JP2020132059A - Control device, control system and control method - Google Patents

Abstract

To provide a control device which can determine whether a cause of a reset results from an abnormality of an own device, or an abnormality of a power supply when the own device is reset, a control system and a control method.SOLUTION: This control device comprises a communication part, a reset part and a determination part. The communication part continuously performs communication between the other device and itself. The reset part resets an own device when an abnormality occurs in the own device or a power supply. The determination part determines whether a cause of the reset results from an abnormality of the own device, or an abnormality of the power supply on the basis of timing at which the communication with the other device is restarted by the communication part after the reset is performed by the reset part.SELECTED DRAWING: Figure 1

Description

The disclosed embodiments relate to control devices, control systems, and control methods.

Conventionally, there is a control system that controls a control target of each control device while a plurality of control devices operating using different power sources communicate with each other. In such a control system, when any of the control devices does not operate normally, it is necessary to analyze and identify the cause.

For this reason, there is a failure detection device that determines that an abnormality has occurred in the power supply used by the other control device when the control device communicates with another control device and the communication state becomes abnormal (for example, a patent). Reference 1).

JP-A-2009-196453

However, the cause of the abnormality in the communication state between the control device and the other control device is not limited to the abnormality of the power supply used by the other control device. The control device may become abnormal in communication with other control devices even when, for example, an abnormality of its own device, an abnormality of the power supply used by its own device, or an abnormality of another control device occurs. ..

Generally, when an abnormality occurs in the power supply or the own device, the control device resets the own device, but in the conventional failure detection device, it is determined whether the cause of the reset is the abnormality of the own device or the abnormality of the power supply. Can't.

One aspect of the embodiment is made in view of the above, and when the own device is reset, the control device capable of determining whether the cause of the reset is an abnormality of the own device or an abnormality of the power supply. It is an object of the present invention to provide a control system and a control method.

The control device according to one aspect of the embodiment includes a communication unit, a reset unit, and a determination unit. The communication unit continuously communicates with other devices. The reset unit resets the own device when an abnormality occurs in the own device or the power supply. The determination unit determines whether the cause of the reset is an abnormality of the own device or an abnormality of the power supply, based on the timing at which the communication unit resumes communication with the other device after the reset is performed by the reset unit. To do.

The control device, the control system, and the control method according to one embodiment of the embodiment can determine whether the cause of the reset is an abnormality of the own device or an abnormality of the power supply when the own device is reset.

It is explanatory drawing which shows the structure of the control system which concerns on embodiment. It is explanatory drawing which shows the operation example of the control system which concerns on embodiment. It is explanatory drawing which shows the operation example of the control system which concerns on embodiment. It is explanatory drawing which shows the operation example of the control system which concerns on embodiment. It is a flowchart which shows the process which the information processing part of own ECU which concerns on embodiment execute. It is explanatory drawing which shows the operation example of the control system which concerns on the modification of embodiment. It is explanatory drawing which shows the operation example of the control system which concerns on the modification of embodiment.

Hereinafter, embodiments of a control device, a control system, and a control method will be described in detail with reference to the accompanying drawings. The present invention is not limited to the embodiments shown below. In the following, a control system mounted on an automobile (hereinafter referred to as a vehicle) to control the vehicle will be described as an example.

The control system according to the embodiment can also be applied to a system for controlling a moving body other than a vehicle, such as a hybrid vehicle, an electric vehicle, a motorcycle, a train, an aircraft, and a ship. Further, in the following, a case where the control device according to the embodiment is an ECU (Electronic Control Unit) that controls fuel consumption reduction of the vehicle will be described as an example.

As shown in FIG. 1, the control system 100 according to the embodiment includes an ECU according to the embodiment (hereinafter, referred to as own ECU 1) and a first ECU 11 and a second ECU 12 which are examples of other devices.

The own ECU 1 is operated by an IG (ignition) power source, and for example, controls to automatically stop the engine when the vehicle stops due to a traffic light or a traffic jam, controls to automatically start the engine when the vehicle resumes running, and the like. ..

The first ECU 11 is always operated by a power source and controls, for example, a security device such as a door lock. The second ECU 12 is operated by an IG power source, and performs, for example, EFI (Electronic Fuel Injection) control of the vehicle.

The own ECU 1, the first ECU 11, and the second ECU 12 are connected so as to be able to communicate in both directions by, for example, a CAN (Controller Area Network) communication line 10. The own ECU 1, the first ECU 11, and the second ECU 12 control the control target of each ECU while continuously performing two-way communication with each other.

For convenience, FIG. 1 shows three ECUs, the own ECU 1, the first ECU 11, and the second ECU 12, but in an actual vehicle, the own ECU 1 has several tens to several hundreds of ECUs on the CAN communication line. It is connected so as to be communicable via 10.

Further, in an actual vehicle, an ECU that operates with an IG power source such as an ACC (accessory) power source and a power source other than the constant power source is also communicably connected to the own ECU 1 via the CAN communication line 10.

In such a control system 100, an abnormality may occur in the own ECU 1, the first ECU 11, and the second ECU 12 itself, or an abnormality may occur in the power supply. The vehicle may behave abnormally when an abnormality occurs in its own ECU 1, the first ECU 11, the second ECU 12, or the power supply.

For this reason, when the vehicle behaves abnormally, the vehicle user needs to bring the vehicle to a dealer's repair shop, for example, analyze and identify the cause of the abnormal behavior, and have the vehicle repaired. There is.

Here, a general ECU resets the own device when an abnormality occurs in the own device or the power supply, but does not have a function of determining whether the cause of the reset is an abnormality of the own device or an abnormality of the power supply. For this reason, it is difficult for the dealer to identify whether the cause of the abnormal behavior of the vehicle brought into the repair shop is an abnormality in the ECU or an abnormality in the power supply.

Therefore, the own ECU 1 has a function of determining whether the cause of the reset is an abnormality of the own device or an abnormality of the power supply when an abnormality occurs in the own device or the power supply and the own device is reset. Specifically, the own ECU 1 includes an information processing unit 2 and a storage unit 3. The storage unit 3 is, for example, an information storage device such as a data flash, and stores the determination result of the cause of the reset determined by the information processing unit 2.

The information processing unit 2 includes a microcomputer having a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), and various circuits. The information processing unit 2 includes a communication unit 4, a control unit 5, a reset unit 6, and a determination unit 7 that function by the CPU executing a program stored in the ROM using the RAM as a work area. Be prepared.

The communication unit 4, the control unit 5, the reset unit 6, and the determination unit 7 included in the information processing unit 2 are partially or wholly hardware such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array). It may be composed of.

The communication unit 4, the control unit 5, the reset unit 6, and the determination unit 7 included in the information processing unit 2 realize or execute the information processing operations described below, respectively. The internal configuration of the information processing unit 2 is not limited to the configuration shown in FIG. 1, and may be another configuration as long as it performs information processing described later.

The communication unit 4 is a processing unit that continuously performs two-way communication between the control unit 5 and the first ECU 11 and the second ECU 12. Further, the communication unit 4 performs a process of transmitting a control signal input from the control unit 5 to a control target (for example, an engine or the like) of the own ECU 1. The control unit 5 is a processing unit that controls fuel consumption reduction of the vehicle by outputting a control signal to the communication unit 4 and transmitting the control signal from the communication unit 4 to a control target (for example, an engine or the like).

The reset unit 6 is a processing unit that resets the own ECU 1 by outputting a reset signal to the control unit 5 when an abnormality occurs in the IG power supply used by the own ECU 1 or the own ECU 1. When the own ECU 1 is reset, the reset unit 6 outputs a signal to that effect to the determination unit 7.

The determination unit 7 is a processing unit that determines whether the cause of the reset is an abnormality of the IG power supply or an abnormality of the own ECU 1 when a signal indicating that the own ECU 1 has been reset is input from the reset unit 6. The determination unit 7 can also determine whether or not the cause of the reset is an abnormality in the main power supply.

After the reset is performed by the reset unit 6, the determination unit 7 determines whether the cause of the reset is an abnormality in the IG power supply or the main power supply, based on the timing at which the communication unit 4 resumes communication with the first ECU 11 and the second ECU 12. Determine if the own ECU 1 is abnormal.

Specifically, in the control system 100, among the own ECU 1, the first ECU 11, and the second ECU 12, the reset ECU then resumes communication with the other ECU after performing a predetermined start-up process. ..

Therefore, in the own ECU 1, communication with the first ECU 11 and the second ECU 12 occurs depending on whether an abnormality occurs in the IG power supply of the own device, an abnormality occurs in the own device, or an abnormality occurs in the constant power supply. There will be a difference in the timing of resumption.

Therefore, the determination unit 7 acquires from the communication unit 4 the timing at which communication with the first ECU 11 and the second ECU 12 is resumed after the reset of the own ECU 1 is performed, and the cause of the reset is the power supply based on the acquired timing. It is determined whether it is an abnormality or an abnormality of the own ECU 1.

Then, the determination unit 7 stores the determination result of the cause of the reset in the storage unit 3. A specific operation example of the control system 100 when the determination unit 7 determines the cause of the reset will be described later with reference to FIGS. 2 to 4.

In this way, when the own device is reset, the own ECU 1 can determine whether the cause of the reset is an abnormality of the own device or an abnormality of the power supply. Further, according to the own ECU 1, by reading the cause of the reset from the storage unit 3 of the own ECU 1 at the dealer's repair shop, whether the cause of the abnormal behavior of the vehicle brought into the repair shop is an ECU abnormality or a power supply abnormality. Can be identified.

Although not shown in FIG. 1, the first ECU 11 and the second ECU 12 also include the same information processing unit 2 and storage unit 3 as the own ECU 1. As a result, in the control system 100, when the first ECU 11 and the second ECU 12 also reset the own device, it is possible to determine and store whether the cause of the reset is an abnormality of the power supply or an abnormality of the own device.

Next, with reference to FIGS. 2 to 4, an operation example of the control system 100 in the case of determining the cause of the reset after the own ECU 1 resets will be described. 2 to 4 are explanatory views showing an operation example of the control system according to the embodiment. The battery 101 shown in FIGS. 2 to 4 is an in-vehicle battery which is an example of a main power source. The first ECU 11 is supplied with electric power from the battery 101 via the main power supply line 102.

Further, the switch 103 shown in FIGS. 2 to 4 is a switch that is connected when the IG switch of the vehicle is turned on and is disconnected when the IG switch is turned off. When the switch 103 is connected, the own ECU 1 and the second ECU 12 are supplied with electric power from the battery 101 via the IG power supply line 104.

As shown in FIG. 2, in the control system 100, for example, the switch 103 may be momentarily interrupted and power may not be temporarily supplied to the own ECU 1 and the second ECU 12, that is, an abnormality may occur in the IG power supply. is there.

In such a case, the own ECU 1 and the second ECU 12 reset the own device, perform a predetermined start-up process, and then resume communication with the other device. On the other hand, since the first ECU 11 is supplied with electric power from the battery 101, it continues communication without resetting its own device, and for example, it keeps transmitting a predetermined signal to its own ECU 1.

Therefore, in the own ECU 1, there is a difference between the initial reception timing for receiving the signal from the first ECU 11 and the initial reception timing for receiving the signal from the second ECU 12 after the reset. As a result, the own ECU 1 resumes communication with the first ECU 11 immediately after the start-up process, but a slight delay occurs before the communication with the second ECU 12 is resumed.

Therefore, the determination unit 7 of the own ECU 1 acquires from the communication unit 4 the timing at which the communication unit 4 resumes communication with the first ECU 11 and the second ECU 12 after the reset of the own device. Then, the determination unit 7 resets when there is a delay in the timing when the communication with the second ECU 12 using the IG power supply is restarted and there is no delay in the timing when the communication with the first ECU 11 using the constant power supply is restarted. Is determined to be the cause of the IG power supply abnormality.

In this way, when an abnormality occurs in the IG power supply used by the own device and the own device is reset, the own ECU 1 can correctly determine that the cause of the reset of the own device is an abnormality in the IG power supply. it can.

Further, as shown in FIG. 3, in the control system 100, an abnormality may occur in the own ECU 1. In such a case, the own ECU 1 resets the own device, performs a predetermined start-up process, and then resumes communication with the other device.

On the other hand, since no abnormality has occurred in the first ECU 11 and the second ECU 12, communication is continued without resetting the own device, and for example, a predetermined signal is continuously transmitted to the own ECU 1.

Therefore, the own ECU 1 can resume communication with the first ECU 11 and the second ECU 12 without delay immediately after the start-up process. Therefore, the determination unit 7 of the own ECU 1 acquires from the communication unit 4 the timing at which the communication unit 4 resumes communication with the first ECU 11 and the second ECU 12 after the reset of the own device.

Then, the determination unit 7 resets when there is no delay between the timing at which the communication with the second ECU 12 using the IG power supply is restarted and the timing at which the communication with the first ECU 11 using the constant power supply is restarted. The cause of is determined to be an abnormality of the own device. In this way, when an abnormality occurs in the own device and the own device is reset, the own ECU 1 can correctly determine that the cause of the reset of the own device is an abnormality of the own device.

Further, as shown in FIG. 4, in the control system 100, for example, the battery 101 serving as the main power source is momentarily interrupted, and power is temporarily not supplied to the own ECU 1, the first ECU 11, and the second ECU 12, that is, the main power source. In some cases, an abnormality has occurred.

In such a case, the own ECU 1, the first ECU 11, and the second ECU 12 reset the own device, perform a predetermined start-up process, and then resume communication with the other device. Therefore, in the own ECU 1, a slight delay occurs before the communication with the first ECU 11 and the second ECU 12 is restarted after the start-up processing is performed.

Therefore, the determination unit 7 of the own ECU 1 acquires from the communication unit 4 the timing at which the communication unit 4 resumes communication with the first ECU 11 and the second ECU 12 after the reset of the own device. Then, the determination unit 7 resets when there is a delay between the timing when the communication with the second ECU 12 using the IG power supply is restarted and the timing when the communication with the first ECU 11 using the constant power supply is restarted. Is determined to be the cause of the abnormality of the battery 101, which is the main power source.

In this way, when an abnormality occurs in the battery 101, which is the main power source, and the own device is reset, the own ECU 1 can correctly determine that the cause of the reset of the own device is an abnormality in the battery 101.

Next, with reference to FIG. 5, an example of the process executed by the information processing unit 2 of the own ECU 1 will be described. FIG. 5 is a flowchart showing a process executed by the information processing unit of the own ECU according to the embodiment.

The information processing unit 2 repeatedly executes the process shown in FIG. 5 while the power is turned on. Specifically, as shown in FIG. 5, the information processing unit 2 first determines whether or not an abnormality has occurred in its own device or the power supply (step S101).

Then, when the information processing unit 2 determines that no abnormality has occurred in its own device or the power supply (steps S101 and No), the information processing unit 2 shifts the process to step S111. Further, when the information processing unit 2 determines that an abnormality has occurred in the own device or the power supply (step S101, Yes), the information processing unit 2 resets the own device (step S102).

Subsequently, the information processing unit 2 executes a start-up process (step S103) and starts communication with the first ECU 11 and the second ECU 12 (step S104). After that, the information processing unit 2 determines whether or not communication with the first ECU 11 and the second ECU 12 is resumed without delay (step S105).

Then, when the information processing unit 2 determines that communication with the first ECU 11 and the second ECU 12 has resumed without delay (steps S105, Yes), the information processing unit 2 determines that the cause of the reset of the own device is an abnormality of the own device (step S106), and processes the process. To step S110.

Further, when the information processing unit 2 determines that communication with the first ECU 11 and the second ECU 12 has not resumed without delay (steps S105, No), whether or not communication has resumed with the first ECU 11 without delay and with the second ECU 12 with delay. (Step S107).

Then, when the information processing unit 2 determines that communication has resumed with no delay from the first ECU 11 and with a delay from the second ECU 12 (steps S107, Yes), the cause of the reset of the own device is an abnormality in the power supply of the own device. The determination is made (step S108), and the process is moved to step S110.

Further, when the information processing unit 2 determines that there is no delay with the first ECU 11 and communication with the second ECU 12 is delayed (steps S107, No), the cause of the reset of the own device is determined to be an abnormality of the main power supply. (Step S109), and the process moves to step S110.

In step S110, the information processing unit 2 stores the determination result determined in step S106, step S107, or step S109 in the storage unit 3. Then, the information processing unit 2 controls the control target (step S111) and ends the process. After that, the information processing unit 2 starts the process again from step S101.

Up to this point, the cause of resetting the own device is based on the timing of resuming communication between the first ECU 11 in which the own ECU 1 uses the same power supply as the own device and the second ECU 12 in which the own device uses a power source different from the own device. The case of determining whether the device is abnormal or the power supply is abnormal has been described, but this is an example.

The own ECU 1 can also determine whether the cause of the reset of the own device is an abnormality of the own device or an abnormality of the power supply only by the timing of resuming communication with the first ECU 11 that uses the same power supply as the own device. Next, with reference to FIGS. 6A and 6B, a modified example in which the own ECU 1 determines the cause of resetting the own device based on the timing of resuming communication with the first ECU 11 will be described.

6A and 6B are explanatory views showing an operation example of the control system according to the modified example of the embodiment. Here, among the components shown in FIGS. 6A and 6B, the same components as those shown in FIG. 2 are given the same reference numerals as those shown in FIG. 2 to provide overlapping description. Omit.

As shown in FIG. 6A, in the control system 100a according to the modified example, for example, the switch 103 is momentarily interrupted and power is temporarily not supplied to the own ECU 1 and the second ECU 12, that is, a state in which an abnormality has occurred in the IG power supply. May be.

In such a case, the own ECU 1 and the second ECU 12 reset the own device, perform a predetermined start-up process, and then resume communication with the other device. At this time, if the own ECU 1 completes the start-up process at the same time as the second ECU 12, it takes time from the second ECU 12 transmitting the signal to the own ECU 1 until the signal is received by the own ECU 1, so that the start-up process is performed. Cannot receive signal upon completion.

Therefore, when there is a delay in the timing at which communication with the second ECU 12 that uses the same power supply as the own device is restarted, the cause of the reset of the own device is an abnormality of the IG power supply that is the power supply of the own device. judge.

In this way, when an abnormality occurs in the IG power supply used by the own device and the own device is reset, the own ECU 1 can correctly determine that the cause of the reset of the own device is an abnormality in the IG power supply. it can.

Further, as shown in FIG. 6B, in the control system 100a, an abnormality may occur in the own ECU 1. In such a case, the own ECU 1 resets the own device, then performs a predetermined start-up process, and then resumes communication with the second ECU 12.

On the other hand, since no abnormality has occurred, the second ECU 12 continues communication without resetting the own device, and continues to transmit a predetermined signal to the own ECU 1, for example. Therefore, the own ECU 1 can resume communication with the second ECU 12 at the same time when the start-up process is completed.

Therefore, the own ECU 1 determines that the cause of the reset of the own device is an abnormality of the own device when there is no delay in the timing at which the communication with the second ECU 12 that uses the same power supply as the own device is restarted. In this way, when an abnormality occurs in the own device and the own device is reset, the own ECU 1 can correctly determine that the cause of the reset of the own device is an abnormality of the own device.

Further effects and variations can be easily derived by those skilled in the art. For this reason, the broader aspects of the invention are not limited to the particular details and representative embodiments expressed and described as described above. Therefore, various modifications can be made without departing from the spirit or scope of the general concept of the invention as defined by the appended claims and their equivalents.

100, 100a Control system 1 Own ECU
2 Information processing unit 3 Storage unit 4 Communication unit 5 Control unit 6 Reset unit 7 Judgment unit 10 CAN communication line 11 1st ECU
12 Second ECU
101 Battery 102 Main power supply line 103 Switch 104 IG Power supply line

Claims (7)

A communication unit that continuously communicates with other devices,
A reset unit that resets the own device when an error occurs in the own device or the power supply,
A determination unit that determines whether the cause of the reset is an abnormality of the own device or an abnormality of the power supply, based on the timing at which the communication unit resumes communication with the other device after the reset is performed by the reset unit. A control device characterized by comprising. The determination unit
There is a delay in the timing at which communication with the other device that uses the same power supply as the own device is resumed, and there is a delay at the timing at which communication with the other device that uses a power source different from the own device is resumed. The control device according to claim 1, wherein if not, the cause is determined to be an abnormality in the power supply of the own device. The determination unit
There is a delay between the timing at which communication with the other device using the same power supply as the own device is resumed and the timing at which communication with the other device using a power source different from the own device is resumed. The control device according to claim 1 or 2, wherein if there is no such cause, the cause is determined to be an abnormality of the own device. The determination unit
There is a delay between the timing at which communication with the other device using the same power supply as the own device is resumed and the timing at which communication with the other device using a power source different from the own device is resumed. The control device according to any one of claims 1 to 3, wherein the cause is determined to be an abnormality of the main power supply in a certain case. The determination unit
When there is a delay in the timing at which communication with the other device using the same power supply as the own device is restarted, the cause is determined to be an abnormality in the power supply of the own device, and when there is no delay in the timing, The control device according to any one of claims 1 to 4, wherein the cause is determined to be an abnormality of the own device. A communication unit that continuously communicates with other devices,
A reset unit that resets the own device when an error occurs in the own device or the power supply,
A determination unit that determines whether the cause of the reset is an abnormality of the own device or an abnormality of the power supply, based on the timing at which the communication unit resumes communication with the other device after the reset is performed by the reset unit. With a control device
A control system including the other device that controls a control target different from the control device. A communication process that continuously communicates with other devices,
A reset process that resets the own device when an abnormality occurs in the own device or the power supply,
After the reset is performed by the reset step, the determination step of determining whether the cause of the reset is an abnormality of the own device or an abnormality of the power supply based on the timing at which the communication with the other device is restarted by the communication process. A control method characterized by including.

Images