JP2011161947A - Automatic inspection system of electronic controller - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an automatic inspection system of an electronic controller capable of minutely setting conditions for generating pseudo-failure, enhancing the degree of freedom of the conditions for generating the pseudo-failure, and correctly setting a point where the pseudo-failure is generated, thereby efficiently confirming operation of the electronic controller. <P>SOLUTION: In the automatic inspection system of the electronic controller includes: a failure setting means for setting a pattern of failure to be generated; and a pseudo-failure generating means for generating the failure set by the failure setting means in a pseudo manner. The failure setting means sets failure under a condition of combination of a vehicle state and a time, and the pseudo-failure generating means generates pseudo-failure. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic controller automatic inspection system, and in particular, an electronic controller capable of confirming an operation by finely setting conditions for generating a pseudo failure for a fault diagnosis function mounted on an electronic controller mounted on a vehicle. Relates to the automatic inspection system.

There is a method of using a simulator to develop an in-vehicle electronic controller function, and the simulator is called a HILS (Hardware In the Loop Simulation) system.
When developing the functions of an electronic controller (ECM: Engine Control Module) that performs engine control, software that simulates engine behavior (hereinafter referred to as “engine model”) is running in the simulator, and the HILS system has a wire. The electronic controller connected through the harness transmits / receives the pseudo sensor signal and the actuator drive signal to / from the HILS system, and controls the engine model in the HILS system in the same manner as controlling the actual engine. As a result, the HILS system automatically inspects the operation of the electronic controller in an environment where there is no actual vehicle, thereby enabling the function development of the electronic controller.

By the way, at the time of development of the electronic controller, the function check of the failure diagnosis function is performed. Specifically, it is confirmed whether or not the electronic controller is performing appropriate processing when an abnormality such as disconnection of the harness occurs.
For example, Japanese Patent Application Laid-Open No. 2008-261793 discloses a technique for improving the efficiency and accuracy of function confirmation of an electronic controller. The automatic inspection system for an electronic controller disclosed in this publication generates a disconnection failure state of a harness on a time basis in synchronization with an operation pattern, and includes an in-vehicle electronic controller in the failure state and an internal RAM of an HILS system. It is characterized by inspecting the processing result.

JP 2008-261793 A

  However, modern vehicles are becoming increasingly electronic, and not only the state of harness disconnection failure, but also the occurrence of failures with more complicated patterns in the development of electronic controllers, and the realization of a more efficient automatic inspection system Is waiting.

  According to the present invention, conditions for generating a simulated fault can be set in detail, the degree of freedom of the conditions for generating a simulated fault can be increased, and a simulated fault occurrence point can be set accurately, thereby efficiently operating the electronic controller. An object is to realize an automatic inspection system of an electronic controller that can be confirmed.

  The present invention includes an electronic controller that inputs a sensor signal and outputs an actuator drive signal, operation pattern generation means that outputs a signal corresponding to a specified operation pattern, and an actual machine that is an original control target of the electronic controller. A simulator that outputs, as a pseudo sensor signal, a signal equivalent to a sensor signal generated by receiving an actuator drive signal when operating along an operation pattern; and an inspection unit that inspects the operation of the electronic controller and the simulator. An electronic controller automatic inspection system in which the electronic controller and the simulator are connected by a harness, a failure setting means for setting a failure pattern to be generated, and a pseudo for generating a failure set by the failure setting means in a pseudo manner Failure generating means, and the failure setting means Set the fault in the condition that a combination of the vehicle condition and time, and wherein the generating the simulated fault by the simulated fault generating means.

Since the automatic inspection system for an electronic controller according to the present invention generates a pseudo failure using a vehicle state as a trigger, it is possible to check the operation of the electronic controller by finely setting conditions for generating the pseudo failure.
Further, the automatic inspection system for an electronic controller according to the present invention can check the operation of the electronic controller by combining the vehicle state and the time condition, thereby increasing the degree of freedom of the condition for causing the pseudo failure.
Furthermore, in the automatic inspection system for an electronic controller according to the present invention, in the case of automatic driving using a driver model, the vehicle speed or the like is slightly delayed or shifted from the automatic driving pattern. By setting, it is possible to accurately set the simulated failure occurrence point and check the operation of the electronic controller.

It is a system block diagram of the automatic test | inspection system of an electronic controller. (Example) It is a flowchart of an automatic inspection process. (Example)

  Embodiments of the present invention will be described below with reference to the drawings.

1 to 2 show an embodiment of the present invention. In FIG. 1, 1 is an electronic controller and 2 is an automatic inspection system. The automatic inspection system 2 of the electronic controller 1 is configured using a simulator 3 including a HILS (Hardware In the Loop Simulation) system. The simulator 3 includes a simulator personal computer (PC) 4. The simulator 3 is connected to an electronic controller 1 (for example, ECU: Engine Control Unit) in the development process by a harness 5 constituting a communication line such as a CAN (Control Area Network).
The simulator 3 includes a driver model 6 that simulates a driver, an engine model 7 (including a vehicle model) that simulates an engine, and a tester model 8 that simulates a failure diagnosis tester, and functions as a simulated vehicle. Further, the simulator 3 includes a disconnection / short generator 9 that enables disconnection of the harness 5 connecting the simulator 3 and the electronic controller 1 and short-circuiting to various harnesses 5.
The driver model 6 supplies the engine model 7 with accelerator pedal opening setting information and brake pedal opening setting information for realizing an operation state suitable for the driving pattern. The engine model 7 has a throttle valve / brake and a fuel injection valve on the basis of accelerator pedal opening setting information / brake pedal opening setting information (operation pattern) input from the driver model 6 and an actuator driving signal input from the electronic controller 1. The operation of the engine is simulated to output simulated vehicle speed information corresponding to the simulated engine operating state to the driver model 6, and a simulated sensor signal corresponding to the simulated engine operating state is output from the harness 5. Output to the electronic controller 1. The tester model 8 diagnoses a failure of the engine that the engine model 7 simulates.
The electronic controller 1 connected to the simulator 3 via the harness 5 inputs a simulated sensor signal for the engine simulated by the engine model 7 in the simulator 3 through the harness 5, calculates an actuator drive signal, and uses the harness 5 Output to the engine model 7. The simulated sensor signal input to the electronic controller 1 includes sensor signals such as an air-fuel ratio sensor, a crank angle sensor, and an air flow meter. The actuator drive signal output to the engine model 7 includes an actuator signal such as a fuel injection valve.

The automatic inspection system 2 includes an inspection unit 10 that inspects the operations of the electronic controller 1 and the simulator 3 in the simulator personal computer 4. Furthermore, the simulator personal computer 4 includes an operation pattern setting unit 11, an engine model control unit 12, a tester model control unit 13, a disconnection / short generator control unit 14, and an electronic controller control unit 15.
The driving pattern setting means 11 has a function of setting the driving pattern of the driver model 6 and outputs driving pattern instruction information to the driver model 6. The engine model control means 12 has a function of controlling the engine model 7, outputs engine model setting change instruction information to the engine model 7, and inputs engine model control information from the engine model 7. The tester model control means 13 has a function of controlling the tester model 8 and outputs tester drive instruction information to the tester model 8 and inputs information obtained from the tester model 8 through failure diagnosis communication. The disconnection / short generator control means 14 has a function of controlling the disconnection / short generator 9 and outputs disconnection / short instruction information to the disconnection / short generator 9. The electronic controller control means 15 has a function of controlling the electronic controller 1 and inputs electronic controller control information from the electronic controller 1.
The automatic inspection system 2 causes the simulator 3 to output a signal corresponding to the prescribed operation pattern set by the operation pattern setting means 11 using the driver model 6, so that the engine that is the actual control target of the electronic controller 1 is An electronic controller in which a signal equivalent to a sensor signal generated by receiving an actuator drive signal from the electronic controller 1 when the driver model 6 operates in accordance with a prescribed operation pattern is connected by the harness 5 as a pseudo sensor signal Output to 1.
When the engine model 7 in the simulator 3 is controlled by the electronic controller 1, the automatic inspection system 2 is operated by the inspection unit 10 with the operation pattern setting unit 11, the engine model control unit 12, the tester model control unit 13, and the occurrence of disconnection / short circuit. Information is transmitted and received between the controller control means 14 and the electronic controller control means 15, and the operations of the electronic controller 1 and the simulator 3 are inspected.

The automatic inspection system 2 of the electronic controller 1 includes the electronic controller 1, a driver model 6 that functions as an operation pattern generation unit, a simulator 3, and an inspection unit 10. The electronic controller 1 and the simulator 3 are connected to a harness 5. It is connected with.
The automatic inspection system 2 includes an operation pattern setting unit 11 that functions as a failure setting unit that sets a failure pattern to be generated, and a pseudo failure that artificially generates a failure set by the operation pattern setting unit 11 that is the failure setting unit. And an engine model 7 functioning as generating means. The driving pattern setting means 11 as the failure setting means sets a failure under a condition that combines the vehicle state and time, and causes the engine model 7 as the pseudo failure generating means to generate a pseudo failure. The generated pseudo failure is input to the electronic controller 1.
The automatic inspection system 2 is set by a disconnection / short generator control means 14 functioning as a failure setting means for setting a failure pattern to be generated, and a disconnection / short generator control means 14 as the failure setting means. A sensor set by a disconnection / short-circuit generator 9 functioning as a harness pseudo-fault generation means for artificially generating a failure such as disconnection or short-circuit of the harness 5, and a disconnection / short-circuit generator control means 14 as the failure setting means And an engine model 7 that functions as a sensor pseudo-fault generating means that pseudo-generates a characteristic deviation fault of The disconnection / short generator control means 14 as the failure setting means sets one or a plurality of faults under individual conditions, and the disconnection / short generator 9 and / or the sensor simulation as the harness simulated fault generation means. One or a plurality of simulated faults are generated by the engine model 7 which is a fault generation means. The generated pseudo failure is input to the electronic controller 1.
Furthermore, the automatic inspection system 2 artificially generates a failure set by the operation pattern setting unit 11 that functions as a failure setting unit that sets a failure pattern to be generated, and the operation pattern setting unit 11 that is the failure setting unit. And an engine model 7 functioning as a pseudo failure generating means. The inspection means 10 collects the data of the pseudo failure generated by the engine model 7 through the tester model control means 13 by using the failure diagnosis communication function of the electronic controller 1.

The automatic inspection system 2 of the electronic controller 1 performs an automatic inspection process as shown in FIG.
When the process is started (101), the automatic inspection system 2 sets an operation pattern by the operation pattern setting means 11 (102), sets an environment such as the outside air temperature (103), performs failure diagnosis communication, and provides failure information. Is initialized (104), operation of a simulated engine is started by the engine model 7 (105), and it is determined whether a failure occurrence condition is satisfied (106).
If this determination (106) is YES, the fault set by the fault setting means (for example, disconnection / short circuit of the harness 5, sensor characteristic deviation) is replaced with a pseudo fault generation means (for example, disconnection / short circuit generator 9, engine model). 7) is generated in a pseudo manner (107). During the occurrence of the simulated fault (107), it is determined whether a failure termination condition is satisfied (108). If this determination (108) is YES, the fault inspection is terminated (109).
In the generation of the simulated fault (107), a simulated fault is generated by setting the vehicle condition and time in combination. In the generation of the simulated fault (107), one or a plurality of faults are set under individual conditions to generate one or a plurality of simulated faults.
The automatic inspection system 2 acquires the engine model control information (110) by the engine model control means 12 and the electronic controller control information by the electronic controller control means 15 in accordance with the failure inspection processes (106) to (109). Acquisition (111) and (112) are performed in parallel. The acquired information includes not only engine model control information and electronic controller control information but also simulated fault data collected using the fault diagnosis communication function of the electronic controller 1.
The automatic inspection system 2 confirms the inspection result by the inspection means 10 based on the information obtained in the processes (107) to (112) (113), and ends the automatic inspection process (114).

By the process shown in FIG. 2, the automatic inspection system 2 of the electronic controller 1 is
(1). A failure can be generated by using the vehicle state as a trigger without synchronizing with the driving pattern.
(2). The failure occurrence pattern can generate not only the disconnection of the harness 5 but also a short failure and a sensor characteristic deviation.
(3). Data acquired using fault diagnosis communication is included in the automatic inspection.
It is an automatic inspection system.

Regarding the above (1) Although the conventional automatic inspection system (Patent Document 1) synchronizes with the driving pattern and breaks the connection with the passage of time as a trigger, this automatic inspection system 2 The failure is triggered by the state as a trigger.
The following example etc. are mention | raise | lifted as a specific example of a vehicle state.
・ A failure occurs while the vehicle speed is within the specified range (example: between 30 km / h and 50 km / h).
・ A failure occurred while the water temperature was within the specified value (eg, 80 ° C or higher).
・ A failure occurred while the accelerator pedal opening was within the specified range (eg, between 50% and 60%).
As a result, the automatic inspection system 2 uses the technique for generating a failure by using the vehicle state as a trigger as described above, thereby narrowing down and setting conditions for generating a pseudo failure in more detail. Confirmation can be made.
The automatic inspection system 2 not only uses the vehicle state as a trigger, but also sets a condition for generating a pseudo failure by combining the vehicle state and a conventional time-based condition, thereby further generating a pseudo failure. It is possible to confirm the operation of the electronic controller 1 by increasing the degree of freedom of conditions.
Further, in the case of automatic driving using the driver model 6, the automatic inspection system 2 may have a slight delay or deviation in the vehicle speed or the like with respect to the automatic driving pattern. By setting a trigger that combines the above, it is possible to set the simulated fault occurrence point more accurately and confirm the operation of the electronic controller 1.

Regarding (2) Although the conventional automatic inspection system (Patent Document 1) is intended only for disconnection, this automatic inspection system 1 is not only for disconnection of the harness 5 but also for shorts to various harnesses 5 and sensor characteristic deviations. Can be generated and automatic inspection can be performed.
The short-circuit failure of the harness 5 is generated by the disconnection / short-circuit generator 9 using the control function of the disconnection / short-circuit generator control means 14 as in the conventional method. On the other hand, the sensor characteristic deviation failure is realized by changing the sensor characteristic information in the engine model 7 by using the control function of the engine model control means 12.
Further, the automatic inspection system 1 has a function capable of generating a plurality of faults simultaneously by changing these fault functions or changing fault occurrence conditions by the disconnection / short generator control means 14 and the engine model control means 12. I have it. As a result, the automatic inspection system 1 can automatically check the operation check of the electronic controller 1 when various types of pseudo-failures are generated, and easily check the operation of the electronic controller 1 when various types of failures occur. be able to.

Regarding (3) The conventional automatic inspection system (Patent Document 1) uses only the control information in the electronic controller 1 and the engine model 7 as an object of automatic inspection. It is possible to perform inspection from information (data) obtained by failure diagnosis communication such as a failure code via the failure diagnosis communication function of 1.
In the automatic inspection function, the following items can be inspected as a fault code inspection method.
-Only the intended failure code is saved (no other codes are saved)
-The intended failure code is stored (other codes may be stored)
-The intended failure code has not been saved. As a result, in addition to the conventional failure diagnosis function itself, this automatic inspection system 2 confirms the failure diagnosis communication function of the electronic controller 1 and the operation of the failure code storage function. Confirmation can be performed at the same time.
In this embodiment, the tester model 8 is provided in the simulator 3, but the function of the tester model 8 may be realized in the simulator personal computer 4.

  The present invention can narrow down and set conditions for generating a pseudo-failure to check the operation of the electronic controller, and is not limited to the ECM, but also for other on-vehicle electronic controllers. It can also be used in inspection systems.

DESCRIPTION OF SYMBOLS 1 Electronic controller 2 Automatic inspection system 3 Simulator 4 Personal computer for simulator 5 Harness 6 Driver model 7 Engine model 8 Tester model 9 Disconnection / short generator 10 Inspection means 11 Operation pattern setting means 12 Engine model control means 13 Tester model control means 14 Disconnection / short generator control means 15 Electronic controller control means

Claims (3)

An electronic controller that inputs a sensor signal and outputs an actuator drive signal;
Driving pattern generation means for outputting a signal corresponding to a prescribed driving pattern;
When the actual machine that is the original control target of the electronic controller operates along the operation pattern, a simulator that outputs a signal equivalent to a sensor signal generated by receiving an actuator drive signal as a pseudo sensor signal;
An inspection means for inspecting the operation of the electronic controller and the simulator,
In the electronic controller automatic inspection system in which the electronic controller and the simulator are connected with a harness,
A failure setting means for setting a failure pattern to be generated;
A pseudo-fault generating means for generating a pseudo-fault set by the fault setting means,
The electronic controller automatic inspection system, wherein the failure setting means sets a failure under a condition combining a vehicle state and time, and causes the simulated failure generating means to generate a simulated failure. An electronic controller that inputs a sensor signal and outputs an actuator drive signal;
Driving pattern generation means for outputting a signal corresponding to a prescribed driving pattern;
When the actual machine that is the original control target of the electronic controller operates along the operation pattern, a simulator that outputs a signal equivalent to a sensor signal generated by receiving an actuator drive signal as a pseudo sensor signal;
An inspection means for inspecting the operation of the electronic controller and the simulator,
In the electronic controller automatic inspection system in which the electronic controller and the simulator are connected with a harness,
A failure setting means for setting a failure pattern to be generated;
Harness pseudo-fault generating means for artificially generating a fault such as disconnection or short circuit of the harness set by the fault setting means;
A sensor pseudo-fault generating means for artificially generating a sensor characteristic deviation fault set by the fault setting means,
The fault setting means sets one or a plurality of faults under individual conditions, and generates one or a plurality of pseudo faults by the harness pseudo fault generation means and / or the sensor pseudo fault generation means. Electronic controller automatic inspection system. An electronic controller that outputs the actuator drive signal by manpowering the sensor signal;
Driving pattern generation means for outputting a signal corresponding to a prescribed driving pattern;
When the actual machine that is the original control target of the electronic controller operates along the operation pattern, a simulator that outputs a signal equivalent to a sensor signal generated by receiving an actuator drive signal as a pseudo sensor signal;
An inspection means for inspecting the operation of the electronic controller and the simulator,
In the electronic controller automatic inspection system in which the electronic controller and the simulator are connected with a harness,
A failure setting means for setting a failure pattern to be generated;
A pseudo-fault generating means for generating a pseudo-fault set by the fault setting means,
The automatic inspection system for an electronic controller, wherein the inspection means collects data using a failure diagnosis communication function of the electronic controller.

Images