JP2013060141A - Information processing apparatus, and method for recording data - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processing apparatus that can prevent an inconsistency of data even if IG-ON and IG-OFF are repeated in a short time during data saving.SOLUTION: The information processing apparatus 100 for writing data of a first storage device to a second storage device at a timing of receiving an engine stop operation, includes: operation receiving means 51, 52 for receiving the engine stop operation or an engine start operation; a stop/start operation recording means 42 for recording a specific operation of receiving the engine start operation within a predetermined time after the operation receiving means receive the engine stop operation, and also deleting the record in the lapse of a predetermined time after the operation receiving means receive the engine stop operation; and a data writing means 43 for writing the data of the first storage device to the second storage device. The data writing means cancels writing of data to the second storage device from the first storage device when a record of the specific operation is present.

Description

  The present invention relates to an information processing apparatus that writes data in a first storage device to a second storage device at a timing when an engine stop operation or at least a stop operation of a traveling system including an electric motor is received.

  In order to perpetuate data obtained while the vehicle is running, data stored in a volatile memory such as a RAM is saved to the nonvolatile memory at a certain timing. Nonvolatile memory includes HDD (Hard Disk Drive), EEPROM, flash memory, and the like, but flash memory is often used because of its comprehensive advantages such as writing speed, capacity, and stability.

  However, since the flash memory has a limited number of data writes, it is required to suppress the number of data writes as much as possible. Since the vehicle has been in operation for more than a few years, the number of writes to the flash memory should not exceed the vehicle operation period. On the other hand, if the number of times of writing is suppressed too much, the effectiveness of the data is diminished. From such an idea, in the vehicle, many designs are employed in which the microcomputer starts the process of saving the RAM data to the flash memory when the engine key switch is turned off (IG-OFF).

  However, some vehicles and drivers for business use may be frequently IG-OFF, which may increase the number of writings. In this regard, a technique for controlling the number of times of writing and the amount of data to be written has been proposed (see, for example, Patent Document 1). Patent Document 1 classifies vehicle states from the time when the engine key is turned on to the time of writing to the nonvolatile semiconductor memory at the time of writing to the nonvolatile semiconductor memory, and data predetermined for the corresponding class. A vehicle electronic control unit is disclosed that writes only item collection data into a non-volatile semiconductor memory.

JP 2009-214596 A

  However, the conventional electronic control unit has a problem that data inconsistency cannot be prevented.

  FIG. 1 is an example of a diagram for explaining data inconsistency. When the microcomputer detects IG-OFF, it starts saving the data collected in the SRAM (Static Random Access Memory) to the flash memory. This process of saving all data requires a certain amount of time (a few seconds to a little less than 10 seconds depending on the system).

  During data evacuation, the driver performs IG-ON and performs simple work (for example, opening and closing the door window), and then IG-OFF is turned on again for a short period of IG-ON and IG-OFF. Repeats may occur. For example, when the driver saves data 1 to 5 and the driver performs IG-ON and performs IG-OFF in a short time, the microcomputer tries to start saving data from the beginning.

  In this case, evacuation of data written halfway ends there, and data (6 to 10 in the figure) that should be evacuated is not saved. Further, there is a risk that the SRAM data will be rewritten after the next IG-ON. For this reason, even if the microcomputer tries to save the data again, it cannot always save all the original data in the SRAM. Hereinafter, the difference between the SRAM data and the data stored in the data flash is referred to as data mismatch.

  In recent years, semiconductor integrated circuits have been miniaturized and a plurality of CPUs or microcomputers are often mounted on one electronic control unit. In addition, attempts to reduce the number of ECUs mounted on the vehicle are continuously made. For this reason, a situation has arisen in which one microcomputer in the ECU saves data in a data flash of another microcomputer. In this case, since the microcomputer that performs control for saving data and the microcomputer having the data flash are separate, the above-described problem is more likely to occur.

  In view of the above problems, an object of the present invention is to provide an information processing apparatus capable of preventing data inconsistency even when IG-ON and IG-OFF are repeated in a short time.

  The present invention is an information processing apparatus that writes data in a first storage device to a second storage device at a timing when an engine stop operation or a stop operation of a traveling system including at least an electric motor is received. An operation accepting means for accepting an engine start operation, or at least a stop operation or a start operation of a travel system including an electric motor, and an engine start within a predetermined time after the operation accepting means accepts an engine stop operation or a travel system stop operation. A stop start operation for recording a specific operation that has received an operation or a start operation for a traveling system, and for erasing a record of the specific operation after a predetermined time has elapsed since the operation receiving means received an engine stop operation or a stop operation for the traveling system Recording means and data of the first storage device Data writing means for writing to a second storage device, and the data writing means cancels writing of data from the first storage device to the second storage device when there is a record of the specific operation. It is characterized by that.

  It is possible to provide an information processing apparatus capable of preventing data inconsistency even if IG-ON and IG-OFF are repeated in a short time during data saving.

It is an example of the figure explaining data inconsistency. It is an example of the figure explaining the schematic characteristic of the data storage method of this embodiment. It is an example of the schematic block diagram of a vehicle-mounted network. It is an example of the hardware block diagram of data recording ECU. It is an example of a functional block diagram of a main microcomputer and a sub microcomputer. It is an example of the flowchart figure which shows the procedure in which data recording ECU records data on SRAM. It is an example of the flowchart figure which shows the procedure in which a flag setting part determines the presence or absence of frequent repetition of IG-ON and IG-OFF. It is an example of the figure explaining predetermined time. It is an example of the flowchart figure which shows the procedure in which data recording ECU refers the flags A and B and stores the data of SRAM in a data flash. It is an example of the figure explaining the relationship between IG-ON and IG-OFF and data recording. It is an example of the figure explaining the structural example of data recording ECU.

Hereinafter, embodiments for carrying out the present invention will be described with reference to the drawings.
FIG. 2 is an example of a diagram illustrating schematic features of the data storage method of the present embodiment.
S1: The microcomputer monitors whether or not the IG-OFF is set.
S2: When IG-OFF is set (Yes in S1), the microcomputer determines whether or not the IG-OFF is a repetition of frequent IG-ON and IG-OFF. Frequent IG-ON and IG-OFF repetition means that IG-ON and IG-OFF are performed within a predetermined time from the last IG-OFF.
S3: When frequent repetition of IG-ON and IG-OFF is detected (Yes in S2), the microcomputer holds the data stored in the SRAM. That is, the data is maintained in the SRAM by maintaining the power supply to the SRAM (refreshing to prevent volatilization) without starting the saving to the data flash.
S4: If frequent IG-ON and IG-OFF repetitions are not detected (No in S2), the microcomputer starts recording the data stored in the SRAM to the data flash.

  If enough time has passed since the last IG-OFF, the determination of S2 will be No, so if the microcomputer is IG-ON → IG-OFF in a state where enough time has passed since the last IG-OFF, Data recording starts immediately after IG-OFF. On the other hand, since IG-ON → IG-OFF within the predetermined time from the last IG-OFF does not record data, it starts recording the next data by the end of already recorded data. Can be suppressed. Therefore, it is possible to suppress the occurrence of inconsistency between the SRAM data and the data flash data.

[Configuration example]
FIG. 3 shows an example of a schematic configuration diagram of the in-vehicle network 200. The in-vehicle network 200 electrically connects a plurality of ECUs (Electronic Control Units), and allows each ECU to transmit and receive communication data based on a predetermined protocol. In the present embodiment, it is assumed that the data recording ECU 100 stores data acquired from other ECUs (ECU1, ECU2) 110 and data calculated by the data recording ECU 100 in a data flash of the data recording ECU 100. Any number of ECUs may be connected to the in-vehicle network 200, and an ECU via a gateway may be connected.

  The stored data includes, for example, events such as data storage date and time, travel distance, travel time, maximum vehicle speed, average vehicle speed, maximum engine speed, average fuel consumption, water temperature, exhaust gas concentration, position information, and airbag deployment. In addition, data effective for specifying the vehicle state can be stored.

  The protocol of the in-vehicle network 200 includes CAN (Controller Area Network), LIN (Local Interconnect Network), FlexRay, and the like. In this embodiment, each ECU communicates with the CAN protocol. Each ECU includes a body system such as a door ECU, a power seat ECU, a light ECU, an air conditioner ECU, and a meter ECU, a control system such as an engine ECU, an HV-ECU, a brake ECU, a power steering ECU, a transmission ECU, an airbag ECU, and a navigation system. There are information and AV systems such as an ECU, a communication ECU that communicates with the outside, and an AV ECU that controls audio equipment.

  FIG. 4 shows an example of a hardware configuration diagram of the data recording ECU 100 of the present embodiment. The data recording ECU 100 has a plurality of microcomputers (referred to as main microcomputer 10 and sub-microcomputer 20 for distinction), a CAN driver 31 and a power supply IC 32. In the present embodiment, the main microcomputer 10 performs data recording control, and the sub-microcomputer 20 has a data flash 30 for recording data. Therefore, the main microcomputer 10 determines whether or not it is time to perform data recording. If it is determined that it is time to perform data recording, the main microcomputer 10 transmits data to the sub-microcomputer 20.

  It is possible to determine whether or not the sub-microcomputer 20 is at the timing of data recording. When the main microcomputer 10 has the data flash 30, the main microcomputer alone determines the timing of data recording and data. It is also possible to record. As shown in the figure, since the main microcomputer 10 requires a lot of processing in addition to data recording, it is designed that a separate microcomputer takes charge of data recording timing determination and data storage. This is only because it is preferable.

  The main microcomputer 10 includes a core 13, an ADC (Analog Digital Converter) 11, a WDT (Watch Dog Timer) 14, an SRAM 12, a ROM 15, a RAM 16, an I / O 27, a CANC (CAN Controller) 18, and a DMAC (DMA Controller) 19. The core 13 is a CPU that executes, for example, a program stored in the ROM 15 using the RAM 16 as a working memory. The program stored in the ROM 15 includes a function for recording data. Further, the program includes a function for performing processing unique to the main microcomputer 10. The configuration of the sub-microcomputer 20 is substantially the same as that of the main microcomputer 10 except that the data microcomputer 30 is included.

  ADCs 11 and 21 are A / D converters, and convert analog data detected by a sensor (not shown) into digital data. WDTs 14 and 24 are timers for monitoring the execution state of the programs by the cores 13 and 23. Since the cores 13 and 23 are not reset within a predetermined time, an abnormality of the cores 13 and 23 is detected and reset. Perform the process.

  The CANCs 18 and 28 are communication devices that communicate with other ECUs 110 and the like according to the CAN protocol. CANCs 18 and 28 are connected to a CAN driver 31. When transmitting data, the CAN driver 31 converts communication data into a differential voltage and outputs the differential voltage to the CAN bus. Further, when receiving data, the received signal is generated by shaping so that the differential voltage is included in a predetermined voltage range, and is output to CANCs 18 and 28.

  The SRAM 12 is a kind of RAM, and is used for temporarily holding data in this embodiment. The SRAM 22 can be used by the sub-microcomputer 20 to temporarily hold data, but the sub-microcomputer 20 may not be used. The I / O 17 is connected to various sensors for detecting signals used by the main microcomputer 10 for calculation, an actuator controlled by the main microcomputer 10, a driver circuit for the actuator, and the like. The same applies to the I / O 27. Note that the ADC 11 and the CANC 18 may be connected to the I / O 17.

  The DMAC 19 records the data input from the I / O 17 in the RAM 16 or SRAM 12 without going through the core 13, receives a request from the core 13, and transfers the data from the designated address of the RAM 16 or SRAM 12 to the sensor or actuator. In the present embodiment, communication between the main microcomputer 10 and the sub-microcomputer 20 is also performed via the DMAC 19. In this case, the core 13 sets, in the DMAC 19, an address and data size specifying the SRAM 12 as a data transfer source, and an address of the data flash 30 of the sub-microcomputer 20 as a data transfer destination. Accordingly, the DMAC 19 of the main microcomputer 10 can access the data flash 30 of the sub-microcomputer 20 like a part of the main microcomputer 10.

  Further, the DMAC 19 of the main microcomputer 10 may directly access the data flash 30 of the sub-microcomputer 20, but the DMAC 19 of the main microcomputer 10 may request the DMAC 29 of the sub-microcomputer 20 to transfer data to the data flash 30. Further, the communication may be performed using UART (Universal Asynchronous Receiver Transmitter) or I2C (Inter-Integrated Circuit) instead of necessarily using the DMACs 19 and 29.

  The power supply IC 32 receives power supplied from a battery (not shown) and generates a voltage / current for driving the microcomputer. When IG-ON, a large amount of voltage and current required to operate all the circuits in the ECU in the normal mode is generated. When IG-OFF is selected, part of the circuits of the main microcomputer 10 and sub-microcomputer 20 is generated. The minimum voltage and current necessary to maintain the power saving mode is generated. In addition, the power supply IC 32 can acquire control from the main microcomputer 10 or the sub-microcomputer 20, and can cut off and maintain power supply from the battery to the main microcomputer 10 and the sub-microcomputer 20.

  The data flash 30 included in the sub-microcomputer 20 is a nonvolatile memory capable of erasing and writing data. Either a NAND type or a NOR type may be used. In addition, a rewritable nonvolatile memory such as EEPROM, MRAM (Magnetoresistive Random Access Memory), or FeRAMOUM (phase change memory) may be used instead of the flash memory.

  FIG. 5 shows an example of a functional block diagram of the main microcomputer 10 and the sub-microcomputer 20. 5, the same components as those in FIG. 4 are denoted by the same reference numerals, and the description thereof is omitted. The main microcomputer 10 is realized by software when the core 13 executes a program stored in the ROM 15. The IG state detection unit 41, the flag setting unit 42, the data recording unit 43, the relay operation unit 44, and the data A collection unit 45 is included.

<Data collection>
First, data collection by the data collection unit 45 will be described.
FIG. 6 is an example of a flowchart illustrating a procedure in which the data recording ECU 100 records data in the SRAM 12.

  During IG-ON, ECU1 and ECU2 each transmit data to the CAN bus (S10). Data transmitted by the ECU 1 and ECU 2 is set in the ECU 1 and 2 in advance.

The CANC 18 of the data recording ECU 100 selectively receives data of a predetermined CAN ID and interrupts the reception of the core 13. Since the core 13 activates the data collection unit 45 and the like in response to the reception interrupt, the data collection unit 45
Data selected as data to be recorded based on the ID is stored in the SRAM 12 (S20).

  Data that needs to be acquired only once immediately after IG-ON (for example, calendar information, IG on time), periodically transmitted but replaced with the latest data (for example, travel distance, travel time), What to remember including past history (for example, location information), what to acquire when IG-OFF (for example, IG-OFF time, data storage date, average vehicle speed, average fuel efficiency), or when a special event occurs (For example, failure information, airbag deployment) and the like. The data collection unit 45 determines these and stores them in the SRAM 12.

  Since the data collected by the data collection unit 45 has such characteristics, the amount of data stored in the SRAM 12 is not always constant. For this reason, the data recording time is not always constant.

  When the IG state detection unit 41 of the data recording ECU 100 detects IG-OFF, the main microcomputer 10 determines whether it is time to record data from the SRAM 12 to the data flash 30. If it is determined that the recording timing is reached, the data recording unit 43 starts recording data.

<About IG-ON and IG-OFF>
Returning to FIG. 5, the IG state detection unit 41 detects IG-ON and IG-OFF. In the present embodiment, IG-ON is defined as a state where the vehicle can travel (or an operation for making the vehicle ready for traveling). For this reason, the IG-ON detection method differs between a vehicle that uses only the engine as a power source and a hybrid vehicle that uses an electric motor as a part of the power source, or an electric vehicle that uses an electric motor as all the power sources. ing.

-Engine vehicle IG-ON
In the case of a vehicle in which the driver operates the IG-ON / IG-OFF with a mechanical key, the IG-ON state means that the mechanical key is at the IG position of the key cylinder 51 and the engine is operating. When starting the engine, the driver turns the mechanical key over the IG-ON to the ST position and returns to the IG position while stepping on the brake pedal. Since the engine outputs a complete explosion signal upon complete explosion, the IG state detection unit 41 detects IG-ON from this signal.

  In the case of a vehicle in which the driver operates the IG-ON / IG-OFF with the push button 52, the definition of IG-ON is the same except that the operation is different. The driver presses the push button 52 while depressing the brake pedal when starting the engine. As a result, the predetermined ECU turns on the ST relay and starts the engine. Since the engine outputs a complete explosion signal upon complete explosion, the IG state detection unit 41 detects IG-ON from this signal.

・ IG-ON for hybrid or electric vehicles
In hybrid vehicles, the engine does not always operate even when the driver performs an IG-ON operation. In the case of an electric vehicle, the engine is not installed in the first place. For this reason, IG-ON of a hybrid vehicle or an electric vehicle is defined as being in the IG-ON mode (Ready-ON state). The IG-ON mode (Ready-ON state) will be briefly described. The hybrid vehicle or the electric vehicle has two states corresponding to the IG-ON of the engine vehicle. These are called IG-ON mode (Ready-ON state) and IG-ON mode (Ready-OFF state). The IG-ON mode (Ready-ON state) is a state in which the HV-ECU that controls traveling normally starts and the vehicle can travel by engine traveling or motor traveling. The IG-ON mode (Ready-OFF state) is a state in which the HV-ECU is not operating normally. Therefore, it can be said that the vehicle can run in the IG-ON mode (Ready-ON state).

  The driver's operation is the same as described above. That is, when the driver depresses the push button 52 with the brake pedal depressed, the predetermined ECU turns on the main relay and outputs an activation signal to the HV-ECU. The HV-ECU reads the program, executes initial processing and self-diagnosis, and outputs a Ready-ON signal to the other ECUs 110 when the startup is completed normally. The IG state detector 41 detects the IG-ON by receiving this Ready-ON signal.

・ IG-OFF for engine vehicles, hybrid vehicles or electric vehicles
In the present embodiment, IG-OFF is defined as a driver performing an IG-OFF operation. Therefore, the definition of IG-OFF is common to engine vehicles, hybrid vehicles, or electric vehicles.

  In the case of a vehicle in which the driver operates IG-ON / IG-OFF with a mechanical key, the driver sets the shift position to P (parking) and rotates the mechanical key to the lock position of the key cylinder 51. When the driver operates the IG-ON / IG-OFF with the push button 52, the shift position is set to P (parking) and the push button 52 is pressed.

  In the case of an engine vehicle, in any case, the predetermined ECU turns off the main relay, so that the engine cannot maintain the operating state and the engine stops. In the case of a hybrid vehicle or an electric vehicle, the HV-ECU stops outputting the Ready-ON signal, so that the vehicle cannot travel. Therefore, for IG-OFF, the IG state detection unit 41 detects IG-OFF because the driver has performed the IG-OFF operation.

  Strictly speaking, there may be a state that is not included in either IG-OFF or IG-ON (for example, the position of the mechanical key is ACC). In this case, it is determined that the state is the immediately preceding state ( That is, if the previous state is IG-ON, it is determined to be IG-ON, and if the previous state is IG-OFF, it is determined to be IG-OFF).

<Setting the flag>
When the IG state detection unit 41 detects IG-ON or IG-OFF, it notifies the flag setting unit 42. The flag setting unit 42 switches ON / OFF of the flag A according to the detection result of IG-ON or IG-OFF. Further, the flag B is switched ON / OFF according to the detection result of IG-ON or IG-OFF and the ON / OFF of the flag A.

The flag A changes according to the detection results of IG-ON and IG-OFF, and has the following meaning.
Flag A ON: IG-ON is detected within a predetermined time from the last IG-OFF Flag A OFF: A predetermined time has elapsed since the last IG-OFF
The flag B, which is within a predetermined time after the last IG-OFF but has not been IG-ON, transitions according to the determination result as to whether data can be saved, and has the following meanings.
Flag B ON: The data of SRAM 12 can be recorded in the data flash 30 Flag B OFF: The data of the SRAM 12 cannot be recorded in the data flash 30 The flag A remains ON and the flag B does not turn ON. If the flag B is OFF, no data is recorded from the SRAM 12 to the data flash 30 regardless of the state of the flag A. Note that the initial states of the flags A and B are OFF.

  The flag setting unit 42 records the IG-OFF time detected by the IG state detection unit 41 (hereinafter referred to as IG-OFF time). The IG-OFF time does not need to be the time on the clock, and may be information indicating that it is zero, for example, when the IG-OFF is reached. The flag setting unit 42 measures a predetermined time of several seconds to several tens of seconds based on the IG-OFF time. Further, the IG-OFF time may be this predetermined time, and the flag setting unit 42 starts counting down from the predetermined time and detects that it has become zero.

<Data recording>
When the flag B is ON, the data recording unit 43 records the data stored in the SRAM 12 in the data flash 30 of the sub-microcomputer 20. Since data recording is performed after IG-OFF, there is a possibility that the power supply IC 32 cuts off the power supply to the main microcomputer 10 and the sub-microcomputer 20. Even after IG-OFF, even if the ECU is always supplied with power from a battery to some circuits (for example, a core for accepting an interrupt), the SRAM 12 is not always supplied with power. Therefore, before data recording, the data recording unit 43 outputs a holding instruction for holding the IGCT relay 53 on to the relay operation unit 44. The relay operation unit 44 causes the power supply IC 32 to hold the IGCT relay 53 ON.

  Thereafter, the data recording unit 43 uses the DMAC 19 to record the data of the SRAM 12 in the data flash 30 of the sub-microcomputer 20. The DMAC 19 reads the data from the SRAM 12 and records it in the data flash 30 of the sub-microcomputer 20. The DMAC 19 notifies the data recording unit 43 that the recording of the requested data has been completed.

  When the data recording is completed, the data recording unit 43 outputs a release instruction to release the ON holding of the IGCT relay 53 to the relay operation unit 44. The relay operation unit 44 notifies the power supply IC 32 that it is not necessary to hold the IGCT relay 53 ON. Thereafter, whether the power supply IC 32 turns off the IGCT relay 53 depends on the vehicle state.

  Even if the data flash 30 is in the main microcomputer 10, data can be recorded without any inconvenience by the same procedure. Therefore, the data recording ECU 100 may have only one microcomputer.

[Operation procedure]
FIG. 7 is an example of a flowchart illustrating a procedure in which the flag setting unit 42 determines whether or not IG-ON and IG-OFF are frequently repeated.

  The flag setting unit 42 records the IG-OFF time detected by the IG state detection unit 41. Using this, the flag setting unit 42 determines whether or not a predetermined time has elapsed since the IG-OFF time (S110). This predetermined time is a time for determining whether or not the IG-ON has been performed in a short time since the IG-OFF. The predetermined time is preferably longer than the data recording time, for example, several seconds to several tens of seconds. The predetermined time will be described below.

  When the predetermined time or more has elapsed (No in S110), the flag setting unit 42 determines whether or not IG-ON has been notified from the IG state detection unit 41 (S120). That is, it is determined whether or not the IG-ON has been performed within a predetermined time from the IG-OFF by the determination in steps S110 and S120.

  When IG-ON is notified from the IG state detection unit 41 (Yes in S120), the flag setting unit 42 sets the flag A to ON (S130). Thus, flag A is turned on when IG-ON is turned on within a predetermined time from IG-OFF, so whether IG-OFF → IG-ON operation was performed in a short time depending on whether flag A is ON. It is determined whether or not.

  On the other hand, in step S110, when a predetermined time or more has elapsed from the IG-OFF time (Yes in S110), the flag setting unit 42 sets the flag A to OFF (S140). That is, even if the flag A is set to ON, it is automatically turned OFF when a predetermined time has elapsed since IG-OFF.

  In step S120, when IG-ON is not notified from the IG state detection unit 41 within a predetermined time (No in S120), the flag setting unit 42 keeps flag A set to OFF (S140). That is, the flag A is always OFF unless IG-ON is detected before the predetermined time has elapsed from IG-OFF.

  The predetermined time in step S110 will be described with reference to FIG. FIG. 8 is an example of a diagram illustrating the predetermined time. As will be described with reference to FIG. 9, the data recording unit 43 continues data recording until the data recording once started is completed. Therefore, even if IG-ON is detected immediately after IG-OFF during data recording, There is no risk of data inconsistency without recording being interrupted or started. However, if the operation is changed from IG-OFF to IG-ON → IG-OFF in a short time, the data recording unit 43 has a timing to start data recording.

  FIG. 8A shows a case where the predetermined time is short and the operation of IG-ON → IG-OFF is performed in a short time. The flag A is turned ON by IG-ON within a predetermined time from IG-OFF, and turned OFF after a predetermined time from the “last” IG-OFF. In FIG. 8A, since the predetermined time is short, the flag A is OFF during data recording. In this case, while the data being recorded is continuously recorded, it can be said that it is not preferable because of the purpose of the flag A.

  Therefore, it is preferable that the predetermined time is approximately the same as or slightly longer than the data recording time, as shown in FIG. By determining the predetermined time in this way, it is possible to prevent the flag A from being turned ON during data recording. Therefore, even if the data recording is not continued until the data recording once started by the data recording unit 43 is completed, it is possible to prevent the data recording from being interrupted / started and causing data inconsistency.

  Note that the predetermined time is not set to be fixed in advance, but the data transfer unit 43 may determine the predetermined time according to the data amount of the SRAM.

  FIG. 9 is an example of a flowchart illustrating a procedure in which the data recording ECU 100 stores data in the SRAM 12 in the data flash 30 with reference to the flags A and B.

  Since the data recording unit 43 records the data of the SRAM 12 in the data flash 30 in principle when IG-OFF occurs, the data recording unit 43 determines whether or not it is in the IG-OFF state (S210).

  When it is not in the IG-OFF state (No in S210), it is in the IG-ON state, so it is not the timing to save the data in the SRAM 12 to the data flash 30. Therefore, the flag setting unit 42 sets the flag B to OFF (S220).

  In the IG-OFF state (Yes in S210), the data recording unit 43 determines whether or not it is immediately after being operated from IG-ON to IG-OFF (S230). If immediately after IG-OFF (Yes in S230), the data recording unit 43 determines whether or not the flag A is ON (S240).

  When the flag A is ON (Yes in S240), it is IG-ON within a predetermined time from IG-OFF, and further, it is IG-OFF within a predetermined time. Therefore, the data recording unit 43 should not record data in order to suppress the occurrence of data mismatch. However, since the data in the SRAM 12 may be erased before the data is recorded by IG-OFF, the data recording unit 43 holds the data in the SRAM 12 (S250). Specifically, the data recording unit 43 outputs a holding instruction to the relay operation unit 44 so that the power supply IC 32 does not turn off the IGCT relay 53 (maintains the IGCT relay 53 on). As a result, even if the power supply IC 32 detects IG-OFF, the IGCT relay 53 is maintained ON, so that power is supplied from the battery 54 to the main microcomputer 10 and the sub-microcomputer 20, and the contents of the SRAM 12 are not erased.

  In addition, since the flag A is ON, the flag setting unit 42 determines that IG-ON is changed from IG-OFF to IG-OFF for a short time, and sets the flag B to OFF (S260). Therefore, in this case, the data recording unit 43 cannot record data.

  On the other hand, if the flag A is not ON in step S240 (No in S240), the flag setting unit 42 is not set to IG-ON at a predetermined time from IG-OFF or more than a predetermined time has passed. The flag B is set to ON (S270). In this case, the data recording unit 43 can record data.

  If it is not immediately after the operation from IG-ON to IG-OFF in Step S230 (No in S230), the data recording unit 43 determines whether or not the flag A has transitioned from ON to OFF (S280). . As described above, since the flag A is turned OFF when a predetermined time has elapsed from IG-OFF, even when the flag A is turned ON, the flag A is turned OFF. When the flag A is changed from ON to OFF (S280: Yes), the data recording unit 43 may record data, so the flag setting unit 42 sets the flag B to ON (S290). As a result, it is determined that the IG-OFF is a short-time IG-ON, and after that, even if the IG-OFF is operated for a short time, the data is recorded (after a predetermined time from the first IG-OFF). Is possible.

  If the flag A has not been turned off from ON (No in S280), the process proceeds to step S310 while the flag A remains on.

Steps S310 and after are data recording processing.
The data recording unit 43 determines whether or not the flag B is ON (S310). If the flag B is ON (Yes in S310), since data recording is permitted, the data recording unit 43 holds the data in the SRAM 12 and starts data recording (S320). Specifically, the data recording unit 43 causes the relay operation unit 44 to keep the IGCT relay 53 on. As a result, even if the power supply IC 32 detects IG-OFF, the IGCT relay 53 is maintained ON, so that power is supplied from the battery 54 to the main microcomputer 10 and the sub-microcomputer 20, and the contents of the SRAM 12 are not erased.

  The data recording unit 43 determines whether all the data in the SRAM 12 has been recorded (S330). Until all the data in the SRAM 12 is recorded (No in S330), the data recording is continued (S310, S320).

  During data recording (within a predetermined time from IG-OFF), the driver may operate the IG-ON. Since the operation of the flag A is independent of the data recording, the flag A may be turned on. However, since the data recording is continuously performed, the data recording unit 43 records all the data of the SRAM 12 in the data flash 30. Can do. In addition, if the driver operates IG-ON → IG-OFF during data recording (within a predetermined time from IG-OFF), flag A is ON for a predetermined time from the last IG-OFF. Therefore, the transmission of data being recorded is not interrupted.

  When the data recording unit 43 has recorded all the data in the SRAM 12 (Yes in S330), the data recording unit 43 finishes holding the data in the SRAM 12 for data recording (S340). Specifically, the data recording unit 43 permits the relay operation unit 44 to turn off the IGCT relay 53. As a result, the power supply IC 32 can turn off the IGCT relay 53 according to a unique standard based on IG-OFF, ACC-ON, ACC-OFF, vehicle status, and the like.

  The flag setting unit 42 sets the flag B to OFF when receiving a notification of the end of data recording from the data recording unit 43 (S350). That is, when the flag B is turned off, it is possible to record that data recording is no longer necessary because data recording is completed.

  FIG. 10 is an example of a diagram illustrating the relationship between IG-ON, IG-OFF, and data recording. FIG. 10A shows a case where the driver does not IG-ON within a predetermined time from IG-OFF. In this case, the flag A is kept OFF without being turned ON. Therefore, as shown in FIGS. 7 and 9, when the driver first operates IG-OFF after the vehicle travels, the determinations at S210 and S230 are Yes, the determination at S240 is No, and the determination at S310 is Yes. . For this reason, in the case of IG-OFF which is not repeated frequent IG-ON and IG-OFF, all data in the SRAM 12 is recorded in the data flash 30 immediately after IG-OFF.

  FIG. 10B shows a case where the driver IG-ON within a predetermined time from IG-OFF. If the driver operates from IG-OFF to IG-ON within a predetermined time from IG-OFF, the flag A is turned ON only within the predetermined time. Since the data recording unit 43 prioritizes recording all the data in the SRAM 12 over the determination of recording the next data, all the data in the SRAM 12 is recorded in the data flash 30 in this case as well, and no inconsistency occurs in the data. .

  FIG. 10C shows a case where the driver IG-ON within a predetermined time from IG-OFF and IG-OFF within the predetermined time. As in FIG. 10B, the flag A is turned ON by IG-ON within a predetermined time from IG-OFF.

  However, since IG-OFF is turned on within a predetermined time from IG-OFF, the flag A remains IG-OFF with the flag ON. Since the flag A is not turned off until a predetermined time has elapsed from IG-OFF, the flag A continues to be turned on from the IG-ON until a predetermined time has passed since the second IG-OFF.

  Therefore, even when the second IG-OFF is detected, the data recording unit 43 starts data recording from the SRAM 12 to the data flash 30 after the flag A is turned off. Therefore, even in such a case, the data recording method of this embodiment does not cause inconsistency between the data in the SRAM 12 and the data in the data flash 30.

  As described above, the data storage method according to the present embodiment does not record data for a predetermined time from IG-OFF even if IG-ON and IG-OFF are repeated frequently. Can be reduced.

[Other configuration examples]
FIG. 11A is a diagram illustrating a configuration example when the data recording ECU 100 includes three microcomputers. In FIG. 11A, the rightmost sub-microcomputer 20 has a data flash 30, and the main microcomputer 10 records data in the rightmost sub-microcomputer 20. Thus, the number of microcomputers included in the data recording ECU 100 may be three, or four or more.

  Further, when the data recording ECU 100 has two or more sub-microcomputers 20, it is not necessary to have one sub-microcomputer 20 that records data. For example, when the two sub-microcomputers 20 record the same data in duplicate, the reliability and safety of the data are enhanced.

  FIG. 11B is a diagram showing a configuration example when an ECU different from the data recording ECU 100 has the data flash 30. In FIG. 11B, the microcomputer of the ECU 1 has a data flash 30. In such a case, the data recording ECU 100 starts recording data in the ECU 1 at the timing described above. In this case, it is sufficient to use CAN communication instead of the DMAC 19, and data can be recorded by the function of the in-vehicle network 200 even if the data recording method is different. However, since it is desirable to supply power to the ECU 1 until the data in the SRAM 12 of the data recording ECU 100 is recorded in the ECU 1, the relay operation unit 44 requests the ECU 1 to hold the power during data recording. Keep it. Thereby, the power is supplied until the ECU 1 also receives data from the data recording ECU 100 and records it in the data flash 30.

  Even when the ECU different from the data recording ECU 100 has the data flash 30, the reliability and safety of the data can be improved by having the data flash 30 in the plurality of ECUs.

10 Main microcomputer 12, 22 SRAM
13,23 core (CPU)
18, 28 CANC
19,29 DMAC
20 Sub-microcomputer 30 Data flash 31 CAN driver 32 Power supply IC
100 data recording ECU
200 In-vehicle network

Claims (8)

An information processing device that writes data in the first storage device to the second storage device at a timing when an engine stop operation or at least a stop operation of the traveling system including the electric motor is received,
An operation accepting means for accepting an engine stop operation or an engine start operation, or at least a stop operation or a start operation of a traveling system including an electric motor;
The operation accepting unit records an engine start operation or a specific operation that has received a start operation of the traveling system within a predetermined time after the engine stop operation or the travel system stop operation is received, and the operation accepting unit records the engine stop operation or Stop start operation recording means for erasing a record of the specific operation after a predetermined time has elapsed since the stop operation of the traveling system was received;
Data writing means for writing data of the first storage device to the second storage device;
The information processing apparatus, wherein the data writing means cancels writing of data from the first storage device to the second storage device when the specific operation is recorded. The data writing means is
If there is a record of the specific operation at the timing when the engine stop operation or the travel system stop operation is received, the writing of data from the first storage device to the second storage device is canceled, and the specific operation Export data after the record is erased,
The information processing apparatus according to claim 1.   3. The information processing apparatus according to claim 1, further comprising power control means for maintaining power supply from the power source to the first storage device while the specific operation is recorded. 4. When the data writing unit finishes writing data from the first storage device to the second storage device, the power control unit stops power supply from the power source to the first storage device.
The information processing apparatus according to claim 3. The stop start operation recording means records the specific operation when the engine start operation or the start operation of the travel system is received within a predetermined time from the newest engine stop operation or the stop operation of the travel system.
The information processing apparatus according to claim 1, wherein the information processing apparatus is an information processing apparatus. The stop / start operation recording means, when there is a record of the specific operation, when the operation accepting means accepts an engine stop operation or a stop operation of the travel system, is predetermined from the last engine stop operation or the stop operation of the travel system. Delete the record of the specific operation after a lapse of time,
The information processing apparatus according to claim 1, wherein the information processing apparatus is an information processing apparatus. The first microcomputer,
A second microcomputer,
Data transmission means for transmitting data from the first microcomputer to the second microcomputer;
The data writing means writes data from the first storage device of the first microcomputer to the second storage device of the second microcomputer,
The information processing apparatus according to claim 1, wherein: A data recording method for an information processing apparatus that writes data of a first storage device to a second storage device at a timing when an engine stop operation or at least a stop operation of a traveling system including an electric motor is received,
A step of receiving an engine stop operation or an engine start operation, or a stop operation or a start operation of a traveling system including at least an electric motor;
A stop start operation recording means for recording a specific operation in which the engine start operation or the travel system start operation is received within a predetermined time after the operation reception means receives the engine stop operation or the stop operation of the travel system; and
A step of erasing the record of the specific operation after a predetermined time has elapsed since the operation receiving means received an engine stop operation or a stop operation of the traveling system;
Data writing means for writing data in the first storage device to the second storage device cancels writing of data from the first storage device to the second storage device when there is a record of the specific operation. A data recording method.

Images