GB2255422A - Monitoring device for an i.c. engine control system. - Google Patents

Monitoring device for an i.c. engine control system. Download PDF

Info

Publication number
GB2255422A
GB2255422A GB9209161A GB9209161A GB2255422A GB 2255422 A GB2255422 A GB 2255422A GB 9209161 A GB9209161 A GB 9209161A GB 9209161 A GB9209161 A GB 9209161A GB 2255422 A GB2255422 A GB 2255422A
Authority
GB
United Kingdom
Prior art keywords
computer
monitoring device
monitoring
computers
output
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
GB9209161A
Other versions
GB9209161D0 (en
Inventor
Martin Lutat
Georg Sobczyk
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Kloeckner Humboldt Deutz AG
Original Assignee
Kloeckner Humboldt Deutz AG
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Kloeckner Humboldt Deutz AG filed Critical Kloeckner Humboldt Deutz AG
Publication of GB9209161D0 publication Critical patent/GB9209161D0/en
Publication of GB2255422A publication Critical patent/GB2255422A/en
Withdrawn legal-status Critical Current

Links

Classifications

    • F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
    • F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
    • F02D—CONTROLLING COMBUSTION ENGINES
    • F02D41/00—Electrical control of supply of combustible mixture or its constituents
    • F02D41/24—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means
    • F02D41/26—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means using computer, e.g. microprocessor
    • F02D41/266—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means using computer, e.g. microprocessor the computer being backed-up or assisted by another circuit, e.g. analogue
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B9/00—Safety arrangements
    • G05B9/02—Safety arrangements electric
    • G05B9/03—Safety arrangements electric with multiple-channel loop, i.e. redundant control systems

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Chemical & Material Sciences (AREA)
  • Combustion & Propulsion (AREA)
  • Mechanical Engineering (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Automation & Control Theory (AREA)
  • Hardware Redundancy (AREA)
  • Safety Devices In Control Systems (AREA)

Description

2 25 )5422 A monitoring device D E S C R I P T 1 0 N The invention relates
to a device for monitoring an electronic control system of an internal combustion engine according to the feature of the preamble of claim 1.
DE-OS 39 26 ^577 discloses an electronic control device for an internal combustion engine, the device comprising a main computer associated with a first watchdog and an auxiliary computer associated with a second watchdog. The output signals of the two computers travel either via a logic circuit or via a switching device, e.g. to a driver stage of a final control element. The logic circuit or the switching device is influenced in dependence on the output signals from the two watchdogs.
The disadvantage of this known device is that an output n signal recognised as faulty, or the failure of a component (e.g. a computer or watchdog) will always result in an emergency state of operation of the engine. It is therefore impossible for a fault to be eliminated. In addition, the signal processing in the logic circuit is complex and timeconsuming.
The aim of the invention is to improve the known prior-art device so as to obtain more reliable signal processing at low expense.
The aim of the invention is achieved by the features disclosed in the characterising part of claim 1.
To this end, according to the invention, the monitoring device associated with at least the first computer is connected at the output end to an input of the second computer so as to transmit signals. This ensures that in the event of faulty operation or failure of the first computer, the second computer receives a corresponding signal from the monitoring device. In equally advantageous manner, a monitoring device is also associated with the second computer and is connected at the output end to an input of the second computer so as to transmit signals.
3 - This ensures that in the event of faulty operation or failure of the second computer also, the first computer receives a suitable signal via the monitoring device.
According to another feature of the invention, the monitoring device associated at least with the first computer is connected at the output end to an additional input, preferably a reset input, of the first computer so as to transmit signals. Accordingly, the output signal of the monitoring device associated with the first computer is connected back to the same computer, with the advantage a faulty signal does not result in the immediate report total failure of the first computer, but an attempt is made e.g. to put back the program running in the first computer or to take other suitable steps. According to equally advantageous feature, the monitoring device associated with the second computer is also connected at the output end to another input of the second computer. In this manner, as in the case of the first computer, each computer can be monitored by its own monitoring device. As a result of this crosswise connection of the monitoring devices associated with the computers, a first redundancy is obtained in the event of a fault or faulty signals.
that of first an According to another feature of the invention, the first and the second computer are interconnected via a data line, more particularly with interposition of a storage device. Alternatively both computers can be directly interconnected via the data line. This connection advantageously results in an exchange of data between the two computers, so that both computers can deliver data into or read data out of the storage device. In this manner, for example, data from a faulty or inoperative computer can be written into the storage device and read out and evaluated or processed by the second computer.
According to another feature of the invention, the two computers are directly interconnected via a signaltransmitting line. The signaltransmitting line is e.g. an electric connection for transmitting only a signal at a different level (high or low potential). For example, one computer supplies the other computer with a simple electric signal or a digital signal indicating correct operation or failure of the computer. The signal is internally evaluated in the other computer, which can react accordingly. In one embodiment, the signal-transmitting line is provided separately for each direction (from the first to the second and from the second to the first computer) or a single line is provided for the two directions, and is bidirectionally operated with corresponding signal processing.
According to another feature of the invention the two computers are interconnected at the output end via a safety device connected to the switching device and/or to the actuating device. The advantage of this arrangement is that if both computers are operating without faults, the safety device actuating the switching device or the actuating device supplies control signals e.g. only to the switching device, which in turn actuates the actuating device. In the event of faulty operation or failure of a computer, the signals from one or both computers to the safety device are evaluated and a corresponding control signal is delivered to the switching device or to the actuating device. This ensures that in the event of a fault reported by one or both computers to the safety device, the switching device reacts, e.g. by changing over from the inoperative computer to the still operative computer. If monitoring by the aforementioned devices shows that both computers have failed, the actuating device is actuated by a signal from the safety device, which switches off the actuating device.
Alternatively, the failure or faulty operation of the actuating device can be reported by the device itself to the safety device. The signals delivered by the two computers to the safety device can be independent signals (without allowance for the state of the aforementioned devices), or signals containing the result of reciprocal monitoring by means of one of the monitoring devices or the data line or the signal-transmitting line.
0 As a result of using the previous ly-mentioned devices (cross-connected monitoring devices, connection via a data line and via a signaltransmitting line, and safety device), signals are processed with high reliability in the event of a faulty or inoperative computer. Also, as a result of the fourfold redundancy, the same high reliability is ensured in the event of failure of one of the monitoring devices or of the safety device or one of the lines. Also, the aforementioned monitoring devices, the safety device, the data line and the signal- transmitting line can be used as individual components or in any desired combination with one another.
According to another feature of the invention, the first computer is connected at the output end to an input of the switching device and the output of the second computer connected to an input of the switching device is directly connected to another input of the first computer. The advantage of the direct connection is that signals can be processed very quickly in the event of a fault, in that the safety device directly actuates the switching device, which delivers a control signal directly to the actuating device. The connection between the outputs of the two computers and the switching device ensures that if a computer fails, its output signals are switched off and the fault-free output signals of the other computer are supplied to the actuating device.
According to another feature of the invention, an additional monitoring device is incorporated at least in the first computer. The advantage of this monitoring device, internally disposed in the first computer, is that only part of the first computer, e.g. the program sequence being processed in the first computer, is monitored and, in the event of a fault, a suitable signal is delivered e.g. via the data line. A monitoring device can be incorporated in the second computer, in the same manner as in the first computer. Optionally also, a monitoring device can be incorporated only in the second computer.
According to another feature of the invention the actuating device is the output stage for actuating at least one solenoid valve, or is the driver stage for actuating a final control element or is the actuating device for an element which determines or influences the amount of fuel for injecting into an internal combustion engine. In that case, both computers calculate control signals from measured operating parameters of the engine and generate the required control si.,nals.
0 The device according to the invention for monitoring an C1 electronic circuit is of use more particularly for monitoring an electronic control system of an internal combustion engine, either spark- ignition or diesel. The device according to the invention is also of use in other sectors, where two computers for electronic control are available and have to be monitored.
A device according to the invention for monitoring an electronic control system of an internal combustion engine is shown in the single drawing and will be explained in detail in the following description.
The single drawing shows a first computer 1 and a second computer 2, the first computer 1 having sensor inputs 3 and the second computer 2 having sensor inputs 4. Control signals, based on operating parameters of an internal combustion engine detected via sensor inputs 3 or 4, are calculated and delivered at an output 1.1 on the first 1 computer 1 and at an output 1.2 on the second computer 2. first monitoring device 5, more particularly a known watchdog circuit, is associated with the first computer 1. The output of the first computer 1 associated with the monitoring device 5 is e.g. a watchdog control output. The output of the first monitoring device 5 is also connected to the input of the second computer 2, e.g. an interrupt input of the second computer 2. The output of the monitoring device 5 is also connected to another input, e.g. a reset input, of the first computer 1. Similarly a second monitoring device 6 is associated with the second computer 2 and is connected to the first computer 1 and the second computer 2 in a manner analogous to the first monitoring device 5. For the purpose of additional mutual monitoring, the first computer 1 and the second computer 2 are interconnected via a data line 9 with interposition of a storage device 10, e.g. a dual-port RAM. Via the data line 9, computers 1 and 2 have access to the storage device 10, into which data can be written and out of which data can be read. In addition computers 1 and 2, e.g. via their to a safety device 11, the two COMDUters 1 and control outputs, are both connected which receives control signals from 2.
The control output 1.1 of the first computer and the control output 2.1 of the second computer 2 are connected to a switching device 7, the output of which is connected to an actuating device 8. In addition, the output 1.1 leading to an input of the switching device 7 is connected to another input of the first computer 1. The safety device 11 is connected to the switching device 7. Also, the safety device 11 is connected to the actuating device 8, e.g. via a respective output and return line. Alternatively, by means of suitable signal processing and evaluation, the safety device 11 and the actuating device 8 can be connected by a single line.
The device shown in the drawing for monitoring an electronic control system of an internal combustion engine operates as f ol lows:
Operating parameters of the engine, recorded via sensor inputs 3 or 4, are converted in the f irst computer- 1 or second computer 2, by suitable processes of calculation, into control signals which are available at the control output 1.1 of the first computer 1 or at the control output 2.1 of the second computer 2. If there is no f ault in operation, the switching device 7 is actuated by the safety device 11 so that the control signals at the control output 2.1 reach the actuating device 8 and actuate components of the engine injection device, e.g. the solenoid valves, so to influence the amount of fuel. In order simultaneously monitor the output signals of the second computer 2, the control signals are sent back to an input of the first- computer 1, which compares them with the results of its internal calculations. If a discrepancy is found, a suitable signal is delivered to the control device 11 by the first computer 1 and the switching device 7 is actuated and changes over from the control output 2.1 to the control output 1.1 of the first computer and delivers signals therefrom to the actuating device 8. Depending on the nature of the discrepancy or of the detected fault, the safety device 11, using the received signals, can switch off the actuating device 8. If the actuating device 8 independently detects a fault, a report is sent back to the saf ety device 11.
As an additional precaution against faulty operation of the electronic control system, the two computers 1 and 2 are associated with monitoring devices 5 and 6, which are triggered by computers 1 and 2. The monitoring devices 5 and 6 can be triggered e.g. by signals generated in the two computers 1 and 2, or alternatively triggering can be brought about by crankshaft markings. If for example the as to first monitoring device 5 detects a fault in the operation of the first computer 1, an attempt is first made e.g. to set back the program sequence in the first computer, in order to eliminate a fault in calculation. If this process does not have the desired result, the first monitoring device 5 delivers a suitable report to the second computer 2. By this means, the second computer 2 can take over the computing or control functions of the first computer 1. In that case there is no communication via the storage device 10, since the connection between the storage device 10 and the faulty computer is switched off. This process can be applied to both computers 1 and 2. Actuating of the switching device 7 is unnecessary, since the second computer 2 is in working order as bef ore. If the second monitoring device 6 detects that the second computer 2 has failed and if a reset process does not lead to the desired result, the first computer 1 takes over the functions of the second computer 2. At the same time, the safety device 11 actuates the switching device 7, thus changing over from the control output 2.1 to the control output 1.1. If one or both monitoring devices 5 or 6 is faulty and this is not detected by the data line 9, a direct connection 12 is provided between the two computers 1 and 2, to enable the two computers 1 and 2 to monitor one another by means of an electronic signal at a varying level. For example an electric signal at high potential, delivered by the second computer 2 to the first computer 1, indicates that the second computer 2 is faulty.
The aforementioned monitoring devices also include an additional monitoring device 13 in the first computer 1 and a monitoring device 14 incorporated in the second computer 2. These additional monitoring devices can eliminate minor faults which would not result in signals being delivered to one of the aforementioned external monitoring devices 5 or 6 or to the data line 7 or the direct connection 12.
Finally, an electronic control system can be monitored either by the monitoring devices 5 and 6, the data line 9 with interposition of the storage device 10, the safety device 11 and the direct connection 12 simultaneously and in advantageous manner, or alternatively by partial use of the aforementioned components.
-14 A monitoring device

Claims (8)

  1. C L A I M S switching deViCE computers (1, 2) characterised ir wi th 1. A
    device for monitoring an electronic control system, more particularly the electronic control system of an internal combustion engine, comprising a first and a second computer (1, 2), and at least one monitoring device associated with one of the two computers (1, 2) and a (7) connected at the output end to the two and connected to an actuating device (8), that at least the monitoring device (5) associated the first computer (1) is connected at the output end to an input of the second computer (2) so as to transmit signals.
  2. 2. A monitoring device according to claim 1, characterised in that at least the monitoring device (5) associated with the first computer (1) is connected at the output end to an input, preferably a reset input, of the first computer (1) so as to transmit signals.
  3. 3. A monitoring device according to claim 1 or 2, characterised in that the two computers (1, 2) are 4 interconnected by a data line (9), more particularly with interposition of a storage device (10).
  4. 4. A monitoring device according to any of the preceding claims, characterised in that the two computers (1 2) are directly interconnected by a signal-transmitting line (12).
  5. 5. A monitoring device according to any of the preceding claims, characterised in that the two computers (1, 2) are connected at the output end via a safety device (11) connected to the switching device (7) and/or to the actuating device (8).
  6. 6. A monitoring device according to any of the preceding claims, characterised in that the first computer (1) at the output end is directly connected to an input of the switching device (7) and the output of the second computer (2) connected to an input of the switching device (7) is directly connected to an output of the first computer (1).
  7. 7. A monitoring device according to any of the preceding claims, characterised in that an additional monitoring device (13) is incorporated at least in the first computer (1) -
  8. 8. A monitoring device according to any of the preceding claims, characterised in that the actuating device (8) is the output stage for actuating at least one solenoid valve.
GB9209161A 1991-04-29 1992-04-28 Monitoring device for an i.c. engine control system. Withdrawn GB2255422A (en)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
DE19914113959 DE4113959A1 (en) 1991-04-29 1991-04-29 MONITORING DEVICE

Publications (2)

Publication Number Publication Date
GB9209161D0 GB9209161D0 (en) 1992-06-10
GB2255422A true GB2255422A (en) 1992-11-04

Family

ID=6430594

Family Applications (1)

Application Number Title Priority Date Filing Date
GB9209161A Withdrawn GB2255422A (en) 1991-04-29 1992-04-28 Monitoring device for an i.c. engine control system.

Country Status (2)

Country Link
DE (1) DE4113959A1 (en)
GB (1) GB2255422A (en)

Cited By (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO1995016944A1 (en) * 1993-12-16 1995-06-22 Robert Bosch Gmbh Device for monitoring at least one safety-relevant function of an apparatus
WO1995016943A1 (en) * 1993-12-16 1995-06-22 Robert Bosch Gmbh Process for monitoring at least one safety-relevant function of a machine
WO1995034026A1 (en) * 1994-06-08 1995-12-14 O & K Orenstein & Koppel Ag Control system for mobile machinery
GB2294130A (en) * 1994-10-13 1996-04-17 Nissan Motor Diesel engine fuel cut-off control system
GB2303225A (en) * 1995-07-08 1997-02-12 Mtu Muenchen Gmbh Control system for shaft drive assembly
WO2000018613A1 (en) * 1997-10-01 2000-04-06 Continental Teves Ag & Co. Ohg Method for detecting errors of microprocessors in control devices of an automobile
GB2345153A (en) * 1998-12-23 2000-06-28 Motorola Ltd Fault-tolerant microcontroller arrangement, eg for a vehicle braking system
US6720772B2 (en) * 2002-02-01 2004-04-13 Mitsubishi Denko Kabushiki Kaisha Data holding device of an internal combustion engine
WO2017058133A1 (en) 2015-09-28 2017-04-06 General Electric Company Apparatus and methods for allocating and indicating engine control authority
US9719452B2 (en) 2013-02-01 2017-08-01 Mtu Friedrichshafen Gmbh Method and arrangement for controlling an internal combustion engine, comprising at least two control units

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE19919504B4 (en) * 1999-04-29 2005-10-20 Mtu Aero Engines Gmbh Engine governor, engine and method for controlling an engine
DE19933086B4 (en) * 1999-07-15 2008-11-20 Robert Bosch Gmbh Method and device for mutual monitoring of control units
JP2003536135A (en) * 2000-06-02 2003-12-02 トムソン ライセンシング ソシエテ アノニム Watchdog timer circuit and method
DE102017203220A1 (en) * 2017-02-28 2018-08-30 Siemens Aktiengesellschaft Switching between element controllers in railway operation
DE102017203222A1 (en) * 2017-02-28 2018-08-30 Siemens Aktiengesellschaft Switching between element controllers in railway operation

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2104247A (en) * 1981-07-13 1983-03-02 Nissan Motor Automatic control of i c engines in vehicles
GB2108492A (en) * 1981-08-25 1983-05-18 Otsuka Kagaku Yakuhin Process for preparing oxazolineazetidinone derivatives
EP0096510A2 (en) * 1982-06-03 1983-12-21 LUCAS INDUSTRIES public limited company Control system primarily responsive to signals from digital computers
EP0170920A2 (en) * 1984-07-11 1986-02-12 Hitachi, Ltd. Engine control apparatus
EP0250317A1 (en) * 1986-06-18 1987-12-23 Telemecanique Process and device for the redundant control of a power element
GB2235791A (en) * 1989-07-21 1991-03-13 Hitachi Ltd Escalator or travelator control

Family Cites Families (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US3834361A (en) * 1972-08-23 1974-09-10 Bendix Corp Back-up fuel control system
US4212057A (en) * 1976-04-22 1980-07-08 General Electric Company Shared memory multi-microprocessor computer system
DE3225455C2 (en) * 1982-07-07 1986-07-17 Siemens AG, 1000 Berlin und 8000 München Method for the safe operation of a redundant control system
US4610013A (en) * 1983-11-08 1986-09-02 Avco Corporation Remote multiplexer terminal with redundant central processor units
DE3700986C2 (en) * 1987-01-15 1995-04-20 Bosch Gmbh Robert Device for monitoring a computer system with two processors in a motor vehicle
DE4002389A1 (en) * 1989-05-02 1990-11-08 Bosch Gmbh Robert FUEL METERING SYSTEM WITH REDUNDANT CONTROL DEVICE
DE3926377C2 (en) * 1989-08-04 2003-03-06 Bosch Gmbh Robert Electronic control device for an internal combustion engine

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2104247A (en) * 1981-07-13 1983-03-02 Nissan Motor Automatic control of i c engines in vehicles
GB2108492A (en) * 1981-08-25 1983-05-18 Otsuka Kagaku Yakuhin Process for preparing oxazolineazetidinone derivatives
EP0096510A2 (en) * 1982-06-03 1983-12-21 LUCAS INDUSTRIES public limited company Control system primarily responsive to signals from digital computers
EP0170920A2 (en) * 1984-07-11 1986-02-12 Hitachi, Ltd. Engine control apparatus
EP0250317A1 (en) * 1986-06-18 1987-12-23 Telemecanique Process and device for the redundant control of a power element
GB2235791A (en) * 1989-07-21 1991-03-13 Hitachi Ltd Escalator or travelator control

Cited By (19)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO1995016943A1 (en) * 1993-12-16 1995-06-22 Robert Bosch Gmbh Process for monitoring at least one safety-relevant function of a machine
WO1995016944A1 (en) * 1993-12-16 1995-06-22 Robert Bosch Gmbh Device for monitoring at least one safety-relevant function of an apparatus
WO1995034026A1 (en) * 1994-06-08 1995-12-14 O & K Orenstein & Koppel Ag Control system for mobile machinery
GB2294130A (en) * 1994-10-13 1996-04-17 Nissan Motor Diesel engine fuel cut-off control system
GB2294130B (en) * 1994-10-13 1996-09-18 Nissan Motor Diesel engine control system
GB2303225A (en) * 1995-07-08 1997-02-12 Mtu Muenchen Gmbh Control system for shaft drive assembly
GB2303225B (en) * 1995-07-08 1999-06-09 Mtu Muenchen Gmbh A control system for a shaft drive assembly
US6704628B1 (en) 1997-10-01 2004-03-09 Continental Teves Ag & Co. Ohg Method for detecting errors of microprocessors in control devices of an automobile
WO2000018613A1 (en) * 1997-10-01 2000-04-06 Continental Teves Ag & Co. Ohg Method for detecting errors of microprocessors in control devices of an automobile
GB2345153A (en) * 1998-12-23 2000-06-28 Motorola Ltd Fault-tolerant microcontroller arrangement, eg for a vehicle braking system
US6720772B2 (en) * 2002-02-01 2004-04-13 Mitsubishi Denko Kabushiki Kaisha Data holding device of an internal combustion engine
US9719452B2 (en) 2013-02-01 2017-08-01 Mtu Friedrichshafen Gmbh Method and arrangement for controlling an internal combustion engine, comprising at least two control units
WO2017058133A1 (en) 2015-09-28 2017-04-06 General Electric Company Apparatus and methods for allocating and indicating engine control authority
CN108350822A (en) * 2015-09-28 2018-07-31 通用电气公司 Device and method for distributing and indicating engine control authority
US20180328301A1 (en) * 2015-09-28 2018-11-15 General Electric Company Apparatus and methods for allocating and indicating engine control authority
EP3356665A4 (en) * 2015-09-28 2019-06-26 General Electric Company Apparatus and methods for allocating and indicating engine control authority
AU2015410607B2 (en) * 2015-09-28 2021-01-07 General Electric Company Apparatus and methods for allocating and indicating engine control authority
CN108350822B (en) * 2015-09-28 2021-05-28 通用电气公司 Apparatus and method for assigning and indicating engine control authority
US11255287B2 (en) * 2015-09-28 2022-02-22 Westinghouse Air Brake Technologies Corporation Apparatus and methods for allocating and indicating engine control authority

Also Published As

Publication number Publication date
GB9209161D0 (en) 1992-06-10
DE4113959A1 (en) 1992-11-05

Similar Documents

Publication Publication Date Title
US5107425A (en) Control system for control devices of a motor vehicle
GB2255422A (en) Monitoring device for an i.c. engine control system.
US6918064B2 (en) Method and device for monitoring control units
US5897596A (en) Electronic controller with fault diagnosing function
KR100686664B1 (en) Method and device for mutual monitering of controll unit
US6804564B2 (en) System and method for controlling and/or monitoring a control-unit group having at least two control units
JPH07105801B2 (en) Vehicle communication control device
KR940004808B1 (en) Vehicle control apraratus
US5440487A (en) Process and device for dealing with errors in electronic control devices
US7418316B2 (en) Method and device for controlling operational processes, especially in a vehicle
JPH05147477A (en) Vehicular control device
JP2877912B2 (en) Electronic control unit for internal combustion engine
US6352064B1 (en) Electrically controlled throttle control system
JPH07293320A (en) Electronic controller
JP2663982B2 (en) Brake stop lamp circuit for vehicles
JP2552740B2 (en) Automotive throttle control
US7570046B2 (en) Single sensing multiple output system
JP3818218B2 (en) Electronic control device for vehicle
JPH0717337A (en) Judgement of trouble of electronic controlled unit and trouble judging device
JPH05508692A (en) A device that adjusts the throttle valve of an internal combustion engine
JPH06305376A (en) Control device for vehicle
JPS60142033A (en) Failsafe system for electronically controlled engine
JPS643790Y2 (en)
JPS6355347A (en) Diagnostic method of pressure detection system
JPH0827323B2 (en) Electronic control device

Legal Events

Date Code Title Description
WAP Application withdrawn, taken to be withdrawn or refused ** after publication under section 16(1)