JP2010111234A - Control device and control method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a control device capable of storing vehicle data of high importance effective to identify a cause of failure in a storage part. <P>SOLUTION: This device includes a micro computer 103 for executing priority control processing to perform a following control processing in prior to a preceding control processing when a plurality of control processings are executed in a constant time, and when a priority set to the preceding control processing is higher than a priority set to the following control processing; and priority control special processing to perform a storage control of a storage control processing in the following control processing when a plurality of storage control processings in the control processing are executed in a constant time, and when a priority set to the following control processing is higher than a priority set to the preceding control processing. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a control device and a control method. In particular, the present invention relates to a control device and a control method used for a vehicle.

  2. Description of the Related Art Conventionally, a vehicle control device records and holds various vehicle data indicating the state of a vehicle in a storage device so that the cause of a failure or the like occurring in the vehicle can be analyzed. In general, the control device normally records vehicle data in a volatile memory such as a RAM (Random Access Memory) at normal times, and stores the vehicle data written in the volatile memory when an abnormality such as a failure occurs. It is configured to record in a non-volatile memory such as (Electronically Erasable and Programmable Read Only Memory) (see, for example, Patent Document 1).

  A processing procedure in the case where the control device detects vehicle data indicating an abnormal value by a control process and records the detected abnormality in a nonvolatile memory will be described with reference to FIGS. 1 and 2. FIG. 1 and FIG. 2 show how the process of detecting an abnormality in vehicle data and recording it in the nonvolatile memory is executed in a low priority control process and a high priority control process, respectively.

  At timing A shown in FIG. 1, the low priority control process detects an abnormal value of the vehicle data, and starts recording the vehicle data indicating the detected abnormal value in the nonvolatile memory. Thereafter, at timing B, the high priority control process detects an abnormal value of the vehicle data, and outputs an interrupt request to record the vehicle data indicating the abnormal value in the nonvolatile memory. The low-priority control process stops recording the vehicle data indicating an abnormal value in the nonvolatile memory in response to an interrupt request from the high-priority control process, and enters a standby state. Note that the low-priority control process at timing A and the high-priority control process at timing B are performed within several tens of msec.

  After that, at timing C shown in FIG. 2, the high-priority control process finishes recording the vehicle data indicating an abnormal value in the nonvolatile memory. The low-priority control process records the vehicle data indicating an abnormal value in the nonvolatile memory at the timing D shown in FIG. 2 in response to the end of recording the vehicle data in the nonvolatile memory in the high-priority control process. Let it resume.

JP 2003-260993 A

  However, if the low priority control process resumes data recording to the nonvolatile memory after the data recording to the nonvolatile memory by the high priority control process is completed, the high priority control process causes the nonvolatile memory to May be overwritten with the vehicle data recorded by the low priority control process. At this time, if the priority of the vehicle data recorded by the high-priority control process is higher than the priority of the vehicle data recorded by the low-priority control process, vehicle data that is effective for identifying the cause of failure, etc. There is a risk of being erased from the nonvolatile memory.

  The present invention has been made in view of the above circumstances, and provides a control device and a control method capable of storing high-priority data, which is vehicle data effective for identifying the cause of failure, in a storage unit. The purpose is to do.

  In order to achieve such an object, a control device of the present invention is a control device that stores and controls data related to control when controlling a controlled unit, and includes a storage unit that stores data related to control, and a controlled unit In the control process, a plurality of storage control processes included in the control process and a storage control process included in the control process are executed. Data stored in the storage unit for control during abnormality determination in the control process executed in advance, and then stored in the storage unit for data related to control during abnormality determination in the control process executed subsequently. Overwrite storage control process for overwriting and the control process executed multiple times within a certain period of time, after the priority set in the control process executed in advance, If the priority set for the control process to be executed subsequently is high, the control process to be executed subsequently is prioritized over the control process executed in advance, and the control process In the case where a plurality of storage control processes are executed within a certain time, the priority set for the control process executed subsequently is higher than the priority set for the control process executed in advance. In this case, a control unit that executes a priority control special process that is executed after a predetermined time has elapsed in the storage control of the storage control process in the control process that is subsequently executed is provided.

  In the present invention, when a plurality of control processes are executed within a certain period of time, a control process with a high priority performs a process in preference to a control process with a low priority. The control process with high priority is executed after a predetermined time has elapsed. Therefore, after the control processing with high priority writes the data related to the control at the time of abnormality determination to the storage unit, the control processing with low priority does not write data related to the control at the time of abnormality determination to the storage unit. . Therefore, data that is effective in identifying the cause of the failure and has high importance can be stored in the storage unit.

  In the control device, the priority control special process is performed later when the priority set in the control process executed subsequently is higher than the priority set in the control process executed in advance. If the priority of the data related to the control at the time of abnormality determination in the subsequently executed control process is higher than the priority of the data related to the control at the time of abnormality determination in the previously executed control process, The storage control of the storage control process in the executed control process is executed after a predetermined time has elapsed.

  Therefore, the high priority data written in the storage unit by the high priority control process is not erased by the low priority control process written by the data written in the storage unit.

  In the control device, the priority control special process is performed later when the priority set in the control process executed subsequently is higher than the priority set in the control process executed in advance. If the priority of the data related to the control at the time of abnormality determination in the control process executed subsequently is lower than the priority of the data related to the control at the time of abnormality determination in the control process executed earlier, The storage control of the storage control process in the executed control process is stopped.

  Therefore, after data having high priority is stored in the storage unit, data having low priority is not stored in the memory.

  The control method of the present invention includes a control process related to a controlled part, a storage control process that stores data related to control in a storage part when determining an abnormality of a predetermined part based on an input signal in the control process, and a control process When a plurality of storage control processes included in the control process are executed, data related to the control at the time of abnormality determination in the control process executed in advance is stored in the storage unit, and then an abnormality in the control process executed subsequently Overwrite storage control process that overwrites and stores data related to the control at the time of determination in the storage unit, and the priority set in the control process that is executed in advance when multiple control processes are executed within a certain time If the priority set for the control process executed subsequently is higher than the priority, the control process executed subsequently is prioritized over the control process executed in advance. Control processing and storage control processing in the control processing are executed multiple times within a certain time, and the priority set in the control processing executed in advance is set to the control processing executed subsequently. In the case where the priority is high, the storage control of the storage control process in the control process to be executed subsequently is performed with a priority control special process executed after a predetermined time has elapsed.

  According to the present invention, it is possible to store vehicle data that is effective in identifying the cause of failure and that has high importance in the storage unit.

  Preferred embodiments of the present invention will be described with reference to the accompanying drawings.

  3 shows a configuration of an embodiment in which the present invention is applied to an engine ECU (Electronic Control Unit) .The engine ECU (Electronic Control Unit) 100 includes an A / D (Analog / Digital) converter 101, an input circuit. 102, a microcomputer 103, and an output circuit 104.

The A / D converter 101 includes a water temperature sensor 11, a vacuum sensor 12, an intake air temperature sensor 13, an O2 sensor 14, a throttle position sensor 15, an exhaust temperature sensor 16, a vehicle speed sensor 17, a knock sensor 18, an ion sensor 19, and other sensors. Sensor signals from sensors such as 20 are input.
Signals from the starter switch 21 and the idle switch 22 are input to the input circuit 102.

The water temperature sensor 11 detects the temperature of the cooling water in the water jacket of the engine, and transmits a signal representing the detection result to the microcomputer 103.
The vacuum sensor 12 detects the amount of intake air in the intake passage that guides intake air to the engine, and transmits a signal representing the detection result to the microcomputer 103.
The intake air temperature sensor 13 detects the temperature of the intake air in the intake passage and transmits a signal representing the detection result to the microcomputer 103.
The O2 sensor 14 is disposed downstream of the exhaust purification catalyst, detects the oxygen concentration in the exhaust gas, and transmits a signal representing the detection result to the microcomputer 103.
The throttle position sensor 15 detects the opening of the throttle valve that is rotated by driving the motor, and transmits a signal representing the detection result to the microcomputer 103.
The exhaust temperature sensor 16 detects the exhaust temperature on the downstream side of the exhaust purification catalyst, and transmits a signal representing the detection result to the microcomputer 103.
For example, the vehicle speed sensor 17 detects the speed of the vehicle from the rotational speed of the drive shaft, and transmits a signal representing the detection result to the microcomputer 103.
The knock sensor 18 detects engine vibration (knocking) and transmits a signal representing the detection result to the microcomputer 103.
The ion sensor 19 detects an ion current generated when pre-ignition occurs, and transmits a signal representing the detection result to the microcomputer 103.
In addition to these sensors, a plurality of sensors (hereinafter referred to as other sensors 20) for measuring the state of the vehicle are mounted.

  The starter switch 21 is a switch for starting the engine, and outputs a high level signal to the microcomputer 103 when the switch is on. The idle switch 22 outputs a signal to the microcomputer 103 that becomes a high level when the accelerator pedal is fully closed.

  The engine ECU 100 calculates an optimal ignition timing, fuel injection timing, injection amount, and the like of the engine based on information acquired from various switch signals and various sensor signals. Engine ECU 100 then outputs a drive signal for driving injector 152 and spark plug 154 provided for each cylinder via output circuit 104 based on the calculation result.

An alarm lamp 151, an injector 152, an igniter 153, and the like are connected to the output circuit 104 of the engine ECU 100.
Alarm lamp 151 is a lamp that is turned on when occurrence of an abnormality is detected by failure monitoring of engine ECU 100. Details of the failure monitoring will be described later.
The injector 152 is configured by an electromagnetic valve that is driven to open and close under the control of the engine ECU 100 and injects fuel.
The igniter 153 supplies battery voltage to an ignition coil (not shown) under the control of the engine ECU 100, generates a spark with the ignition plug 154 by the high voltage stored in the ignition coil, and burns the air-fuel mixture in the combustion chamber.

FIG. 4 shows a system configuration of engine ECU 100.
A plurality of ECUs are mounted on the vehicle, and these ECUs are connected by an in-vehicle LAN. In addition, communication is performed between a plurality of ECUs according to a protocol such as CAN (Controller Area Network). 4 shows the engine ECU 100, the CVT-ECU 201, the brake ECU 202, the navigation ECU 203, the telematics ECU 204, the light ECU 205, the airbag ECU 206, and the door ECU 207 as ECUs for controlling the vehicle, but communicates with the engine ECU 100. ECU to perform is not restricted to these.

FIG. 5 shows a hardware configuration of the microcomputer 103.
The microcomputer 103 includes a CPU (Central Processing Unit) 111, a ROM 112, a normal RAM (Normal Random Access Memory (hereinafter abbreviated as NRAM) 113, a standby RAM (Standby Random Access Memory (hereinafter abbreviated as SRAM 114)) 114, an input / output Part 115.
The NRAM 113 is a volatile memory, and when the ignition switch is turned off, the power supply to the NRAM 113 is stopped and information recorded in the NRAM 113 is also erased. In addition, the SRAM 114 retains information to be recorded by receiving power from the battery even when the ignition switch is turned off.

The CPU 111 performs a control process, a storage control process, an overwrite storage control process, a priority control process, and a priority control special process by performing an operation according to a program recorded in the ROM 112.
The control process is a control process for controlling controlled parts such as the injector 152 and the igniter 153.
The storage control process is a process of storing data related to control in the SRAM 114 when determining an abnormality of a predetermined part based on an input signal in the control process.
Overwrite storage control processing means that when a plurality of storage control processing included in the control processing is executed, data related to control at the time of abnormality determination in the control processing executed in advance is stored in the SRAM 114, and thereafter This is a process of overwriting and storing in the SRAM 114 data relating to the control at the time of abnormality determination in the control process executed subsequently.
The priority control process is a case where a plurality of control processes are executed within a predetermined time, and is set to a control process executed subsequently after the priority set in the control process executed in advance. When the priority is high, the control process that is subsequently executed is executed with priority over the control process that is executed in advance.
The priority control special process is a case where a plurality of storage control processes in a control process are executed within a predetermined time, and a control executed subsequent to a priority set in a control process executed in advance. When the priority set for the process is high, the storage control of the storage control process in the control process executed subsequently is executed after a predetermined time has elapsed.

The CPU 111 has a function of executing a plurality of control processes in parallel. A priority is set for each control process. For example, the high-priority control process includes a process of detecting an abnormal value of a sensor signal or a switch signal (that is, a signal input irregularly without synchronizing with time) used for engine control. In particular, the high-priority control processing in the engine ECU 100 includes control that requires a dense execution cycle such as fuel injection control and ignition control based on a crank angle sensor. The low priority control process includes a process of detecting whether or not the sensor signal of the water temperature sensor 11 (that is, a signal input at a predetermined interval in synchronization with time) indicates an abnormal value. In particular, in the low-priority control processing in the engine ECU 100, for example, control executed using a sensor value of the water temperature sensor 11 whose state change degree is not higher than a crank angle used in fuel injection control or ignition control, for example. Say.
Further, the CPU 111 uses the NRAM 113 as a ring buffer (hereinafter, the NRAM 113 is referred to as a ring buffer 113a), and rings the vehicle state data measured by the sensors 11 to 20 shown in FIG. The data is sequentially stored in the buffer 113a. When the storage amount of the ring buffer 113a exceeds a predetermined capacity of the ring buffer 113a, the CPU 111 stores new state data in the ring buffer 113a instead of the oldest state data. The details of the vehicle state data will be described later.

Further, the CPU 111 detects an abnormality of the vehicle based on the vehicle state data stored in the ring buffer 113a. This abnormality detection process will be described with reference to FIG.
For example, when the sensor value stored as the vehicle state data in the ring buffer 113a indicates an abnormal value, or when the sensor value does not change with a constant value, a flag indicating that the abnormal value has been detected is set. (1 is recorded in the abnormal value detection flag shown in FIG. 6A). Moreover, 1 is recorded in the flag which shows the determination result of temporary abnormality determination by detection of an abnormal value (refer FIG.6 (b)). The provisional abnormality determination is a determination as to whether or not the sensor value indicates an abnormal value, and indicates the start of the subsequent abnormality determination. In this abnormality determination, the abnormality counter shown in FIG. 6 (e) is started to determine whether or not the abnormality of the sensor value has continued for a predetermined time or more. In the temporary abnormality determination, the sensor value that once indicated an abnormal value is determined to be abnormal. Therefore, in this abnormality determination, a sensor value that indicates an abnormal value continues to be determined to be abnormal regardless of noise or the like. When the count value of the abnormality counter exceeds the abnormality detection threshold value shown in FIG. 6D, 1 is recorded in the flag indicating the determination result of the abnormality determination (see FIG. 6C), and the sensor value abnormality is detected. Confirm (determine this abnormality).
When the sensor value returns from the abnormal value to the normal value, 0 is recorded in the abnormal value detection flag shown in FIG. 6A, and the normal counter counting shown in FIG. 6F is started. When the count value of the normal counter exceeds the normal detection threshold value, it is determined that the sensor value is normal.

  In the example shown in FIG. 6, the temporary abnormality determination and the main abnormality determination are performed to determine the abnormality of the sensor value. However, the vehicle state data in which the abnormality is determined without performing the temporary abnormality determination and the main abnormality determination. There is also. For example, there is also vehicle state data that is not affected by noise or the like and that determines an abnormality (determines this abnormality) at a stage where an abnormal value is shown without performing the abnormality determination.

In the above-described example, the abnormality of the sensor value has been described as an example, but the engine ECU 100 detects an abnormality other than the sensor value.
For example, it is determined as a temporary abnormality when it is determined that the sensor is disconnected or short-circuited, and this abnormality is determined when this state continues for a predetermined time or more.
Further, when it is determined that the signal level is in an indefinite state, it is determined as a temporary abnormality, and when this indefinite state continues for a predetermined time or more, it is determined as a main abnormality.
Further, when it is determined that communication is interrupted, it is determined as a temporary abnormality, and when this communication interruption state continues for a predetermined time or more, it is determined as this abnormality.
Further, when it is determined that the advance angle or retard angle abnormality has occurred in the rotation angle sensor, it is determined as a temporary abnormality, and when this abnormal state continues for a predetermined time or more, it is determined as a main abnormality.
In addition, when it is determined that a malfunction has occurred in a variable valve timing mechanism (hereinafter referred to as VVT (Variable Valve Timing-control)), etc., it is determined as a temporary malfunction, and this malfunction has continued for a predetermined time or longer. This is determined to be abnormal.
Further, when it is determined that an operation failure has occurred in the operation of the IC, it is determined as a temporary abnormality, and when this operation failure continues for a predetermined time or more, it is determined as a main abnormality.
Further, when a deterioration in performance of the catalyst or the like is detected, it is determined as a temporary abnormality, and when this performance deterioration continues for a predetermined time or more, it is determined as a main abnormality.
Further, for example, a temporary abnormality is determined when an abnormality due to an overcurrent generated in an ECU, an input sensor, an output actuator, or the like is detected, and a case where this abnormality continues for a predetermined time or more is determined as a main abnormality.

FIG. 7 shows information recorded in the SRAM 114. When the CPU 111 detects state data indicating an abnormal value from the vehicle state data stored in the ring buffer 113a, the detected state data and the vehicle state data stored in the ring buffer 113a at the same timing as the detected state data are detected. The vehicle state data stored in the ring buffer 113a immediately before the occurrence of the trouble and the vehicle state data stored in the ring buffer 113a after a predetermined time has elapsed since the occurrence of the abnormality are recorded in the SRAM 114. In the SRAM 114, as shown in FIG. 7, an area for recording information for specifying an abnormality occurrence location specified by the CPU 111 (hereinafter referred to as an abnormality detection location recording area 120) and state data determined as a temporary abnormality are stored. It has an area for recording (hereinafter referred to as temporary abnormal data recording area 130) and an area for recording state data determined to be abnormal (hereinafter referred to as abnormal data recording area 140).
In addition, the temporary abnormality data recording area 130 records the state data immediately before the occurrence of the abnormality (hereinafter referred to as the state data recording area 131 before the abnormality occurs) and the state data when the abnormality occurs. An area (hereinafter referred to as a state data recording area 132 when an abnormality occurs) and an area for recording state data after a predetermined time has elapsed since the occurrence of the abnormality (hereinafter referred to as a state data recording area 133 after the occurrence of an abnormality). is doing.
Similarly, in the abnormal data recording area 140, an area for recording state data immediately before the occurrence of an abnormality (hereinafter referred to as a state data recording area 141 before the occurrence of an abnormality) and a state data when an abnormality has occurred are recorded. Area (hereinafter referred to as a state data recording area 142 when an abnormality occurs) and an area for recording state data after a predetermined time has elapsed since the occurrence of the abnormality (hereinafter referred to as a state data recording area 143 after the occurrence of an abnormality). And have.

Next, the part of the vehicle for which the engine ECU 100 monitors the occurrence of an abnormality will be described. The parts that the engine ECU 100 monitors for the occurrence of an abnormality include the parts related to the regulations stipulated by the law, the parts related to the emission (the harmful substances contained in the exhaust gas), and the other parts. And non-emission related parts. The regulations include a law that stipulates that state data is stored when an abnormality of a vehicle part is determined, an instruction based on the law, or a law in a rule.
The legally relevant parts include, for example, detection of abnormalities such as A / F (air-fuel ratio) sensor heater, O2 sensor heater, air flow meter, sub O2 sensor voltage, fuel system, misfire detection, crank angle sensor, cam position sensor, etc. .
In addition, as shown in Table 1, the emission-related parts include VVT, exhaust VVT, VVT oil control valve disconnection, short circuit, exhaust VVT oil control valve disconnection, short circuit, abnormal pressure difference between atmospheric pressure and intake air, Pump valve abnormality, fuel pressure system abnormality, regulator abnormality, fuel leakage abnormality, intake pressure sensor abnormality, water temperature sensor, throttle sensor, thermostat abnormality, injector abnormality, fuel pump abnormality, knock sensor abnormality, ionic current value abnormality, exhaust gas recirculation (Hereinafter referred to as EGR (Exhaust Gas Recirculation)) system abnormality, catalyst deterioration detection, tank internal pressure sensor abnormality, vehicle speed sensor abnormality, battery temperature sensor abnormality, exhaust temperature sensor abnormality, oil temperature sensor abnormality, turbine speed sensor abnormality, CO clutch speed sensor error, NC2 speed sensor error Usually, items such as solenoid abnormality and CAN communication abnormality are included.
Further, as shown in Table 1, abnormalities in the ECU and the NRAM are included in the non-emission portion.

Further, the vehicle state data recorded in the SRAM 114 in order for the engine ECU 100 to identify the cause of the abnormality in the above-described part includes the following. Note that it is not necessary to record all items listed below, and it is possible to select them.
First, as shown in Table 2, the vehicle state data used to identify the cause of abnormality of the above-mentioned legally relevant items includes engine water temperature, intake pipe pressure, engine speed, vehicle speed, ignition timing (for example, Advance timing), intake air temperature, air flow rate, throttle opening, front O2 sensor output, rear O2 sensor output, engine start time, total fuel correction amount, A / F sensor output voltage, EGR output, EGR error, evaporation purge Output, atmospheric pressure, catalyst temperature, power supply voltage, absolute load value, target air-fuel ratio, relative throttle opening, atmosphere temperature, throttle absolute position sensor, accelerator pedal absolute position sensor, throttle actuator output, variable valve timing / lift mechanism , VVTL (Variable Valve Timing and Lift) target position, hydraulic switch, VVTL OC Drive duty, VVT holding duty learned value, VVT displacement angle, OCV drive request duty, the duty learned value EXvvt, EXvvt displacement angle, EXOCV driving target duty cycle, and the like TVVT angle conversion value.
In addition, as shown in Table 2, the vehicle state data used for detecting abnormalities in the emission-related and non-emission-related parts described above includes engine water temperature, intake pipe pressure, engine speed, vehicle speed, ignition timing. Advance angle, intake air temperature, air flow rate, throttle opening, front O2 sensor output, rear O2 sensor output, engine start time, total fuel correction amount, A / F sensor output voltage, EGR output, EGR error, evaporation purge output, Atmospheric pressure, catalyst temperature, power supply voltage, target air-fuel ratio, throttle absolute position sensor, accelerator pedal absolute position sensor, throttle actuator output, charge control battery current, charge control battery fluid temperature, alter field duty, target supercharging pressure, supercharging Pressure VSV (Vacuum Switching Valve) control duty ratio, idling signal, A / C signal Signal, electrical signal, STP signal, power steering signal, intake side target displacement angle, intake side actual displacement angle, intake side control duty ratio, exhaust side target displacement angle, exhaust side actual displacement angle, exhaust side control duty ratio, gas pressure sensor Value, EGR step number, hydraulic switch, VVTL OCV drive duty, VVT hold duty learning value, VVT displacement angle, OCV drive request duty, EXVVT duty learning value, EXVVT displacement angle, EXOCV drive request duty value, TVVT angle Examples include a converted value, an idle speed control control (hereinafter abbreviated as ISC) step position, an ISC duty value, a fuel injection amount, a water temperature at engine start, an intake air temperature at engine start, and a fuel injection time.

The vehicle state data recorded in the SRAM 114 is used for vehicle failure diagnosis and the like. A worker who performs repair, maintenance, etc. reads out the vehicle status data recorded in the SRAM 114 using a tool, etc., identifies the location of failure and the cause of the failure based on the read status data, and replaces the sensor and parts. .
At this time, the status data of the vehicle recorded in the SRAM 114 is such that the status data that can identify the failure of the part of higher importance is recorded, the higher the priority is recorded, This is useful for identifying the cause. Therefore, in the present embodiment, vehicle state data for detecting the abnormality of the most important regulation-related part described above is recorded in the SRAM 114 as high priority data. Next, the priority of the vehicle state data for detecting an abnormality in the emission-related part having the highest importance is set lower than that in the law-related part. Further, the priority of the vehicle state data for detecting an abnormality in the emission non-related part is set lower than that in the emission related part.
Further, when the vehicle state data is recorded in the SRAM 114, control is performed so that the vehicle state data for determining the abnormality with high priority is not overwritten with the vehicle state data for determining the abnormality with low priority. This control procedure will be described with reference to FIG.

FIG. 8 shows the status data stored in the ring buffer 113a and the recording timing of this status data in the SRAM 114.
The microcomputer 103 stores vehicle state data such as sensor signals measured by the various sensors 11 to 20 and state signals indicating the states of the switches 21 and 22 in the ring buffer 113a every 512 msec. That is, the vehicle state data is stored in the ring buffer 113a at the timing of step 1, step 2, step 3,... Shown in FIG.
In the example shown in FIG. 8, at the timing of step 1, priority 2 (hereinafter, state data for determining a low priority abnormality is denoted as priority 2, and state data for determining a high priority abnormality is It is assumed that state data (denoted as priority 1) is recorded in the ring buffer 113a, and this state data is set to a temporary abnormality at timing A shown in FIG. Furthermore, it is assumed that the status data of priority 1 is stored in the ring buffer 113a at the timing of step 2 shown in FIG. 8, and this status data is set to a temporary abnormality at the timing B shown in FIG.
It is assumed that the status data of priority 2 at timing A is stored in the ring buffer 113a as the status data before the occurrence of the abnormality and the state data when the abnormality occurs. Similarly, it is assumed that the status data with priority 1 at timing B is recorded in the ring buffer 113a as the status data before the occurrence of the abnormality and the state data when the abnormality occurs. In addition, the recording of the priority 2 state data performed in step 1 in the ring buffer 113a and the recording of the priority 1 state data performed in step 2 in the ring buffer 113a are performed within several tens of msec. To do.

  The microcomputer 103 records the priority level 2 status data in the temporary error data recording area 130 of the SRAM 114 when the priority level 2 status data is set to be temporarily abnormal (timing A in FIG. 8). At the stage where the status data of priority 2 is set to a temporary abnormality, the state data before the occurrence of the abnormality and the state data at the time of the occurrence of the abnormality are stored in the ring buffer 113a. It is recorded in the temporary abnormal data recording area 130 of the SRAM 114. In FIG. 8, the state data before the abnormality of the state data of the priority 2 is expressed as “before 2”. In addition, the state data when abnormality of the state data of priority 2 occurs is expressed as “excellent 2 difference”. Similarly, the state data before the occurrence of the abnormality of the priority level 1 state data is represented as “excluded by the superior 1”. In addition, state data when priority 1 abnormality occurs is expressed as “excellent 1 difference”.

Assume that the status data of priority level 1 fetched into the ring buffer 113a at the next step 2 (elapsed 512 msec from step 1) is set to a temporary abnormality at the timing B shown in FIG.
The microcomputer 103 records, from the ring buffer 113a, the temporary abnormality data recording area 130 of the SRAM 114, from among the state data of priority 1, the state data before the occurrence of the abnormality and the state data when the abnormality occurs. At this time, the priority level 2 status data recorded in the temporary abnormal data recording area 130 of the SRAM 114 is erased (overwritten by the priority level 1 status data).

  At the timing of the next step 3 (elapse of (512 × 3) msec from step 1), among the state data of priority 1, state data after a predetermined time has elapsed from the occurrence of abnormality is stored in the ring buffer 113a. The microcomputer 103 records the status data of priority 1 stored in the ring buffer 113 a after the elapse of a predetermined time in the temporary abnormality data recording area 130 of the SRAM 114. In the following, state data after a predetermined time has elapsed since the occurrence of abnormality in the state data with priority 1 is expressed as “after 1”.

Next, it is assumed that the status data with the priority 2 is set to the abnormality at the timing C shown in FIG.
The microcomputer 103 records the status data of priority 2 in the abnormal data recording area 140 of the SRAM 114. Since the status data of priority 2 is not stored in the ring buffer 113a, the data acquired from various sensors is recorded again in the abnormal data recording area 140 of the SRAM 114.

Next, it is assumed that the status data with the priority level 1 is set to the abnormality at the timing D shown in FIG.
The microcomputer 103 erases the priority level 2 status data recorded in the abnormal data recording area 140 of the SRAM 114 and stores the priority level 1 status data recorded in the temporary abnormal data recording area 130 of the SRAM 114 in the SRAM 114. This is recorded in the abnormal data recording area 140.
At this time, the microcomputer 103 erases the priority level 1 status data recorded in the temporary abnormal data recording area 130 of the SRAM 114 from the temporary abnormal data recording area 130.

  Next, a description will be given of a control process in which a low-priority control process and a high-priority control process execute in parallel a process of detecting an abnormality in vehicle data and recording an abnormal value in a nonvolatile memory. FIG. 9 illustrates a case where two control processes of a high priority control process and a low priority control process are performed in parallel, but a plurality of control processes may be performed in parallel. Is possible.

Assume that at the timing A shown in FIG. 9, the low-priority control process detects an abnormal value of the status data and starts recording the status data in which the abnormal value is detected in the temporary abnormal data recording area 130. Thereafter, at timing B, it is assumed that the high priority control process detects an abnormal value of the state data. The high-priority control process refers to the recording flag in order to determine whether another control process is recording state data in the temporary abnormality data recording area 130. The recording flag is a flag that is recorded when the control process records the status data in the temporary abnormal data recording area 130 of the SRAM 114. When the recording is completed, the recording flag is erased by the control process. The other control process may be a high priority control process or a low priority control process. Here, it is assumed that the priority of the control process during the recording of the state data in the temporary abnormality data recording area 130 is the low priority.
When the recording flag is recorded, the high-priority control process is performed by the high-priority control process. The priority of the status data currently recorded in the temporary abnormal data recording area 130 by another control process is the same as the high-priority control process. It is determined whether or not the priority of the state data in which the abnormal value is detected is higher. When the high priority control process determines that the priority of the status data in which the abnormal value is detected by itself is lower than the priority of the status data recorded in the temporary abnormal data recording area 130 by another control process Then, the recording of the state data in which the abnormal value is detected by itself to the temporary abnormal data recording area 130 is canceled. Since the status data having a higher priority than the status data detected by the high priority control process is recorded in the temporary abnormality data recording area 130 by another control process, the status detected by the high priority control process Stop recording data.

Further, when the priority of the state data in which the high priority control process has detected an abnormal value is higher than the priority of the state data recorded in the temporary abnormal data recording area 130 by another control process, the high priority This control process waits until the recording of the status data in the temporary abnormal data recording area 130 by other control processes is completed.
The high-priority control process refers to the recording flag every predetermined time to determine whether or not the recording flag is recorded (timing C, D, and F shown in FIG. 9). When the recording flag is recorded, it is determined that recording in the temporary abnormal data recording area 130 is being performed by another control process, and the high priority control process is again in a standby state.
Further, when the recording flag is erased, the high priority control process determines that the recording of the status data in the temporary abnormal data recording area 130 by other control processes has been completed, and the temporary abnormal data recording A request for recording status data in the area 130 is output. Then, the high-priority control process starts recording status data in the temporary abnormality data recording area 130 (timing F shown in FIG. 9).

  When the recording of the state data by the high priority control process is completed at the timing G shown in FIG. 9, the high priority state data recorded by the high priority control process is stored in the temporary abnormal data recording area 130 of the SRAM 114. It is recorded. In addition, when recording in the temporary abnormality data recording area 130 by the high priority control processing is not performed, the high priority state data recorded by other control processing is recorded in the temporary abnormality data recording area 130. . Therefore, the high-priority state data added to the state data can be recorded in the SRAM 114 regardless of the priority of the control process. In the example illustrated in FIG. 9, the recording of the state data in which the temporary abnormality is determined is recorded in the temporary abnormality data recording area 130. However, the abnormal data recording area of the state data in which the determination of the abnormal is performed. At the time of recording to 140, status data is recorded in the same procedure.

Next, a processing flow of high priority control processing will be described with reference to the flowchart shown in FIG.
In the high-priority control process, when an abnormal value is detected in the vehicle state data stored in the ring buffer 113a and a temporary abnormality is determined (step S1 / YES), the temporary abnormal data in the SRAM 114 is determined by another control process. It is determined whether or not state data is recorded in the recording area 130 (step S2). When recording the status data in the SRAM 114, the control process records a recording flag indicating that recording is in progress. The high-priority control process refers to this recording flag to determine whether another control process has recorded status data in the temporary abnormal data recording area 130.

  When it is determined that the recording flag is recorded and the status data is recorded in the temporary abnormal data recording area 130 by other control processing, the high priority control processing determines that the priority of the status data in which the abnormal value is detected is It is determined whether it is higher than the priority of the status data currently recorded in the temporary abnormal data recording area 130 by other control processing (step S3). If the priority of the state data in which the abnormal value is detected is lower than the priority of the state data currently recorded in the temporary abnormal data recording area 130 by another control process (step S3 / NO), high priority is given. In the control process, the recording of the state data in which the abnormal value is detected is stopped in the temporary abnormal data recording area 130 (step S4), and the process ends. Since the priority of the status data recorded in the other control processing is higher than the priority of the status data in which the high priority control processing detected an abnormal value, the status data stored in the temporary abnormal data recording area 130 Stop recording.

  Further, when the priority of the status data in which the high priority control process has detected an abnormal value is higher than the priority of the status data currently recorded in the temporary abnormal data recording area 130 by another control process (Step S3 / YES), the high-priority control process waits for a predetermined time to record the state data in the temporary abnormality data recording area 130 (Step S5). When the predetermined time has elapsed, the high-priority control process determines whether or not the status data is being recorded in the temporary abnormal data recording area 130 by another control process (step S6). The high priority control process determines whether or not another control process has recorded the status data in the temporary abnormal data recording area 130 by referring to the above-described recording flag. If it is determined that the status data is recorded in the temporary abnormality data recording area 130 by another control process (step S6 / YES), the high priority control process also waits for a predetermined time. If it is determined that the recording of the status data in the temporary abnormality data recording area 130 by other control processing has been completed (step S6 / NO), the high priority control processing is performed to the temporary abnormality data recording area 130. Recording of the state data is started (step S7).

  In the flowchart shown in FIG. 10, when an abnormal value is detected in the status data having a higher priority than the priority of the status data being recorded in another control process, the detected status data is recorded in the SRAM 114. ing. In addition to this, for example, it may be determined whether or not to record the state data in which the abnormal value is detected in the SRAM 114 by comparing the priority of the control processing. For example, it is assumed that state data indicating an abnormal value is detected in the high-priority control process while the low-priority control process records state data in the SRAM 114. In this case, the high priority control process does not compare the priority of the state data, but waits for the completion of the recording of the state data in the SRAM 114 by the low priority control process. Then, when the recording to the SRAM 114 by the low priority control process is completed, the state data in which the abnormal value is detected is recorded in the SRAM 114. By assigning high priority status data processing to high priority control processing, high priority status data can be recorded in the SRAM 114 even when the control processing priority is compared.

  The embodiment described above is a preferred embodiment of the present invention. However, the present invention is not limited to this, and various modifications can be made without departing from the scope of the present invention.

It is a figure which shows the recording procedure of the vehicle data to the non-volatile memory by the conventional control processing. It is a figure which shows the recording procedure of the vehicle data to the non-volatile memory by the conventional control processing. It is a block diagram which shows the structure of engine ECU. It is a figure which shows the network structure to which engine ECU was connected. It is a block diagram which shows the structure of a microcomputer. It is a figure for demonstrating temporary abnormality determination and this abnormality determination. It is a figure which shows the recording area of SRAM. It is a figure which shows the recording procedure to the state data of the vehicle to SRAM when the state data with high priority is set to the state of temporary abnormality after the state data with low priority is set to the state of temporary abnormality. . It is a figure for demonstrating the control process in which the low priority control process and the high priority control process perform in parallel the process which records an abnormal value in a non-volatile memory, respectively. It is a flowchart which shows the processing flow of a high priority control process.

Explanation of symbols

100 engine ECU
103 Microcomputer (control device)
111 CPU (execution unit)
112 ROM
113 NRAM
113a Ring buffer 114 SRAM
115 I / O section 120 Abnormality detection location recording area 130 Temporary abnormal data recording area 140 This abnormal data recording area 151 Alarm lamp 152 Injector 153 Igniter 154 Spark plug

Claims (4)

A control device for storing and controlling data related to control when controlling a controlled part,
A storage unit for storing data related to control;
Control processing related to the controlled part;
In the control process, a storage control process for storing data related to the control in the storage unit when determining an abnormality of the predetermined part based on the input signal;
In the case where a plurality of storage control processes included in the control process are executed, the control process executed after the data related to the control at the time of abnormality determination in the control process executed in advance is stored in the storage unit An overwriting storage control process for overwriting and storing data related to the control at the time of abnormality determination in the storage unit;
When multiple control processes are executed within a certain time and the priority set for the control process executed subsequently is higher than the priority set for the control process executed in advance. , A priority control process for executing a control process that is subsequently executed in preference to a control process that is executed in advance;
In the case where a plurality of storage control processes in the control process are executed within a predetermined time, the priority set in the control process executed subsequently is higher than the priority set in the control process executed in advance. Is high, a control unit that executes a priority control special process that is executed after a predetermined time has elapsed in the storage control of the storage control process in a control process that is subsequently executed,
A control device comprising:   The priority control special process is subsequently executed when the priority set in the control process executed subsequently is higher than the priority set in the control process executed in advance. The control process that is executed subsequently when the priority of the data related to the control during the abnormality determination in the control process is higher than the priority of the data related to the control during the abnormality determination in the control process executed in advance. The control device according to claim 1, wherein the storage control of the storage control process is executed after a predetermined time has elapsed.   The priority control special process is subsequently executed when the priority set in the control process executed subsequently is higher than the priority set in the control process executed in advance. The control process that is executed subsequently when the priority of the data related to the control during the abnormality determination in the control process is lower than the priority of the data related to the control during the abnormality determination in the control process executed in advance. The control device according to claim 1, wherein the storage control of the storage control process is stopped. Control processing related to the controlled part;
In the control process, a storage control process for storing data related to the control in the storage unit when determining an abnormality of the predetermined part based on the input signal;
In the case where a plurality of storage control processes included in the control process are executed, the control process executed after the data related to the control at the time of abnormality determination in the control process executed in advance is stored in the storage unit An overwriting storage control process for overwriting and storing data related to the control at the time of abnormality determination in the storage unit;
When multiple control processes are executed within a certain time and the priority set for the control process executed subsequently is higher than the priority set for the control process executed in advance. , A priority control process for executing a control process that is subsequently executed in preference to a control process that is executed in advance;
In the case where a plurality of storage control processes in the control process are executed within a predetermined time, the priority set in the control process executed subsequently is higher than the priority set in the control process executed in advance. Is high, the control method includes a priority control special process that is executed after a predetermined time elapses in the storage control of the storage control process in the control process that is subsequently executed.

Images