GB2125577A

GB2125577A - Self monitoring system

Info

Publication number: GB2125577A
Application number: GB8223543A
Authority: GB
Inventors: Katsunori Oshiage; Akio Hosaka; Akito Yamamoto
Original assignee: Nissan Motor Co Ltd
Current assignee: Nissan Motor Co Ltd
Priority date: 1982-08-16
Filing date: 1982-08-16
Publication date: 1984-03-07
Also published as: GB2125577B

Abstract

A self-monitoring system for an automotive electronic control system such as an engine control system, an electronic anti-skid control system or electronic automatic transmission control system is adapted to check each segment of the electronic control system in order to detect faulty segments. To detect faulty segments, the self-monitor system checks inputs and outputs of the electronic control system. The checked data is stored in a memory which is not erased when the power supply is turned off. The self- monitoring system is associated with another automotive microcomputer which includes a display unit. The another automotive microcomputer is adapted to display the results of the checking operation of the self- monitoring system in response to a display request manually inputted from a manual unit to display identification of the fault segment and/or error condition thereof. The monitor can also be associated with a fault indicator, such as an LED, which is responsive to detection of error in any of the segments to turn on. <IMAGE>

Description

SPECIFICATION Electronic device with self-monitor for an automotive vehicle The present invention relates generally to an electronic device for an automotive vehicle, which device includes an electronic control device, various digital indicators, various vehicle condition sensors and so forth. More particularly, the invention relates to the electronic device with a self-monitoring capability for checking input and output conditions of respective electronic elements or segments.

Recently, it has become popularto employ a microcomputer in automotive vehicles to control vehicle operations such as engine control, anti-skid control, orto display various vehicle information such as warnings of abnormal conditions of vehicle devices. On the other hand, the automotive vehicle contains various devices such as the ignition system and the audio system which act as sources of noise which can possibly cause microcomputerfailure.

Furthermore, due to rather hard vibrations applied to the vehicle, the microcomputer itself or sensors serving as input devices can produce erroneous signals.

In the case of engine control, failure of the microcomputer operation influences fuel economy, engine performance and/or drivability and soon. Furthermore, in the worst case, failure ofthe microcomputer may cause uncontrollable engine operation resulting not only in damaging of engine but also in serious dangerto vehicle occupants.

In order to prevent the automotive electronic device from malfunctioning, it is, therefore, necessaryto sequentially or continuously check each ofthefunc- tions ofthe microcomputer to detect failure or error therein.

Conventionally, there are various self-monitoring automotive electronic devices. For example, British Prepublication No.2,035,633, published on June 18, 1980 discloses a malfunction-preventing system for a microcomputer system which detects an abnormal condition in the program execution to produce an alarm or reset signal to automatically restart the computer. The malfunction-preventing system is applicableto automotive engine control wherein the microcomputer is capable of returning to normal operation upon detecting a malfunction of a program for fuel parameter calculation, thereby keeping the automotive engine control in order. In addition, British Prepublication 2,046,964, published on November 19, 1980 and U.S.Patent No.4,339,801, issued on July 13, 1982, disclose an automatic control system for an automotive vehicle employing a microcomputer. In the control system, various check programs for checking each functional areas of the microcomputer and sensors for inputting control parameters have been provided to detect fault in in any of these function- als areas.

Furthermore, an external check system for factory use has been disclosed in Japanese Patent Prepublication No.56-141534 published on November 5, 1981. In this Japanese Patent Prepublication,there is disclosed an electronic engine control system with a checking unitforsensorsand actuators. The checking unit utilizes the microcomputer as a control unit and is releasably connected to the latter.The system comprises an engine assembly including an air intake, a throttle valve, an intake manifold, exhaust system and a combustion chamber, a sensor means determining an engine operating parameter and generating a sensor signal indicative of the determined engine operating parameter, a control means processing the sensor signal and generating a control signal corresponding to the engine operating parameter represented by the sensor signal, an actuator responsive to said control signal to control the ratio of energized period and deenergized period depending on the duty cycle of said control signal, a check unit cooperative withthecontrol meansforgeneratingacommand which causes the control means to affect the checking operation, the check unit including a selector means for selecting an item to be checked, which selector means is manuallyoperabletocausethecontrol means to affectthe checking operation forthe selected item, and a display means incorporated in the check unitfor displaying the result of the checking operation.

The present invention is to improve the convenience of checking of these previously developed automotive microcomputer monitor systems. One particular feature of the present invention is that the self-monitoring system forthe automotive electronic control system is associated with another microcomputer system with a display unitfor displaying the results ofthe check operation.

Therefore, it is an object ofthe present invention to provide a self-monitoring system for an automotive electronic control system, associated with another microcomputer system including a display unit in orderto conveniently indicate faulty segments and errant conditions on the display.

In orderto accomplish the above-mentioned and other objects, there is provided a self-monitoring system for an automotive electronic control system such as an engine control system, an electronic anti-skid control system orelectronicautomatictrans- mission control system, which self-monitoring system is adpated to check each segment of the electronic control system in order to detect faulty segments. To detect faulty segments, the self-monitoring system checks inputs and outputs ofthe electronic control system. The checked data is stored in a memorywhich is not erased when the power supply is turned off. The self-monitoring system is associated with another automotive microcomputerwhich includes a display unit.The other automotive microcomputer is adapted to display the results ofthe checking of the selfmonitoring system in response to a display request manuallyinputtedfrom a manual unitto identifythe faulty segments and/or errant conditions. The selfmonitor is also associated with a fault indicatorwhich is responsive to detection of error in any ofthe segmentstoturn on.

Fig. is a schematic block diagram ofthe first embodiment of the self-monitoring system according to the present invention; Figs. 2 to 4show respectively indicators to be applied in the self-monitoring system of Fig. 1; Fig. 5 is a schematic block diagram ofthe second embodiment ofthe self-monitoring system ofthe present invention; Figs. 6A and 6B are overall illustrations of an electronic engine control system associated with a vehicle information system including another microcomputer; Fig. 7 is a block diagram ofthe electronic control system of Fig. 6; Fig. 8 is a chart of memory addresses used to store results of check operation in the self-monitoring system of Fig. 7;; Fig. 9 is a timing chartforthe check result signals of the memory addresses of Fig. 8; Fig. is a schematic circuit diagram of an engine coolanttemperature sensor in the electronic engine control system of Fig. 6; Fig. 11 is a flowchart of a engine coolant tempera- ture sensor check program to be executed in the electronic engine control system; Fig. 12 is a schematic block diagram of the vehicle information system of Fig. 6; Fig. 13 is a schematic block diagram of the third embodimentthe self-monitoring system ofthe present invention; and Fig.14 is a schematic block diagram of the fourth embodiment ofthe self-montitoring system of the present invention.

In the embodiment shown in Fig. 1, the electronic device generally comprises an engine control system 1000 and an associated vehicle information system 2500. The engine control system 1000 includes various sensors and detectors such as an engine speed sensor, an airflow meter, and various temperature sensors, for providing control parameters, a control unit and actuators for controlling various engine operations such as fuel metering, idle airflow, and spark ignition timing. The engine control system further includes a fault monitorfordetecting faults in the control system. The fault monitor checks the operation ofthe control unit and the inputs from the sensors. The results of the check operation in the fault monitorareconductedtoa non-volatile memory 1450 which is associated with the engine control system 1000.The check operation results are also fed to a display 1900 for control system fault indication through a data line 2022. On the other hand, the vehcile information system 2500 in the shown embodiment is adapted to compute travelling distance, travelling time, average vehicle speed and so on in orderto display information relatedtothe currentvehicle trip. The vehicle information system 2500 is associated with an external input unit 2540 such as keyboard and a display 2520 for information display. The vehicle information system 2500 is further associated with a non-volatile memory 2530 for storing the computed results.

In the shown embodiment, the non-volatile memories may be Metal Nitride Oxide Silicon (MNOS), Erasable Programable ROM (EPROM) or CMOS. In addition, the display can comprise various elements for indicating or warning when the system or sensors malfunctions. Figs. 2 to 4 show examples of the display 1900.

In Fig. 2, a light-emitting diode 1902 is used as an indicator in the display. The LED 1902 is connected to the fault monitor in the engine control system 1000 through the data line 2022 and via a resistor R1 and a transistorTr.ThetransistorTr, is turned on in response to a fault signal which is produced bythe fault monitorwhen the control unit or a sensor malfunctions. By turning on transistorTrl, powerVcc is applied to the LED 1902 which emits an indication light. Fig. 3 shows another example in which an indicator lamp 1920, a relay switch 1910 and a transistorTr2 consistute the display 1900.As in the foregoing example, the transistorTr2 is connected to the fault monitor in the engine control system 1000 via the data line 2022 and a resistor R3. The transistor is activated bythefault signal. This way, the relay switch 1910 is activated to apply powerVccto the lamp 1920.

The other example is shown in Fig. 4, in which a buzzer 1930 is used forfault indication. The buzzer 1930 is activated in conjunction with the transistorTr3 which is responsive to the fault signal from the fault monitor.

Returning to Fig. 1, the engine control system 1000 and the vehicle information system 2500 are connected to each othervia a data transmission line 2600.

The vehcile information system 2500 produces a read command when a read request is inputted to the input unit. The read command is fed to the engine control system through the data transmission line 2600 to read the data out of the non-volatile memory 1450.

The read request is inputted to the input unitwhen the display 1900 indicates an error in the engine control system 1000.

The data from the non-volatile memory 1450 is transferred to the vehicle information system 2500 via thefault monitor in the engine control system 1000 and the data transmission line 2600. The vehicle information system 2500 distinguishes which sensor or element ofthe control unit in the engine control system is malfunctioning. Based on the detection of the faulty element or sensor,the vehicle information system 2500 feeds a fault display signal to the display 2520. Therefore, according to the identification by the fault display signal and depending on the fault display signal value, the display 2520 indicates the faulty sensor or element and the degree of error therein.

It should be appreciated thatthe fault monitor outputs data in response to the read command and holds the check program results until the next read command is received. In addition, the fault monitor connected in this manner to the vehicle information system according to the present invention is applicable not onlyforthe foregoing engine control system but also for electronic control systems for automatic power transmission orforanti-skid control and so forth.

Referring to Fig. 5, there is shown a second embodiment in which a plurality of digital or electronic control systems 2700,2800... are connected to the vehicle information system 2500. As shown in Fig. 5, respective digital control systems 2700,2800... are connected to the vehicle information system 2500 via respective data transmission lines 2610,2620... and have non-volatile memories 2710,2810... In addition, the digital control systems 2700,2800... are respectively connected to a fault display or indication 1900 via data lines 2720,2820... and via an OR gate 1940.

Similarly to the foregoing first embodiment, each of the digital control systems 2700,2800... includes a fault monitorfordetecting faults in one of the elements or segments thereof and producing fault indication signal to be fed to the fault display 1900 via the OR gate 1940. The fault monitor also feeds check data tothe non-volatile memory 2710,2810.. for storage. This way, the fault display 1900 indicates that some part of one of the digital control systems is malfunctioning. The input unit 2540 is adapted to input a requestfor display on the display 2520 of information aboutfaults in the digital control system in the mannersimilarto the foregoing first embodi ment.

Here, the electronic control system ofthe present invention will be illustrated in greater detail with reference to Figs. 6 and 7. In Fig. 6, there is illustrated the electronic engine control system, so-called Electronic Concentrated Control System (ECCS) for a 6-cylinder reciprocating engine known as Datsun L-type engine. In the shown control system, fuel injection, spark ignition timing, exhaust gas recirculation rate and engine idling speed are all controlled.

Fuel pressure is controlled by controlling fuel pump operation.

In Fig. 6, each ofthe engine cylinders 12 of an internal combustion engine 10 communicates with an air induction system generally referred to by reference numeral 20. The air induction system 20 comprises an air intake duct 22 with an air cleaner 24forcleaning atmospheric air, an airflow meter26 provided downstream of the air intake duct 22 to measure the amount of intake airflowing therethrough, a throttle chamber 28 in which is disposed a throttle valve 30 cooperatively coupled with an accelerator pedal (not shown) so asto adjust the flow of intake air, and an intake manifold 32. The airflow meter 26 comprises a flap member25and a rheostat 27. The flap member 25 is pivotably supported in the air intake passage 20 so that its angular position varies according to the air flow rate.Specifically, the flap member 25 rotates clockwise in Fig. 6 as the airflow rate increases. The rheostat 27 opposes the flap member 25 and generates an analog signal with a voltage level proportional to the intake air flow rate. The rheostat 27 is connected to an electrical power source and its resistance value is variable in correspondence to variation of the angular position ofthe flap member 25 depending in turn on variation ofthe airflow rate.

Athrottle anglesensor31 is associated with the throttle valve 30. The throttle angle sensor 31 comprises a full throttle switch which is turned on the throttle valve is open beyond a given open angle and an idle switch which is turned on when the throttle valve is open less than a minimum value.

Fuel injection through the fuel injectors 34 is controlled by an electromagnetic actuator (not shown) incorporated in each fuel injector. The actuator is electrically operated by the fuel injection control system which determines fuel injection quantity, fuel injection timing and soon in correspondence to engine operating conditions determined on the basis of measured engine operation parameters such as engine load, engine speed and soon. It should be noted that, although the fuel injector 34 is disposed in the intake manifold 32 in the shown embodiment, it is possible to locate it in the combustion chamber 12 in a per se well known manner.

An idle air intake passage 44 is provided in the air induction system 20. One end 46 of the idle air intake passage 44 opens between the airflow meter 26 and the throttle valve 30 and the other end 48 opens downstream ofthe throttle valve 30, near the intake manifold 32. Thus the idle air intake passage 44 bypasses the throttlevalve 30 and connects the upstream side ofthe throttle valve 30 to the intake manifold 32. An idle air control valve, generally referred to by reference numeral 50, is provided in the idle air intake passage 44. The idle air control valve 50 generally comprises two chambers 52 and 54 sepa- rated by a diaphragm 56.The idle air control valve 50 includes a poppetvalve 58 disposed within a port 57 in a mannerthat it is movable between two position, one opening the valve to establish the communication between the respective upstream and downstream portions 43 and 45 ofthe idle air intake passage 44 and the other closing the valve to blockthe communication therebetween. The idle air intake passage 44 is thus separated by the idle air control valve 50 into two portions 43 and 45 respectively located upstream and downstream of the port 57 ofthe idle air control valve.

The poppet valve 58 has a stem 60 which is secured to the diaphragm 56 so asto cooperatively move therewith. The diaphragm 56 is biased downwards in the drawing, so as to release the poppet valve 58 from a valve seat 62, by a helical compression coil spring 64 disposed within the chamber 52 ofthe valve means 50.

Thereby, the idle air control valve 50 is normally opened, and normally communicates the portions 43 and 45 of the idle air intake passage 44to one another, via its valve port 57.

The chamber 54 ofthe idle control valve 50 is open to the atmosphere. On the other hand, the chamber 52 ofthe idle air control valve 50 communicates through a vacuum passage 67 with a pressure regulating valve 68 serving as the control vacuum source. The pressure regulating valve 68 is separated generally into two chambers 66 and 70 by a diaphragm 72. The chamber 66 of the pressure regulating valve 68 also communicates with the downstream side of the throttle valve 30 through the vacuum passage 69 so as to reflectthe level ofthe intake vacuum. The chamber 70 is open to the atmosphere in a per se well known manner. To the diaphragm 72 is secured a valve member 76 which opposesavalveseat78provided atthe end of the passage 69. In the chambers 66 and 70 there are respectively disposed helical compression springs 71 and 73. The position at which the springs 71 and 73 are generally of equal spring pressure is referred to as the neutral position ofthe diaphragm 72. It will be noted that the chamber 66 can also be connected with a exhaust-gas recirculation (EGR) rate control valve 116 which recirculates a fraction ofthe exhaust gas flowing through an exhaust gas passage and exhaust gas recirculation passage to the intake manifold 32.

The diaphragm 72 is moved upwards or downwards by the change ofthe balance between the vacuum in the chamber 66 and the atmospheric pressure introduced into one chamber 70. By this movement of the diaphragm 72, the valve member76 is moved toward and away from the valve seat 78.

Another chamber 80 is also defined in the control valve 68, which chamber 80 communicates with the chamber66 through a passage 82. The passage 82 is connected with the chamber 52 ofthe idle air control valve 50through a control vacuum passage 84. On the other hand, the chamber 80 also communicates with the air intake passage 20 upstream ofthe throttle valve 30 through a passage86soasto be exposed to atmospheric air. The chamber 80 is partitioned by a diaphragm 88 on which a magnetic valve member 90 is secured. The magnetic valve member 90 opposes a valve seat 92 formed at the end of the passage 82.

Also,the magnetic valve member90 opposes an electromagnetic actuator 94, the duty cycle ofwhich is controlled buy a control pulse signal generated buy a controller 100. Depending on the amount of atmospheric air introduced into the passage 82 from the chamber 80, which is determined by the duty cycle of the electromagnetic actuator94which in turn is determined by the duty cycle ofthe control pulse signal, the control vacuum for controlling the opening degree ofthevalve member 58 ofthe idle air control valve 50 is regulated and supplied via the control vacuum passage 67.

Spark ignition plugs 99 are inserted into respective engine cylinders 12 to effect spark ignition at a controlled timing. Each ignition plug 99 is connected to a distributor 98 which receives high voltage power from an ignition coil 96. The distributor 98 is controlled by a spark advancer which advances or retardsthe spark ignition timing depending on engine operating conditions.

An exhaust system forthe engine exhaust gas comprises an exhaust manifold 100, an exhaust duct 102, an exhaust gas purifier 104, a muffler 106 and a exhaustventl08.The exhaust manifold 100 opens toward the engine cylinders to draw engine exhaust gas therefrom. The exhaust duct 102 communicates with the exhaust manifold 100 and includes the exhaust gas purifier 104 and the muffler 106. In the shown embodiment, the exhaust gas purifier 104 comprises a purifier housing 110 and a three-way catalytic converter 112 disposed within the purifier housing 110. Thethree-way catalytic converter 112 oxidizes monoxide carbon CO and hydrocarbons HC and reduces oxides of nitrogen NOx.

An exhaust gas recirculation passage 114, which is referred hereinafter as the EGR passage is connected to the exhaust duct 102 upstream oftheexhaustgas purifier 104. The EGR passage 114 communicates with the intake manifold 32 via an exhaust gas recirculation rate control valve 116 which is hereinafter referred as the EGR control valve. The EGR control valve 116 generally comprises a valve member 118 with valve seat 120 which is provided at the end ofthe EGR passage 114 adjacent the intake manifold 32. The valve member 118 is incorporated with a vacuum actuator 122 and is cooperatively connected with a diaphragm 124 ofthe vacuum actuator 122 via a stem 126. The diaphragm 124 divides the interior of the vacuum actuator 122 into two chambers 128 and 130.

The chamber 128 communicates with the EGR passage 1 14via a passage 132 and the chamber 130 communicates with the regulating valve 68 via a control vacuum passage 134. A set spring 133 for biassing the diaphragm 124 is disposed within cham- ber 130. The control vacuum passage 134 is connected to a passage 136 connecting the vacuum chamber 66 with a chamber 138. One end ofthe passage 136 faces a valve member 140 secured on a diaphragm 142.A valve seat 143 is provided at the end of passage 136 to allow the valve member 140 to selectably seal passage 136. The valve member 140 has a stem portion 144 inserted into an electromagnetic actuator 146.

The duty cycle of the electromagnetic actuator 146 is controlled to move the valve member 140 with respect to the valve seat 143 in response to a control signal generated by a controllerto be described later.

According to the instantaneous position ofthe valve member 140, intake air is admitted to the passage 136 via the passage 86 at a controlled rate. The intake air admitted into the passage 136 is mixed with the intake vacuum admitted from intake passage 20 downstream ofthethrottle valve 30 via the vacuum induction passage 69 into the vacuum chamber 66, so as to produce the control vacuum. The control vacuum thus produced is conducted to the chamber 130 ofthe actuator 122via the control vacuum passage 134 to control the operation of the EGR control valve 116. Thereby, the exhaust gas is admitted into the intake manifold art a controlled rate.

An air regulator 150 is provided nearthethrottle chamber 28 for regulating the intake air flowing through the throttle chamber. Also, a carbon canister 152 is provided. The carbon canister 152 retains hydrocarbon vapor until the canister is purged by air via the purge line 1 54to the intake manifold when the engine is running. When the engine is idling, the purge control valve 156 is closed. Only a small amount of purge airflows into the irtake manifold through the constant purge orifice. As the engine speed increased, the ported vacuum raises higher, the purge control valve 156 opens and the vapor is drawn into the intake manifold through both the fixed orifice and the constant purge orifice. The carbon canister 152 can trap hydrocarbons duets the chemical action of the charcoal therein.

As shown in Fig. 6, the controller 1001 generally comprises a microcomputer and controls a fuel injection system, a spark ignition system, an EGR system and engine idling speed. The controller 1001 is connected to an engine coolant temperature sensor 220. The engine coolanttemperature sensor220 is usually disposed within a coolant chamber 222 in an engine cylinder block 224 in orderto measure the engine coolant temperature. The engine coolant temperaturesensor220 produces an engine coolant temperature signal Tw indicative of the measured engine coolanttemperature. The engine coolant temperature signal Tw is an analog signal with a voltage value proportional to the determined engine coolanttemperature and is converted into a digital signal buy a shaping circuit 1100 to adapt itfor use by the digital controller 1001.

Generally speaking, the engine coolanttemperature sensor 220 comprisesathermistorfitted onto a thermostat housing 226 provided in the coolant circulation circuit.

A crank angle sensor 230 is also connected to the controller 200. The crank angle sensor 230 generally comprises a signal disc232 securedto a crankshaft 234for rotation therewith, and an electromagnetic pick-up 236. The crank angle sensor 230 produces a crank reference angle signal and a crank position angle signal. As is well known, the crank reference angle signal is produced when the engine piston reachesthetopdead center and the crank position angle signal is produced per a given crank rotation angle, e.g., per 1 degree of crank rotation.

Atransmission neutral switch 240 is connected to the controller 200. The transmission neutral switch 240 is secured to the transmission 242 to detect the neutral position thereof and produces a neutral signal when the transmission is in the neutral position.

Also, a vehicle speed sensor 250 is connected to the controller via a vehicle speed counter 204. The vehicle speedsensor250 is located nearavehiclespeed indicator 252 and produces a pulse signal as a vehicle speed signal having a frequency proportional to the vehicle speed.

In the exhaust duct 102, there is provided an exhaust gas temperature sensor 256 in the exhaust gas purifier housing 210. The exhaust gas temperature sensor 256 determines the exhaust gas temperature and produces an analog signal as an exhaust gas temperature signal, which has a voltage value proportional to the determined exhaust gas temperature. The exhaust gas temperature signal is supplied to the controller 200 via the multiplexer 205 and the analog-digital converter 206 in which the exhaust gas temperature signal is converted into a digital signal suitable for use by the microcomputer 207. The digital signal indica- tive ofthe exhaust gastemperature has a frequency corresponding to the voltage value of the exhaust gas temperature signal.On the other hand, an exhaust gas sensor 254 such as oxygen sensor, hereinafter simply referred as the 2 sensor 254, is provided in the exhaust duct 102 upstream of the opening ofthe EGR passage 114. The 2 sensor 254 determines the concentration of oxygen in the exhaust gas. The output of the 2 sensor goes high when the determined oxygen concentation is more than the ratio 1:1 in relation to the other exhaust gas components and goes low when the oxygen concentration is less than the ratio 1:1. The output ofthe 2 sensor is inputted to the microcomputer 207 via the multiplexer 205 and the analog-digital donverter 206 as a A-signal.

Further, the airflow meter 26 is connected with the controller 200. The reostad 27 ofthe airflow meter 26 outputs an analog signal having a signal value proportional to the determined intake airflow rate.

The throttle angle sensor 31 is also connected with the microcomputer 207 to feed the outputs ofthe full throttle switch and the idle switch.

As shown in block forum in Fig. 6, the microcomputer 207 further connected with an air-conditioner switch 260, a starter switch 262, an ignition switch 263 and a batteryvoltagesensor264.The air-conditioner switch 260 turns on when the air-conditioner is in operative position. Also, the starter switch 262 is turned on when the starter is operating. The battery voltage sensor 264 determines the vehicle battery voltage and produces an analog signal having signal value proportional to the determined batteryvoltage.The batteryvoltage signal is fed to the microcomputer 207 via the multiplexer 205 and the analog-digital converter 206.

In the shown embodiment, the controller 200 controls the fuel injection amount and timing, the spark ignition timing, EGR rate and engine idling speed.

The 2 sensor signal from the 2 sensor 254 is used to control the fuel injection quantity under stable engine conditions as determined with reference to the engine speed from the engine speed counter 203, the throttle valve angle position detected by theth rottle angle sensor 31, the vehicle speed from the vehicle speed counter 204 and soon. Under stable engine conditions,thefuel injection quantity is feedback controlled on the basis of the 2 sensor signal so that the air/fuel ratio can be controlled to the stoichiomet ricvalue.This method of fuel injection control is called A-control.If the engine is running under unstable conditions, the fuel injection quantity is generally determined on the basis of engine speed and intake air flow rate,the latter of which can be replaced by intake vacuum pressure downstream ofthe throttle valve.

Under unstable engine conditions, the basic fuel injection quantity determined on the basis of engine speed and airflow rate is corrected according to other parameters such as air-conditioner switch position, transmission gear position, engine coolant tempera- ture and soon.

The spark ignition timing is generally controlled on the basis of engine speed, airflow rate, engine coolant temperature and soon, which effect to varying degrees the advance and retard of the spark advance.

The EGR control is effected on the basis of engine speed, engine coolant temperature, ignition switch position and battery voltage. Based on the engine speed and the basic fuel injection quantity determined according to engine speed and engine load, the recirculation rate ofthe exhaust gas is determined.

The duty cycle of the EGR control valve is thus controlled in accordance with the determined recirculation rate.

The idle engine speed is controlled predominantly on the basis of engine coolant temperature and engine load condition. Under relatively cold engine conditions, the engine speed is maintained at a predetermined value, determined with reference to the engine coolant temperature, resulting in fast idle operation. In the normal temperature range, the engine speed is feedback-controlled on the basis ofthe difference between the actual engine speed and a reference engine speed determined on the basis of engine temperature, engine load condition and other parameters.

As shown in Fig. 6A and 6B, the controller 1000 also includes a fault monitor 1002. In practice, the fault monitor 1002 isa program stored in a memory 1004 and executed in a central processing unit (CPU) 1006.

The controller 1000 is connectable with an external check unit 2000 via a check connector 2010. The check unit 2000 signals the controller 1000 to make the fault monitor operative in order to check a series of check items identified by inputs. The external check unit 2000 has been illustrated in Japanese Patent Prepublication No.56-141534 published November 5, 1981.

Disclosure in this Prepublication is hereby incorporated by reference. The controller 1000 is also connected to the vehicle information system 2500 via a connector 2510.

The fault monitor 1002 ofthe controller 1000 is connected to a fault indicator 1008 via line 180. The fault monitor 1002 produces a fault signal Sfwhen an error occurs in any one ofthe check items. The fault indicatorturns on in response to the fault signal Sf to indicate malfunction of the engine control system. The fault monitor 1002 is associated with the non-volatile memory 1450 as setforth previously. Upon execution ofthe check program, check data from a series of check items are stored in the non-volatile memory 1450. When the fault indicator 1008 is turned on, the input unit 2540 of the vehicle information system generates and outputs the read request command to the engine control system in orderto read the check data out of the non-volatile memory 1450.On the basis ofthe retrieved check data, the vehicle information system 2500 feeds the fault display sig nal to the display 2520 in order to identify the specific faulty segment and error condition on the display.

Fig. 7 shows the detail ofthe controller 1000 of Fig.

6. The crank angle sensor 230, the vehicle speed sensor 250, the throttle angle sensor 31, the air- conditioner switch 260, the transmission neutral switch 240, the starter switch 262, the ignition switch 263, the airflow meter 26, the engine coolant temperature sensor 220, the exhaust gas sensor 254, the exhaust gas temperature sensor 256, the battery voltage sensor 264 are all connected to an input interface 1200 of the digital controller 1000 via a signal shaping circuit 1100. The shaping circuit 1100 eliminates noise in the sensor signals, absorbs surge voltage and shapes respective sensor signals. The interface 1200 includes a crank reference signal counter, an engine speed counter, a vehicle speed counter and analog-to-digital (A/D) converter with a multiplexer.

The crank reference signal counter and the engine speed counter are both connected to the crank angle sensor 230 to receive therefrom the crank reference anglesignal and the crank position angle signal respectively. The vehicle speed counter is adapted to countthe pulses ofthe vehicle speed sensor signal to produce a digital value representative ofthe vehicle speed. The airflow meter 26, the engine coolant temperature sensor 220, the exhaust gas sensor 254, the exhaust gas temperature sensor256,the battery voltage sensor 264 all produce analog signals and are connected to the anaiog-to-digital converter so that the corresponding analog signals can be converted to corresponding digital signals suitable for use in the digital controller 1000.

The interface 1200furtherincludes a clock gener atorfor controlling interface operations on a timesharing basis, and a registerfortemporarily storing the inputted sensor signal values.

As usual,the digital controller 1000 includes a central processing unit (CPU) 1300, a memory unit 1400 including random access memory (RAM) 1430 and programmable read-only memory (PROM) 1420, and an output interface 1500. As shown in Fig. 7, the memory unit 1400 also includes non-volatile memory 1450, a holding memory 1440 and a maskable ROM 1410. The CPU 1300 is connected to a clock generator including a crystal oscillator 1310 for controlling CPU operation on an incremental time basis. The CPU 1300 is also connected to each segment ofthe memory unit 1400,the register of the interface 1200 and the output interface 1500 via bus line 1320.The CPU 1300 executes programs stored in the maskable ROM 1410 and the PROM 1420 with input data read out from the register in the interface 1200. The results of execution of the programs are transferred to the output interface 1500through the bus line 1320 for output.

As set forth previously, the maskable ROM 1410 holds predetermined programs and initial program data. The PROM 1420 also stores programs and program data which are chosen initially depending upon the model of the vehicle, the type of engine. The RAM 1430 can renewably store data during execution of the programs and hold the results to be outputted.

The contents ofthe RAM 1430 are cleared when power isturned offvia the ignition switch. Temporary data to be stored even while the power is off are stored in the holding memory 1440. As stated previously, the non-volatile memory 1450 also stores dataforthefault monitor. The contents ofthe non-volatile memory 1450 are maintained even if the ignition switch is turned off.

The controller 1000 also includes an operation timer circuit 1350forcontrolling arithmetic operation, execution of programs and initiates interrupts of the CPU. The operation timer 1350 includes a multiplyer 1351 for high-speed arithmeticoperation, an interval timer for producing interrupt requests and a free-run counterwhich keeps track ofthe transition intervals between one engine control program and another in the CPU 1300 and the starting period of execution mode, so asto control the sequential execution of a plurality of control programs.

The output interface 1500 includes an output register which temporarily stores the output data and a signal generator which produces control signals either with duty cycles defining the results of execution ofthe control programs in the CPU 1300 or with on/offswitching characteristics.

The signal generator of the output interface is connected to a drive circuit 1600. The drive circuit 1600 is a kind of amplifierfor amplifying the output signals from the output interface and supplying the control signals to the actuators, such as fuel injectors 34, the actuator94forthe idling speed control valve, and the actuator 146 for EGR control valve. The drive circuit 1600 is also connected to the display or indicator 1900 for fault indication, the external check unit 2000 and the vehicle information system 2500. The drive circuit 1600 is connected to the external check unit 2000 via the connector 2010 and data transmission lines 2023, 2022 and 2026. On the other hand, the drive circuit 1600 is connected to the vehicle information system 2500 via the connector 2510 and the data transmission lines 2521,2522 and 2523.

A back-up circuit 1700 is connected to the shaping circuit 1100 to receive data therefrom. In practice, the back-up circuit 1700 is connected to data lines to receive the crank reference angle signal, the engine temperature signal, starter switch onioffsignal and the throttlevalve close signal. In turn, the back-up circuit 1700 is connected to the data lines 1755, 1752 and 1751 via data lines 1713,1712, 1711 and 1701 and a switching circuit 1750 which is, in turn, connected to the output interface 1500 via data lines 1515, 1512 and 1511. On the other hand, the drive circuit 1600 is connected via the actuator line 2026 to the back-up circuit 1700. The back-up circuit 1700 is responsive to the fault indication signal from the drive circuit 1600 to produce a switching signal.The switching circuit 1750 normally establishes communication between the data lines 1513,1512 and 1511 and the lines 1755,1752 and 1751 for normal engine control operation. The switching circuit 1750 is responsive to the switching signal from the back-up circuit 1700 via the data line 1701toconnectthedatalines1713,1712and1711 with the data lines 1755,1752 and 1751 to control the fuel pump 260, the spark advancer 262 and the fuel injectors 34, respectively.

A power circuit 1800 is connected to a vehicle battery 262 via a power switch acting as a main power source to distribute powerVcotothe input interface 1200, CPU 1300, memory 1400,the output interface 1500 and so forth. The power circuit 1800 is also connected to the back-up circuit 1700. The power circuit 1800 produces a signal indicative ofthe ignition switch on/off positions and reset and halt signals for resetting the controller and temporarily disabling the controller 1000 respectively. The ignition on/off signal from the power circuit is fed to the input interface 1200 via a line 1830. On the other hand, the reset signal and the halt signal are fed to the bus-line 1320 via lines 1840 and 1850.The power circuit 1800 also supplies powerto the input interface, the shaping circuit 1100, the drive circuit 1600 and the switching circuit 1750 via lines 1860 and 1870. The power circuit 1300 is also connected to an auxiliary power source which bypassesthe power switch to supply power to holding memory 1440 even when the main powerewitch is turned off.

In the engine control system,the PROM 1420 stores various control programeforcontrolling engine op- eration. In addition, the PROM M 1420 stores the check program forthefault monitor as one of its background jobs. The check program is executed whenever the CPU 1300 is not busy with the engine control programs. Fig. shows a formatforstoring result data during execution ofthe check program in the nonvolatile memory 1450. In the shown embodiment, each column ofthe non-volatile memory consists of 1 byte.Each column has sections 1451,1452 and 1453 which indicate respectively a faulty segment, in 2 bits, or MODE-I section indicating broken wiring in 3 bits, or MODE-II section indicating shorting in 3 bits. The non-volatile memory 1450 has a plurality of addresses allocated in the above manner and each corresponding to on ofthe check items. The check result data in the non-volatile memory 1450 are read out in responseto a requestfrom the input unit 2540 of the vehicle information system 2500 to provide indication or display data to the vehicle information system. At the same time, ifthe fault is in some segment or segments, the fault signal is fed to the display or indicator 1900.

On the other hand, in orderto check each check item, particularlyfor accurately checking input and output signals ofthe engine control system 1000, it is necessary to eliminate influence due to noise created by various vehicle devices, such as the ignition system. Therefore, duration of the checking operation for each check item must be long enough to compen sateforthe influence of noise.

In the check program, the crank angle signals from the crank angle sensor 230, the engine coolant temperature signal from the engine coolanttempera turesensor220,the airflow metersignal from the air flowmeter26andsoforth are checked as input signals. On the other hand, the idle air control signal, the EGR control signal, the fuel injection control signal and so forth are checked as output signals. There are various ways to perform the checking of input and output signals. For example, the foregoing British Prepublication No.2046964 discloses a check program for completely checking the electronic controller.

As an example, the checking of the engine coolant temperature signal of the engine coolant temperature sensor will be described hereinbelow with reference to Fig. 9to 11 .As shown in Fig. 10, the engine coolant temperature sensor 220 comprises a thermistor inserted in the engine coolant passage 220 around the engine cylinder 224. As is well known, the resistance value ofthethermistor220 acting as the engine coolant temperature sensor is variable in accordance with the engine coolant temperature. Therefore, by application of a constant voltage Vs to the thermistor 220 via divider resistors R1, R2 and R3, the variation of the resistance value of the thermistor is reflected in the voltage at a terminal 221.When the engine coolant tempernturn sensor 220 or the sensor circuit shortcircuits,the output voltage atthe terminal 221 becomes Ov. If the sensor or the sensor circuit breaks, a votage Vmax which is derived from the constant voltage Vcc by the resistors R2 and R3 is applied at the terminal 221. Therefore, ifthevoltageattheterminal 221 is maintained at Ov orVrnaxfor a given period t3 after cranking, shorting or breaking of the engine coalant temperature sensor orthe sensor circuit is detected. In addition, it is impossibleforthe engine coolanttemperatureto change abruptly, e.g. to vary from +80' to -300C within a few seconds.Therefore, if such a significant change occurs in the sensor signal value, this can be easily recognized as an abnormal condition of the engine coolant temperature sensor or the sensor circuit. Furthermore, ifthesensorsignal value indicates an abnormal temperature range even after a relatively long warm-up period, it is possible that'the sensororthe sensor on the sensor circuit has shorted or broken.

In n the execution of the engine coolanttemperatu re sensor check program, the resultofchecking is inputted and stored in the non-volatile memory 1450 wheneverthe check program is executed. In the shown embodiment, the Memory bit-groups MODE-1 and MODE-2 are respectively adapted to store counts of shorting and breaking of the sensor or sensor circuit as described below. The stored counts in the areas of the non-volatile memoryforstoring MODE-1 and MODE-2 are incremented by one each time the abnormal signals are produced. The count in each of the bit-groups MODE-1 and MODE-2 is compared with a predetermined value. When the count in MODE-1 or MODE-2 reaches the predetermined value, the error condition group of two bits is incremented by one, as shwon in Fig. 9.

The predetermined valueto be compared with the count in MODE-1 and MODE-2 is determined depending on the characteristics and importance ofthe check item. In the case ofthe engine coolanttemperature sensor, the sensor and sensor circuit consist of rather static elements which are not likely to produce an engine coolanttemperature signal with an abnormal value. In addition, the temperature of the engine coolant a n not va ry can notvaryabruptly. Therefore, in the shown embodiment, when the count in MODE-1 orMODE-2 reaches 2, the error counter address is incremented by I and the count of MODE-1 or MODE-2 is cleared, as shown in Fig. 9.

Referring to Fig. 11 ,there is illustrated a check program for checking the engine coolanttemperature sensorvalue. As setforth previously, the check programs are stored in PROM 1420 as background jobsforthe controller. Therefore,theengine coolant temperature sensor check is carried out in a given order relative to the other check programs.

In BLOCK-1,immediate after starting execution, we checkwhetherthe engine is running. Ifthe engine is running, the driving period t since cranking is compared with a predetermined period t5 at BLOCK-2. If driving period t exceeds the predetermined period tS, then, the engine coolanttemperature signal value Tw is checked at BLOCK-3. If the engine coolanttemperature signal Tw is measured to be lower than -30"C, MODE-2 in the non-volatile memory 1450 is incremented by 1, at BLOCK-4.Thereafter, at BLOCK-S, subroutine for error count is executed. In this sub routine,the count of MODE-1 in the non-volatile memory 1450 is read out and compared with a reference value, i.e. 2, at BLOCK-16.If the count of MODE-1 is equal to the referencevalue,thefault signal is fed to the indicator or display 1900forfault indication, at BLOCK-17. Thereafter, the error count area is incremented by 1, at BLOCK-1 8 and the count in the MODE-1 is cleared at BLOCK-1 9. the result at BLOCK-16 is NO, then the count of MODE-2 is compared at BLOCK-20to a reference value, i.e. 2. If the count of MODE-2 is equal to 2, the fault signal is produced to turn the indicator 1900 on at BLOCK-21.

Afterthis, as before, the error count area is incremented by 1 at BLOCK-22 and the count ofthe MODE-2 is cleared at BLOCK-23. After BLOCK-17 or BLOCK-23 or if the result at BLOCK-20 is NO, execution returns to main check program at BLOCK-6.

If any of decisions at BLOCK-1, BLOCK-2, or BLOCK-3 is NO, execution of the check program jumps to BLOCK-6. At BLOCK-6, the engine coolant temperature signal value TWNEW temporarily stored in the register 1214 of the interface 1200 is read out.

Thereafter, the engine coolanttemperature signal value TWoLD stored in the corresponding address in the RAM1 430 is read out and thetime data dt(=tneWtold) is also read outfrom the RAM, at BLOCK-7. RAM 1430 is updated with the engine coolanttemperature sensor signal valueTww. Then, the value (TwOLD- TwNEwydt=dTw is calculated at BLOCK 8. The value of dt dTW/dt is compared to a reference value + K at BLOCK-9. If it is smallerthan + K, dTW/dt is then compared to a reference value -K at BLOCK-10.If it is largerthan -K,theenginecoolanttemperaturesignal value TWoLD in the RAM1430 is updated with the engine coolanttemperature signal valueTwNEw in the register 1214, at BLOCK-11.

Ifthe result is NO in BLOCK-9, MODE-1 is in cremented by 1 at BLOCK-12. Thereafter, the sub routine described above is executed at BLOCK-13. On the other hand, if the result in BLOCK-10 is NO, MODE-2address is incremented by 1 at BLOCK-14.

Then, the foregoing subroutine is executed at BLOCK- 15 After BLOCK-1 3 and BLOCK-15, execution of the check program proceeds to foregoing BLOCK-1 1.

Referring to Fig. 12, details ofthe vehicle information system 2500 in the preferred embodiment of Fig.

6 are shown. In the shown embodiment, the vehicle information system 2500 is adapted to displaytrip distance, average speed, deviation of the vehicle speed ortrip distance from scheduled speed or distance for navigation, fuel consumption, trip distance per unit of fuel, which will hereinafter be referred to as fuel economy indication, odometer indication, vehicle range with remaining fuel, engine revolution speed, and soon, on the display screen 2520. The display screen 2520 is also used to display a calculatorforperforming calculation and to display information concerning faulty segments ofthe engine control system. The vehicle information system also includes a radio controllerfor electronic tuning or pre-scheduling of radio programs and a vehicle clock with an alarm.

Therefore, the vehicle information system 2500 includes a clock 2561, a trip distance sensor 2562, a fuel consumption sensor2563, an electronically controlled radio 2564 an alarm 2565, and a fuel gauge 2566 respectively connected to an input/output interface 2501. The input/output interface 2501 is also connected to the crank angle sensor 230 to receive the engine speed signals.

As in the foregoing engine control system, the vehicle information system includes a microcomputer 2502 comprising the input/output interface 2501, CPU 2503, RAM 2504, ROM 2505 and a non-volatile memory 2530. The interface 2501 is also connected to a keyboard 2540 serving as the input unitfor controlling the display on the display screen 2520. The CPU 2503 is responsive to request signals from the keyboard 2051 to select the display mode on the display screen and selectably display the display items, such as the vehicle speed, the trip distance, the average speed, etc. Thefuel consumption rate and remaining fuel supply can also be displayed. The measurement ofthetrip distance for indication of travel distance orfuel consumption rate is cleared everytime the data thereof is displayed.

The microcomputer 2502 is also connected to other systems such as the vehicle clock, vehicle radio tuner and soon, through a signal input/output interface 2506.

The inpuVoutput interface 2501 is further connected to the engine control system 2000 via data transmission lines 2621,2622 and 2623. When the display or indicator 1900 in the engine control system is turned on,the keyboard 2540 is enabled to inputthe read request command to the input/output interface 2501.

The read request command is transferred to the controller 1000 through the shaping circuit 1100 and the interface 1200 via the data transmission line 2621.

In the controller, CPU 1300 is responsive to the read request command to read out fault data from the non-volatile memory 1450 to transfer the fault data to the input/output interface of the vehicle information system 2500 via the output interface 1500 and the data transmission line 2623. In the vehicle information system 2500, the fault data inputted is processed to identifythe faulty segment and/or error condition of the faulty segment for display on the display screen 2520.

Thefaulty segment and the error condition thereof is thereby identified on the display screen 2520 in the form of a combination of several figures which are respectively representative of segments and error conditions. Although figures are used to identify the faulty segment and error condition in the shown embodiment, this can be done with corresponding symbols or words.

Fig. 13 shows third embodiment ofthe automotive electronic device according to the present invention.

In the shown embodiment, the electronic device generally comprises an engine control system 3000 and a vehicle information system 4500 associated with each other. The engine control system 3000 includes various sensors and detectors such as an engine speed sensor, an airflow meter, and various temperature sensors, for providing control parameters, a control unit and actuators for controlling various engine operations such as fuel metering idle airflow, spark ignition timing, as in the foregoing embodiments. On the other hand, the vehicle information system 4500 in the shown embodiment is adapted to compute travel distance, travel time, average vehicle speed and so on to provide information in relation to the currentvehicletrip.The vehicle information system 4500 is associated with an external input unit 4540, such as a keyboard, and a display 4520forinformation display. Thevehicle information system 4500 is also associated with a non-volatile memory 4530 for storing computed results. The engine control system 3000 further includes a fault monitor for detecting fault in the control system. The fault monitor checks the operation of a control unit in the control system and checks the inputs from the sensors as described previously. The resu It of the check operation by the fault monitor is fed to the non-volatile memory 4530 ofthe vehicle information system 4500. The check operation results are also fed to a display 4520 via a data line 4022 for control system fault indication.

As in the foregoing Fig. I,the engine control system 3000 and the vehicle information system 4500 are connected to each other via a data transmission line 4600.Thevehicle information system 4500 produces a read command when a read request is inputted to the input unit. The read command is fed to the engine control system to read the data from the non-volatile memory 4530 and output itto the input unit when the engine control system 3000 malfunctions.

The read data from the non-volatile memory 4530 is processed by the vehicle information system to identify the faulty sensors or elements in the engine control system. The vehicle information system 4500 sends a fault display signal indicative ofthe faulty element to the display 4520. In response to the fault display signal and depending on the fault display signal value, the display 4520 indicates the faulty sensor or element and the degree of errortherein.

Referring to Fig. 14, there is shown the fourth embodiment in which a plurality of digital or electronic control systems 4700,4800... are connected to the vehicle information systems 4500. As shown in Fig. 5, respective digital control systems 4700,4800... are connected to the vehicle information system 4500 via respective data transmission lines 4610,4620... and have non-volatile memories 4710,4810...

As in the foregoing first embodiment, each of the digital control systems 4700,4800... includes a fault monitor for detecting malfunction of the elements or segments thereof and producing a fault indication signal to be fed to the fault display 4520. The fault monitor also stores check data in the non-volatile memory 4530. This way, the fault display 4520 indicates which ofthe segments of the digital control systems are malfunctioning. The input unit 4540 is adapted to input a request for display of information about the faulty digital control system and errant segment in a manner similar to the foregoing first embodiment.

Claims

1. A self-monitoring system for an automotive electronic control system comprising: an electronic control system for controlling automotive vehicle device operation; a fault detecting means, incorporated in said electronic control system, for detecting fault in each segment of said electronic control system to produce a fault signal indicative both ofthe occurrence of a fault and ofthe faulty segment; memory means, responsiveto said fault signal, to store fault data in addresses corresponding to respective check items; a fault indicator for displaying fault information in response to the fault signal; and a microcomputer associated with said electronic control system, said microcomputer including an input unit for manually inputting a display request for fault data in said memory means and a display unit for displaying fault information in response to said display request.

2. The self-monitoring system assetforth in claim 1,wherein said memory means is a non-volatile memory connected to said electronic control system to receive said fault data therefrom.

3. The self-monitoring system as setforth in claim 2, wherein said non-volatile memory is an memory external to said electronic control system for storing said fault data in response to said fault signal and for reading said fault data out in response to the display request from said microcomputer.

4. The self-monitoring system as setforth in claim 2, wherein said non-volatile memory is incorporated within said microcomputerfor storing said fault data in response to said fault signal and for reading said fault data out in response to the display request from said microcomputer.

5. The self-monitoring system as setforth in claim 1,2 or 3, wherein said fault indicator is incorporated within said electronic control system.

6. The self-monitoring system as setforth in claim 4, wherein said fault indicator is included in said display unit of said microcomputer.

7. A self-monitoring system for an automotive electronic control system comprising: an electronic control system for controlling automotive vehicle device operation, which includes the first microcomputer and a sensor for inputting a control parameterto said microcomputer, said microcompu ter executing a check program for checking input signals from said sensor at a given timing to detect faults in said sensor and for checking the output of said microcomputerfordetecting faults in a segment ofsaid microcomputer, said microcomputer producing a fault signal when an error in either of said input or output signals is detected; memory means, responsive to said fault signal, for storing fault data in addresses corresponding to the checked items of said check program; ; a fault indicatorfordisplaying fault information in responsetothefaultsignal; the second microcomputer associated to said electronic control system, said second microcomputer including an input unit for manually inputting a display request for fault data in said memory means and a display unit for displaying fault data in response to said display request.

8. Aself-monitoring systemforan automotive electronic control system substantially as hereinbefore set forth, with reference to, and/or as illustrated in Figures 1 to 13 ofthe accompanying drawings.