potential of the second common terminal ( 908 ) at a time when the test switch element ( 991 ) is temporarily opened, a potential of the negative power supply circuit of the electric control unit ( 900 ) is equivalent. The electrical control device according to claim 1 or 2, characterized in that the first common connection ( 907 ) with a positive power supply connection of the electrical control unit ( 900 ) and the second common connection ( 908 ) through the common ring bus ( 79 ) is connected externally, with which the one ends of the electrical loads ( 70a - 70n ) or the many input sensors ( 80a - 80n ) are connected successively, the second common connection ( 908 ) and the first common connection ( 907 ) with each other through the test switch element ( 901 ), the second common connection ( 908 ) with a negative power supply circuit of the electrical control unit ( 900 ) by the bias resistor ( 995 ), a backflow prevention diode ( 992 ) between a connection point between a negative end of the test switch element ( 991 ) and the bias resistor ( 995 ) and the second common connection ( 908 ), a voltage dividing resistor ( 996 ) with the backflow prevention diode ( 992 ), the abnormality detecting means comprises a pair of element abnormality detecting means corresponding to a case where the test switch element (10) is connected in parallel. 991 ), and in a case where it is closed, the element abnormality discriminating means judges that the test switch element is in a short circuit abnormality and can not be opened when a negative end potential at a time when an opening instruction to the test switch element (FIG. 991 ), is a specified value or higher, and judges that the test switch element ( 991 ) is in an interruption anomaly and can not be closed when the negative end potential at a time when a closing instruction to the test switch element ( 991 ), a potential equivalent to a divided voltage by the bias resistance ( 995 ) and the voltage dividing resistor ( 996 ). The electric control device according to claim 1 or 2, characterized in that the element voltage monitoring circuit comprises a multi-channel AD converter ( 326 . 926 ), and the multichannel AD converter ( 326 . 926 ) a digital conversion value of a voltage proportional to a monitoring end potential of the test switch element ( 391 . 991 ) to the microprocessor ( 320 . 920 ). The electric control device according to claim 1 or 2, characterized in that said element voltage monitoring circuit includes first and second comparison judgment circuits ( 699a . 699b ), the first and second comparison judging circuits ( 699a . 699b ) Are circuits which have a voltage proportional to a monitoring end potential of the test switch element ( 691 ) with first and second threshold voltages V1 and V2 proportional to a power supply voltage of the electric control unit ( 600 ) and comparison results to the microprocessor ( 620 ), the first threshold voltage V1 is the voltage smaller than the power supply voltage and higher than a voltage obtained by dividing the power supply voltage by the bias resistor (FIG. 695 ) and the voltage dividing resistor ( 696 ), and the second threshold voltage V2 is the voltage which is smaller than the voltage obtained by dividing the power supply voltage by the bias resistance (FIG. 695 ) and the voltage dividing resistor ( 696 ). The electric control device according to claim 2, characterized in that said abnormality detecting means ( 410 . 510 ) a pair of addition / subtraction agents ( 409 . 509 ) corresponding to a case where the test switch element ( 391 ), and a case where it is closed, and abnormality occurrence determination means ( 408 . 508 ), the addition / subtraction agent ( 409 . 509 ) adds or subtracts a second variation value if the anomaly detection means ( 410 . 510 ) judges that there is an anomaly, and subtracts or adds a first variation value to perform an addition / subtraction correction on a current value memory so as to cancel each other when the abnormality detecting means (16) 410 . 510 ) judges that there is no anomaly, and the addition / subtraction correction with the first variation value in a specified normal side limit stops, if the judgment of no abnormality continues, the anomaly occurrence determining agent ( 408 . 508 ) is a means for generating an anomaly detection signal when a current value of the addition / subtraction means ( 409 . 509 ) exceeds a specified anomaly side limit by accumulating the first and second variation values, and the second variation value is the value greater than the first variation value and set to be the value smaller than a grant accumulation value than a difference between the anomaly side limit value and the normal side limit. The electric control device according to claim 2, characterized in that said abnormality detecting means ( 710 . 810 ) a pair of counting means ( 709 . 809 ) corresponding to a case where the test switch element ( 691 ), and in a case where it is closed, reset means ( 812 ) and anomaly occurrence determining agent ( 708 . 808 ), the counting means ( 709 . 809 ) is an error counter to increase or decrease a current value if the anomaly detection means ( 710 . 810 ) judges that there is an abnormality after the test switch element ( 691 ), the reset means ( 812 ) means for resetting the current value of the error counter to an initial value when the anomaly detecting means ( 710 . 810 ) judges that there is no anomaly after the test switch element ( 691 ) is opened or closed, and the abnormality occurrence determination means ( 708 . 808 ) is means for generating an anomaly detection signal when the current value of the error counter exceeds a specified anomaly side limit. The electric control device according to claim 13 or 14, characterized in that said abnormality processing means ( 518 . 818 ), the anomaly detection means ( 410 . 510 . 710 . 810 ), anomaly message means ( 515 . 815 ) and the abnormality reporting means ( 515 . 815 ) is a means for generating an abnormality notification instruction when the abnormality occurrence determination means ( 408 . 508 . 708 . 808 ) generates the anomaly detection signal. The electric control device according to claim 13 or 14, characterized in that said abnormality processing means ( 518 . 818 ), the anomaly detection means ( 410 . 510 . 710 . 810 ), anomaly history storage means ( 517 . 817 ) and the anomaly history storage means ( 517 . 817 ) Performs discrimination storage according to anomaly content when the anomaly occurrence determining agent ( 408 . 508 . 708 . 808 ) generates the anomaly detection signal, and between the interruption anomaly of the common ring bus ( 59 ) and the elemental anomaly to transfer and store them into a non-volatile data memory ( 329 . 629 ) by the microprocessor ( 320 . 620 ).

Images