JP2006340083A - Transmission data abnormality monitoring system of on-vehicle electronic controller - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a transmission data abnormality monitoring system of an on-vehicle electronic controller for performing setting so as to detect communication abnormality by the setting of an ID code when attaching the ID code to the data of a microcomputer and transmitting and receiving them between the microcomputer and at least two or more peripheral ICs. <P>SOLUTION: The transmission data abnormality monitoring system of the on-vehicle electronic controller improves the safety and reliability of the controller by monitoring the normality/abnormality of transmission data by performing setting so as to be an ID code not set beforehand or setting the ID code so as to generate a data collision in the case that the abnormality occurs in the ID code of the data transmitted from at least two or more peripheral ICs 20 and 30 and received by the microcomputer 10 in the serial communication of the microcomputer 10 and the at least two or more peripheral ICs 20 and 30. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a system for monitoring an abnormal state of transmission data in communication between a microcomputer in a vehicle-mounted electronic control device that controls a brake device of a vehicle and a peripheral IC.

  As a vehicle brake device, a so-called X-pipe hydraulic circuit that brakes a wheel brake on a diagonal line in plan view is widely adopted. An electronic control having a microcomputer and a peripheral IC corresponding to the hydraulic circuit. An on-vehicle electronic control unit (ECU) composed of a circuit is known. As an example having an ECU for the hydraulic circuit described above, Patent Document 1 discloses “a microcomputer monitoring method in an in-vehicle electronic control device”.

  The ECU described in Document 1 performs data communication between the microcomputer and the peripheral IC on the input side from the serial communication unit of the microcomputer to the serial communication buffer of the peripheral IC, and based on the received data, the peripheral IC The microcomputer is monitored for abnormalities. In addition, the microcomputer is monitored by the peripheral IC, data communication is performed from the peripheral IC to the microcomputer, and the microcomputer itself and the abnormality of the peripheral IC can be monitored by the microcomputer based on the received data. .

  In the above Patent Document 1, a circuit that processes an input signal to a microcomputer is called a peripheral IC. However, an electronic component including a drive unit by a semiconductor switching element that drives a solenoid of a solenoid valve by a control signal from an output side is used. The provided circuit is also a peripheral IC. In Patent Document 1, only the electronic components of the solenoid drive unit are shown on the output side peripheral IC, but as another example, the motor relay drive unit in addition to the solenoid drive unit is included in the output side peripheral IC. In order to monitor the operation of these electronic components, the peripheral IC on the output side is also provided with a serial communication monitoring unit to transmit data from the serial communication unit of the microcomputer, A system for monitoring the operation of each electronic component has already been proposed.

  By the way, when data is transmitted and received by the serial communication unit of the microcomputer of another example described above, data is transmitted from the microcomputer to the peripheral IC on the input side, and the peripheral IC receives data corresponding to the data after receiving the data. Is sent to the microcomputer. The same applies to communication between the microcomputer and the peripheral IC on the output side. Patent Document 1 discloses that data such as data is sent and received with the A and B ID codes attached to the peripheral IC.

When sending and receiving data to peripheral ICs on the input side and output side with such an ID code, an error occurs in one or two bits of the ID code due to some cause on the transmission or reception path. If this is the case, it is expected that the data will not be transmitted or received normally and will be erroneously recognized in the microcomputer. However, Patent Document 1 does not disclose the construction of a system for sending and receiving signals between two peripheral ICs by monitoring the transmission and reception of signals due to the abnormality of the ID code. There is no example that proposed the system.
Japanese Patent Laid-Open No. 2001-312315

  In the present invention, in consideration of the above-mentioned problems, when the ID code is set between the microcomputer and at least two or more peripheral ICs when the ID code is sent and received, the ID code is set. It is an object of the present invention to provide a transmission data abnormality monitoring system for an in-vehicle electronic control device that is set so that a communication abnormality can be detected by providing a bit string suitable for bit abnormality detection.

  As a means for solving the above problems, the present invention is provided with a microcomputer 10 that controls a brake device of a vehicle, and at least two peripheral ICs 20 and 30, and a serial communication unit 14 provided in the microcomputer 10, In an in-vehicle electronic control apparatus in which data calculated by the microcomputer 10 is communicated between serial communication buffers 21 and 31 provided in at least two or more peripheral ICs 20 and 30, respectively, and the operation of the microcomputer is monitored. When data transmitted from the microcomputer 10 to at least two or more peripheral ICs 20 and 30 is attached with an ID code, the data received by the at least two or more peripheral ICs 20 and 30 is transmitted to the microcomputer 10. Error occurs in the ID code of the received data In this case, a transmission data abnormality monitoring system for an in-vehicle electronic control apparatus is set in which an ID code is set so that an unset ID code is set in advance or a data collision occurs, and normality / abnormality of transmission data is monitored. It is.

  According to the transmission data abnormality monitoring system of the on-vehicle electronic control device of the present invention configured as described above, data is transmitted and received when serial data is transmitted and received between the microcomputer 10 and at least two or more peripheral ICs 20 and 30. The ID code is attached to and sent and received. An ID code is set, transmitted and received so that a communication abnormality occurring during serial communication can be reliably detected when the ID code is given. This ID code is set to an ID code that causes a setting or data collision (simultaneous reception of different bit data) to be an unset ID code when an abnormality occurs in the ID code during transmission and reception. Thus, a communication abnormality is detected.

  The unset ID code is set such that an abnormality can be determined when data having an ID code different from the ID code transmitted by the microcomputer 10 is received, and at least two peripheral ICs 20 and 30 and the microcomputer. There are two systems in which it is determined that an abnormality is detected when data of ID codes in which 10 is not defined is received. A data collision occurs when at least two peripheral ICs 20 and 30 simultaneously transmit data to the microcomputer 10 because the ID code is abnormally inverted by 2 bits. In this case, the data bit values 1 and 0 are the same. In this system, the data bit value becomes 0 due to the collision, and abnormality is detected by detecting this.

  When monitoring the control operation of the in-vehicle electronic control unit by the microcomputer 10 using the above system for judging abnormality on the communication data, there is a possibility that one or two bits of the ID code of the communication data are abnormally inverted. The abnormality determination system differs depending on whether the number of abnormally inverted bits is assumed to be 1 bit or 2 bits, and the accuracy and reliability of abnormality determination improve as the number of abnormal bits increases. In the 1-bit ID code abnormal inversion, when the microcomputer 10 receives data from the peripheral IC, an ID code may be given so as to be an unset ID code.

  In 2-bit ID code error inversion, for example, data from the microcomputer 10 to one peripheral IC 20 is set to Q and A, an ID code is set to 0000, and data from the other peripheral IC 30 to the microcomputer is unused (all The bit is Hi) and the code of the data is 1111. When data is transmitted and received in such a state, an abnormal state of the above three modes occurs due to an ID code collision caused by 2-bit ID code abnormal inversion. By detecting these abnormal states, the microcomputer 10 detects the abnormal state. Make a decision.

  The transmission data monitoring system for an in-vehicle electronic control device according to the present invention transmits and receives data with an ID code attached thereto during serial communication between the microcomputer 10 and at least two or more peripheral ICs 20 and 30. In order to determine the abnormality by attaching an ID code that causes a data collision or setting so that it becomes an unset ID code in advance, it is possible to determine the abnormality of data during serial communication. Considering the setting of the code, it is possible to monitor the communication state of the serial communication and reliably determine the abnormal state to improve the safety and reliability of the control.

  Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a schematic block diagram of main components of an in-vehicle electronic control device including the transmission data abnormality monitoring system of the embodiment. The illustrated on-vehicle electronic control unit (ECU) targets a hydraulic circuit of a so-called X-piping system, which will be described later, in which a hydraulic circuit that controls a brake device of a vehicle hydraulically controls wheels on a diagonal line in plan view. Corresponding to the hydraulic circuit, the microcomputer 10 that performs various calculations based on the input signal and outputs the control signal, and processes the signal on the input side, monitors, interrupts and / or prohibits the relay, etc. An electronic control circuit having a peripheral IC 20 and a peripheral IC 30 including a linear drive unit 36 that drives the solenoid 38 in response to an output-side control signal is provided. The ECU generally includes at least two or more peripheral ICs. However, in the illustrated example, an example including two peripheral ICs 20 and 30 is shown for simplification of description.

  The microcomputer 10 sends a signal from a sensor representing a vehicle running state such as a wheel speed signal or hydraulic pressure to a processing unit (not shown) provided in the peripheral IC 20 on the input side, and uses the waveform processed signal as an input signal. The calculation unit (CPU) 12 performs a necessary calculation according to various calculation programs such as ABS control based on the signal received by the input unit 11 and outputs the calculation result from the output unit 13. The calculated data is transmitted from the serial communication unit 14 to both the peripheral ICs 20 and 30, and is received by the serial communication buffer 21 in the peripheral IC 20, and the data communication state is monitored by a serial communication monitoring unit (not shown), and the communication state If an abnormality occurs, a signal is output to the control prohibition unit 22.

  The control prohibition unit 22 of the peripheral IC 20 outputs a signal to the relay control unit 23 when receiving a signal such as the above-described communication abnormality, and turns on a fail-safe relay provided on the main power supply line to an electrical load such as a solenoid. A signal for shutting off is output and a signal for resetting the inside of the peripheral IC 20 is output. Reference numeral 24 denotes a power supply monitoring unit. In addition, a signal for monitoring an abnormality such as a cycle of calculation timing by the CPU 12 in the microcomputer 10 is input to the control prohibiting unit 22.

  A serial communication buffer 31 is also provided in the peripheral IC 30 on the output side, and data is sent from the serial communication unit 14 of the microcomputer 10 to monitor the data. Similar to the peripheral IC 20, the peripheral IC 30 is provided with a control prohibition unit 32 and a power supply monitoring unit 34, and is further provided with a linear drive unit 36, a motor relay drive unit 37, and the like. The linear drive unit 36 drives a solenoid 38 of a pressure-increasing type and a pressure-reducing type linear control valve (electromagnetic valve) by a control signal from the output unit 13. The linear drive unit 36 receives the data signal from the serial communication unit 14 of the microcomputer 10 by the serial communication buffer 31, and when an abnormality occurs in the communication, a communication abnormality signal is sent from the monitoring unit (not shown), The operation of the linear control valve is shut off.

  As with the peripheral IC 20 on the input side, the control prohibiting unit 32 receives a monitoring signal from the microcomputer 10 and outputs a prohibiting signal to the motor relay driving unit 37 and the like when an abnormality is detected, and cuts off driving. It is also used as a reset signal for resetting the state of each part in the peripheral IC 30. The monitoring signal of the power supply monitoring unit 34 is also sent to the control prohibiting unit 32 and the relay control unit 23 of the peripheral IC 20 on the input side. As described above, when an abnormality is detected by the control prohibiting units 22 and 32 and determined to be abnormal, an abnormal measure for prohibiting control is individually performed in each of the peripheral ICs 20 and 30.

An example of a hydraulic brake system controlled by the on-vehicle electronic control device is shown in FIG. The illustrated hydraulic brake system is a so-called brake-by-wire system, and includes many parts common to the system disclosed in, for example, Japanese Patent Application Laid-Open No. 2003-205838, and will be briefly described here. Note that only the right front wheel (FR) and the left rear wheel (RL) are shown as brake wheels, and the others are not shown. The illustrated hydraulic brake system employs an X-pipe system, and includes an input operation unit 50, a power supply unit 60, and a pressure adjustment unit 70. The input operation section 50, a master cylinder 52 including a brake pedal 51,2 one pressure chamber, the solenoid valve 53 (solenoid S _L1), the stroke simulator 54, a stroke sensor P _SS. The stroke simulator 54 is provided to create a brake operation feeling by the driver.

The power supply unit 60 includes a pump 61, a motor 61 _M , a check valve 62, an accumulator 63, a relief valve as a power type hydraulic pressure generating device that operates by power to generate hydraulic pressure when performing control by a brake-by-wire system. 64, pressure switch SW is provided. The pressure adjusting unit 70 includes one set of the pressure-increasing linear valve 71 and the pressure-decreasing linear valve 72 for each of the FR wheel and the RL wheel. The linear valves 71 _FR , 71 _RL and 72 _FR for increasing and reducing pressures are normally closed valves, and the linear valve 72 _RL for reducing pressures are normally open valves. By controlling the current supplied to the solenoid coils of the solenoids S _{L3 to} S _L6 The wheel cylinder hydraulic pressure is controlled by opening and closing by the differential pressure between the spring biasing force and the valve pressure. The target hydraulic pressure of the wheel cylinder 81 (FR, RL) is determined so that the driver's required braking force can be obtained by the increase / decrease linear valves 71 _FR , 71 _RL , 72 _FR , and the actual wheel cylinder fluid The supply current to the coil is determined so that the pressure is the same as the target hydraulic pressure.

The hydraulic brake system of the brake-by-wire system, the driver operates the brake pedal 51, the hydraulic circuit leading from the master cylinder 52 to the wheel cylinders 81 is interrupted by the master cut valve V _MC, during normal braking, the power supply unit 60 Is adjusted by the pressure-increasing linear valve 71 of the pressure adjusting unit 70 and supplied to the wheel cylinder 81. The pressure adjustment by the pressure-increasing linear valve 71 at this time is such that the amount of operation of the brake pedal 51 by the driver is the stroke sensor _PSS , and the hydraulic pressure corresponding to the brake operation force generated by the master cylinder 52 is the pressure sensor _PMC. Therefore, the hydraulic pressure supplied to the wheel cylinder 81 during normal braking is a value corresponding to the brake operating force by the driver.

This hydraulic brake system includes a power supply unit 60 and a pressure adjusting unit 70 having a pressure increasing linear valve 71 and a pressure reducing linear valve 72. Therefore, the driver's intention is determined by the ECU by determining the hydraulic pressure of the wheel cylinder 81. The pressure can be adjusted to an arbitrary value not based on the control, and anti-lock control (ABS), vehicle stability control (VSC), cooperative control with regenerative braking, and the like can be performed. Incidentally, the valve opening when when such as pumps and electrical system no longer perform the liquid pressure supply from to pressure regulating section 70 failure, the master cut valve V _MC is to remain opened, also no failure The solenoid valve 53 is kept closed, and the hydraulic pressure generated by the master cylinder 52 is supplied to the wheel cylinder 81, and braking is performed by the hydraulic pressure.

  In the on-vehicle electronic control device configured as described above, communication of transmission data is performed when data is transmitted and received between the serial communication unit 14 of the microcomputer 10 and the serial communication buffers 21 and 31 of the two peripheral ICs 20 and 30. A transmission data abnormality monitoring system for monitoring abnormality is provided. That is, the data transmitted from the microcomputer 10 to the two peripheral ICs 20 and 30 is transmitted with an ID code. At this time, the data received by the two peripheral ICs 20 and 30 is transmitted to the microcomputer 10 and received. When an abnormality occurs in the ID code of the data to be transmitted, the serial communication unit 14 and the serial communication buffers 21 and 31 send the ID code to the data transmitted from the microcomputer 10 in advance so that the ID code is always set to an unset ID code. The transmission data abnormality monitoring system is configured by setting the reception signal.

  A general communication processing procedure performed in the transmission data abnormality monitoring system is as follows. First, (1) serial communication is performed between the microcomputer 10 and the peripheral IC 20 and the peripheral IC 30, respectively. (2) At that time, an ID code that can distinguish the peripheral IC 20 and the peripheral IC 30 is given to the communication data. Based on the ID code, it is possible to determine whether it is communication data with the peripheral IC 20 or communication data with the peripheral IC 30 (for example, (a) in FIG. 4, the ID code in FIGS. II and III, (c) in FIGS. ID reference). Also, (3) the data contents are discriminated in the peripheral ICs 20 and 30 by their IDs (see, for example, (b) in FIGS. 4B and II, III, (d) ID codes in FIGS. II and III). ). (4) When the peripheral ICs 20 and 30 receive the data, the peripheral ICs 20 and 30 transmit the data to the microcomputer 10 using the same ID code as the ID assigned to the data.

  In data communication between the microcomputer 10 and the peripheral ICs 20 and 30, reception is performed in a state where an abnormal inversion of 1 bit or 2 bits has occurred in either the data transmitted by the microcomputer 10 or the ID code of the received data. If the communication error occurs, or if the ID code is abnormally inverted by 2 bits and the two peripheral ICs 20 and 30 transmit to the microcomputer 10 at the same time, a data error (data bit value differs between transmission and reception) occurs. There are cases. In any case, the communication is abnormal, and the microcomputer 10 determines that there is an abnormality. Such abnormality determination has three modes as follows.

(5) When data of an ID code different from the ID code transmitted by the microcomputer 10 is received, it is determined that there is an abnormality.
(6) When data of ID code that is not defined in both the peripheral ICs 20 and 30 and the microcomputer 10 is received, it is determined as abnormal.
(7) If a data collision (simultaneous reception of different bit data) occurs because the ID code is abnormally inverted by 2 bits, the data bit value becomes 0 due to the collision of the data bit values 1 and 0, and it is determined that there is an abnormality.

A specific example of the abnormality determination is shown below. In the following description, it is not necessarily in the order of the above-described abnormality determination mode, and the case of 1-bit abnormality inversion and 2-bit abnormality inversion will be described separately. (A) 1-bit ID code abnormality When 1-bit abnormal inversion of ID code is assumed, an ID code is set in advance so as to be an undefined (unset) ID code, and the 1-bit abnormal inversion ID code is set as the peripheral IC 20 , 30 and the microcomputer 10 receives the signal, it is determined that there is an abnormality. For example, when ID0011 is set for transmission to the peripheral IC 20, when ID0111 is transmitted to the microcomputer 10 by 1-bit abnormal inversion, as shown in FIGS. 4A and 4B, ID0111 is obtained. Is determined to be abnormal because the ID does not exist (unset). The same applies to transmission from the microcomputer 10 to the peripheral IC 30. This is the case of abnormality determination (6).

(B) 2-bit ID code abnormality When 2-bit abnormal inversion of the ID code is assumed, abnormality is determined by setting the ID code as follows.
(A) As shown in the code column I in FIGS. 4A and 4B, the data from the microcomputer 10 to the peripheral IC 20 is set to Q & A, and the ID code is set to 0000. Q & A is not actual data, but data that is set in advance to a combination of columns with a predetermined bit value (combination of 0 and 1). For example, a bit string in which even bits are all set to 1 and others are set to 0 To do.
(B) As shown in the code column IV of FIG. 4D, the data from the peripheral IC 30 to the microcomputer 10 is set to be unset (all bits are Hi) (hereinafter, Hi is 1, Lo indicates 0), and the ID code is set to 1111.

  When the 2-bit ID code abnormal inversion occurs in this way, when the peripheral IC 20 and the peripheral IC 30 transmit data to the microcomputer 10 at the same time, a data collision occurs, and the microcomputer sets the ID code to Lo ID, The microcomputer 10 receives the data as Lo-side data and determines that the data is abnormal. This is the case of abnormality determination (7). Here, the case where the above-described 2-bit ID code abnormal inversion occurs will be specifically described.

(Collision 1) Collision between ID code 0000 and 2-bit Hi ID code (2-bit Hi ID code refers to one in which two bit data of ID code is 1 like 1001)
When the microcomputer 10 transmits a 2-bit Hi ID (example 1001), an abnormality is determined based on the answer ID code abnormality. For example, when the microcomputer 10 transmits a 2-bit Hi ID code 1001, the peripheral IC 30 normally receives data → the peripheral IC 30 transmits data of the ID code 1001 to the microcomputer 10.

  On the other hand, when the peripheral IC 20 receives the 2-bit Hi ID code 1001 as the ID code 0000 due to the 2-bit abnormal inversion, the peripheral IC 20 transmits the data of the ID code 0000 to the microcomputer 10. The ID code 0000 collides, and the microcomputer 10 receives it as the ID code 0000. The microcomputer 10 receives the ID code 0000 in spite of transmitting the data of the ID code 1001, and therefore receives an ID code different from the transmitted ID code, and determines that the communication with the peripheral IC is abnormal. This is the case of abnormality determination (5).

When the microcomputer 10 transmits an ID code 0000 (not a 2-bit Hi ID), the peripheral IC 20 normally receives data → the peripheral IC 20 transmits data with the ID code 0000 to the microcomputer 10. On the other hand, when the peripheral IC 30 receives the ID code 1001 due to 2-bit abnormal inversion, the peripheral IC 30 transmits the data of the ID code 1001 to the microcomputer 10, and the ID code 0000 and the ID code 1001 collide in the microcomputer 10. The computer 10 receives the ID code as 0000 (data contents are on the Lo side). For this reason, the microcomputer 10 recognizes the ID code from the peripheral IC as normal, but determines that the data is abnormal because the data content is Lo and is different from the Q & A data. This is the case of abnormality determination (7).

(Collision 2) Collision between 2-bit Hi ID codes In this case, the microcomputer 10 determines abnormality by detecting an answer ID abnormality. For example, assume that the microcomputer 10 transmits the ID code 0011. In this case, the peripheral IC 20 normally receives the data. The peripheral IC 20 transmits the data of the ID code 0011 to the microcomputer 10. On the other hand, when the peripheral IC 30 receives the ID code 1010 due to 2-bit abnormal inversion, the peripheral IC 30 transmits the data of the ID code 1010 to the microcomputer 10, and the ID codes 0011 and 1010 collide with each other in the microcomputer 10. 10 receives the ID code as 0010. Since the microcomputer receives an ID code that is not defined, it is determined to be abnormal. This is the case of abnormality determination (6).

(Collision 3) When the microcomputer 10 transmits the ID code 1111 and the collision / ID code 1111 of the 2-bit Hi ID, the microcomputer 10 determines abnormality by detecting the reply ID abnormality. For example, when the microcomputer 10 transmits the ID code 1111, the peripheral IC 30 normally receives data → the peripheral IC 30 transmits data of the ID code 1111 to the microcomputer 10. On the other hand, when the peripheral IC 20 receives the ID code 0011 due to 2-bit abnormal inversion, the peripheral IC 20 transmits the data of the ID code 0011 to the microcomputer, and the ID codes 1111 and 0011 collide with each other in the microcomputer 10. Receives the ID code as 0011. Although the microcomputer 10 has transmitted the data of the ID code 1111, the ID code 0011 has returned, so that it is determined as abnormal. This is the case of abnormality determination (5).

When the microcomputer 10 transmits a 2-bit Hi ID code In this case, the ID code from the peripheral IC 30 to the microcomputer 10 is set to 1111 and the data is not set (Hi output), so that the ID code is sent and received. No abnormalities occur (no effect). For example, when the microcomputer 10 transmits the ID code 0011, the peripheral IC 20 normally receives the data. The peripheral IC 20 transmits the data of the ID code 0011 to the microcomputer 10.

On the other hand, when the peripheral IC 30 receives ID 1111 due to 2-bit abnormal inversion, the peripheral IC 30 transmits the data of the ID code 1111 to the microcomputer 10, and the ID codes 0011 and 1111 collide with each other in the microcomputer 10. Received as ID code 0011. Therefore, the microcomputer 10 recognizes the ID code and normal, because you are all H _i output data to the peripheral IC 30 → microcomputer 10, the data content without changing the data of ID0011, transmission, reception abnormal There is no effect on the judgment. Therefore, it is not treated as abnormal.

  In the above-described embodiment, the ID code is a 4-bit code. However, the ID code setting and the abnormality determination method are similarly applied to a 4-bit or more bit code.

  The transmission data abnormality monitoring system of the on-vehicle electronic control device according to the present invention is a system that monitors the presence or absence of abnormality of communication data by serial communication between a microcomputer and at least two or more peripheral ICs. It can be widely used for in-vehicle electronic control devices having a control circuit.

Main part schematic block diagram of in-vehicle electronic control device provided with transmission data abnormality monitoring system of embodiment The principal part schematic block diagram of an example of the hydraulic brake system which applies a vehicle-mounted electronic control apparatus same as the above Illustration of serial communication Illustrations of specific examples (a) to (d) of ID codes for data communication between the microcomputer and two peripheral ICs

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Microcomputer 11 Input part 12 Calculation part 13 Output part 14 Serial communication part 20 Peripheral IC (input side)
21 Serial communication buffer 22 Control prohibition unit 23 Relay control unit 24 Power supply monitoring unit 30 Peripheral IC (output side)
31 Serial communication buffer 32 Control prohibition unit 34 Power supply monitoring unit 36 Linear drive unit 37 Motor relay drive unit 38 Solenoid

Claims (6)

  A microcomputer (10) for controlling a vehicle brake device and at least two or more peripheral ICs (20, 30) are provided, and a serial communication unit (14) provided in the microcomputer (10), and at least two or more Vehicle-mounted electronic devices that monitor the operation of the microcomputer by communicating data calculated by the microcomputer (10) between the serial communication buffers (21, 31) provided in each of the peripheral ICs (20, 30) In the control device, when data transmitted from the microcomputer (10) to at least two or more peripheral ICs (20, 30) is transmitted with an ID code, at least two or more peripheral ICs (20, 30) are transmitted. An error occurred in the ID code of the data received by sending the data received at the microcomputer (10) If the transmission data abnormality monitoring system of the in-vehicle electronic control unit to set the ID code to set or data collisions so that ID code previously unset occurs, and to monitor the normal / abnormal of the transmission data.   The transmission data abnormality monitoring of the on-vehicle electronic control device according to claim 1, wherein the ID code is set so that an abnormality is detected when the microcomputer receives an ID code different from the ID code transmitted by the microcomputer. system.   The in-vehicle electronic control device according to claim 1, wherein the ID code is set so as to be determined to be abnormal when data of an ID code that is not defined in at least two or more peripheral ICs and microcomputers is received. Transmission data abnormality monitoring system.   The ID code is set so that when a data collision occurs due to an ID code 2-bit abnormal inversion, the microcomputer determines that the data bit value is 0 by receiving a data bit value of 1 and 0 and determines that it is abnormal. The transmission data abnormality monitoring system for an on-vehicle electronic control device according to claim 1.   The in-vehicle electronic control device according to any one of claims 2 to 4, wherein when the transmission data is determined to be abnormal, an abnormality treatment for prohibiting control is individually performed in each peripheral IC (20, 30). Transmission data abnormality monitoring system.   The peripheral ICs (20, 30) perform signal processing on the input side of a microcomputer, drive processing of an electrical load with a signal on the output side, monitoring / blocking and / or prohibition of a relay, etc. The transmission data abnormality monitoring system of the vehicle-mounted electronic control apparatus in any one of Claims 1 thru | or 5.

Images