JP2020017210A - Control device and mode transition method - Google Patents

Abstract

To provide a control device capable of improving mode transition reliability and the speed.SOLUTION: A control device in an embodiment includes a determination part and a transition part. The determination part determines an input state of a predetermined input terminal after resetting. The transition part is configured, when the determination part determines that the input state is a first state, to make the operation mode transit to the first mode, and when the input state re-determined by the determination part after the transition to the first mode is the first state, to determine the operation mode to be the first mode.SELECTED DRAWING: Figure 2

Description

  The disclosed embodiments relate to a control device and a mode transition method.

  2. Description of the Related Art Conventionally, a control device (ECU: Electronic Control Unit) mounted on a vehicle and electronically controlling various systems of the vehicle, such as an engine, a transmission, and a car navigation system, is known. In such a control device, a built-in microcontroller (hereinafter, referred to as a “microcomputer”) reads out and executes a control program stored therein in advance, thereby realizing various assigned functions.

  The control program of such a control device may need to be updated (reprogrammed) when a function is added or when a defect is discovered afterwards. The operation modes of the control device include a normal mode in which the control program normally operates and a reprogramming mode for rewriting the control program. In the reprogramming, the operation mode is shifted from the normal mode to the reprogramming mode. It is executed after

  For example, Patent Document 1 discloses that when a signal applied to a microcomputer completely matches a voltage signal pattern that is a combination of a plurality of voltage signals each having a predetermined voltage value and a predetermined voltage duration, A control device for transitioning to a reprogramming mode is disclosed.

JP-A-2017-134377

  However, the above-described conventional technology has room for further improvement in improving the reliability of the mode transition and increasing the speed.

  Specifically, the above-described conventional technique uses the above-described voltage signal pattern in order to prevent an erroneous transition to the reprogramming mode due to noise or the like. However, in order to match with such a pattern, it is necessary to read the voltage signal input to the microcomputer at least for the total of the voltage continuation time, and there is a problem that it takes time to shift the mode.

  In this regard, as another noise countermeasure, it is conceivable that the input signal is read twice as an instantaneous value instead of the predetermined duration and the result is compared. In this case, the first and second readings are performed. It is necessary to leave a predetermined interval between them, and the time required to shift the mode also takes time due to the interval.

  An aspect of the embodiment has been made in view of the above, and has as its object to provide a control device and a mode transition method capable of improving the reliability and speeding up the mode transition.

  A control device according to an aspect of an embodiment includes a determination unit and a transition unit. The determination unit determines an input state of a predetermined input terminal after reset. The transition unit, when the input state is determined to be the first state by the determination unit, shifts the operation mode to the first mode, and redetermines by the determination unit after the shift to the first mode. If the input state is the first state, the operation mode is determined to be the first mode.

  According to an aspect of the embodiment, it is possible to improve the reliability and speed of the mode transition.

FIG. 1A is a schematic explanatory diagram of the vehicle-mounted system according to the embodiment. FIG. 1B is a schematic explanatory diagram of reprogramming. FIG. 1C is a schematic explanatory diagram of a hardware configuration of an ECU according to the embodiment. FIG. 1D is a sequence diagram when the ECU according to the comparative example shifts to the repro mode. FIG. 1E is a sequence diagram when the ECU according to the embodiment shifts to the repro mode. FIG. 2 is a block diagram of the vehicle-mounted system according to the embodiment. FIG. 3 is a flowchart illustrating a processing procedure executed by the ECU according to the embodiment.

  Hereinafter, an embodiment of a control device and a mode transition method disclosed in the present application will be described in detail with reference to the accompanying drawings. The present invention is not limited by the embodiments described below.

  In the following, the term “reprogramming” may be abbreviated to “repro” in some cases. In the following, an overview of a mode transition method according to the present embodiment will be described with reference to FIGS. 1A to 1E, and then an in-vehicle system including an ECU 10 (corresponding to an example of a “control device”) to which the mode transition method is applied. 1 will be described with reference to FIGS. 2 and 3. FIG. The ECU according to the comparative example is described as “ECU 10 ′” for convenience.

  First, an outline of a mode transition method according to the present embodiment will be described with reference to FIGS. 1A to 1E. FIG. 1A is a schematic explanatory diagram of the vehicle-mounted system 1 according to the embodiment. FIG. 1B is a schematic explanatory diagram of a repro. FIG. 1C is a schematic explanatory diagram of a hardware configuration of the ECU 10 according to the present embodiment. FIG. 1D is a sequence diagram when the ECU 10 'according to the comparative example shifts to the repro mode. FIG. 1E is a sequence diagram when the ECU 10 according to the present embodiment shifts to the repro mode.

  As shown in FIG. 1A, the vehicle C includes an in-vehicle system 1. The in-vehicle system 1 includes a plurality of ECUs 10-1 to 10-n. The ECUs 10-1 to 10-n are communicably connected to each other by a vehicle-mounted network VN such as a CAN (Controller Area Network), and electronically control the control targets 20-1 to 20-n by executing control programs. The control targets 20-1 to 20-n are various systems such as an engine, a transmission, and a car navigation system.

  Here, the control program executed by each ECU 10 may need to be reproduced when adding a function or when a defect is discovered afterwards. In such a case, as shown in FIG. 1B, a repro tool 50, which is a repro terminal device, is connected to the ECU 10 to be repro-produced via a CAN or the like, and an instruction to execute repro is issued.

  Specifically, at the time of repro, the ECU 10 is first turned on to start a control program, and the ECU 10 enters a "normal mode" in which the control program normally operates (step S1). In this state, when a “repro instruction” is transmitted from the repro tool 50 to the ECU 10 by inputting a command or the like (step S2), the ECU 10 that has received the “repro instruction” performs “mode transition” (step S3), and the ECU 10 executes the “repro Mode "(step S4), and the control program is rewritten.

  By the way, in some cases, the ECU comprises a control unit with 2 CPUs (Central Processing Unit). The ECU 10 according to the present embodiment also has such a 2-CPU configuration.

  Specifically, as shown in FIG. 1C, the ECU 10 has a main microcomputer 121 and a sub-microcomputer 122. Of the main microcomputer 121 and the sub microcomputer 122, only the main microcomputer 121 is connected to the bus of the vehicle-mounted network VN. The main microcomputer 121 and the sub microcomputer 122 are provided so as to be able to communicate with each other by serial communication using the communication line 125 or the like.

  Since the control programs also operate in the main microcomputer 121 and the sub-microcomputer 122, it is necessary to execute the reprocessing individually by the main microcomputer 121 and the sub-microcomputer 122.

  However, since the sub microcomputer 122 is not connected to the in-vehicle network VN as described above, when receiving the repro instruction from the repro tool 50, the main microcomputer 121 shifts the sub microcomputer 122 to the repro mode. After that, the sub-microcomputer 122 is repro- duced via the main microcomputer 121.

  When the sub-microcomputer 122 shifts to the repro mode, as shown in FIG. 1C, the main microcomputer 121 inputs a LO signal to the RESET terminal of the sub-microcomputer 122 and resets the sub-microcomputer 122 while inputting a signal to the same terminal. To HI. Further, the main microcomputer 121 inputs an HI signal to the WRITE terminal of the sub-microcomputer 122. If the sub-microcomputer 122 detects the HI state of the WRITE terminal after the reset, it starts up in the repro mode instead of the normal mode.

  By the way, if the sub-microcomputer 122 detects the HI state of the WRITE terminal due to the influence of disturbances such as noises after reset even though there is no “repro instruction”, the sub-microcomputer 122 starts up in the repro mode unintentionally. Will be done. In order to prevent such a malfunction, for example, the ECU 10 'according to the comparative example checks the WRITE terminal twice with a predetermined interval, and compares the results to determine the state of the WRITE terminal only when the results match. I do.

  Specifically, as shown in FIG. 1D, in the ECU 10 ′ according to the comparative example, first, the main microcomputer 121 receives a repro instruction from the repro tool 50 (step S11), and sends the LO signal to the HI signal to the RESET terminal of the sub microcomputer 122. And an HI signal to the WRITE terminal (step S12).

  After resetting by the LO signal input to the RESET terminal, the sub-microcomputer 122 performs “WRITE terminal check” and “wait processing” until the state of the WRITE terminal matches twice, as indicated by the “Loop” fragment in the figure. Is repeated (step S13 ').

  Then, if the state of the WRITE terminal coincides twice in the HI state, the sub-microcomputer 122 determines the state of the WRITE terminal and starts up in the repro mode while performing "repro initial setting" (step S14). After the start in the repro mode, “repro” (broken arrow to step S15) is executed via the communication line 125 via the main microcomputer 121.

  However, according to such a mode transition method according to the comparative example, there is a problem that it takes a long time to start up due to the wait processing performed during the check of the WRITE terminal.

  Thus, in the mode transition method according to the present embodiment, similarly to the comparative example, malfunction is basically prevented by reading the WRITE terminal twice, but wait processing is performed between the two checks of the WRITE terminal. Is performed, the "repro initialization" in step S14 described above is performed to eliminate the delay in the start-up time due to the wait processing.

  Specifically, as shown in FIG. 1E, in the mode transition method according to the present embodiment, the sub-microcomputer 122 executes step S13 after executing steps S11 to S12. In step S13, the sub-microcomputer 122 executes the first "WRITE terminal check". If the WRITE terminal is in the HI state, the sub-microcomputer 122 executes the "repro initialization" executed later as step S14 in FIG. 1D. . That is, the sub-microcomputer 122 temporarily determines, so to speak, the transition to the repro mode based on the result of the first "WRITE terminal check", and starts the transition to the repro mode before the final decision.

  In the “repro initialization”, for example, a backup process of copying the contents of a ROM (Read Only Memory) constituting a storage unit of the ECU 10 to a RAM (Random Access Memory) in preparation for rewriting, a setting process on a network, and the like. Preparation processing is performed.

  Then, after “repro initialization”, the sub-microcomputer 122 executes “WRITE terminal recheck”, and compares the check result with the first “WRITE terminal check” check result. If the check results match, the sub-microcomputer 122 finally determines that the state of the WRITE terminal is the HI state. That is, the transition to the temporarily determined repro mode is finally determined, and thereafter, “repro” (broken arrow to step S15) is executed via the communication line 125 via the main microcomputer 121.

  On the other hand, if the check results do not match, the sub-microcomputer 122 resets itself and executes step S13 again. Therefore, in this case, the setting contents of the “repro initial setting” are discarded, but there is no problem because it is considered that an attempt was made to shift to the repro mode by mistake due to noise or the like. Rather, if step S13 is re-executed and the state of the WRITE terminal is not in the HI state, it is possible to return to the normal mode once it has erroneously shifted to the repro mode.

  As described above, in the mode transition method according to the present embodiment, the wait processing performed between checks of the WRITE terminal is eliminated (see “no wait processing” in the drawing), and the first “WRITE terminal check” is performed. As a result, the transition to the repro mode was temporarily determined. Then, when the transition to the repro mode is temporarily determined, the transition to the repro mode is started before the "WRITE terminal recheck", and the "repro initialization" is advanced in advance.

  Therefore, according to the mode transition method according to the present embodiment, the startup can be sped up by eliminating the delay of the startup time due to the wait processing. That is, it is possible to improve the reliability and speed of the mode transition.

  Hereinafter, the in-vehicle system 1 including the ECU 10 to which the above-described mode transition method is applied will be described more specifically.

  FIG. 2 is a block diagram of the vehicle-mounted system 1 according to the present embodiment. In FIG. 2, only the components necessary for describing the features of the present embodiment are represented by functional blocks, and descriptions of general components are omitted.

  In other words, each component illustrated in FIG. 2 is a functional concept and does not necessarily need to be physically configured as illustrated. For example, the specific form of distribution / integration of each functional block is not limited to the illustrated one, and all or a part thereof may be functionally or physically distributed in arbitrary units according to various loads and usage conditions. -It is possible to integrate and configure.

  Also, in the description with reference to FIG. 2, the description of the components already described may be simplified or omitted.

  As shown in FIG. 2, the in-vehicle system 1 includes an ECU 10. The ECU 10 includes a storage unit 11 and a control unit 12.

  The storage unit 11 includes, for example, a semiconductor memory device such as a data flash in addition to the ROM 11a and the RAM 11b, and stores, for example, various programs and the like operating in the normal mode or the repro mode, though not shown.

  The control unit 12 is a controller, and various programs stored in the storage unit 11 are executed by a CPU (Central Processing Unit), an MPU (Micro Processing Unit), or the like using the RAM as a work area. Is realized by: The control unit 12 can be realized by an integrated circuit such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array).

  For example, in the ECU 10 according to the present embodiment, as illustrated in FIG. 2, the control unit 12 includes two microcomputers, a main microcomputer 121 and a sub microcomputer 122.

  The main microcomputer 121 has an instruction receiving unit 121a, a mode control unit 121b, and a communication unit 121c. The sub-microcomputer 122 includes a reset unit 122a, a mode determination unit 122b, a transition unit 122c, an execution unit 122d, and a communication unit 122e. Further, the sub-microcomputer 122 includes a RESET terminal 123 and a WRITE terminal 124, which are predetermined input terminals. The main microcomputer 121 and the sub-microcomputer 122 are connected via a communication line 125 so as to be able to communicate with each other.

  Description will be made from the main microcomputer 121. The instruction receiving unit 121a receives a repro instruction from the repro tool 50. The instruction receiving unit 121a notifies the mode control unit 121b of the received repro instruction.

  When the notified repro instruction is for the sub-microcomputer 122, the mode control unit 121b inputs the LO signal to the RESET terminal 123 of the sub-microcomputer 122. Further, the mode control unit 121b negates the signal input to the RESET terminal 123 from the LO signal to the HI signal.

  Further, the mode control unit 121b inputs an HI signal to the WRITE terminal 124 of the sub-microcomputer 122. Although not shown in the figure, if the notified repro instruction is for the sub-microcomputer 122, the mode control section 121b resets the main microcomputer 121 itself and shifts to the repro mode.

  Further, after the sub-microcomputer 122 shifts to the repro mode, the instruction receiving unit 121a and the mode control unit 121b serve as a data transfer between the repro tool 50 and the sub-microcomputer 122 to cause the sub-microcomputer 122 to execute the repro. The communication line 125 is used to transfer such data. The communication unit 121c performs data communication using the communication line 125.

  Next, the sub microcomputer 122 will be described. The reset unit 122a performs a reset process for resetting the sub-microcomputer 122 when detecting the input of the LO signal to the RESET terminal 123. Further, when receiving a notification indicating that the first check result and the second check result of the WRITE terminal 124 do not match from the mode determination unit 122b, which will be described later, the reset unit 122a resets the sub-microcomputer 122. Perform reset processing for resetting.

  After resetting the sub-microcomputer 122, the mode determination unit 122b checks the WRITE terminal 124, and when detecting the LO state in which the LO signal has been input, determines the mode in which the sub-microcomputer 122 should be activated to be the normal mode.

  After resetting the sub-microcomputer 122, the mode determining unit 122b checks the WRITE terminal 124, and if the HI state in which the HI signal is input is detected, the mode for activating the sub-microcomputer 122 is provisionally determined to be the repro mode. I do. Further, the mode determination unit 122b notifies the determination result to the transition unit 122c.

  The transition unit 122c transitions the sub-microcomputer 122 to the normal mode when the mode determination unit 122b determines the normal mode, and causes the execution unit 122d to execute various programs in the normal mode.

  When the mode determining unit 122b temporarily determines that the repro mode is set, the shifting unit 122c starts shifting the sub-microcomputer 122 to the repro mode, accesses the storage unit 11, and executes the repro initial setting.

  After executing the repro initialization, the transition unit 122c notifies the mode determination unit 122b of the completion of the repro initialization, and causes the mode determination unit 122b to recheck the WRITE terminal 124.

  The mode determination unit 122b re-checks the WRITE terminal 124 in response to the notification of the completion of the repro initialization by the transition unit 122c. If the HI state is detected as in the first check result, the sub-microcomputer 122 should be started. Determine the mode as repro mode. In addition, the determination result is notified to the transition unit 122c.

  If the recheck result of the WRITE terminal 124 does not match the first check result, the mode determination unit 122b notifies the reset unit 122a of the determination result.

  When the mode to be started is determined to be the repro mode by the mode determining unit 122b, the transition unit 122c causes the execution unit 122d to execute various programs in the repro mode in order to continue to start the sub-microcomputer 122 in the repro mode.

  The execution unit 122d reads various programs stored in the storage unit 11 from the storage unit 11 according to the mode to be shifted, and executes the programs. The communication unit 122e performs data communication with the main microcomputer 121 using the communication line 125.

  Next, a processing procedure executed by the ECU 10 according to the embodiment will be described with reference to FIG. FIG. 3 is a flowchart illustrating a processing procedure executed by the ECU 10 according to the embodiment. Here, the processing procedure executed by the sub-microcomputer 122 after the reset will be described.

  After the sub microcomputer 122 is reset, as shown in FIG. 3, the mode determining unit 122b checks the WRITE terminal 124 for the first time (step S101). Then, the mode determination unit 122b determines whether the WRITE terminal 124 is in the LO state (Step S102).

  Here, when the WRITE terminal 124 is in the LO state (Step S102, Yes), the transition unit 122c causes the sub-microcomputer 122 to transition to the normal mode (Step S103). Then, the execution unit 122d reads out various programs in the normal mode from the storage unit 11 and executes them, and the sub-microcomputer 122 executes the normal operation (Step S104).

  On the other hand, when the WRITE terminal 124 is not in the LO state (No in step S102), that is, when the WRITE terminal 124 is in the HI state, the mode to be activated is provisionally determined to be the repro mode. Then, the transition unit 122c causes the sub-microcomputer 122 to transition to the repro mode (step S105), and executes repro initial settings (step S106).

  Then, after the completion of the repro initialization, the mode determination unit 122b rechecks the WRITE terminal 124 (Step S107). Then, the mode determination unit 122b determines whether the WRITE terminal 124 is in the HI state (Step S108).

  Here, when the WRITE terminal 124 is in the HI state (step S108, Yes), the shift to the repro mode is determined, and the execution unit 122d reads out various programs in the repro mode from the storage unit 11 and executes the programs. The microcomputer 122 executes the repro (step S109).

  On the other hand, when the WRITE terminal 124 is not in the HI state (step S108, No), the reset unit 122a performs a reset process (step S110), and the sub-microcomputer 122 repeats the process from step S101.

  Although not shown in FIG. 3, the mode determination unit 122b may re-determine the WRITE terminal 124 between step S103 and step S104 when the mode shifts to the normal mode.

  In such a case, the mode determination unit 122b determines whether or not the WRITE terminal 124 is in the LO state after step S103, and if it is in the LO state, the process may proceed to step S104. If the WRITE terminal 124 is not in the LO state, the reset processing in step S110 is executed, and the processing from step S101 may be repeated.

  As a result, even in the transition to the normal mode, the reliability of the mode transition can be improved.

  As described above, the ECU 10 (corresponding to an example of the “control device”) according to the present embodiment includes the mode determining unit 122b (corresponding to an example of the “determining unit”) and the transition unit 122c. The mode determination unit 122b determines the input state of a predetermined input terminal after reset. The shift unit 122c shifts the operation mode to the first mode when the input state is determined to be the first state by the mode determination unit 122b, and after the shift to the first mode, the mode determination unit 122b If the re-determined input state is the first state, the operation mode is determined to be the first mode.

  Therefore, according to the ECU 10 according to the present embodiment, it is possible to improve the reliability and speed of the mode transition.

  Further, the ECU 10 according to the present embodiment further includes a reset unit 122a. The reset unit 122a executes the reset if the input state re-determined by the mode determination unit 122b is not the first state.

  Therefore, according to the ECU 10 according to the present embodiment, even if the mode is erroneously shifted to the first mode due to the influence of noise or the like, it is possible to return to the normal mode by determining the input state again from the beginning after resetting. It becomes possible.

  The first mode is a repro mode in which reprogramming, which is rewriting of a program, is performed. The transition unit 122c controls the WRITE terminal 124 (corresponding to an example of a “predetermined input terminal”) by the mode determining unit 122b. When it is determined that the input state is the HI state (corresponding to an example of the “first state”), the initial setting of the repro is executed, and after the completion of the initial setting, the input determined again by the mode determining unit 122b. If the state is the HI state, the operation mode is set to the repro mode and the repro is executed.

  Therefore, according to the ECU 10 according to the present embodiment, the shift to the repro mode can be performed with high reliability, and the normal mode is hardly affected.

  If the input state determined by the mode determination unit 122b after reset is not the HI state, the transition unit 122c transitions the operation mode to the normal mode, which is the normal operation mode for the repro mode.

  Therefore, according to the ECU 10 according to the present embodiment, even if the mode is erroneously shifted to the first mode due to the influence of noise or the like before the reset, the input state is determined again from the beginning after the reset, and if the input mode is not the HI state. , Can be returned to the normal mode normally.

  In the above-described embodiment, an example has been described in which the control unit 12 is configured by two microcomputers, the main microcomputer 121 and the sub-microcomputer 122. However, the control unit 12 may be configured by one microcomputer. Further, it may be constituted by three or more microcomputers. When three or more microcomputers are used, for example, at least one microcomputer may be connected to the bus of the in-vehicle network VN, and such a microcomputer may serve as the main microcomputer 121 with respect to other microcomputers.

  In the above-described embodiment, the ECU 10 is provided in the vehicle C. However, the ECU 10 is not limited to a general vehicle, but may be provided in an industrial vehicle, an agricultural vehicle, or the like. Further, the present invention is not limited to vehicles, and may be provided in a moving machine such as a train, a ship, an aircraft, and the like.

  Further effects and modifications can be easily derived by those skilled in the art. Thus, the broader aspects of the present invention are not limited to the specific details and representative embodiments shown and described above. Accordingly, various modifications may be made without departing from the spirit or scope of the general inventive concept as defined by the appended claims and equivalents thereof.

1 in-vehicle system 10 ECU
11 Storage unit 11a ROM
11b RAM
12 control unit 50 repro tool 121 main microcomputer 121a instruction reception unit 121b mode control unit 121c communication unit 122 sub microcomputer 122a reset unit 122b mode determination unit 122c transition unit 122d execution unit 122e communication unit 123 RESET terminal 124 WRITE terminal 125 communication line C vehicle VN In-vehicle network

Claims (5)

A determining unit that determines an input state of a predetermined input terminal after reset,
When the determination unit determines that the input state is the first state, the operation mode is shifted to the first mode, and the input state is determined again by the determination unit after the shift to the first mode. A transition unit that determines the operation mode to the first mode if is in the first state. The control device according to claim 1, further comprising: a reset unit configured to execute the reset when the input state re-determined by the determination unit is not the first state. The first mode is a reprogramming mode for performing reprogramming, which is rewriting of a program,
The transition unit includes:
When the input state is determined to be the first state by the determination unit, initialization of the reprogramming is performed, and after the completion of the initialization, the input state redetermined by the determination unit is the input state. 3. The control device according to claim 1, wherein if the state is the first state, the operation mode is determined to be the reprogramming mode, and the reprogramming is performed. 4. The transition unit includes:
If the input state determined by the determination unit after the reset is not the first state, the operation mode is shifted to a normal mode which is the operation mode in a normal state with respect to the reprogramming mode. The control device according to claim 3. A mode transition method using a control device having a predetermined input terminal,
A determining step of determining the input state of the input terminal after reset;
When the input state is determined to be the first state by the determination step, the operation mode is shifted to the first mode, and the input state redetermined by the determination step after the shift to the first mode is performed. If the state is the first state, a step of determining the operation mode to the first mode.

Images