JP2008290667A - Control system, control device, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To allow a user to easily recognize that a combination of procedures to be performed by control devices is abnormal and objects to be controlled are not normally controlled. <P>SOLUTION: If a combination of procedures to be performed by the control devices 10 is not a combination of procedures to be performed by control devices to execute control processing in coordination (s140[NO]), the objects to be controlled are not in a standby condition (s150) and control with control processing is not performed. Thus, even when control processing with the control devices 10 is performed, the objects to be controlled are not controlled by control processing. In accordance with such abnormal behavior that the objects to be controlled are not controlled, a user can easily recognize that the combination of the procedures to be performed by the control devices 10 is abnormal and the objects to be controlled are not normally controlled. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a control system configured to cooperatively execute a control process for controlling a controlled object by each of a plurality of control devices.

In recent years, a control system configured to cooperatively execute a control process for controlling a control target by each of a plurality of control devices has been used (see, for example, Patent Document 1).
In such a control system, when changing functions and specifications of the system, it is common to replace the control device itself or update the program of the control device.
Japanese Patent Laid-Open No. 11-316177 (FIG. 1 etc.)

  In the control system as described above, there is no problem if the control device is exchanged or the program is updated normally when the function or specification is changed. If you forget to replace the program or forget to update the program that should be updated, the functions and specifications may not be changed properly.

  In this case, the combination of processing procedures (specifically, program versions, etc.) to be executed by each control device in order to execute the control processing in a coordinated manner is not a correct combination. There is a risk that it will not work properly.

  However, if there is a clear change in the behavior of the controlled object due to such a combination abnormality, the change in the behavior causes the user to recognize that control of the controlled object is not performed normally. In addition, the control process can be interrupted.

  However, if there is no clear change in the behavior of the controlled object or the behavior does not change unless a special control state is established, the user is made aware that control of the controlled object has not been performed normally. As a result, the control process is continued without the normality of the controlled object.

  Continuing the control process in this state not only does not sufficiently improve the performance that should have been improved by changing the functions and specifications, but also damages the components in the controlled object. This is not desirable because there is a risk of doing so.

  The present invention has been made to solve such a problem, and the purpose of the present invention is that a combination of processing procedures to be executed by each control device becomes abnormal, and control of a control target is not normally performed. It is to provide a technique for enabling a user to easily recognize that the user is present.

  A control system for solving the above problems is a control system configured to execute a control process for controlling a control target by each of a plurality of control devices in a coordinated manner. It is preferable to adopt the first configuration as shown in FIG.

  First, prior to the control of the control target by the control process, the management control device, which is one of a plurality of control devices, uses a managed control device from each managed control device that is a control device other than the management control device. A combination of information collection means for collecting procedure information relating to a processing procedure performed as part of the control processing, and each of the processing procedures indicated by the procedure information collected by the information collecting means cooperates with the control processing. A combination determination unit that determines whether or not the combination of processing procedures to be executed by each of the managed control devices to be executed in order to execute, and when the combination determination unit determines that the combination matches, State switching means for switching the state to a standby state that can be controlled by the control process.

  Then, each managed control device transmits, to the management control device, procedure information related to a processing procedure assigned to the managed control device as part of the control processing prior to control of the control target by the control processing. Information notifying means for notifying, and configured to execute a processing procedure related to the procedure information after notification of the procedure information by the information notifying means.

  In the case of the control system configured as described above, the combination of the processing procedures indicated by the procedure information acquired from each control device is a processing procedure to be executed by each control device in order to execute the control processing in a coordinated manner. When the combination (hereinafter referred to as “cooperative implementation combination”) is matched, the state of the control target is switched to the standby state. That is, on the condition that the combination of the processing procedures executed by each control device is a cooperative execution combination, the control target is in a standby state, thereby enabling control by control processing.

  On the other hand, if the combination of processing procedures executed by each control device is not a cooperative execution combination, the control target is not in a standby state, and control by control processing is not performed. Therefore, even if the control processing is performed by each control device, the control target is not controlled by this control processing, and based on the abnormal behavior that the control target is not controlled in this way, the control device The combination of processing procedures to be performed by each becomes abnormal, so that the user can easily recognize that the control target is not normally controlled.

  Further, in this configuration, since the control target is not controlled unless the combination of the processing procedures executed by each control device is a cooperative execution combination, this causes damage to the components in the control target. This can be prevented.

  Moreover, in the said 1st structure, it is good to set it as the 2nd structure provided with the following non-notification alerting | reporting means in the management control apparatus. In the second configuration, the management control device includes abnormality notification means for notifying that the control target cannot be normally controlled when the combination determination means determines that the combination does not match.

  With this configuration, when the combination of processing procedures is not a cooperative implementation combination, it is possible to notify the user immediately by notifying that the control target cannot be normally controlled.

  In addition, as a control system for solving the above-described problem, a control system configured to cooperatively execute a control process for controlling a control target by each of a plurality of control devices, and each control device A third configuration configured as shown below may be adopted.

  First, prior to the control of the control target by the control process, the management control device, which is one of a plurality of control devices, uses a managed control device from each managed control device that is a control device other than the management control device. A combination of information collection means for collecting procedure information relating to a processing procedure performed as part of the control processing, and each of the processing procedures indicated by the procedure information collected by the information collecting means cooperates with the control processing. A combination determination unit for determining whether or not a combination of processing procedures to be executed by each of the managed control devices to be executed in order to execute, and when the combination determination unit determines that the combination does not match, the control And non-execution notification means for informing that processing cannot be executed in a coordinated manner.

  Then, each managed control device transmits, to the management control device, procedure information related to a processing procedure assigned to the managed control device as part of the control processing prior to control of the control target by the control processing. Information notifying means for notifying, and configured to execute a processing procedure related to the procedure information after notification of the procedure information by the information notifying means.

  In the case of the control system configured as described above, when the combination of the processing procedures indicated by the procedure information acquired from each processing device matches the cooperative implementation combination, the control system is notified that the control target cannot be normally controlled. As a result, it is possible to immediately inform the user that the controlled object cannot be normally controlled.

  If the user who has received this notification and recognizes that the control target cannot be controlled normally is interrupted, the control process is prevented from continuing as it is. be able to.

  As a result, even if the combination of the processing procedures executed by each control device becomes abnormal, the control processing can be prevented from being executed continuously, and as a result, the components in the controlled object are damaged. Can be prevented.

  In the third configuration, the management control device may be a fourth configuration including the following state switching unit. The fourth configuration includes state switching means for switching the control target state to a standby state controllable by the control process when the management control device determines that the combination matches by the combination determination means. ing.

  If it is this structure, on condition that the combination of the processing procedure implemented by each processing apparatus corresponds with a cooperation implementation combination, a control object will be in a standby state, and control by control processing is attained by this.

  On the other hand, if the combination of processing procedures executed by each control device is not a cooperative execution combination, the control target is not in a standby state, and control by control processing is not performed. Therefore, it is possible to prevent the components in the controlled object from being damaged when the combination of the processing procedures executed by each control device is not a cooperative execution combination.

  In each of the above configurations, the specific method of notification by the abnormality notification means is not particularly limited. For example, it is indicated that the control target cannot be normally controlled in the storage area of the management control device accessible from the outside of the control system. It may be possible to notify the external device that has accessed the storage area by storing the information shown. It is also conceivable to notify that by outputting a message indicating that the controlled object cannot be controlled normally.

  In addition, the state switching unit of the management control device in each of the above configurations is a unit that switches the state of the control target to the standby state. For example, the component in the control target issues a command from each control device that performs each processing procedure. It is configured to perform processing such as supplying power to each component or conducting a command path for giving a command to each component so that it can be operated by receiving it. Can be considered.

  By the way, the above-described management control device may be configured not to execute the processing procedure as a part of the control processing, or may be configured to allocate the processing procedure as a part of the control processing and execute the processing procedure. Good.

In order to carry out the processing procedure in this way, in each of the above-described configurations, it is conceivable that the management control device has a fifth configuration as shown below.
In the fifth configuration, the combination determination unit includes a combination of each processing procedure indicated by the procedure information collected by the information collecting unit and a processing procedure assigned to the management control device. Is determined to match with a combination of processing procedures to be executed by each of the control devices in order to execute the process in a coordinated manner, and if the combination is determined to match, the management control device is assigned. It is comprised so that a processing procedure may be implemented.

  With this configuration, it is possible to cause each control device to execute the processing procedure after determining whether or not the combination of the processing procedures including the processing procedure of the management control device is abnormal.

  Further, in each of the above configurations, the combination determination unit of the management control device is a unit that determines whether or not each combination of the processing procedures matches the cooperative implementation combination. For example, the combination determination unit It is conceivable that the means is a sixth configuration as described below.

  In the sixth configuration, the combination determination unit is a data table in which combinations of corresponding process contents are registered as combinations of process contents to be executed by the respective control devices in order to execute the control processes in a coordinated manner. When the combination is registered, it is determined that the combination matches.

If it is this structure, it can be determined immediately with reference to a data table whether each combination of a processing procedure corresponds with a cooperation implementation combination.
In addition, as a configuration for solving the above-described problem, a seventh configuration, which is a control device including all the units included in the management control device in any of the first configuration to the sixth configuration, It is also conceivable to adopt an eighth configuration which is a program for causing a computer system to execute various processing procedures for functioning as all the units included in the management control device in any one of the configuration to the sixth configuration.

This is because with these configurations, any one of the first configuration to the sixth configuration can be configured.
Note that the above-described program is composed of an ordered sequence of instructions suitable for processing by a computer system, and is provided to a control device and a user who uses the control device via various recording media and communication lines. Is.

Embodiments of the present invention will be described below with reference to the drawings.
(1) Overall Configuration As shown in FIG. 1, the control system 1 is configured to cooperatively execute a control process for controlling a control target by each of a plurality of control devices 10. In the present embodiment, a case where a vehicle is a control target is illustrated.

Each of the control devices 10 is configured as an ECU (Electronic Control Unit) for controlling the operation of different components (engine, battery, motor, etc .; not shown) in the control target, A processing procedure to be executed as a part of is assigned. This processing procedure is configured to be performed after an initialization process described later is performed. Among these control devices 10, the management control device (see “HV-ECU” in FIG. 1) that is one of the control devices 10 operates (the process is not processed) of the other control device 10. It is configured as an ECU for controlling (execution).
(2) Processing by the control device 10 Hereinafter, processing performed by the control unit of the control device 10 will be described.
(2-1) Initialization Process by Management Control Process First, the process procedure of the initialization process executed by the control unit when the management control apparatus is activated when the entire control system 1 is activated is based on FIG. I will explain.

  When this initialization process is started, first, it is checked whether or not communication with another control apparatus 10 is normally performed (s110), and communication is normally performed. If not (s110: NO), the initialization process ends immediately.

  On the other hand, if communication is normally performed in s110 (s110: YES), each piece of procedure information related to the processing procedure executed as a part of the control processing is collected by each managed control device ( s120). Here, the program (specifically, the version number of the program) incorporated in each managed control device for executing the processing procedure is shown as procedure information transmitted from each managed control device by the processing described later. Information is collected.

  Next, in order for each program indicated by the procedure information collected in s120 and a combination of programs incorporated in the management control device to execute the processing procedure to execute the control processing in a coordinated manner. It is checked whether or not it matches the combination of each program corresponding to the processing procedure to be executed by the control device 10 (hereinafter referred to as “cooperative execution combination”) (s130).

  Here, the collation is performed based on a data table (refer to the lower part of FIG. 3) in which programs (version numbers) to be incorporated in the respective control devices 10 in order to execute the control processes in a coordinated manner are registered. Specifically, when the combination of the corresponding programs matches the combination of programs registered in the data table, the matching is normally performed. As shown in FIG. 3, the contents of this data table are changed when the control device 10 is changed or the program is updated when the functions or specifications of the control system 1 are changed. Updated by user's work.

  Here, in the case where the combination of the corresponding program and the combination of the program registered in the data table do not match, when the function or specification as the control system 1 is changed, the control device 10 is replaced or the program is updated. This can occur if not done correctly.

  For example, if the control device 10 that should be replaced is forgotten to be replaced, it is determined that the combination does not match if the program incorporated in the control device 10 is older than the program in the cooperative implementation combination. The Similarly, even when the control device 10 that should originally update the program is forgotten to be updated, since the program is older than the program in the cooperative combination, it is determined that the combination does not match.

  Furthermore, if the data table in the management control device is forgotten to be updated along with changes in functions and specifications, the combination of each program is implemented in a coordinated manner if the program in the other control device 10 is updated to a new one. Despite the combination, it is determined that the combination does not match due to a mismatch with the data table.

  Next, as a result of the collation by s130, when it is determined that the combination of the corresponding programs matches the cooperative implementation combination (see FIG. 4A) (s140: YES), the state of the control target can be controlled by the control process. Switching to the standby state (s150).

  In this s150, power is supplied to each component, or each component is supplied to the component to be controlled in a state where it operates in response to a command from each control device 10 that performs each processing procedure. For example, a process for conducting a command path for commanding is performed, and the state of the control target is switched to the standby state.

In this way, after s150 is performed, the initialization process ends.
If it is determined in s140 that the combination of the corresponding programs does not match the cooperative implementation combination (s140: NO), the cause of the mismatch in the combination of programs is specified (s160).

  Here, as a result of collation by s130, each of the programs indicated by the procedure information collected by s120 and the programs incorporated in the management control device are older than the programs registered in the data table. Is present (see FIG. 4B), it is identified as the above factor that the program update or replacement of the control device 10 is not normally performed. The

  Further, if there is a newer program than the program registered in the data table in the target program group (see FIG. 4C), the control device 10 that should not be replaced is mistakenly selected. It is specified as the above-mentioned factor that the data has been exchanged or forgot to update the data table in the management control device.

Then, after notification that the control target cannot be controlled normally is performed (s170), the initialization process ends. In this s170, the diagnosis information indicating that the control target cannot be normally controlled is stored in the storage area accessible from the external device (see the failure diagnosis tool 100 in FIG. 1) in the management control device together with the specific result in the above s160. Thus, this fact can be notified to an external device that has accessed this storage area. In addition, you may implement | achieve alerting | reporting by this s170 by outputting the message which shows that by a display part or an audio | voice output part.
(2-2) Initialization Process by Managed Control Process Subsequently, when the managed control apparatus is activated with the activation of the entire control system 1, the processing procedure of the initialization process executed by the control unit is illustrated. 5 will be described.

  When this initialization process is started, first, it is checked whether or not communication with another control apparatus 10 is normally performed (s210), and communication is normally performed. If not (s210: NO), the initialization process ends immediately.

  On the other hand, if communication is normally performed in s210 (s210: YES), information indicating the program (version number) incorporated in the managed control apparatus indicates a processing procedure by the program. It is transmitted to the management control device as procedure information (s220). This procedure information is collected by the management control device at s120 in the initialization process.

In this way, after s220 is performed, the initialization process ends.
(3) Operation and Effect In the case of the control system 1 configured as described above, the combination of programs indicated by the procedure information acquired from each control device 10 performs the control processing in a coordinated manner. When the combination of processing procedures to be executed (cooperative execution combination) matches (s140 “YES” in FIG. 2), the state of the control target is switched to the standby state (s150 in FIG. 2). In other words, on the condition that the combination of the processing procedures executed by each control device 10 is a cooperative execution combination, the control target is in a standby state, thereby enabling control by the control process.

  On the other hand, if the combination of the processing procedures executed by each control device 10 is not a cooperative execution combination ("NO" in s140 in the figure), the control target is not in the standby state, and control by the control process is not performed. Therefore, even if the control process is performed by each control device 10, the control target is not controlled by the control process, and the control is performed based on the abnormal behavior that the control target is not controlled in this way. It becomes possible for the user to easily recognize that the combination of processing procedures to be executed by each of the devices 10 becomes abnormal and the control target is not normally controlled.

  Further, in this configuration, since the control target is not controlled unless the combination of the processing procedures executed by each control device 10 is a cooperative execution combination, this causes damage to the components in the control target. Can be prevented.

  In the above embodiment, the management control device controls the control when the combination of the programs indicated by the procedure information acquired from each control device 10 does not match the cooperative implementation combination (s140 “NO” in FIG. 2). The fact that the target cannot be controlled normally is notified (s170 in the figure). Thus, by notifying that the control target cannot be controlled normally, it is possible to immediately notify the user of that fact.

  If the user who has received this notification and recognizes that the control target cannot be normally controlled interrupts the execution of the processing procedure by each control device 10, the control processing is prevented from continuing as it is. can do.

  As a result, even if the combination of processing procedures executed by each control device 10 becomes abnormal, it is possible to prevent the control processing from being executed continuously, resulting in damage to the components in the controlled object. Can be prevented.

In the above embodiment, the management control device immediately determines whether or not the combination of each program indicated by the procedure information acquired from each control device 10 matches the cooperative implementation combination, with reference to the data table. can do.
(4) Modifications The embodiment of the present invention has been described above. However, the present invention is not limited to the above embodiment, and can take various forms as long as they belong to the technical scope of the present invention. Needless to say.

  For example, in the said embodiment, what was comprised so that a control process for controlling this control object might be performed in cooperation with a vehicle as a control object was illustrated. However, it goes without saying that a control object other than the vehicle can be adopted.

Moreover, in the said embodiment, what was comprised so that it might determine whether the control object was in the state normally controlled based on the procedure information which shows the version number of a program was illustrated. This is because the version number of the program is a unique number assigned to the program and can be used to specify the processing procedure based on the unique number. However, the procedure information may indicate other contents as long as it is information related to the processing procedure executed by each control device 10.
(5) Correspondence with the present invention In the embodiment described above, s120 in FIG. 2 is information collecting means in the present invention, s130 and s140 in FIG. 2 are union determination means in the present invention, and s150 in FIG. The state switching means in the present invention, s170 in the figure is the abnormality notifying means in the present invention, and s220 in FIG. 5 is the information notifying means in the present invention.

Block diagram showing the overall configuration of the control system Flow chart showing initialization processing by management control device The figure which shows a mode that the program and data table of each control apparatus are updated. Diagram showing the result of matching program combinations Flow chart showing initialization processing by managed control apparatus

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Control system, 10 ... Control apparatus.

Claims (8)

A control system configured to cooperatively execute a control process for controlling a control target by each of a plurality of control devices,
The management control device that is one of the plurality of control devices,
Prior to the control of the control target by the control process, procedure information regarding a processing procedure executed as a part of the control process by the managed control apparatus is received from each managed control apparatus that is a control apparatus other than the management control apparatus. Information collecting means to collect;
Whether the combination of the processing procedures indicated by the procedure information collected by the information collecting means matches the combination of the processing procedures to be executed by each of the managed control devices in order to execute the control processing in a coordinated manner. Union judging means for judging
A state switching unit that switches the state of the control target to a standby state that can be controlled by the control process when the combination determination unit determines that the combinations match;
Each of the managed control devices
Prior to control of the control target by the control process, the information control means for notifying the management control apparatus of procedure information related to the processing procedure assigned to the managed control apparatus as part of the control process,
A control system configured to execute a processing procedure related to the procedure information after the notification of the procedure information by the information notification unit. The management control device includes:
2. The control system according to claim 1, further comprising: an abnormality notifying unit that notifies that the control target cannot be normally controlled when the combination determining unit determines that the combination does not match. A control system configured to cooperatively execute a control process for controlling a control target by each of a plurality of control devices,
The management control device that is one of the plurality of control devices,
Prior to the control of the control target by the control process, procedure information regarding a processing procedure executed as a part of the control process by the managed control apparatus is received from each managed control apparatus that is a control apparatus other than the management control apparatus. Information collecting means to collect;
Whether the combination of the processing procedures indicated by the procedure information collected by the information collecting means matches the combination of the processing procedures to be executed by each of the managed control devices in order to execute the control processing in a coordinated manner. Union judging means for judging
An abnormality notification means for notifying that the control target cannot be normally controlled when the combination determination means determines that the combination does not match,
Each of the managed control devices
Prior to control of the control target by the control process, the information control means for notifying the management control apparatus of procedure information related to the processing procedure assigned to the managed control apparatus as part of the control process,
A control system configured to execute a processing procedure related to the procedure information after the notification of the procedure information by the information notification unit. The management control device includes:
The state switching means which switches the state of a controlled object to the standby state which can be controlled by the control process when the combination is determined to be coincident by the combination determining means. Control system. In the management control device,
A processing procedure as a part of the control processing is assigned,
The combination determination unit is configured so that each of the processing procedures indicated by the procedure information collected by the information collecting unit and a combination of processing procedures assigned to the management control device execute the control processing in a coordinated manner. Determining whether or not it matches the combination of processing procedures to be performed by each of the control devices,
The control system according to any one of claims 1 to 4, wherein the control system is configured to execute a processing procedure assigned to the management control device when it is determined that the combinations match. In the management control device,
When the combination determination unit is registered in a data table in which a combination of processing contents is registered in a combination of processing contents to be executed by each of the control devices in order to execute the control processing in a coordinated manner. The control system according to claim 1, wherein the combinations are determined to match. All the means with which the management control apparatus in any one of Claim 1 to 6 is provided. The control apparatus characterized by the above-mentioned.   The program for making a computer system perform the various process procedures for functioning as all the means with which the management control apparatus in any one of Claim 1 to 6 is provided.

Images