JP2016055673A - Failure diagnosis device and electronic control device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To perform a failure diagnosis in response to the addition of an arbitrary electronic control device, in a failure diagnosis device which diagnoses a failure of the electronic control device connected to a communication line.SOLUTION: In a failure diagnosis system, an objective device indicating an ECU being a monitoring object is included in a signal which is outputted to a communication line at each peripheral environment of a pre-classified failure diagnosis device . An identifier for specifying the ECU is detected, and a specified information database is created in which specified information indicating the identifier or information corresponding to the identifier is associated with the peripheral environment of a diagnosis device 10 at the detection of the identifier (S210 to S250). Then, every time the peripheral environment is transited to a different environment, it is monitored whether or not the identifier is detected which is transmitted from the objective device corresponding to the specified information which is recorded in the specified information database in a current peripheral environment, and on condition that the identifier cannot be detected for a preset interruption determination time or longer, it is determined that the objective device to which the identifier corresponds is failed.SELECTED DRAWING: Figure 2

Description

  The present invention relates to a failure diagnosis device for diagnosing a failure of an electronic control device connected to a communication line, and an electronic control device to be diagnosed by the failure diagnosis device.

  As the above-described failure diagnosis device, information regarding an electronic control device that is likely to be added is prepared, and when the electronic control device is added, failure diagnosis of the newly added electronic control device is performed based on this information. Those are known (for example, see Patent Document 1).

JP 2001-157283 A

  However, the failure diagnosis apparatus can only cope with the addition of an assumed electronic control apparatus. For example, when it is determined that there is a failure when data is not transmitted for a certain period of time, if the electronic control device may not temporarily transmit data according to the setting (ambient environment), this setting must be grasped in advance. Failure determination cannot be performed accurately. That is, in the above-described failure diagnosis apparatus, when an electronic control device that transmits data in an unexpected pattern is added, there is a problem that failure determination of the electronic control device is hindered.

  Accordingly, in view of such problems, it is an object of the present invention to enable failure diagnosis corresponding to the addition of an arbitrary electronic control device in a failure diagnosis device that diagnoses a failure of an electronic control device connected to a communication line. It is an object of the invention.

  In the failure diagnosis apparatus of the present invention, the database generation means includes an electronic control included in a signal output to the communication line by the target device representing the electronic control device to be monitored for each surrounding environment of the failure diagnosis device divided in advance. An identifier for identifying a device is detected, and a specific information database in which specific information representing the identifier or information corresponding to the identifier is recorded in association with the surrounding environment of the failure diagnosis device when the identifier is detected is generated. To do.

  Further, the failure determination unit detects an identifier transmitted from the target device corresponding to the specific information recorded in the specific information database in the current surrounding environment every time the surrounding environment of the failure diagnosis apparatus changes to a different environment. Whether the target device corresponding to the identifier has failed is determined on the condition that the identifier cannot be detected for a predetermined interruption determination time or longer.

  That is, the electronic control device is set to transmit data or stop data transmission according to the surrounding environment of the failure diagnosis device. Therefore, in the failure diagnosis apparatus of the present invention, a specific information database indicating which electronic control apparatus transmits data is generated according to the surrounding environment. Since this specific information database is generated for each ambient environment, even if a certain electronic control device stops data transmission or newly starts data transmission when the ambient environment changes, Whether or not the electronic control unit transmits data in the ambient environment is sequentially recorded.

  And failure diagnosis is implemented referring to such a specific information database. By referring to the specific information database, it is possible to recognize an electronic control device to which data should be transmitted in the current ambient environment. At this time, if data from the electronic control device to which data should be transmitted cannot be obtained for more than the interruption determination time, it can be diagnosed that some abnormality has occurred in the electronic control device.

  Therefore, according to such a failure diagnosis apparatus, even if an electronic control device is added, the electronic control device can be added to the target device to be monitored for failure diagnosis without any manual action. Can do. In addition, even when the target device stops transmission / reception of data according to the surrounding environment, it is possible to suppress an erroneous determination that determines that a failure occurs because data cannot be received.

  In addition, description of each claim can be arbitrarily combined as much as possible. At this time, a part of the configuration may be excluded.

1 is a block diagram showing a schematic configuration of a failure diagnosis system 1 to which the present invention is applied. It is a flowchart which shows the ECU process which each ECU60 performs. It is a data structure figure showing an example of a frame transmitted from ECU in an embodiment. It is a flowchart which shows the list creation process which the diagnostic apparatus 10 performs. It is explanatory drawing which shows the list | wrist for every power supply state. It is a flowchart which shows the diagnostic process which the diagnostic apparatus 10 performs. It is explanatory drawing which shows an example of the timer value for every ECU. It is a data structure figure showing an example of a frame composition of an operation stop command. It is a data structure figure which shows an example of the flame | frame transmitted from ECU in other embodiment.

Embodiments according to the present invention will be described below with reference to the drawings.
[Configuration of this embodiment]
A failure diagnosis system 1 to which the present invention is applied is a system that is mounted on a vehicle such as a passenger car, for example, and has a function of determining the presence or absence of a failure of a large number of ECUs (electronic control units) mounted on the vehicle. The failure diagnosis system 1 includes a diagnosis device 10, an inspection device 20, a plurality of communication lines 30, 40, 50, and a large number of ECUs 31-34, 41-44, 51-54 (hereinafter also referred to as ECU 60). It has.

  The diagnostic device 10 includes a CPU 11, a memory 12 such as a ROM and a RAM, and a connector 15. The CPU 11 executes processing based on the program recorded in the memory 12. The processing executed by the CPU 11 includes list creation processing and diagnosis processing described later, as well as data (such as a list and failure diagnosis described later) recorded in the memory 12 in response to a request from the inspection device 20 to the inspection device 20. Processing to send is included.

  In addition, a plurality of communication lines 30, 40, 50 are connected to the diagnostic device 10, and the diagnostic device 10 and the ECU 60 are connected via the communication lines 30, 40, 50, for example, CAN (Controller Area Network). Send and receive data with the protocol. Further, the diagnostic device 10 has a function as a gateway device that relays data flowing through the plurality of communication lines 30, 40, 50 to other communication lines 30, 40, 50 as necessary. That is, the diagnostic apparatus 10 is configured to monitor data sent from more ECUs 60.

  In addition, a plurality of power supply states are input to the diagnostic device 10. For example, as shown in FIG. 1, states such as a battery power source, a starter power source, a battery charging power source, an accessory power source, and an ignition (IGN) power source are input.

  The battery power supply indicates a supply state of power from the battery mounted on the vehicle to each device, and is turned on when the battery voltage is secured. The starter power supply indicates an operating state of the starter (a power supply state to the starter).

  The battery charging power source indicates a connection state to an external power source for charging the battery in the plug-in hybrid vehicle. In addition, the accessory power supply indicates a power supply state to the accessory device that does not directly affect the running performance of the navigation device or the audio. In addition, the ignition power supply indicates a supply state of electric power to the engine ignition device.

  The connector 15 is configured as a well-known connector for physically connecting or disconnecting from an external device such as the inspection device 20. When the vehicle travels normally, the external device is separated, and the external device is connected to the connector 15 as necessary, for example, when inspecting the vehicle or repairing a failure.

  The inspection device 20 is provided in, for example, a vehicle repair shop or a vehicle dealer, and is configured to be connectable to the diagnostic device 10 via the connector 15. The inspection device 20 requests data from the diagnostic device 10 while connected to the diagnostic device 10, and receives data from the diagnostic device 10 according to the request.

  The inspection apparatus 20 is sequentially connected to the diagnosis apparatus 10 of a large number of vehicles equipped with the diagnosis apparatus 10 and receives data, thereby constructing a database about failure diagnosis for a large number of vehicles, Analyze data such as frequency.

  A large number of ECUs 31 to 34, 41 to 44, and 51 to 54 (60) are each configured as a known electronic control device that controls hardware to be controlled. Each of the ECUs 60 has predetermined data (frame) including an identifier for identifying itself on the communication lines 30, 40, 50 connected to the ECU 60 when the conditions for operating them (state of combination of power supplies) are satisfied. Send it out.

  For example, each ECU 60 determines that the power source to be used is set for each ECU 60, and when the number of connected power sources is one, the conditions for operating itself are satisfied when power is supplied from this power source. . In addition, when there are a plurality of connected power supplies, it is determined that the conditions for operating itself are satisfied when power is supplied from one or more of the plurality of power supplies.

  In particular, the ECU 31 among many ECUs 60 has a function as a power management ECU. In the function as the power management ECU, the ECU 60 that stops the function is selected based on the traveling state of the host vehicle, the battery state, and the like, and an operation stop command is transmitted to the selected ECU 60. The operation stop command is transmitted to the corresponding ECU 60 via the communication lines 30, 40, 50, and the ECU 60 that receives the operation stop command stops its own operation. That is, it turns off its own power supply.

[Process of this embodiment]
In the failure diagnosis system 1 configured as described above, each ECU 60 performs the ECU process shown in FIG. The ECU process is a process that starts when, for example, the power source of itself (ECU 60) is turned on.

  In this process, first, initialization of itself is performed (S110), and when this process ends, it is determined whether or not the power supply of itself is turned off (S120). If the power is not turned off (S120: NO), it is determined whether or not a predetermined time set in advance has elapsed since the previous frame transmission (the process of S140) was performed (S130).

  If the specified time has elapsed (S130: YES), a frame including a node identifier for identifying its own ECU 60 is transmitted to the connected communication lines 30, 40, 50 (S140). Here, the frame transmitted by the ECU 60 is provided with an ID and data (DATA) area as shown in FIG.

  The ID is mainly for specifying the type of data, and is included, for example, in the first 11 bits of the data. The data area includes a plurality of data (DATA1 to DATA4, etc.), and a node identifier is included at the head of this area.

  When the process of transmitting such data ends, the process returns to S120. In the process of S130, if the specified time has not elapsed (S130: NO), the process returns to S120. If the power is turned off in the processing of S120 (S120: YES), the ECU processing is terminated.

  Next, in the diagnostic device 10, a list creation process shown in FIG. 4 is performed in correspondence with the ECU process. The list creation process is a process that is started when, for example, the diagnostic apparatus 10 is turned on, and is then repeatedly performed at regular intervals.

  The list creation process is always executed, but the process of creating a list (S240) of this process operates only when the diagnosis apparatus 10 is in the list creation mode, which is a mode for creating a list. You may make it do. In this case, when performing the diagnosis process such as when the vehicle is traveling, it is only necessary to set the mode to transit to the diagnosis mode (a mode other than the list creation mode).

  In this process, as shown in FIG. 4, it is first determined whether or not a frame including a node identifier has been received via the communication lines 30, 40, and 50 (S210). If no frame has been received (S210: NO), the process of S210 is repeated.

  If a frame has been received (S210: YES), the current power state is input (S220). That is, the state of each of the plurality of power supplies input to the diagnostic device 10 in FIG. 1 is recognized.

  Subsequently, it is determined whether or not an ECU corresponding to the received frame (identifier) exists in the list (specific information database) for each power state (S230). Here, as shown in FIG. 5, the list for each power supply state transmits data for each combination of power supply states indicating whether each power supply is turned on (ON) or turned off (OFF). The ECU (ECU in which the diagnosis apparatus 10 can recognize the node identifier) is described in the ECU list column.

  If there is an ECU corresponding to the received frame in the list for each power supply state (S230: YES), the process proceeds to S250 described later. If there is no ECU corresponding to the received frame in the list for each power supply state (S230: NO), the ECU corresponding to the received frame is described in the column of the ECU list corresponding to the current combination of power supply states. (S240).

  For example, when the engine is ON (IGN power supply, accessory power supply, and battery power supply are on, and the charging power supply and starter power supply are off), a frame is received from the ECU 31 (power management ECU). If it is not described in the internal ECU list column, this ECU 31 is described in the ECU on-engine list column.

In addition, each ECU31-44 shown in FIG. 5 is comprised as ECU which controls the following hardware, respectively. An example of these functions is shown below.
ECU 31: Power management ECU (controls the power source such as saving power by sending an operation stop command to other ECUs)
ECU 32: Light ECU (controls lights such as vehicle headlights)
ECU33: Keyless ECU (controls locking / unlocking in the vehicle)
ECU 34: ACC ECU (controls accessory devices such as navigation devices)
ECU41: Air conditioner ECU (controls the air conditioning of the vehicle)
ECU42: Engine ECU (controls the engine)
ECU 43: Brake ECU (controls brake hydraulic pressure)
ECU 44: Charge management ECU (controls charging in a plug-in hybrid vehicle)
In this process, a timer corresponding to the ECU 60 described in the column of the ECU list is registered in the memory 12 so as to be counted up in a diagnostic process described later.

  Subsequently, a timer set for each ECU 60 is initialized (S250). In this process, every time a frame that can identify a node is received (S210), the timer of the corresponding ECU is initialized. When such processing ends, the list creation processing ends.

  Next, the diagnostic apparatus 10 performs the diagnostic process shown in FIG. 6 after the list creation process or in parallel with the list creation process. The diagnosis process is a process of diagnosing whether or not each ECU 60 has a failure.

  In the diagnosis process, as shown in FIG. 6, first, the power state is input (S310). This process recognizes the state of each of the plurality of power supplies input to the diagnostic device 10 as in the process of S220.

  Subsequently, for each ECU 60 described in the ECU list column corresponding to the current power state in the list for each power state, the respective timers are counted up (S320). For example, as shown in FIG. 5, if the state of the vehicle is ON, the timers for the ECU 31, ECU 32, ECU 34, ECU 41 to ECU 43 are counted up.

  Here, as shown in FIG. 7, the identifier of each ECU 60 and the timer value are associated with each other and recorded in the memory 12 as a list of timers. In this list of timers, there is a region where the ECU is not registered so that the addition of the ECU can be supported. When a signal from a new ECU is received, an identifier corresponding to the new ECU and The timer value will be recorded.

  Subsequently, it is determined whether or not an operation stop command is transmitted from the power management ECU 31 (S330). In this process, an affirmative determination is made when an operation stop command has been transmitted before and there is an ECU whose operation is currently stopped.

  Here, the operation stop command is transmitted in a data format as shown in FIG. 8, for example. That is, the identifier of the ECU 60 whose operation is to be stopped is included in the data (DATA) area provided after the ID. This data area is set so that one or a plurality of identifiers can be included, and a plurality of ECUs 60 can be stopped by one operation stop command.

  If an operation stop command has been transmitted from the power management ECU 31 (S330: YES), the timer for the ECU 60 (including the ECU 60 that has stopped operating at this time) to which the operation stop command has been transmitted is cleared (reset) ( S340) and the process proceeds to S350. Further, if an operation stop command is not transmitted from the power management ECU 31 (S330: NO), it is determined for each ECU 60 whether or not the timer overflows (S350).

  That is, the timer value is compared with a preset threshold value for determining communication interruption, and when the timer value exceeds the threshold value, it is determined that the timer overflows. If a timer overflow has occurred (S350: YES), a failure diagnosis indicating that the overflowed ECU 60 has failed is recorded in the memory 12 (S360), and the diagnosis process is terminated.

If no timer overflow has occurred (S350: NO), the diagnostic process is terminated.
[Effects of this embodiment]
In the above-described failure diagnosis system 1, the diagnosis device 10 communicates with the target device representing the ECUs 31 to 34, 41 to 44, 51 to 54 (60) to be monitored for each surrounding environment of the failure diagnosis device 10 that has been divided in advance. Diagnostic device 10 when an identifier for identifying ECU 60 included in signals output to lines 30, 40, and 50 is detected, and specific information representing the identifier or information corresponding to the identifier is detected. A specific information database recorded in association with the surrounding environment is generated.

  In addition, each time the diagnostic device 10 changes to a different environment, the diagnostic device 10 detects an identifier transmitted from the target device corresponding to the specific information recorded in the specific information database in the current ambient environment. Whether or not the identifier corresponding to the identifier has failed is determined on the condition that the identifier cannot be detected for a predetermined interruption determination time or longer.

  That is, the ECU 60 is set to transmit data or stop data transmission according to the surrounding environment of the failure diagnosis apparatus. Therefore, the diagnostic apparatus 10 generates a specific information database (list for each power supply state) indicating which ECU 60 transmits data according to the surrounding environment. Since this specific information database is generated for each ambient environment, even if a certain electronic control device stops data transmission or newly starts data transmission when the ambient environment changes, Whether the ECU 60 transmits data in the ambient environment is sequentially recorded.

  Then, the diagnostic device 10 performs failure diagnosis while referring to such a specific information database. By referring to the specific information database, it is possible to recognize the ECU 60 to which data should be transmitted in the current ambient environment. At this time, if data from the ECU 60 to which data should be transmitted cannot be obtained for the interruption determination time or longer, it can be diagnosed that some abnormality has occurred in the ECU 60.

  Therefore, according to such a failure diagnosis system 1, even if an ECU is added, this ECU can be added to the target device to be monitored for failure diagnosis without any manual operation. In addition, even when the target device stops transmission / reception of data according to the surrounding environment, it is possible to suppress an erroneous determination that determines that a failure occurs because data cannot be received.

  Further, in the failure diagnosis system 1 described above, the diagnosis device 10 uses a power supply state that indicates a combined state in which each of a plurality of power supplies is turned on or off as the surrounding environment of the failure diagnosis device.

According to such a failure diagnosis system 1, even if there is an ECU that changes the operating state (whether data is transmitted) according to the power supply state, the failure determination can be performed accurately.
In the failure diagnosis system 1, the diagnosis device 10 is connected to a plurality of different communication lines 30, 40, 50, and serves as a gateway device that relays communication between the connected communication lines 30, 40, 50. It has the function of.

According to such a failure diagnosis system 1, since signals flowing through a plurality of different communication lines 30, 40, 50 can be monitored, many ECUs can be monitored.
In the failure diagnosis system 1 described above, the diagnostic device 10 includes a connector 15 as a communication interface for communicating with an external device (such as the inspection device 20).

According to such a failure diagnosis system 1, operations such as information collection of failure diagnosis results and data analysis can be performed in an external device.
Further, in the above-described failure diagnosis system 1, the diagnosis device 10 transmits failure information related to the failed ECU in response to a request from an external device.

According to such a failure diagnosis system 1, since the diagnosis device 10 transmits failure information in response to a request from the external device, the failure information can be easily acquired in the external device.
In the failure diagnosis system 1 described above, the diagnosis device 10 transmits the contents of the specific information database in response to a request from an external device.

According to such a failure diagnosis system 1, when analyzing a failure, it is possible to identify an ECU that does not transmit data from the connection point.
Further, in the failure diagnosis system 1 described above, the diagnosis device 10 detects an operation stop instruction for any of the target devices, and if an operation stop instruction is detected, the target device that is the target of the operation stop instruction is excluded from the determination targets.

  That is, the diagnostic device 10 excludes the target device to which the operation stop instruction is transmitted from the failure determination target because it is expected to stop the data transmission. Therefore, according to such a failure diagnosis system 1, erroneous determination can be suppressed.

  Further, in the failure diagnosis system 1 described above, the diagnosis device 10 excludes the target device that is the target of the operation stop instruction from the determination target by stopping the timer that measures whether or not the interruption determination time has elapsed.

According to such a failure diagnosis system 1, since it is set whether or not to be determined by management of the timer, it is possible to manage the determination target with a simple configuration.
That is, it is only necessary to stop the timer in order to exclude it from the determination target, and since it is only necessary to operate the timer when setting the determination target, a simple configuration can be achieved.

Further, in the failure diagnosis system 1 described above, the diagnosis device 10 records failure information regarding the failed ECU in the recording device (memory 12).
According to such a failure diagnosis system 1, data is not lost even when it cannot be transmitted in real time over a network or the like. Therefore, the failure state can be easily recognized by analyzing the data.

[Other Embodiments]
The present invention is not construed as being limited by the above embodiment. Further, the reference numerals used in the description of the above embodiments are also used in the claims as appropriate, but they are used for the purpose of facilitating the understanding of the invention according to each claim, and the invention according to each claim. It is not intended to limit the technical scope of The functions of one component in the above embodiment may be distributed as a plurality of components, or the functions of a plurality of components may be integrated into one component. Further, at least a part of the configuration of the above embodiment may be replaced with a known configuration having the same function. Moreover, you may abbreviate | omit a part of structure of the said embodiment as long as a subject can be solved. In addition, at least a part of the configuration of the above embodiment may be added to or replaced with the configuration of the other embodiment. In addition, all the aspects included in the technical idea specified only by the wording described in the claim are embodiment of this invention.

  In addition to the above-described failure diagnosis system 1, there are various types of devices such as a diagnosis device 10 having the failure diagnosis system 1 as a component, a program for causing a computer to function as the diagnosis device 10, a medium on which the program is recorded, a failure diagnosis method, etc. The present invention can also be realized in the form of.

  For example, in the above embodiment, each ECU 60 is configured to transmit a node identifier for identifying itself in the data area (see FIG. 3), but using the lower bits of the ID area as shown in FIG. A node identifier may be transmitted. In this case, the data area can be used more effectively.

  In the above embodiment, data such as a failure diagnosis is recorded in the memory 12, and the data is read from the memory 12 when the external device is connected. It may be configured to be connected and immediately transmitted to the external inspection apparatus 20 or the like without being recorded in the memory 12. In the above embodiment, the power supply state is used as the surrounding environment. However, a general environment such as a communication state or connection state with another device, an outside air temperature, or a CPU temperature may be used.

Even if it does in this way, the effect similar to the said embodiment can be enjoyed.
[Correspondence between Configuration of Embodiment and Means of Present Invention]
In the above embodiment, the process in which the diagnostic device 10 (CPU 11) transmits data in response to a request from an external device corresponds to the failure information transmission unit and the database transmission unit in the present invention. Of the processes executed by the diagnostic apparatus 10, the processes of S210 to S250 correspond to the database generation means referred to in the present invention, and the processes of S310, S320, and S350 correspond to the failure determination means referred to in the present invention in the above embodiment. To do.

  Moreover, in the said embodiment, the process of S330 is equivalent to the operation stop detection means said by this invention, and the process of S340 is equivalent to the exclusion means said by this invention in the said embodiment. In the above embodiment, the process of S360 corresponds to the recording control means in the present invention.

  DESCRIPTION OF SYMBOLS 1 ... Failure diagnosis system, 10 ... Diagnosis apparatus, 11 ... CPU, 12 ... Memory, 15 ... Connector, 20 ... Inspection apparatus, 30 ... Communication line, 31 ... Power management ECU, 32, 33, 34, 41, 42, 43 , 44, 51, 52, 53, 54, 60 ... ECU.

Claims (10)

A failure diagnosis device (10) for diagnosing a failure of an electronic control device (31-34, 41-44, 51-54) connected to a communication line (30, 40, 50),
An identifier for identifying the electronic control device included in the signal output to the communication line by the target device representing the electronic control device to be monitored is detected for each surrounding environment of the fault diagnosis device that is classified in advance, and the identifier Or database generating means (S210 to S250) for generating a specific information database in which specific information representing information corresponding to the identifier is recorded in association with the surrounding environment of the failure diagnosis apparatus when the identifier is detected;
Whenever the surrounding environment of the fault diagnosis device transitions to a different environment, it monitors whether or not an identifier transmitted from the target device corresponding to the specific information recorded in the specific information database is detected in the current ambient environment. Failure determination means (S310, S320, S350) for determining that the target device corresponding to the identifier has failed on the condition that the identifier cannot be detected for a predetermined breakage determination time or longer,
A failure diagnosis apparatus comprising: The failure diagnosis apparatus according to claim 1,
A fault diagnosis apparatus characterized by using a power supply state indicating a combined state that each of a plurality of power supplies is turned on or off as the surrounding environment of the fault diagnosis apparatus. In the failure diagnosis apparatus according to claim 1 or 2,
The fault diagnosis device is
A failure diagnosis device characterized in that a plurality of different communication lines are connected, and a function as a gateway device that relays communication between the connected communication lines is provided. In the failure diagnosis apparatus according to any one of claims 1 to 3,
A failure diagnosis device comprising a communication interface (15) for communicating with an external device. The failure diagnosis apparatus according to claim 4,
Failure information transmitting means (11) for transmitting failure information relating to a failed electronic control unit in response to a request from the external device
A failure diagnosis apparatus comprising: In the failure diagnosis apparatus according to claim 4 or 5,
Database transmission means (11) for transmitting the contents of the specific information database in response to a request from the external device
A failure diagnosis apparatus comprising: The failure diagnosis apparatus according to any one of claims 1 to 6,
An operation stop detection means (S330) for detecting an operation stop instruction for any of the target devices;
Excluding means (S340) for excluding the target device that is the target of the operation stop instruction when detecting the operation stop instruction from the determination target by the failure determination means;
A failure diagnosis apparatus comprising: The failure diagnosis apparatus according to claim 7,
The exclusion means is excluded from the determination target by the failure determination means by stopping a timer that counts whether or not the interruption determination time has elapsed for the target device that is the target of the operation stop instruction. Fault diagnosis device. The failure diagnosis apparatus according to any one of claims 1 to 8,
Recording control means for causing the recording device to record failure information relating to the failed electronic control device (S360)
A failure diagnosis apparatus comprising: An electronic control device (31-34, 41-44, 51-54) capable of communicating with the failure diagnosis device (10) according to any one of claims 1 to 9,
The electronic control device performs CAN communication with the failure diagnosis device and transmits the data including its own identifier in the ID area of the exchanged data.

Images