JP2009143285A - Engine control device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To cause an engine control device having an anti-theft function to avoid a dangerous state such as a fast deceleration of a vehicle due to a stoppage of an engine caused by a prohibition of engine control when the control device is reset during moving operation of the vehicle and to perform a positive execution of an anti-theft preventive operation even if the vehicle is forcedly towed or a signal is given to a sensor input at the time of usual vehicle starting operation. <P>SOLUTION: A vehicle moving condition is detected in response to the number of rotation of an engine or a vehicle speed and when it is determined that the vehicle is moving, an anti-theft control is invalidated. Values stored and updated in a back-up RAM can be used only for a period of permitting engine control through a theft-preventive control as the number of rotation of the engine and the vehicle speed used for this determination. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to an automobile engine control apparatus, and more particularly to an apparatus useful for improving safety performance of vehicle antitheft control.

  In recent years, from the viewpoint of vehicle anti-theft, in an automobile engine control system having a vehicle anti-theft device, the operation of the engine is restricted through authentication communication between the engine control device and the anti-theft device. Techniques for preventing vehicle theft are known.

  In Patent Document 1, a key ID code signal is transmitted from the transponder built in the key to the immobilizer, the key ID code is collated in the immobilizer, and when the collation is completed, the ID code signal is transmitted from the immobilizer to the engine control unit. When the ID code can be verified in the engine control unit, a flag indicating that the engine can be started is set in the engine control unit so that the engine can be started, and when the engine stop operation according to a normal procedure is completed, the engine control unit An immobilizer system for resetting a flag, wherein an engine unit attachment / detachment detecting means for detecting attachment / detachment of the engine control unit, and when the engine unit attachment / detachment detection means detects attachment / detachment of the engine control unit, Yu Tsu Preparative the immobilizer system comprising providing any of the immobilizer or the engine control unit and a forced initializing means for returning the engine control unit forcibly initial state when power is restored is shown.

  Specifically, once the engine control unit is detached, the engine unit attachment / detachment detection means detects the attachment / detachment of the engine control unit. Thereafter, when the power is restored by reconnecting the engine control unit to the immobilizer. The engine control unit is forcibly returned to the initial state by the forced initialization means, and the ID code is lost. As a result, even if the engine start permission flag is set and the engine control unit is illegally detached and connected to an immobilizer of another vehicle of the same vehicle type, the engine control unit is restored when the power supply of the engine control unit is restored by the connection with the immobilizer. The control unit is forcibly returned to the initial state, the ID code cannot be verified, the engine is prevented from starting, and the anti-theft function is improved.

JP-A-9-175330

  When the CPU is reset due to a disturbance such as noise, the engine control device starts a new anti-theft authentication communication as the power is restored. At this time, the vehicle is running and the ID code is lost (ignition key having the ID code is broken), the anti-theft device is broken, the anti-theft function of the engine control device is broken, or the communication function of the anti-theft authentication communication is broken. (Disconnected or short-circuited), especially when driving at high speeds, there is a problem that the engine stops, causing the deceleration of hydraulic actuators that use the engine as a power source, such as sudden deceleration or power steering. is there.

  The present invention proposes an engine control apparatus that can cope with the above-described problems, and even when the CPU is reset while the vehicle is running, the anti-theft performance can be maintained at a high level without impairing the driving safety. A device is proposed.

  The configuration for achieving the above object includes a vehicle driving state detection sensor that detects a driving state of a vehicle, a sensor output detection unit that detects an output of the sensor, and a control that indicates the driving state of the vehicle by the sensor output detection unit. Sensor output conversion means for converting into parameters, memory means for storing the control parameters without initializing the parameters during the reset process of the CPU, engine operation permission determination means for determining whether the engine operation is permitted or prohibited, and When a CPU reset occurs in the control device of the automobile engine, the vehicle is set to a predetermined high vehicle speed based on the parameters stored in the memory means and the control parameters detected by the sensor output detection means after the CPU reset occurs. Based on the determination result of the determination means and the determination result of the determination means Consisting of a motor vehicle engine operation permission determining means for determining whether a reset of the previous determination or CPU adopts the determination result of the subsequent generated to reset the CPU is generated in the antitheft device of the motor vehicle Te.

  According to the present invention, in a car engine control device having an anti-theft function, when the CPU of the engine control device is reset, the driving state of the vehicle is determined based on the engine parameters such as the vehicle speed and the engine speed. Since the determination as to whether or not to permit engine control is performed prior to the anti-theft function, it is possible to maintain high vehicle driving safety and anti-theft function.

Example 1
A configuration example of the engine control system of the present invention will be described below with reference to FIG.

  Reference numeral 20 denotes an engine control device (hereinafter abbreviated as ECU), which is based on inputs from the engine rotation sensor 8, the vehicle speed sensor 26, the coolant temperature sensor 17, the intake air amount sensor 9, and the like, and the fuel injection valve 4, the ignition device 10 and so on. The output signal to the idle rotation control device 2 is controlled. The ECU includes a central processing unit 21 (hereinafter abbreviated as “CPU”), a non-volatile memory (hereinafter abbreviated as “ROM”) 32, a volatile memory (hereinafter abbreviated as “RAM”) 23, the above-described input / output and communication described later. The RAM 23 includes a part that is initialized when the ignition key is switched from OFF to ON or when the ECU 20 is reset internally or by a disturbance. It is divided into portions that retain the stored contents without being initialized (hereinafter abbreviated as backup RAM = B-RAM 33).

  On the other hand, the vehicle antitheft device 40 verifies and determines whether or not the signal of the encryption code transmitter incorporated in the ignition key (not shown) matches the code stored in advance by reading with the antenna. The determination result is transmitted to the ECU 20 via 41. The ECU 20 requests the anti-theft device 40 to read and verify the code when the ignition key is ON. Thereafter, the ECU 20 receives the collation determination result from the anti-theft device 40, and outputs to the fuel injection valve 4, the ignition device 10, the idle rotation control device 2 or the like based on the received content, or an arithmetic process for outputting. Allow or prohibit.

  Next, an embodiment of the control contents of the ECU according to the present invention will be described using the control flow of FIG.

  The ECU first executes an initialization process 210 when the ignition key is switched from OFF to ON, or when the ECU 20 is reset internally or due to a disturbance. In the initialization process 210, the contents of the RAM 23 are initialized to values stored in the ROM 32 in advance. However, as described above, the backup RAM 33 of the RAM 23 is not initialized and retains the previous value. However, the stored contents of the backup RAM 33 are checked, and if the stored contents are destroyed due to power-off or the like, it is initialized to a predetermined value stored in the ROM 32 as in the normal RAM 23.

  After completion of the initialization process 210, the ECU 20 executes an anti-theft process 220. In the anti-theft process 220, first, the engine speed NBU and the vehicle speed VSPBU stored and held in the backup RAM 33 are threshold values NENA (values higher than the idle speed, typically 2000 rpm) stored in the ROM 32. Degree), VSPENA (value that can be determined to be traveling in the vehicle, or value that is considered dangerous to stop the engine, typically 5 to 80 km / h). If any of these values is greater than the threshold value, it is determined that the engine is operating or the vehicle is running, the prohibition flag is cleared, and the routine jumps to normal engine control 230. On the other hand, if these values are smaller than the threshold value and it is determined that the engine is stopped and the vehicle is stopped, the anti-theft device 40 is requested to read and verify the code via the communication line 41. . The ECU 20 waits for the collation determination result from the antitheft device 40, and sets a prohibition flag when there is no transmission from the antitheft device 40 even when a predetermined time has elapsed or when an engine control prohibition request is received. When the engine control permission request is received within the time, the prohibition flag is cleared. Thereafter, the ECU 20 starts normal engine control 230.

  During the normal engine control 230, when the prohibition flag is set, the output to the fuel injection control 231 or the fuel injection valve 4, the output to the ignition control 232 or the ignition device 10, the idle rotation control 234 or the idle rotation The output to the control device 2 etc. is prohibited so that the engine cannot be started and operated. When the prohibition flag is cleared, the fuel injection control 231, the ignition control 232, the idle rotation control 233, etc. are permitted and executed, and the engine can be started and operated. Further, while this control is permitted, the engine speed N and the vehicle speed VSP are stored and updated in the NBU and VSPBU of the backup RAM 33 at regular intervals. In the prohibited state, these storage updates are not performed.

  Next, the operation of the engine control device based on this configuration will be described.

  First, when the power is turned on for the first time immediately after the ECU 1 is mounted on the vehicle or after the power is turned off, the backup RAM is initialized in the initialization process and stored in the ROM 32 in the NBU and VSPBU. (A value less than or equal to NENA, VSPENA, typically 0) is stored. In the anti-theft process 220, NBU and VSPBU are less than or equal to NENA and VSPENA, so permission / prohibition of engine control based on the communication with the anti-theft device and the code verification result is determined. Thereafter, the engine speed and the vehicle speed are stored and updated as needed in the NBU and VSPBU while the engine is being started, operated, and traveling in the vehicle with the engine control permitted. Thereafter, when the vehicle is stopped and the engine is stopped by turning off the ignition key, a small value (typically 0 km / h) is held in NBU, and a value smaller than about the idle speed is held in VSPBU.

  Second, when the power is turned on after the end of the first state, the contents of the backup RAM are retained. Therefore, in the initialization process 210, NBU and NVSP are not initialized, and the values immediately before turning off the previous ignition key are used. keeping. In the anti-theft process 220, since these values are below NENA and VSPENA, permission / prohibition of engine control based on the communication with the anti-theft device and the code collation result is determined. During operation when engine control is permitted, the operation by turning off the ignition key is the same as in the first case.

  Third, when the engine control is permitted in the first or second state and the ECU 1 is reset for some reason during engine operation (NBU> NENA) or vehicle driving (VSPBU> VSPENA), NBU and VSPBU stored in the backup RAM hold values immediately before resetting, and any of these values is larger than NENA or VSPENA. Jump to engine control 230. In this case, since the ECU 20 does not communicate with the anti-theft device 40 and immediately executes the normal engine control 230, the engine control stop time due to the reset is almost the same as that when the anti-theft control 220 is not applied. It is. Even if the anti-theft device 40 breaks down, the engine control permission state is maintained as long as the vehicle continues to travel.

  Further, in addition to the determination during engine operation (NBU> NENA) or the vehicle running (VSPBU> VSPENA), the current (starting) determination during engine operation (for example, the current engine speed parameter is defined as NPR, the determination formula is NPR> NENA) or vehicle running determination (for example, if the current engine speed parameter is defined as VSPPR, the determination formula is VSPPR> VSPENA). These advantages are effective when the power-off occurs in a state higher than the travel determination during travel, the reset is completed in a state less than the travel determination (for example, the vehicle stop state), and the anti-theft function operates. .

  Fourth, even after the first or second state ends, even if the engine rotation signal or the vehicle speed signal is directly input to the ECU 20 for the purpose of vehicle theft or the vehicle is pulled to create the vehicle running state, In the state where engine control is not permitted, NBU and VSPBU are not updated, and the ECU 20 refers to and determines the NBU and VSPBU stored in the backup RAM 33 during the engine control permission. The communication request with the prevention device 40 is requested, and the result is that the code read from the encryption code transmitter incorporated in the ignition key does not match the code stored in advance, or the anti-theft device 40 When it is removed and there is no response to the request from the ECU 20, the vehicle control is prevented by prohibiting engine control. It can be.

An example of the system configuration of the present invention. An example of the control flow of the ECU control content by the present invention.

Explanation of symbols

2 Idle rotation control device 4 Fuel injection valve 8 Engine rotation sensor 9 Intake air amount sensor 10 Ignition device 17 Cooling water temperature sensor 20 Engine control device 21 Central processing unit 23 Volatile memory 24 A circuit for processing input / output and communication (IO port) )
26 Vehicle speed sensor 32 Non-volatile memory 33 Backup RAM
40 Vehicle anti-theft device 41 Communication line

Claims (5)

A vehicle driving state detection sensor for detecting the driving state of the vehicle;
Sensor output detection means for detecting the output of the sensor;
Sensor output conversion means for converting into a control parameter indicating the driving state of the vehicle by the sensor output detection means;
Memory means for storing the control parameters without initializing them during a reset process of the CPU;
An engine control device comprising an engine operation permission determination means for determining whether or not to permit engine operation,
When the CPU reset occurs,
Means for determining whether the vehicle is in a predetermined vehicle speed state based on the control parameter stored in the memory means and the control parameter detected by the sensor output detection means after the reset of the CPU occurs;
An automobile engine that determines which one of the determination result before the CPU reset in the vehicle anti-theft means and the determination result after the CPU reset is adopted based on the determination result of the determination means. An engine control device comprising: an operation permission determination unit.   The control device according to claim 1, wherein the control device includes at least vehicle speed information and ignition key ON / OFF state information as control parameters.   3. The control device according to claim 1, further comprising a memory that is not initialized when the CPU is reset, and the control parameter is stored in a memory that is not initialized when the CPU is reset. An engine control device.   4. The control device according to claim 3, wherein means for determining whether or not the vehicle is in a predetermined vehicle speed state uses two values: a value immediately before the CPU is reset and a value after the CPU is reset. An engine control device for determining a vehicle speed state.   5. The control device according to claim 1, further comprising communication means for communicating with another control device, wherein at least one of the control parameters stored in the memory means is obtained from the other control device by the communication means. An engine control device characterized in that the value is set based on the information obtained.

Images