JP2015137562A - On-vehicle electronic control system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To detect abnormality of a sensor power source, to protect an AD converter from external noise and the like, and to reduce manufacturing costs.SOLUTION: An on-vehicle electronic control system includes a plurality of dual system sensors (13, 14) having power source voltage ratio characteristics proportional to power source voltage of sensors and having characteristics that an output voltage is proportional to a displacement amount and inclinations are opposite positive and negative absolute values, a power source voltage calculating circuit (12) calculating a voltage of the sensor power source supplied to the dual system sensors (13, 14) on the basis of two sensor output voltages output from the dual system sensors (13, 14), and a power source voltage abnormality detecting circuit (12) detecting whether the voltage of the power source supplied to the plurality of dual system sensors (13, 14) is abnormal or not on the basis of the plurality of sensor power source voltages calculated on the basis of a plurality of sets of two sensor output voltages output from the plurality of dual system sensors (13, 14).

Description

  The present invention relates to an in-vehicle electronic control system provided with a dual system sensor.

  As a configuration for detecting an abnormality of a sensor input to an electronic control device mounted on an automobile, a sensor abnormality is detected by configuring the sensor in a double system as described in Patent Document 1. The configuration is known. In this configuration, a sensor abnormality is detected by comparing two detection values output from the dual sensor.

JP-A-9-158765

  A configuration in which sensor power is supplied from an electronic control unit to a dual sensor is known. In this configuration, a configuration for detecting a sensor power supply abnormality is required. As a sensor power supply abnormality detection configuration, a configuration is known in which a sensor power supply abnormality is detected as a function of the AD converter (or microcomputer) by inputting power supplied to the sensor as a reference voltage of the AD converter. . However, in the case of the above configuration, there has been a problem that the AD converter is damaged due to external noise from the sensor power supply terminal or a short circuit failure of the terminal.

  In order to protect the AD converter from external noise or the like, a configuration for separating the power supplied to the sensor and the power used inside the electronic control device is considered as a configuration to solve the above problem. As shown in FIG. In this configuration, as shown in FIG. 5, an internal power supply circuit 2, a sensor power supply circuit 3, a CPU 4, and an ADC (AD converter) 5 are provided inside the electronic control device 1. The reference voltage of the ADC 5 is supplied from the internal power supply circuit 2 to the ADC reference terminal 4a of the CPU 4, and the voltage from the sensor power supply circuit 3 is taken into the input terminal 5a of the ADC 5 as a normal analog signal. The sensor 6 composed of a double sensor has two output terminals 6a and 6b, a power input terminal 6c, and a ground terminal 6d. The two output terminals 6 a and 6 b of the sensor 6 are connected to the input terminals 5 b and 5 c of the ADC 5 via the terminals 1 a and 1 b of the electronic control device 1. The power input terminal 6 c of the sensor 6 is connected to the sensor power circuit 3 via the sensor power terminal 1 c of the electronic control device 1. The ground terminal 6 d of the sensor 6 is connected to the ground terminal 1 d of the electronic control device 1.

  In the case of the above configuration, an input terminal 5a (port) for voltage input is separately required for the ADC 5, and resistors 7a and 7b for voltage dividing circuits and surge protection elements (for protecting the input voltage within the input range of the ADC 5) Since peripheral circuits such as (not shown) are required separately, there is a problem that the manufacturing cost increases.

  SUMMARY OF THE INVENTION Accordingly, an object of the present invention is to provide an in-vehicle electronic control system that can detect an abnormality in a sensor power supply, can protect an AD converter from external noise, and can reduce manufacturing costs. There is to do.

  The invention according to claim 1 has the characteristics that the power supply voltage ratio is proportional to the power supply voltage of the sensor, the output voltage is proportional to the displacement, the slope is opposite to the positive and the absolute value is the same. A plurality of heavy system sensors, and AD conversion input of sensor output voltages of the plurality of double system sensors, and an electronic control device for supplying power to the plurality of dual system sensors, the electronic control device comprising: A power supply voltage calculation circuit for calculating a voltage of a sensor power supply supplied to the duplex sensor based on two sensor output voltages output from the duplex sensor, and a plurality of outputs output from the plurality of duplex sensors Based on a plurality of sensor power supply voltages calculated based on two sets of sensor output voltages, a power supply power for detecting whether or not the power supply voltage supplied to the plurality of duplex sensors is abnormal And a failure detection circuit.

The electric block diagram of the vehicle-mounted electronic control system which shows 1st Embodiment of this invention Sensor output voltage characteristics Flow chart of detection control such as sensor power supply abnormality FIG. 3 equivalent view showing a second embodiment of the present invention. 1 equivalent diagram showing the conventional configuration

  Hereinafter, a first embodiment of the present invention will be described with reference to FIGS. First, FIG. 1 is an electrical configuration diagram schematically showing the overall configuration of the in-vehicle electronic control system 11 of the present embodiment. As shown in FIG. 1, an in-vehicle electronic control system 11 includes, for example, an electronic control device 12 made of an ECU (electronic control unit), a first sensor 13 made of a double sensor, and a double sensor. And a second sensor 14. The on-vehicle electronic control system 11 is constituted by, for example, an electronic throttle engine control system. The electronic control device 12 is composed of, for example, an electronic throttle control device. The first sensor 13 is composed of, for example, a throttle opening sensor, and the second sensor 14 is composed of, for example, an accelerator pedal sensor.

  The electronic control device 12 includes an internal power supply circuit 15, a sensor power supply circuit 16, a CPU 17, and an ADC (AD converter) 18. Further, the electronic control device 12 includes a device power supply terminal 12a, a sensor power supply terminal 12b, a first first sensor input terminal 12c, a first second sensor input terminal 12d, a second first sensor input terminal 12e, and a second The second sensor input terminal 12f and the ground terminal 12g are provided. In the case of this configuration, the input terminals 15a and 16a of the internal power supply circuit 15 and the sensor power supply circuit 16 are connected to the apparatus power supply terminal 12a. The output terminal 15 b of the internal power supply circuit 15 is connected to the ADC reference terminal 17 a of the CPU 17. The output terminal 16b of the sensor power supply circuit 16 is connected to the sensor power supply terminal 12b. The electronic control device 12 has functions as a power supply voltage calculation circuit, a power supply voltage abnormality detection circuit, and a sensor abnormality detection circuit.

  Further, the first sensor input terminal 12c, the first sensor input terminal 12d, the second sensor input terminal 12e, and the second sensor input terminal 12f are the first first sensor input terminal of the ADC 18. The input terminal 18a, the first second input terminal 18b, the second first input terminal 18c, and the second second input terminal 18d are connected. The ground terminal 12g is connected to the ground terminal 17b of the CPU 17.

  The first sensor 13 has two output terminals 13a and 13b, a power input terminal 13c, and a ground terminal 13d. The two output terminals 13a and 13b of the first sensor 13 are connected to the first first sensor input terminal 12c of the electronic control unit 12 and the first first sensor input terminal 12d of the ADC 18 via the first first sensor input terminal 12d. The input terminal 18a is connected to the first two input terminals 18b. The power input terminal 13 c of the first sensor 13 is connected to the output terminal 16 b of the sensor power circuit 16 via the sensor power terminal 12 b of the electronic control device 12. The ground terminal 13 d of the first sensor 13 is connected to the ground terminal 12 g of the electronic control device 12.

  The second sensor 14 has two output terminals 14a and 14b, a power input terminal 14c, and a ground terminal 14d. The two output terminals 14a and 14b of the second sensor 14 are connected to the second first sensor input terminal 12e of the electronic control unit 12 and the second first sensor input terminal 12f of the ADC 18, respectively. The input terminal 18c is connected to the second input terminal 18d. The power input terminal 14 c of the second sensor 14 is connected to the output terminal 16 b of the sensor power circuit 16 via the sensor power terminal 12 b of the electronic control device 12. The ground terminal 14 d of the second sensor 14 is connected to the ground terminal 12 g of the electronic control device 12.

  Now, the two output voltages V1 and V2 output from the two output terminals 13a and 13b of the first sensor 13 have the following characteristics. The output voltages V1 and V2 change as shown by straight lines A1 and A2 in FIG. 2 with respect to the input physical value X (displacement amount), that is, the output voltage is proportional to the input physical value X, and The straight lines A1 and A2 have the characteristic that the absolute values of the slopes are the same even if the slopes are different. The straight lines A1 and A2 indicate voltage changes when the sensor power supply voltage VC is normal, and the upper broken lines B1 and B2 indicate voltage changes of the output voltages V1 and V2 when the sensor power supply voltage VC increases. The lower one-dot chain lines C1 and C2 indicate changes in the output voltages V1 and V2 when the sensor power supply voltage VC decreases. That is, the output voltages V1 and V2 have a power supply voltage ratio proportional to the sensor power supply voltage VC. Further, the voltage (V1 + V2) obtained by adding the output voltage V1 and the output voltage V2 is a constant value that is not affected by the change in the input physical value X, as indicated by the straight line A3 in FIG. Further, the added voltage (V1 + V2) is affected by the fluctuation of the sensor power supply voltage VC, and when the sensor power supply voltage VC rises, as shown by the upper broken line B3 in FIG. On the other hand, when the sensor power supply voltage VC decreases, the constant value decreases as shown by the lower one-dot chain line C3 in FIG.

  The two output voltages V1 'and V2' output from the two output terminals 14a and 14b of the second sensor 14 also have substantially the same characteristics as the output voltages V1 and V2 of the first sensor 13. That is, the output voltages V1 ′ and V2 ′ have characteristics that the output voltage is proportional to the input physical value X, and that the slopes of the straight lines A1 and A2 have the same absolute value only when the slopes are different. . The output voltages V1 'and V2' have a power supply voltage ratio proportional to the sensor power supply voltage VC. Further, the voltage (V1 ′ + V2 ′) obtained by adding the output voltage V1 ′ and the output voltage V2 ′ becomes a constant value that is not affected by the change in the input physical value X. Further, the added voltage (V1 ′ + V2 ′) is affected by fluctuations in the sensor power supply voltage VC. When the sensor power supply voltage VC increases, the constant value increases and the sensor power supply voltage VC decreases. In this case, the constant value becomes small.

Next, a process for calculating and obtaining the sensor power supply voltage VC using the two output voltages V1 and V2 of the first sensor 13 that is a dual sensor will be described.
As shown in FIG. 2, the output voltages V1 and V2 of the duplex sensor are the same in the absolute value of the slope, except that the slope of the output voltage characteristic with respect to the input physical value X (displacement) of the duplex sensor is different. In addition, when each output voltage V1, V2 is proportional to the sensor power supply voltage VC due to the power supply voltage ratio, the output voltages V1, V2 can be expressed by the following equations (1), (2). it can.

V1 = VC × α (β × X + γ1) (1)
V2 = VC × α (−β × X + γ2) (2)
Α is a proportional constant of the output voltages V1 and V2 with respect to the sensor power supply voltage VC, and β is a proportional constant of the sensor output voltages V1 and V2 with respect to the sensor input physical value X. γ1 and γ2 are intercepts (constants).

  Although it is possible to calculate the sensor power supply voltage VC from the sensor input physical value X and the sensor output voltages V1 and V2 by the above formulas (1) and (2), the sensor input physical value X always varies, so that Can not be calculated. For this reason, it is necessary to remove the term of the sensor input physical value X using the equations (1) and (2) so as not to be affected by the sensor input physical value X. Therefore, the sum Vsum of the sensor output voltages V1 and V2 is calculated.

Vsum = V1 + V2
Substituting the formulas (1) and (2) into this formula,
Vsum = VC × α (γ1 + γ2)
Vsum is expressed as a constant value that is not affected by the sensor input physical value X.

Organizing the above formula for VC,
VC = Vsum / (α (γ1 + γ2))
It becomes. Here, since α, γ1, and γ2 are fixed constants (constants that can be obtained by measurement or the like) of the sensor, VC can be easily calculated.

  In this embodiment, the value of αsum = α (γ1 + γ2) of the sensor is acquired in advance, and the acquired αsum is stored in a non-illustrated non-volatile memory or the like in the electronic control unit 12. When the sensor power supply voltage needs to be detected, the sensor power supply voltage VC is calculated based on the sensor output voltages V1 and V2 output from the sensor 13 and the stored αsum.

  The calculated value of the sensor power supply voltage VC is a correct value when the sensor 13 is normal, and an abnormal value when the sensor 13 is abnormal. Therefore, in the present embodiment, a plurality of, for example, two double sensors having the above characteristics (the absolute value or intercept of the slope of the characteristics may be different for each sensor), specifically, FIG. The sensor power supply VC1 calculated from the output voltages V1 and V2 of the first sensor 13 and the sensor power supply calculated from the output voltages V1 ′ and V2 ′ of the second sensor 14 are provided. The sensor power supply abnormality and the sensor output abnormality are identified based on whether or not the voltage VC2 matches. If the sensor power supply voltages VC1 and VC2 are inconsistent and one of the duplex sensors is normal, the cause of the mismatch is that the output of the other duplex sensor is not correct. Therefore, in this case, it can be determined (detected) that the sensor output is abnormal. When the sensor power supply voltages VC1 and VC2 match, it is determined that there is no sensor output abnormality, and the matching sensor power supply voltage VC is set as a correct sensor power supply voltage to determine whether the sensor power supply is normal or abnormal (detection) )It can be performed.

  FIG. 3 is a flowchart showing the contents of the control for detecting the sensor power supply abnormality and the sensor output abnormality in the control of the electronic control unit 12. The detection control will be described with reference to this flowchart. First, in step S10 of FIG. 3, the output voltages V1 and V2 output from the two output terminals 13a and 13b of the first sensor 13 and the output from the two output terminals 14a and 14b of the second sensor 14 are output. To obtain output voltages V1 ′ and V2 ′.

  Subsequently, the process proceeds to step S20, where the above-described calculation is performed based on the output voltages V1, V2 of the first sensor 13 to calculate the sensor power supply voltage VC1, and the output voltages V1 ′, V2 ′ of the second sensor 14. The sensor power supply voltage VC2 is calculated by performing the above-described calculation based on the above. Next, the process proceeds to step S30, and it is determined whether or not the calculated sensor power supply voltage VC1 and the calculated sensor power supply voltage VC2 substantially match. In this case, if the voltage value difference between VC1 and VC2 is equal to or less than a predetermined set value, it is determined that they are almost the same.

  When the sensor power supply voltage VC1 and the sensor power supply voltage VC2 do not substantially match in step S30 (that is, when the voltage value difference between VC1 and VC2 exceeds the set value), the process proceeds to “NO”, and the process proceeds to step S40. Then, it is determined that the sensor output of either the first sensor 13 or the second sensor 14 is abnormal. Thereafter, a process for detecting which of the first sensor 13 or the second sensor 14 is abnormal using a known technique (for example, Patent Document 1) is performed, and the detection result is sent to the user. Notification or transmission to a system or the like using the determination result (for example, an ECU having a fail sale function or a diagnosis function).

  On the other hand, when the sensor power supply voltage VC1 and the sensor power supply voltage VC2 substantially coincide with each other in step S30, the process proceeds to “YES” and proceeds to step S50, where the sensor power supply voltage VC1 and the sensor power supply voltage VC2 are predetermined normal voltages. Determine whether it is within range. If the sensor power supply voltage VC1 and the sensor power supply voltage VC2 are within the normal voltage range, the process proceeds to “YES”, and the process proceeds to step S60. In step S60, it is determined that the sensor power supply voltage VC is normal. Thereafter, this process is completed, and other control of the electronic control unit 12 is executed.

  In step S50, when at least one of the sensor power supply voltage VC1 and the sensor power supply voltage VC2 is not within the normal voltage range, the process proceeds to “NO”, and the process proceeds to step S70. In this step S70, it is determined that the sensor power supply voltage VC is abnormal, and this is notified to the user. Note that the abnormality detection control in FIG. 3 is sequentially executed at a predetermined cycle (for example, a sampling time of several tens of milliseconds to several hundreds of milliseconds) after the engine of the vehicle is started.

  In this embodiment having such a configuration, the power supply voltage ratio is proportional to the power supply voltage of the sensor, the output voltage is proportional to the amount of displacement, the slope is opposite in polarity, and the absolute value is the same. Two double-system sensors having The electronic control unit 12 has a function of calculating the voltage value of the sensor power supply supplied to the duplex sensor 13 (14) based on the two sensor output voltages output from the duplex sensor 13 (14). Have. Furthermore, the electronic control unit 12 includes two sensors calculated based on two sets of two sensor output voltages V1, V2, V1 ′, and V2 ′ output from the two duplex sensors 13 and 14, respectively. Based on the power supply voltage values VC1 and VC2, it has a function of detecting whether or not the power supply voltage supplied to the dual sensors 13 and 14 is abnormal. With this configuration, in this embodiment, the sensor power supply abnormality can be detected, the AD converter (ADC 18) can be protected from external noise, and the number of terminals of the AD converter is increased. This eliminates the necessity and eliminates the need for a peripheral circuit such as a voltage dividing circuit, thereby reducing the manufacturing cost.

  In the present embodiment, the voltage value Vsum obtained by adding the two sensor output voltages V1 and V2 (V1 ′, V2 ′) output from the dual sensor 13 (14) by the electronic control unit 12 is set to 2 The sensor power supply voltage VC is calculated by dividing by a constant value αsum peculiar to the heavy sensor. According to this configuration, the sensor power supply voltage VC can be easily calculated.

  Furthermore, in the present embodiment, the electronic control unit 12 is calculated based on two sets of two sensor output voltages V1, V2, V1 ′, V2 ′ output from the two dual sensors 13, 14. When the voltage value difference between the two sensor power supply voltages VC1 and VC2 is larger than a set value, it is determined that at least one of the two duplex sensors 13 and 14 is abnormal in output. did. According to this configuration, it is possible to easily detect an output abnormality of the dual sensors 13 and 14.

  FIG. 4 shows a second embodiment of the present invention. In addition, the same code | symbol is attached | subjected to the same structure as 1st Embodiment. In the second embodiment, for example, three double system sensors having the above-described characteristics (the absolute value or intercept of the characteristic slope may be different for each sensor) are provided, and these three dual systems are provided. A sensor power supply abnormality and a sensor output abnormality are detected based on whether or not the three sensor power supply voltages VC1, VC2, and VC3 calculated from the sensor output voltage match. That is, the electronic control device 12 of the second embodiment has a function as a second sensor abnormality detection circuit.

  Specifically, in step S110 of FIG. 4, three sets of two output voltages V1, V2, V1 ′, V2 ′, V1 ″ output from two output terminals of each of the three duplex sensors. , V2 ″ is acquired. Subsequently, the process proceeds to step S120, where the sensor power supply voltage VC1 is calculated based on the output voltages V1, V2 of the first dual sensor, and the output voltages V1 ′, V2 ′ of the second dual sensor. The sensor power supply voltage VC2 is calculated based on the above, and the sensor power supply voltage VC3 is calculated based on the output voltages V1 ″ and V2 ″ of the third dual sensor.

  Next, the process proceeds to step S130, and it is determined whether or not the calculated three sensor power supply voltages VC1, VC2, and VC3 substantially match. In this case, if the voltage value difference between VC1 and VC2, the voltage value difference between VC2 and VC3, and the voltage value difference between VC1 and VC3 are equal to or less than a predetermined set value, it is determined that they are almost the same. .

  In step S130, when the three sensor power supply voltages VC1, VC2, and VC3 do not substantially match (that is, a voltage value difference between VC1 and VC2, a voltage value difference between VC2 and VC3, or a voltage between VC1 and VC3) When at least one of the value differences exceeds the set value), it is determined that the sensor output is abnormal, the process proceeds to “NO”, and the process proceeds to step S140. In this step S140, it is determined whether or not VC2 and VC3 substantially match. Here, when VC2 and VC3 substantially match (when the voltage value difference between VC2 and VC3 is equal to or less than the set value), Proceed to “YES”, and proceed to Step S150. In this step S150, it is determined that the output of the first dual system sensor (first sensor) is abnormal, and this is notified to the user or transmitted to a system or the like using the determination result. .

  In step S140, when VC2 and VC3 do not substantially match (when the voltage value difference between VC2 and VC3 exceeds the set value), the process proceeds to “NO”, and the process proceeds to step S160. In this step S160, it is determined whether or not VC1 and VC3 substantially match. Here, when VC1 and VC3 substantially match (when the voltage value difference between VC1 and VC3 is equal to or less than a set value), “ The process proceeds to “YES”, and the process proceeds to step S170. In this step S170, it is determined that the output of the second dual system sensor (second sensor) is abnormal, and this is notified to the user or transmitted to a system or the like using the determination result. . In step S160, when VC1 and VC3 do not substantially match (when the voltage value difference between VC1 and VC3 exceeds the set value), the process proceeds to “NO”, and the process proceeds to step S180. In this step S180, it is determined that the output of the third dual system sensor (third sensor) is abnormal, and this is notified to the user or transmitted to a system or the like using the determination result. .

  On the other hand, when the three sensor power supply voltages VC1, VC2, and VC3 substantially match in step S130, the process proceeds to “YES”, and the process proceeds to step S190. In step S190, it is determined whether or not the three sensor power supply voltages VC1, VC2, and VC3 are within the normal voltage range. Here, when the three sensor power supply voltages VC1, VC2, and VC3 are within the normal voltage range, the process proceeds to “YES”, and the process proceeds to step S200. In step S200, it is determined that the sensor power supply voltage VC is normal. Thereafter, this process is completed, and other control of the electronic control unit 12 is executed.

  In step S190, if at least one of the sensor power supply voltages VC1, VC2, and VC3 is not within the normal voltage range, the process proceeds to “NO”, and the process proceeds to step S210. In this step S210, it is determined that the sensor power supply voltage VC is abnormal, and a notification to that effect is sent to the system or the like using the determination result.

  The configuration of the second embodiment other than that described above is the same as the configuration of the first embodiment. Therefore, in the second embodiment, substantially the same operational effects as in the first embodiment can be obtained. In particular, in the second embodiment, three dual-system sensors are provided, and three sensor power supply voltages VC1 calculated based on three sets of two sensor output voltages output from the three dual-system sensors. When at least one of the three voltage value differences of VC2, VC3 is larger than the set value, and VC2 and VC3 substantially match, the dual system sensor used to calculate VC1 has an output error. When VC1 and VC3 are detected and the duplex sensor used to calculate VC2 detects that the output is abnormal, and VC1 and VC2 are approximately the same, VC3 is calculated. It was configured to detect that the used double sensor was abnormal in output. For this reason, according to the second embodiment, it is possible to easily detect which of the three dual sensors is abnormal in sensor output.

  In the first embodiment or the second embodiment, two or three duplex sensors are provided. However, the present invention is not limited to this, and four or more duplex sensors are provided. It may be configured.

  In each of the above embodiments, as a dual sensor, the power supply voltage ratio is proportional to the power supply voltage of the sensor, the output voltage is proportional to the amount of displacement, the slope is opposite, and the absolute value is the same. The one having the characteristic is used, but the present invention is not limited to this. The power supply voltage ratio is proportional to the power supply voltage of the sensor, the output voltage is proportional to the displacement, and the slope is the same. What has the characteristic of may be used. When configured in this way, one of the two output voltages may be subtracted from the other, or one (the other) is inverted between the positive and negative and then added to the other (one) What is necessary is just to comprise so.

  In the drawings, 11 is an on-vehicle electronic control system, 12 is an electronic control device, 13 is a first sensor, 14 is a second sensor, 15 is an internal power supply circuit, 16 is a sensor power supply circuit, 17 is a CPU, and 18 is an ADC. (AD converter).

Claims (4)

Dual sensor (13, 14) having the characteristics that the output voltage is proportional to the amount of displacement, the output voltage is proportional to the displacement, the slope is opposite, and the absolute value is the same. With multiple
An electronic control device (12) for supplying power to the plurality of duplex sensors (13, 14) as well as AD conversion input of sensor output voltages of the plurality of duplex sensors (13, 14),
The electronic control unit (12) determines the voltage of the sensor power supplied to the dual system sensor (13, 14) based on the two sensor output voltages output from the dual system sensor (13, 14). A power supply voltage calculation circuit (12) for calculating;
Based on a plurality of sensor power supply voltages calculated based on a plurality of sets of two sensor output voltages output from the plurality of duplex sensors (13, 14), the plurality of duplex sensors (13, 14) A vehicle-mounted electronic control system comprising: a power supply voltage abnormality detection circuit (12) for detecting whether or not the power supply voltage supplied to 14) is abnormal.   The power supply voltage calculation circuit divides a voltage value obtained by adding the two sensor output voltages output from the dual system sensor (13, 14) by a constant value specific to the dual system sensor (13, 14). The vehicle-mounted electronic control system according to claim 1, wherein the sensor power supply voltage is calculated. It is the structure provided with two said double system sensors (13, 14),
When a voltage value difference between two sensor power supply voltages calculated based on two sets of two sensor output voltages output from the two dual sensors (13, 14) is larger than a set value, The on-vehicle electronic control system according to claim 1, further comprising a sensor abnormality detection circuit (12) for detecting that at least one of the two dual sensors is an output abnormality. A configuration comprising three of the dual sensors,
At least one of the three voltage value differences of the three sensor power supply voltages VC1, VC2, and VC3 calculated based on the three sets of two sensor output voltages output from the three duplex sensors is greater than the set value. When VC2 and VC3 substantially match, the double sensor used to calculate VC1 detects that the output is abnormal, and when VC1 and VC3 substantially match, VC2 is calculated. A second sensor that detects that the dual system sensor used in the above is abnormal in output and detects that the dual system sensor used to calculate VC3 is abnormal in output when VC1 and VC2 substantially match. The on-vehicle electronic control system according to claim 1, further comprising a sensor abnormality detection circuit (12).

Images