JP4766926B2 - Electronic control device and data storage method for electronic control device - Google Patents

Description

  In the present invention, when an abnormal state of an electronic control device in a moving body is detected by a plurality of sensors in the moving body such as a vehicle, predetermined data is stored in an SRAM (Stand-by Random Access Memory). • Memory (or memory) or EEPROM (Electrically Erasable and Programmable Read-only Memory) or other non-volatile memory, and based on the data stored in this non-volatile memory The present invention relates to an electronic control device having a function of performing self-diagnosis of the electronic control device, and a data storage method of the electronic control device.

  In general, a moving body such as a vehicle is provided with an electronic control device in which a computer, usually called an ECU (Electronic Control Unit), is built. In such an electronic control device, in order to enable a driver or the like to perform a comfortable driving, an electronic control device (for example, an electronically controlled engine) in the moving body is correctly controlled so that the appropriate electronic control device can be appropriately controlled. A self-diagnosis function, that is, a diagnosis function is incorporated.

  In relation to the diagnosis function, an A / F sensor (air-fuel ratio sensor) or a water temperature sensor is provided in a moving body such as a vehicle so that the current state of the electronic control device can be accurately grasped. Various sensors such as an intake air temperature sensor are attached. The detection signals detected by these various sensors are converted into digital signals by an A / D converter (analog / digital converter) or the like, and then NRAM (Normal Random Access Memory: Normal in the computer) as sensor detection data. Random access memory, usually abbreviated simply as RAM)) etc. Such a main storage device such as an NRAM is generally called a volatile memory, and corresponds to the timing at which each sensor detection data is updated only during the period when the ignition switch of a moving body such as a vehicle is on. The sensor detection data is held at a predetermined cycle. Therefore, when the ignition switch is turned off, all sensor detection data held in the NRAM or the like are lost.

  On the other hand, in the electronic control device in the moving body, some abnormality has occurred in the electronic control device of the moving body based on the sensor detection data held in the NRAM or the like (that is, the electronic control device is in an abnormal state). Is detected from the sensor detection data held in the NRAM or the like, and a predetermined sampling interval (for example, 500 msec) is taken into a nonvolatile memory such as an SRAM or an EEPROM in the computer. (Milliseconds)).

  As described above, when an abnormal state of the electronic control device in the moving body is detected, the process of storing the data retrieved from the NRAM in a nonvolatile memory such as SRAM or EEPROM is generally called “freeze”. Yes.

  An SRAM used when performing freeze processing on data extracted from the NRAM is normally connected to a battery in the mobile body, and a backup power supply voltage is always supplied from the battery. Therefore, even if the ignition switch is turned off, the data stored in the SRAM is not lost. Accordingly, in a maintenance shop or the like, self-diagnosis of the electronic control device can be performed by reading out the data stored in the SRAM and using it to analyze the cause of the abnormality of the electronic control device and identify the background of the occurrence of the abnormality. become able to.

  Alternatively, an EEPROM used when performing freeze processing on data extracted from the NRAM is a ROM (Read-only Memory) that can electrically write and erase data. Memory). When an abnormal state of the electronic control device in the moving body is detected during a period in which the ignition switch is on, data taken from the NRAM is stored in the EEPROM. On the other hand, during the period when the ignition switch is off, the data stored in the EEPROM is held without being lost. Therefore, in this case as well, in the case where the above-described SRAM is used, the data stored in the EEPROM is read out at a maintenance shop or the like to analyze the cause of the abnormality of the electronic control device and specify the circumstances of the abnormality. By making use, it becomes possible to perform self-diagnosis of the electronic control device.

  When freeze processing of data in the NRAM is performed in a conventional electronic control device, data items (for example, engine speed, water temperature and intake air temperature) to be subjected to the freeze processing are stored in a computer in the electronic control device. Defined by software. In other words, the data items of the data to be subjected to the freeze processing are determined in advance by the contents of the ROM in which the program for executing the self-diagnosis of the electronic control device is stored. I can't choose. Therefore, with the conventional electronic control device, it is not possible to add new data items etc. as a target for freeze processing or to change some of the currently defined data items etc., and what kind of abnormality occurs Even so, the data items of the data to be subjected to the freeze processing are constant.

  However, originally, the purpose of performing the freeze processing of the data in the NRAM is to specify the background of the occurrence of an abnormality at an early stage after an abnormality occurs in the electronic control device of the mobile object. For this reason, it is important that the process of narrowing down and limiting the data items of the data in the NRAM related to the abnormality that has occurred leads to early identification of the background of the occurrence of the abnormality. However, in this case, the capacity of the ROM increases due to the addition of a new data item, or the processing load of the CPU (Central Processing Unit) of the computer when changing the current data item increases. Therefore, at present, the above processing cannot be performed.

  Therefore, in the conventional electronic control device, after some abnormality occurs in the electronic control device, it takes time to analyze the cause of the abnormality of the electronic control device, and it is difficult to identify the background of the occurrence of the abnormality at an early stage. The problem of becoming has arisen.

  Further, in the conventional electronic control device, only the data in the NRAM can be stored in the non-volatile memory at the time of the freeze processing. Therefore, by tracking the execution history of the software (program), it is possible to identify the background of the occurrence of the abnormality at an early stage. The problem of being unable to do so has also arisen.

  Here, for reference, Patent Document 1 (Japanese Patent Application Laid-Open No. 2004-232498) and Patent Document 2 (Japanese Patent Application Laid-Open No. 7-46676) in which technical contents related to a conventional electronic control device are described are presented.

  In Patent Document 1, a plurality of types of required storage data including sensor detection data from various sensors are grouped based on the magnitude of time change that changes, and the required storage data is stored in a backup RAM for each group. A configuration of a vehicular electronic control device having a diagnosis function in which a backup cycle (sampling interval) for saving is set is disclosed.

  In Patent Document 2, diagnosis duration information specifying the diagnosis duration is incorporated into a request message transmitted to the electronic control device selected from the diagnosis device in accordance with the content of the requested diagnosis process. Thus, in the selected electronic control device, after receiving the request message, a configuration of a communication system for vehicle diagnosis is disclosed in which the diagnosis process is executed until the time specified by the diagnosis duration information is reached. Yes.

  However, both Patent Document 1 and Patent Document 2 deal with the problem that it takes time to analyze the cause of the abnormality after the abnormality occurs in the electronic control device, and it is difficult to identify the background of the occurrence of the abnormality at an early stage. It does not mention any measures to do this.

JP 2004-232498 A Japanese Unexamined Patent Publication No. 7-46676

  The present invention has been made in view of the above-described problems, and without increasing the processing load of the CPU of the computer or the capacity of the ROM, the abnormality of the electronic control device in the moving body such as a vehicle can occur. An object of the present invention is to provide an electronic control device and an electronic control device data storage method capable of accurately and quickly analyzing the cause of the occurrence of the abnormality and identifying the background of the occurrence of the abnormality at an early stage. It is.

  In order to solve the above problems, the electronic control device according to the first aspect of the present invention has a function of controlling the electronic control device in the moving body and performing a self-diagnosis of the electronic control device. When an abnormal state of the first data storage means (for example, a main storage device such as an NRAM) for temporarily holding data acquired by a plurality of attached sensors and the electronic control device is detected The non-volatile second data storage means (for example, a non-volatile memory such as SRAM or EEPROM) for storing the data in the first data storage means at a predetermined sampling interval and the plurality of sensors. Storage means for storing a plurality of data items related to the data to be stored in advance, and a specific data item is selected from the plurality of data items stored in the storage means Data relating to the specific data item is retrieved from the first data storage means arranged to be fed into the second data storage means.

  Preferably, in the electronic control device of the present invention, the storage means is provided in an external inspection tool (for example, a diagnostic scan tool) that supports self-diagnosis of the electronic control device, and the storage is performed by the external inspection tool. The specific data item is selected from a plurality of data items stored in the means.

  Furthermore, the electronic control device according to the second aspect of the present invention has a function of controlling the electronic control device in the moving body to perform self-diagnosis of the electronic control device, and includes a plurality of sensors attached to the moving body. First data storage means for temporarily storing acquired data, and when an abnormal state of the electronic control device is detected, the data in the first data storage means is stored at a predetermined sampling interval. Non-volatile second data storage means for storing, storage means for dividing the data acquired by the plurality of sensors into a plurality of byte groups, and storing the plurality of byte groups in advance A group of a specific number of bytes is selected from a plurality of groups of the number of bytes stored in the storage means, and data related to the specific group of the number of bytes is the first It is removed from over data storing means arranged to be fed into the second data storage means.

  Preferably, in the electronic control device of the present invention, the storage means is provided in an external inspection tool that supports self-diagnosis of the electronic control device, and a plurality of pieces stored in the storage means by the external inspection tool. The group of the specific number of bytes is selected from the group of the number of bytes.

  Furthermore, the electronic control device according to the third aspect of the present invention has a function of controlling the electronic control device in the moving body to perform self-diagnosis of the electronic control device, and includes a plurality of sensors attached to the moving body. First data storage means for temporarily storing acquired data, and when an abnormal state of the electronic control device is detected, the data in the first data storage means is stored at a predetermined sampling interval. Non-volatile second data storage means for storing, and storage means for storing in advance the address of the storage unit constituting the first data storage means, and stored in the storage means A specific address is selected from the addresses of the storage unit, and data related to the specific address is extracted from the first data storage unit and sent to the second data storage unit It is made.

  Preferably, in the electronic control device of the present invention, the storage means is provided in an external inspection tool that supports self-diagnosis of the electronic control device, and is stored in the storage means by the external inspection tool. A specific address is selected from the addresses in the storage unit.

  Furthermore, the electronic control device according to the fourth aspect of the present invention has a function of controlling the electronic control device in the moving body to perform self-diagnosis of the electronic control device, and includes a plurality of sensors attached to the moving body. First data storage means for temporarily storing acquired data, and when an abnormal state of the electronic control device is detected, the data in the first data storage means is stored at a predetermined sampling interval. Non-volatile second data storage means for storing, and storage means for dividing the data acquired by the plurality of sensors into a plurality of groups and storing the plurality of groups in advance. A group of a specific sequence is selected from a plurality of groups of sequences stored in the storage means, and data relating to the group of the specific sequence is acquired from the first data storage unit. Issued by configured to be fed into the second data storage means.

  Preferably, in the electronic control device of the present invention, the storage means is provided in an external inspection tool that supports self-diagnosis of the electronic control device, and a plurality of pieces stored in the storage means by the external inspection tool. A group of a specific series is selected from the group of series.

  Furthermore, the electronic control device according to the fifth aspect of the present invention has a function of controlling the electronic control device in the moving body to perform self-diagnosis of the electronic control device, and includes a plurality of sensors attached to the moving body. First data storage means for temporarily storing acquired data, and when an abnormal state of the electronic control device is detected, the data in the first data storage means is stored at a predetermined sampling interval. Non-volatile second data storage means for storing, and storage means for preliminarily storing instruction contents for designating all data held in the first data storage means collectively In accordance with the instruction content stored in the storage means, all data is extracted from the first data storage means and sent to the second data storage means.

  Preferably, in the electronic control device of the present invention, the storage means is provided in an external inspection tool that supports self-diagnosis of the electronic control device, and is stored in the storage means by the external inspection tool. Instruction contents are read out.

  Furthermore, an electronic control device according to a sixth aspect of the present invention has a function of controlling the electronic control device in the moving body to perform self-diagnosis of the electronic control device, and includes a plurality of sensors attached to the moving body. First data storage means for temporarily storing acquired data, and when an abnormal state of the electronic control device is detected, the data in the first data storage means is stored at a predetermined sampling interval. Non-volatile second data storage means for storing, and storage means for storing in advance addresses for a predetermined number of bytes from the start address of the storage unit constituting the first data storage means, A specific address is selected from the predetermined number of bytes of the storage unit stored in the storage unit, and data related to the specific address is transferred from the first data storage unit. Ri issued by configured to be fed into the second data storage means.

  Preferably, in the electronic control device of the present invention, the storage means is provided in an external inspection tool that supports self-diagnosis of the electronic control device, and is stored in the storage means by the external inspection tool. The specific address is selected from the addresses corresponding to the predetermined number of bytes in the storage unit.

  Furthermore, an electronic control device according to a seventh aspect of the present invention has a function of controlling the electronic control device in the moving body to perform self-diagnosis of the electronic control device, and includes a plurality of sensors attached to the moving body. First data storage means for temporarily storing acquired data, and when an abnormal state of the electronic control device is detected, the data in the first data storage means is stored at a predetermined sampling interval. Non-volatile second data storage means for storing, and storage means for storing in advance at least one of a maximum value and a minimum value of data stored in the first data storage means, At least one of the maximum value and the minimum value of the data stored in the storage means is taken out and sent to the second data storage means.

  Preferably, in the electronic control device of the present invention, the storage means is provided in an external inspection tool that supports self-diagnosis of the electronic control device, and is stored in the storage means by the external inspection tool. At least one of the maximum value and the minimum value of the data is read out.

  Furthermore, an electronic control device according to an eighth aspect of the present invention has a function of controlling the electronic control device in the moving body to perform self-diagnosis of the electronic control device, and includes a plurality of sensors attached to the moving body. First data storage means for temporarily storing acquired data, and when an abnormal state of the electronic control device is detected, the data in the first data storage means is stored at a predetermined sampling interval. Non-volatile second data storage means for storing, and storage means for storing in advance a program pointer of a program used to realize the function of the electronic control unit, the storage means The program pointer of the stored program is retrieved and sent to the second data storage means together with the data in the first data storage means

  Preferably, in the electronic control device of the present invention, the storage means is provided in an external inspection tool that supports self-diagnosis of the electronic control device, and the program stored in the storage means by the external inspection tool The program pointer is read out.

  Furthermore, an electronic control device according to a ninth aspect of the present invention has a function of controlling the electronic control device in the moving body to perform self-diagnosis of the electronic control device, and includes a plurality of sensors attached to the moving body. First data storage means for temporarily storing acquired data, and when an abnormal state of the electronic control device is detected, the data in the first data storage means is stored at a predetermined sampling interval. Non-volatile second data storage means for storing, and storage means for storing in advance a plurality of sections of the storage section constituting the first data storage means, and stored in the storage means A specific section is selected from the plurality of sections of the storage unit, and data related to the specific section is retrieved from the first data storage means and the second data storage means Configured to be fed.

  Preferably, in the electronic control device of the present invention, the storage means is provided in an external inspection tool that supports self-diagnosis of the electronic control device, and is stored in the storage means by the external inspection tool. The specific section is selected from a plurality of sections of the storage unit.

  Furthermore, an electronic control device according to a tenth aspect of the present invention has a function of controlling an electronic control device in a moving body to perform self-diagnosis of the electronic control device, and includes a plurality of sensors attached to the moving body. First data storage means for temporarily storing acquired data, and when an abnormal state of the electronic control device is detected, the data in the first data storage means is stored at a predetermined sampling interval. Non-volatile second data storage means for storing, a plurality of sections of the storage section constituting the first data storage means, and addresses for a predetermined number of bytes from the start address of each section Storage means for storing in advance, a specific section is selected from a plurality of sections of the storage unit stored in the storage means, and the predetermined number of bytes A specific address is selected from the first address, and the data related to the specific section and the specific address is retrieved from the first data storage means and sent to the second data storage means .

  Preferably, in the electronic control device of the present invention, the storage means is provided in an external inspection tool that supports self-diagnosis of the electronic control device, and is stored in the storage means by the external inspection tool. The specific section is selected from a plurality of sections of the storage unit, and the specific address is selected from addresses corresponding to the predetermined number of bytes.

  Furthermore, the electronic control device according to the eleventh aspect of the present invention has a function of controlling the electronic control device in the moving body and performing self-diagnosis of the electronic control device, and is used to realize the function. The program is composed of a plurality of modules (or a plurality of logics), and a first data storage means for temporarily storing data acquired by a plurality of sensors attached to the moving body, and the electronic Non-volatile second data storage means for storing data in the first data storage means at a predetermined sampling interval when an abnormal state of the control device is detected, and each of the plurality of modules And auxiliary information storage means for holding the address of the storage unit that constitutes the first data storage means, and a specific module among the plurality of modules (or When the flag indicating the abnormal state is detected in the specific logic), the address of the storage unit used in the specific module is read from the auxiliary information storage unit, and the address of the storage unit is Relevant data is retrieved from the first data storage means and sent to the second data storage means.

  Furthermore, an electronic control device according to a twelfth aspect of the present invention has a function of controlling an electronic control device in a moving body to perform a self-diagnosis of the electronic control device, and is used for realizing the function. The program is composed of a plurality of modules, and a first data storage means for temporarily holding data acquired by a plurality of sensors attached to the moving body, and an abnormal state of the electronic control device Non-volatile second data storage means for storing the data in the first data storage means at a predetermined sampling interval when detected, and the first data for each of the plurality of modules A plurality of modules including auxiliary information storage means for holding at least one of a maximum value and a minimum value of data held in a storage unit constituting the storage means When the flag indicating the abnormal state is detected in the specific module, at least one of the maximum value and the minimum value of the data stored in the storage unit used in the specific module is stored in the auxiliary information Read out from the means and sent to the second data storage means.

  Preferably, for each of the plurality of modules in the electronic control device of the present invention, auxiliary information including at least one of an address of the storage unit and a maximum value and a minimum value of data held in the storage unit, It is held in the auxiliary information storage means in the form of a table.

  Furthermore, an electronic control device according to a thirteenth aspect of the present invention has a function of controlling an electronic control device in a moving body and performing a self-diagnosis of the electronic control device, and is used for realizing the function. The program is composed of a plurality of modules, and data obtained by a plurality of sensors attached to the moving body and a program pointer of a program used to realize the above functions of the electronic control device are temporarily stored. First data storage means for storing the data, and when the abnormal state of the electronic control device is detected, the data in the first data storage means and the program pointer of the program are stored at a predetermined sampling interval Non-volatile second data storage means for performing the operation, and a flag indicating the abnormal state in a specific module among the plurality of modules. When the program is detected, the program pointer of the program used in the specific module is retrieved from the first data storage unit among the program pointers stored in the first data storage unit. And configured to be sent to the second data storage means.

On the other hand, the data storage method of the electronic control device according to the present invention includes a step of temporarily holding data acquired by a plurality of sensors attached to the mobile body in the first data storage means, and an electronic device in the mobile body. When an abnormal state of the control device is detected, the nonvolatile second data storage means stores the data in the first data storage means at a predetermined sampling interval, and the second data storage The step of performing a self-diagnosis of the electronic control device based on data stored in the means and the first data storage for each of a plurality of modules constituting a program for performing the self-diagnosis of the electronic control device Holding the address of the storage unit constituting the means in the auxiliary information storage means, and the abnormal condition in a specific module among the plurality of modules Is detected, the address of the storage unit used in the specific module is read from the auxiliary information storage means, and the data related to the address of the storage unit is the first data It is taken out from the storage means and sent to the second data storage means.
Preferably, when a program pointer of a program used in the specific module is extracted from the first data storage unit and sent to the second data storage unit, and an interrupt occurs in the program, A freeze process for storing the program pointer in the second data storage means is executed at the timing of the fastest interrupt.

Furthermore, the data storage method of the electronic control device according to the present invention includes a step of temporarily holding data acquired by a plurality of sensors attached to the moving body in the first data storage means, and an electronic control device in the moving body. When the abnormal state is detected, the non-volatile second data storage means stores the data in the first data storage means at a predetermined sampling interval, and the second data storage means The step of performing a self-diagnosis of the electronic control device based on the stored data, and the first data storage means for each of a plurality of modules constituting a program for performing the self-diagnosis of the electronic control device. Holding at least one of the maximum value and the minimum value of data held in the storage unit constituting the auxiliary information storage means, the plurality of When a flag indicating the abnormal state is detected in a specific module in the module, at least one of the maximum value and the minimum value of data held in the storage unit used in the specific module is the auxiliary It is read from the information storage means and sent to the second data storage means.
Preferably, the freeze processing is executed until there is no program pointer to be stored in the second data storage means during the freeze processing.

  Furthermore, the data storage method of the electronic control device according to the present invention includes a plurality of data for realizing data acquired by a plurality of sensors attached to the moving body and a function of performing self-diagnosis of the electronic control device in the moving body. A step of temporarily holding a program pointer of a program composed of modules in the first data storage means, and when an abnormal state of the electronic control device in the moving body is detected, the nonvolatile second data storage means Storing the data in the first data storage unit and the program pointer of the program at a predetermined sampling interval, and assisting the address of the storage unit constituting the first data storage unit for each of the plurality of modules A step of holding in the information storage means, and data and programs stored in the second data storage means Performing a self-diagnosis of the electronic control device based on the program pointer of the first data storage when the flag indicating the abnormal state is detected in a specific module of the plurality of modules Among the program pointers held in the means, the program pointer of the program used in the specific module is extracted from the first data storage means and sent to the second data storage means.

  In summary, in the present invention, first, when an abnormal state of an electronic control device in a moving body such as a vehicle is detected, it is not a data item fixed by software of a computer, but a registration means such as an external inspection tool In accordance with a specific data item specified from a plurality of data items registered in the data item, data related to the specific data item is extracted from the first data storage unit and stored in the second data storage unit. Yes.

  As a result, it becomes possible to arbitrarily select data items to be subjected to freeze processing, and without increasing the processing load of the CPU of the computer or the capacity of the ROM, the electronic control can be performed after the occurrence of an abnormality in the electronic control device. It is possible to quickly and accurately identify the cause of the occurrence of an abnormality by analyzing the cause of the occurrence of the abnormality in the device accurately and quickly.

  Furthermore, in the present invention, secondly, when an abnormal state of an electronic control device in a moving body such as a vehicle is detected, registration of an external inspection tool or the like is not restricted by data items fixed by computer software. In accordance with a group of specific bytes specified from a plurality of groups of bytes registered in the means, data relating to the group of specific bytes is extracted from the first data storage means and stored in the second data I save it in the means.

  As a result, it becomes possible to arbitrarily select a group of the number of bytes to be subjected to freeze processing, and without increasing the processing load of the CPU of the computer or the capacity of the ROM, after the occurrence of an abnormality in the electronic control device, It is possible to analyze the cause of the occurrence of abnormality in the electronic control device accurately and quickly and to identify the background of the occurrence of abnormality at an early stage.

  Furthermore, in the present invention, thirdly, when an abnormal state of an electronic control device in a moving body such as a vehicle is detected, registration of an external inspection tool or the like is not restricted by data items fixed by computer software. According to a specific address designated from the address of a storage unit such as a RAM registered in the means, data related to the specific address is extracted from the first data storage means and stored in the second data storage means. I have to.

  As a result, it becomes possible to arbitrarily select the address of the storage unit such as the RAM to be subjected to the freeze process, and the abnormality of the electronic control device can be achieved without increasing the processing load of the CPU of the computer or the capacity of the ROM. After the occurrence, the cause of the occurrence of the abnormality in the electronic control device can be analyzed accurately and promptly to identify the background of the occurrence of the abnormality at an early stage.

  Furthermore, in the present invention, fourthly, when an abnormal state of an electronic control device in a moving body such as a vehicle is detected, registration of an external inspection tool or the like is not restricted by data items fixed by computer software. In accordance with a specific series group designated from a plurality of series groups registered in the means, data relating to this specific series group is extracted from the first data storage means and stored in the second data storage means Like to do.

  As a result, it becomes possible to arbitrarily select the group of the series to be subjected to the freeze processing, and without increasing the processing load of the CPU of the computer or the capacity of the ROM, the electronic control device can be It is possible to quickly and accurately identify the cause of the occurrence of an abnormality by accurately and quickly analyzing the cause of the occurrence of the abnormality in the control device.

  Furthermore, in the present invention, fifth, when an abnormal state of an electronic control device in a moving body such as a vehicle is detected, registration of an external inspection tool or the like is not restricted by data items fixed by computer software. In accordance with the instruction contents registered in the means, all data is collectively extracted from the first data storage means and stored in the second data storage means.

  As a result, it becomes possible to select all data to be subjected to freeze processing at once, without increasing the processing load of the CPU of the computer or the capacity of the ROM, and after the occurrence of an abnormality in the electronic control device, It is possible to analyze the cause of the occurrence of abnormality in the electronic control device accurately and quickly and to identify the background of the occurrence of abnormality at an early stage.

  Furthermore, in the present invention, sixth, when an abnormal state of an electronic control device in a moving body such as a vehicle is detected, registration of an external inspection tool or the like is not restricted by data items fixed by computer software. In accordance with a specific address specified from an address of a predetermined number of bytes from the start address of a storage unit such as a RAM registered in the means, data relating to this specific address is extracted from the first data storage means and The data is stored in the second data storage means.

  As a result, it becomes possible to arbitrarily select an address for a predetermined number of bytes from the start address of the storage unit such as a RAM to be subjected to the freeze processing, thereby increasing the processing load of the CPU of the computer and the capacity of the ROM. Therefore, after the occurrence of an abnormality in the electronic control device, the cause of the occurrence of the abnormality in the electronic control device can be analyzed accurately and quickly to identify the background of the occurrence of the abnormality at an early stage.

  Further, according to the present invention, seventhly, when an abnormal state of an electronic control device in a moving body such as a vehicle is detected, registration of an external inspection tool or the like is not restricted by data items fixed by computer software. The maximum value or the minimum value of the data in the second data storage means registered in the means is taken out and stored in the second data storage means.

  As a result, it becomes possible to select the maximum value or the minimum value of the data in the second data storage means to be subjected to the freeze processing, without increasing the processing load of the CPU of the computer or the capacity of the ROM. After the occurrence of an abnormality in the electronic control device, the cause of the occurrence of the abnormality in the electronic control device can be analyzed accurately and quickly to identify the background of the occurrence of the abnormality at an early stage.

  Further, according to the present invention, eighthly, when an abnormal state of an electronic control device in a moving body such as a vehicle is detected, a program pointer of a program stored in a registration means such as an external inspection tool is taken out and the second The data is stored in the data storage means.

  This makes it possible to clearly grasp the program flow for realizing the function of self-diagnosis of electronic control equipment, and after the occurrence of abnormality in the electronic control equipment, analyze the cause of the occurrence of abnormality in the electronic control equipment. It becomes possible to make use for.

  Furthermore, in the present invention, ninthly, when an abnormal state of an electronic control device in a moving body such as a vehicle is detected, registration of an external inspection tool or the like is not restricted by data items fixed by computer software. In accordance with a specific section specified from a plurality of sections of a storage unit such as a RAM registered in the means, data related to the specific section is extracted from the first data storage means and stored in the second data storage means Like to do.

  As a result, it becomes possible to arbitrarily select a section of a storage unit such as a RAM to be subjected to freeze processing, and an abnormality of an electronic control device can be achieved without increasing the processing load of the CPU of the computer or the capacity of the ROM. After the occurrence, the cause of the occurrence of the abnormality in the electronic control device can be analyzed accurately and promptly to identify the background of the occurrence of the abnormality at an early stage.

  Furthermore, in the present invention, tenthly, when an abnormal state of an electronic control device in a moving body such as a vehicle is detected, registration of an external inspection tool or the like is not restricted by data items fixed by computer software. Predetermined from the start address of the specific section according to the specific section specified from multiple sections of the storage unit such as RAM registered in the means, and the address for the specific number of bytes from the start address of the specific section The data related to the address corresponding to the number of bytes is taken out from the first data storage means and stored in the second data storage means.

  As a result, it becomes possible to arbitrarily select an address for a predetermined number of bytes from the head address of a section of a storage unit such as a RAM to be subjected to freeze processing, and the processing load of the CPU of the computer and the capacity of the ROM Therefore, after the occurrence of an abnormality in the electronic control device, it is possible to quickly and accurately analyze the cause of the occurrence of the abnormality in the electronic control device, thereby identifying the background of the occurrence of the abnormality at an early stage.

  Furthermore, in the present invention, in the eleventh aspect, a specific module (or specific logic) in a program for performing a self-diagnosis of the electronic control device finds an indication of occurrence of an abnormality in the electronic control device in the moving body such as a vehicle. (I.e., when a flag indicating an abnormal state of the electronic control device is detected in the specific module), the address of the storage unit such as a RAM used in the specific module is read from the auxiliary information storage means, Data related to the address of the storage unit is extracted from the first data storage unit and stored in the second data storage unit.

  As a result, when an indication of the occurrence of an abnormality in the electronic control device is found, the address of a storage unit such as a RAM used in a specific module related to the indication of the occurrence of the abnormality can be selected. Thus, after the occurrence of an abnormality in the electronic control device, the cause of the occurrence of the abnormality in the electronic control device can be analyzed accurately and quickly, and the background of the occurrence of the abnormality can be identified early.

  Furthermore, in the present invention, twelfthly, if a specific module in a program for performing a self-diagnosis of an electronic control device finds a sign of occurrence of an abnormality in the electronic control device in a moving body such as a vehicle, A maximum value or a minimum value of data in a storage unit such as a RAM used in the module is read from the auxiliary information storage unit and stored in the second data storage unit.

  As a result, when a sign of occurrence of an abnormality in the electronic control device is found, the maximum or minimum value of the data in the storage unit such as RAM used in a specific module related to the sign of the abnormality is selected. As a result, it becomes possible to analyze the cause of the abnormality of the electronic control device accurately and quickly after the occurrence of the abnormality of the electronic control device, and to identify the background of the occurrence of the abnormality at an early stage.

  Furthermore, in the present invention, thirteenthly, when a specific module in a program for performing a self-diagnosis of an electronic control device finds a sign of occurrence of an abnormality in the electronic control device in a moving body such as a vehicle, The program pointer of the program used in the module is taken out from the first data storage means and stored in the second data storage means.

  This makes it possible to clearly grasp the program flow used in a specific module related to the abnormality occurrence sign when an abnormality occurrence sign of the electronic control device is found, After the occurrence of an abnormality in the electronic control device, it can be used for analysis of the cause of the abnormality in the electronic control device.

  Hereinafter, preferred embodiments (examples) of the present invention will be described with reference to the accompanying drawings (FIGS. 1 to 15).

  FIG. 1 is a block diagram illustrating a configuration of an electronic control device according to an embodiment of the present invention. However, here, the configuration of the electronic control device 1 for controlling the electronic control device 9 such as an electronically controlled engine is simplified. Hereinafter, the same components as those described above are denoted by the same reference numerals.

  As shown in FIG. 1, in a moving body such as a vehicle, an electronic control device 9 such as an electronically controlled engine is accurately grasped and an abnormality has occurred in the electronic control device 9 (that is, electronic In order to be able to detect that the control device is in an abnormal state, a sensor unit 5 including various sensors is provided.

  As the above-mentioned various sensors, the A / F sensor 50 for sensing the air-to-fuel ratio of an electronically controlled engine, the water temperature sensor 51 for sensing the water temperature used for the electronically controlled engine, etc., the electronically controlled engine, etc. Such as an oxygen concentration sensor 52 for sensing the concentration of oxygen, a knocking sensor 53 for sensing knocking of a vehicle, an oil temperature sensor 54 for sensing the temperature of oil used in an electronically controlled engine, and the like An exhaust temperature sensor 55 for sensing the exhaust temperature, an intake air temperature sensor 56 for sensing the intake air temperature of an electronically controlled engine, the like, a torque sensor 57 for sensing the torque of the vehicle, etc., a crank angle sensor 58 for sensing the crank angle of the vehicle, etc. A vehicle speed sensor 59 that senses the traveling speed (or engine speed) of the vehicle and the like, and a throttle that senses the throttle position of the vehicle and the like Jishon sensor 60 and the like.

  The electronic control device 1 shown in FIG. 1 controls the electronic control device 9 such as an electronically controlled engine to perform a self-diagnosis of the electronic control device 9 (that is, a diagnosis function). A ROM 4 that stores various programs including a program for executing self-diagnosis, and a main storage device that temporarily stores data related to various programs and sensor detection data acquired by various sensors. When an abnormal state of the electronic control device 9 is detected based on the first data storage means 2 and the sensor detection data or the like, predetermined data in the first data storage means 2 is stored at a predetermined sampling interval. And third data storage means 3 which is a non-volatile memory for storage.

  Preferably, the first data storage means 2 is composed of a RAM, and the second data storage means is an SRAM with a backup function, or an EEPROM capable of electrically writing and erasing data. Consists of.

  1 includes an input interface circuit 11 that interfaces with various sensors on the input side and the battery 7, and some sensors (for example, the A / F sensor 50, the water temperature sensor 51, and the oil temperature). A / D converter 12 that converts an analog detection signal from a sensor 54 and the like into a digital detection signal, and an output interface circuit 13 that interfaces with an electronic control device 9 on the output side.

  For example, in the electronic control unit 1 of FIG. 1, various sensors such as an A / F sensor 50, a water temperature sensor 51, an oxygen concentration sensor 52, a knocking sensor 53, an oil temperature sensor 54, an exhaust temperature sensor 55, and an intake air temperature sensor 56 are used. The detected analog detection signal is input to the A / D converter 12 via the input interface circuit 11, converted to a digital detection signal by the A / D converter 12, and then input to the CPU 4. On the other hand, digital detection signals detected by the torque sensor 57, the crank angle sensor 58, the vehicle speed sensor 59, the throttle position sensor 60, and the like are input to the CPU 4 via the input interface circuit 11.

  Further, the electronic control device 1 of FIG. 1 uses a battery 7 to supply a constant voltage to the CPU 4 and the first data storage means 2 and the like, and a second data using the battery 7. A backup power supply 71 that supplies a power supply voltage for backup to the storage means 3 is provided. The constant voltage power supply 70 supplies a constant voltage to the CPU 4 and the first data storage means 2 only during a period when the ignition switch of a moving body such as a vehicle is on. On the other hand, the backup power supply 71 always supplies a power supply voltage for backup to the first data storage means 3 regardless of whether the ignition switch is on or off. This backup power supply voltage works particularly effectively when the second data storage means 3 is constituted by an SRAM or the like.

  Further, in the electronic control unit 1 of FIG. 1, the digital detection signal input to the CPU 4 is temporarily held in the first data storage means 2 such as RAM as sensor detection data. As described above, in the first data storage unit 2, the sensor detection data is obtained at a period corresponding to the timing at which each sensor detection data is updated only during the period when the ignition switch of the moving body such as a vehicle is on. It comes to hold. Therefore, when the ignition switch is turned off, all sensor detection data held in the first data storage unit 2 are lost. The first data storage means 2 such as a RAM is usually called a volatile memory.

  On the other hand, if it is detected that some abnormality has occurred in the electronic control device 9 based on the sensor detection data held in the first data storage unit 2, the first data storage unit 2 Predetermined data is extracted from the held sensor detection data and stored in the second data storage means 3 at a constant sampling interval (for example, 500 msec).

  When the second data storage unit 3 is constituted by an SRAM or the like, the backup power supply voltage is always supplied from the backup power source 71 in the second data storage unit 3 such as an SRAM as described above. Therefore, even if the ignition switch is turned off, the data stored in the second data storage means 3 such as SRAM does not disappear. Therefore, in a maintenance shop or the like, the data stored in the second data storage means 3 such as SRAM is read and used for analysis of the cause of occurrence of abnormality in the electronic control device and identification of the background of occurrence of the abnormality. It becomes possible to perform self-diagnosis of the control device.

  Preferably, in order to save the capacity of the main storage device in the electronic control unit 1, the first data storage unit 2 such as a RAM is all included in the area of the second data storage unit 3 such as an SRAM. It can also be configured. In such a configuration, the first data storage means 2 such as a RAM is all reset when the power is turned on (power-on) for the area of the second data storage means 3 such as an SRAM and used as an NRAM. Is done. However, the electronic control apparatus according to the embodiment of the present invention is not limited to the above configuration.

  Alternatively, when the second data storage means 3 is composed of an EEPROM or the like, the first data storage is performed when an abnormal state of the electronic control device in the moving body is detected during the period when the ignition switch is on. Data taken out from the means 2 is stored in an EEPROM or the like. On the other hand, during the period when the ignition switch is off, even if the backup power supply voltage is not supplied, the data stored in the second data storage means 3 such as the EEPROM is maintained without being lost. Is done. Therefore, in this case, as in the case of using the above-described SRAM or the like, the data stored in the second data storage means 3 such as EEPROM is read out at the maintenance shop or the like to cause an abnormality in the electronic control device. It is possible to perform a self-diagnosis of the electronic control device by using this analysis and identifying the circumstances of occurrence of an abnormality.

  Further, an external inspection tool 8 that supports self-diagnosis of the electronic control device 9 such as a diagnostic scan tool is connected to the electronic control device 1 of FIG. The external inspection tool 8 is provided with storage means 80 including a nonvolatile memory such as SRAM. In this storage means 80, arbitrary related items (for example, a plurality of data items, a group of a plurality of bytes, etc.) related to data acquired by a plurality of sensors in the moving body are stored in advance. Further, the external inspection tool 8 includes a selection unit 81 including a selection button (selection switch) for designating and selecting a specific related item from arbitrary related items stored in the storage unit 80, and this selection. Display means 82 for displaying a specific related item selected by means 81 on the display screen. The specific related item selected by the selection unit 81 is sent to and stored in the second data storage unit 3 via the input interface circuit 11 and the CPU 4.

  Thereafter, when an abnormal state of the electronic control device 9 is detected, the CPU 4 sends data related to the specific related item to the first data according to the specific related item stored in the second data storage unit 3. The data is taken out from the data storage unit 2 and stored in the second data storage unit 3.

  As a preferred embodiment, when the electronic control device 1 of FIG. 1 performs the freeze processing of the data in the first data storage means 2, a plurality of data items (for example, stored in the storage means 80 of the external inspection tool 8). In accordance with a specific data item selected from among the engine speed, water temperature and intake air temperature), data related to this specific data item is retrieved from the first data storage means 2 and the second data storage means 3 Saved in. Such an embodiment can be implemented by causing the CPU 4 to read out and execute a program stored in the ROM 10.

  Further, as a preferred embodiment, in the electronic control device 1 of FIG. 1, when performing freeze processing of data in the first data storage unit 2, a plurality of bytes stored in the storage unit 80 of the external inspection tool 8 Data related to this particular group of bytes according to the particular group of bytes selected from the group of groups (eg, 1 byte group, 2 byte group and 4 byte group). It is taken out from the storage means 2 and stored in the second data storage means 3. Such an embodiment can be implemented by causing the CPU 4 to read and execute a program stored in the ROM 10.

  Furthermore, as a preferred embodiment, in the electronic control device 1 of FIG. 1, when the first data storage unit 2 is constituted by a RAM (storage unit), the data in the first data storage unit 2 is frozen. At this time, according to a specific address selected from the RAM addresses stored in the storage means 80 of the external inspection tool 8, data related to the specific address is retrieved from the first data storage means 2. It is stored in the second data storage means 3. Such an embodiment can be implemented by causing the CPU 4 to read and execute a program stored in the ROM 10.

  Furthermore, as a preferred embodiment, in the electronic control device 1 of FIG. 1, when performing freeze processing of data in the first data storage unit 2, a plurality of sequences stored in the storage unit 80 of the external inspection tool 8 are used. According to the group of the specific series selected from the group (for example, A / D system data, communication system data, and monitor system data), the data related to the group of the specific series is sent from the first data storage unit 2. It is taken out and stored in the second data storage means 3. Such an embodiment can be implemented by causing the CPU 4 to read and execute a program stored in the ROM 10.

  Furthermore, as a preferred embodiment, in the electronic control device 1 of FIG. 1, when the freeze processing of data in the first data storage unit 2 is performed, the “first” stored in the storage unit 80 of the external inspection tool 8 in advance. In accordance with the instruction content “designate all the data in the data storage unit 2 at once”, all the data is extracted from the first data storage unit 2 and stored in the second data storage unit 3. Is done. Such an embodiment can be implemented by causing the CPU 4 to read and execute a program stored in the ROM 10.

  Furthermore, as a preferred embodiment, in the electronic control device 1 of FIG. 1, when the first data storage unit 2 is constituted by a RAM (storage unit), the data in the first data storage unit 2 is frozen. At this time, according to a specific address selected from addresses corresponding to a predetermined number of bytes from the start address of the RAM stored in the storage means 80 of the external inspection tool 8, data related to this specific address is first. Is stored in the second data storage unit 3. Such an embodiment can be implemented by causing the CPU 4 to read and execute a program stored in the ROM 10.

  Furthermore, as a preferred embodiment, in the electronic control device 1 of FIG. 1, when the freeze processing of data in the first data storage unit 2 is performed, the first data stored in the storage unit 80 of the external inspection tool 8 The maximum value and the minimum value of the data in the storage unit 2 are taken out and stored in the second data storage unit 3. Such an embodiment can be implemented by causing the CPU 4 to read and execute a program stored in the ROM 10.

  Further, as a preferred embodiment, in the electronic control device 1 of FIG. 1, when the freeze processing of the data in the first data storage unit 2 is performed, the program pointer of the program stored in the storage unit 80 of the external inspection tool 8 Is taken out and stored in the second data storage means 3. Such an embodiment can be implemented by causing the CPU 4 to read and execute a program stored in the ROM 10.

  Furthermore, as a preferred embodiment, in the electronic control device 1 of FIG. 1, when the first data storage unit 2 is constituted by a RAM (storage unit), the data in the first data storage unit 2 is frozen. In accordance with a particular section selected from a plurality of sections (eg, engine section, continuously variable transmission section and platform section) of RAM stored in the storage means 80 of the external inspection tool 8, Data relating to the specific section is extracted from the first data storage unit 2 and stored in the second data storage unit 3. Such an embodiment can be implemented by causing the CPU 4 to read and execute a program stored in the ROM 10.

  Furthermore, as a preferred embodiment, in the electronic control device 1 of FIG. 1, when the first data storage unit 2 is constituted by a RAM (storage unit), the data in the first data storage unit 2 is frozen. At the time, according to the specific section selected from the plurality of sections of the RAM stored in the storage means 80 of the external inspection tool 8 and the address corresponding to the specific number of bytes from the start address of the specific section, Data relating to a specific number of bytes of address from the head address of a specific section is extracted from the first data storage unit 2 and stored in the second data storage unit 3. Such an embodiment can be implemented by causing the CPU 4 to read and execute a program stored in the ROM 10.

  Here, in the electronic control device 1 of FIG. 1, it is assumed that a program for executing a self-diagnosis of the electronic control device 9 is configured by a plurality of modules (or a plurality of logics). In this case, the electronic control device 1 of FIG. 1 includes auxiliary information storage means 6 composed of a nonvolatile memory such as SRAM. Preferably, the auxiliary information storage unit 6 is provided separately from the second data storage unit 3 formed of a non-volatile memory such as SRAM, but the auxiliary information storage unit 6 and the second data storage unit 3 are provided. It can also be mounted on a shared SRAM.

  The auxiliary information storage unit 6 includes, for each of the plurality of modules, the address of the RAM (storage unit) constituting the first data storage unit 2 and the maximum or minimum value of the data held in the RAM. In addition, a flag indicating an abnormal state of the electronic control device is stored in advance. Preferably, for each of a plurality of modules, auxiliary information including a RAM address, a maximum or minimum value of data held in the RAM, and a flag indicating an abnormal state of the electronic control device is stored in the RAM definition table. It is stored in the auxiliary information storage means 6 in the form.

  If any abnormality occurs in the electronic control device 9 at a certain sampling time for a specific module among the plurality of modules, a flag indicating that the abnormality has occurred in the electronic control device 9 is set. When this flag is detected, it is considered that a sign of occurrence of abnormality has been found in the electronic control device 9. Finally, a flag indicating that an abnormality has occurred in the electronic control device 9 within a predetermined sampling time (that is, a time between a certain sampling time and another sampling time) is a predetermined number of times or more. When detected, it is determined that the abnormal state of the electronic control device 9 has been formally detected.

  As a preferred embodiment, in the electronic control device 1 of FIG. 1, a flag indicating an abnormal state of the electronic control device 9 is detected in a specific module among the plurality of modules, and an indication of occurrence of an abnormality in the electronic control device 9 is found. At this point, the address of the RAM used in the specific module is read from the auxiliary information storage means 6, and the data related to the RAM address is extracted from the first data storage means 2 and the second address is stored. It is stored in the data storage means 3. Such an embodiment can be implemented by causing the CPU 4 to read and execute a program stored in the ROM 10.

  Furthermore, as a preferred embodiment, in the electronic control device 1 of FIG. 1, a flag indicating an abnormal state of the electronic control device 9 is detected in a specific module among the plurality of modules, and signs of occurrence of an abnormality in the electronic control device 9 are observed. When the data is issued, the maximum value or minimum value of the data in the RAM used in the specific module is read from the auxiliary information storage means 6 and related to the maximum value or minimum value of the data in the RAM. Data is extracted from the first data storage unit 2 and stored in the second data storage unit 3. Such an embodiment can be implemented by causing the CPU 4 to read and execute a program stored in the ROM 10.

  Preferably, in the electronic control device 1 of FIG. 1, the program pointer of the program composed of a plurality of modules for executing the self-diagnosis of the electronic control device 9 is the first along with the data acquired by the plurality of sensors in the moving body. Are stored in the data storage means 2.

  As a preferred embodiment, in the electronic control device 1 of FIG. 1, a flag indicating an abnormal state of the electronic control device 9 is detected in a specific module among the plurality of modules, and an indication of occurrence of an abnormality in the electronic control device 9 is found. At this point, the program pointer of the program used in the specific module is extracted from the first data storage unit 2 and stored in the second data storage unit 3. Such an embodiment can be implemented by causing the CPU 4 to read and execute a program stored in the ROM 10.

  More specifically, the program stored in the ROM 10 in the electronic control unit 1 in FIG. 1 temporarily stores data acquired by a plurality of sensors attached to the moving body in the first data storage unit 2. And when the abnormal state of the electronic control device 9 in the moving body is detected, the non-volatile second data storage unit 3 stores the data in the first data storage unit 2 at a predetermined sampling interval. And a step for performing a self-diagnosis of the electronic control device 9 based on data stored in the second data storage means 3 and a program for executing the self-diagnosis of the electronic control device 9 are configured. For each of the plurality of modules, the step of holding the address of the RAM constituting the first data storage means 2 in the auxiliary information storage means 6. When a flag indicating an abnormal state of the electronic control device 9 is detected in the specific module, the address of the RAM used in the specific module is read from the auxiliary information storage unit 6 and the address of the storage unit It is set so that the data related to is taken out from the first data storage means 2 and sent to the second data storage means 3.

  On the other hand, the program stored in the ROM 10 in the electronic control unit 1 in FIG. 1 temporarily holds data acquired by a plurality of sensors attached to the moving body in the first data storage unit 2. When a step and an abnormal state of the electronic control device 9 in the moving body are detected, the non-volatile second data storage unit 2 stores the data in the first data storage unit 2 at a predetermined sampling interval. A step, a step of performing a self-diagnosis of the electronic control device 9 based on data stored in the second data storage means 2, and a plurality of modules constituting a program for executing the self-diagnosis of the electronic control device 9 A maximum value or a minimum value of data held in the RAM constituting the first data storage means 2 for each of the above, and a step of holding in the auxiliary information storage means 6; In addition, when a flag indicating an abnormal state of the electronic control device 9 is detected in a specific module among the plurality of modules, the maximum value or the minimum value of the data in the RAM used in the specific module is the auxiliary information. It is set to be read from the storage means 6 and sent to the second data storage means 3.

  On the other hand, the program stored in the ROM 10 in the electronic control unit 1 in FIG. 1 performs data acquired by a plurality of sensors attached to the moving body and self-diagnosis of the electronic control device 9 in the moving body. A step of temporarily holding a program pointer of a program composed of a plurality of modules for realizing a function to be performed in the first data storage means 2, and when an abnormal state of the electronic control device 9 in the moving body is detected, The step of storing the data in the first data storage unit 2 and the program pointer of the program at a predetermined sampling interval by the non-volatile second data storage unit 3 and the first data storage for each of the plurality of modules Storing the address of the RAM constituting the means 2 in the auxiliary information storage means 6, and storing it in the second data storage means 3. Performing a self-diagnosis of the electronic control device 9 based on the data to be executed and the program pointer of the program, and when a flag indicating an abnormal state of the electronic control device 9 is detected in a specific module among the plurality of modules Among the program pointers held in the first data storage unit 2, the program pointer of the program used in the specific module is extracted from the first data storage unit 2 and the second data It is set to be sent to the storage means 3.

  Further, in the embodiment of FIG. 1, when the electronic control device 1 is operated using a computer-readable storage medium (or recording medium), a storage such as a hard disk holding the contents of the program as described above. It is preferable to prepare a medium (not shown).

  The storage medium used in the embodiment of FIG. 1 is not limited to the above, but a floppy disk, MO (Magneto-Optical Disk), CD-R (Compact Disk-Recordable), or CD-ROM. It can be provided in the form of various storage media such as portable media such as (Compact Disk Read-only Memory) and other fixed media.

  According to the embodiment of FIG. 1, the related items registered in the external inspection tool or the like (for example, a plurality of data items and a group of a plurality of bytes) are not restricted to data items fixed by computer software. The data subject to freeze processing can be arbitrarily selected according to specific related items (for example, specific data items and groups of specific number of bytes) specified from After the occurrence, the cause of the occurrence of the abnormality in the electronic control device can be analyzed accurately and promptly to identify the background of the occurrence of the abnormality at an early stage.

  Further, according to the embodiment of FIG. 1, when the data in the RAM is frozen, the program pointer of the program stored in the external inspection tool or the like is taken out and saved in the SRAM or EEPROM. Therefore, it is possible to clearly grasp the flow of the program for executing the self-diagnosis of the electronic control device, and it can be used for analysis of the cause of the abnormality of the electronic control device after the occurrence of the abnormality of the electronic control device. It becomes possible.

  Further, according to the embodiment of FIG. 1, when an abnormality occurrence sign of the electronic control device is found in a specific module in the program for executing the self-diagnosis of the electronic control device, the abnormality occurrence sign is displayed. It becomes possible to select the RAM address used in the specific module concerned or the maximum value or the minimum value of the data in the RAM, and after the abnormality of the electronic control device, the cause of the abnormality occurrence of the electronic control device It is possible to identify the background of the occurrence of an abnormality at an early stage by accurately and quickly analyzing the above.

  Further, according to the embodiment of FIG. 1, when an abnormality occurrence sign of the electronic control device is found in a specific module in the program for executing the self-diagnosis of the electronic control device, the abnormality occurrence sign is displayed. It becomes possible to clearly understand the flow of the program used in the specific module concerned, and it becomes possible to use for analysis of the cause of the abnormality of the electronic control equipment after the abnormality of the electronic control equipment. .

  FIG. 2 is a schematic diagram showing a procedure for selecting a data item to be freeze-processed in the embodiment of the present invention.

  Here, a plurality of data items related to data acquired by the sensor in the moving body are narrowed down to some extent and stored in the storage means 80 (see FIG. 1) of the nonvolatile memory of the external inspection tool 8. More specifically, as displayed on the enlarged display screen 84 in FIG. 2, "1. Engine speed, 2. Water temperature used for electronically controlled engine, etc. 3. Electronically controlled engine, etc." The intake air temperature, 4. accelerator opening ... "is narrowed down as a plurality of data items DI. When a user or the like operates the selection button 81, a specific data item (here, 3) that is expected to be related to the occurrence of an abnormality in the electronic control device from the plurality of data items DI displayed on the display screen 84. (Intake air temperature of electronically controlled engine, etc.) is selected. The specific data item thus selected is stored in a non-volatile memory (SRAM or EEPROM or the like) 30 of the second data storage means 3 (see FIG. 1) in the electronic control unit (ECU) 1.

  Thereafter, when an abnormal state of the electronic control device is formally detected, the CPU 4 (see FIG. 1) performs data related to the specific data item according to the specific data item stored in advance in the nonvolatile memory 30. Is taken out from the first data storage means 2 (see FIG. 1) and stored in the nonvolatile memory 30. This makes it possible to narrow down and limit the data items that are subject to freeze processing, and to analyze the cause of the occurrence of an abnormality in an electronic control device accurately and quickly to identify the background of the occurrence of the abnormality at an early stage. Is possible.

  FIG. 3 is a schematic diagram showing a procedure for selecting a group of the number of bytes subject to freeze processing in the embodiment of the present invention.

  Here, a group of a plurality of bytes related to data acquired by the sensor in the moving body is narrowed down to some extent and stored in the nonvolatile memory storage means 80 (see FIG. 1) of the external inspection tool 8. More specifically, as displayed on the enlarged display screen 84 in FIG. 3, “1.1 byte group, 2.2 byte group, 3.4 byte group,... It is narrowed down as a group BG. When a user or the like operates the selection button 81, a group of a specific number of bytes expected to be related to the occurrence of an abnormality in the electronic control device from the plurality of groups of bytes BG displayed on the display screen 84 ( Here, 2.2 byte group) is selected. The group of the specific number of bytes selected in this way is stored in the nonvolatile memory 30 (SRAM or EEPROM, etc.) of the second data storage means 3 (see FIG. 1) in the electronic control unit 1.

  Thereafter, when an abnormal state of the electronic control device is formally detected, the CPU 4 (see FIG. 1) determines the group of this specific number of bytes according to the group of specific number of bytes stored in advance in the nonvolatile memory 30. The data related to is taken out from the first data storage means 2 (see FIG. 1) and stored in the nonvolatile memory 30. As a result, it becomes possible to narrow down and limit the number of groups of bytes that are subject to freeze processing, and the cause of the occurrence of an abnormality in an electronic control device can be analyzed accurately and quickly to identify the background of the occurrence of the abnormality at an early stage. It becomes possible to do.

  FIG. 4 is a schematic diagram showing a procedure for selecting an address of a RAM to be freeze-processed in the embodiment of the present invention.

  In FIG. 4, the RAM addresses constituting the first data storage unit 2 (see FIG. 1) are narrowed down to some extent and stored in the nonvolatile memory storage unit 80 (see FIG. 1) of the external inspection tool 8. More specifically, as displayed on the enlarged display screen 84 in FIG. 4, “1.0xFFFF8000, 2.0xFFFF9210, 3.0xFFFFA140, and 4.0xFFFFB280 (all values displayed in hexadecimal number)... "Is narrowed down as addresses AD of a plurality of RAMs. When a user or the like operates the selection button 81, a specific RAM address (here, a plurality of RAM addresses AD displayed on the display screen 84 that is expected to be related to the occurrence of an abnormality in the electronic control device). , 3.0xFFFFA140) is selected. The address of the specific RAM thus selected is stored in the non-volatile memory 30 (SRAM or EEPROM, etc.) of the second data storage means 3 (see FIG. 1) in the electronic control unit 1.

  Thereafter, when an abnormal state of the electronic control device is formally detected, the CPU 4 (see FIG. 1) relates to the address of this specific RAM according to the address of the specific RAM stored in advance in the nonvolatile memory 30. The data to be retrieved is taken out from the first data storage means 2 and stored in the nonvolatile memory 30. As a result, it becomes possible to narrow down and limit the RAM addresses to be subjected to freeze processing, and the cause of the occurrence of the abnormality in the electronic control device is analyzed accurately and quickly to identify the background of the occurrence of the abnormality at an early stage. It becomes possible.

  FIG. 5 is a schematic diagram showing a procedure for selecting a group of data to be subjected to freeze processing in the embodiment of the present invention.

  Here, a plurality of groups of groups related to the data acquired by the sensor in the moving body are narrowed down to some extent and stored in the nonvolatile memory storage means 80 (see FIG. 1) of the external inspection tool 8. More specifically, as displayed on the enlarged display screen 84 of FIG. 5, “1. A / D system data, 2. communication system data, 3. monitor system data. Group DG. Here, A / D system data represents a group of circuit system data that performs analog / digital conversion processing, and communication system data represents a group of circuit system data that performs communication processing of an arbitrary signal. The monitor system data represents a group of circuit system data for detecting disconnection or the like of the connection portion.

  When a user or the like operates the selection button 81, a specific group of groups (here, a group of groups DG displayed on the display screen 84 that is expected to be related to the occurrence of an abnormality in the electronic control device) 2. Communication data) is selected. The group of the specific series thus selected is stored in the non-volatile memory (SRAM or EEPROM or the like) 30 of the second data storage unit 3 (see FIG. 1) in the electronic control unit 1.

  Thereafter, when an abnormal state of the electronic control device is formally detected, the CPU 4 (see FIG. 1) relates to the group of the specific sequence according to the group of the specific sequence stored in advance in the nonvolatile memory 30. The data to be retrieved is taken out from the first data storage means 2 (see FIG. 1) and stored in the nonvolatile memory 30. As a result, it becomes possible to narrow down and limit the group of the series to be subjected to the freeze processing, and the cause of the occurrence of the abnormality of the electronic control device can be analyzed accurately and quickly to identify the background of the occurrence of the abnormality early. It becomes possible.

  FIG. 6 is a schematic diagram showing a procedure for selecting all data in the RAM in the embodiment of the present invention in the embodiment of the present invention.

  Here, it is assumed that all the data held in the RAM constituting the first data storage unit 2 (see FIG. 1) are designated collectively. In this case, as displayed on the enlarged display screen 84 in FIG. 6, the instruction content WD “All data designation (ie, all data in the RAM is designated collectively)” It is stored in the non-volatile memory storage means 80 (see FIG. 1) of the tool 8. The instruction contents WD of "all data designation" displayed on the display screen 84 when the user or the like operates the selection button 81. The instruction content of “all data designation” selected in this way is the nonvolatile memory 30 (SRAM or EEPROM or the like) of the second data storage means 3 (see FIG. 1) in the electronic control unit 1. ).

  Thereafter, when an abnormal state of the electronic control device is formally detected, the CPU 4 (see FIG. 1), according to the instruction contents of “all data designation” stored in advance in the nonvolatile memory 30, Data is taken out from the first data storage means 2 and stored in the nonvolatile memory 30. This makes it possible to select all the data to be subjected to freeze processing at once, and quickly and accurately analyze the cause of the occurrence of abnormalities in electronic control devices to identify the background of the occurrence of abnormalities. It becomes possible to do.

  FIG. 7 is a schematic diagram showing a procedure for selecting addresses corresponding to the number of bytes from the start address of the RAM in the embodiment of the present invention.

  In FIG. 7, addresses corresponding to a predetermined number of bytes are narrowed down to some extent from the head address of the RAM constituting the first data storage means 2 (see FIG. 1), and the nonvolatile memory storage means 80 of the external inspection tool 8 (FIG. 7). 1). More specifically, as displayed on the enlarged display screen 84 in FIG. 7, the number of bytes from the start address of the RAM (** Byte from the start address of the RAM) BA is designated. Yes. Here, when the user or the like operates the selection button 81 and inputs the number of bytes BA from the head address of the RAM, an address corresponding to a specific number of bytes is selected from the head address of the RAM. The address corresponding to the specific number of bytes from the head address of the RAM thus selected is the nonvolatile memory 30 (SRAM or EEPROM, etc.) of the second data storage means 3 (see FIG. 1) in the electronic control unit 1. Saved in.

  Thereafter, when an abnormal state of the electronic control device is formally detected, the CPU 4 (see FIG. 1) determines the specific number of bytes according to the specific number of bytes stored in the nonvolatile memory 30 in advance. The data related to the minute address is taken out from the first data storage means 2 and stored in the nonvolatile memory 30. This makes it possible to narrow down and limit the number of bytes from the start address of the RAM subject to freeze processing, and to analyze the cause of the occurrence of abnormalities in electronic control equipment accurately and quickly. It becomes possible to identify the circumstances of the early.

  FIG. 8 is a schematic diagram showing a procedure for designating the maximum value or the minimum value of data in the RAM in the embodiment of the present invention.

  In FIG. 8, the maximum value or the minimum value of the data stored in the RAM constituting the first data storage unit 2 (see FIG. 1) is narrowed down to some extent, and the storage unit 80 of the nonvolatile memory of the external inspection tool 8 ( (See FIG. 1). More specifically, on the enlarged display screen 84 in FIG. 8, the maximum value or the minimum value MAX, MIN of the data in the RAM stored in the storage unit 80 is displayed. When the user or the like operates the selection button 81, the maximum value or the minimum value MAX, MIN of the data in the RAM displayed on the display screen 84 is designated.

  After that, when an abnormal state of the electronic control device is formally detected, the CPU 4 (see FIG. 1) takes out the maximum value or the minimum value of the data in the RAM designated by the selection button 81 from the storage means 80 and makes it non-volatile. Is stored in the memory 30. As a result, it becomes possible to narrow down and limit the maximum or minimum value of the data in the RAM that is the target of the freeze process, and the cause of the abnormality in the electronic control device is analyzed accurately and quickly. It becomes possible to identify the circumstances of the early.

  FIG. 9 is a schematic diagram showing a procedure for designating a program pointer in the embodiment of the present invention.

  Here, the CPU 4 (see FIG. 1) pays attention to the fact that the CPU 4 (see FIG. 1) always keeps track of the program pointer of the program for executing the self-diagnosis of the electronic control device (normally, there are a plurality of program pointers). Thus, the program pointer is stored in the nonvolatile memory storage means 80 (see FIG. 1) of the external inspection tool 8. More specifically, the program pointer PP stored in the storage unit 80 is displayed on the enlarged display screen 84 of FIG. Here, the “program pointer” indicates an address corresponding to each instruction of the program. A specific example of the program pointer is shown in FIGS. 14 and 15 described later.

  When the user or the like operates the selection button 81, the program pointer PP displayed on the display screen 84 is designated, and the nonvolatile memory 30 of the second data storage unit 3 (see FIG. 1) in the electronic control device 1 is designated. (SRAM or EEPROM etc.)

Thereafter, when an abnormal state of the electronic control device is formally detected, the CPU 4 takes out a program pointer stored in advance in the storage means 80 and stores it in the nonvolatile memory 30. This makes it possible to clearly grasp the program flow for executing the self-diagnosis of the electronic control device, and to use for analysis of the cause of the abnormality of the electronic control device after the abnormality of the electronic control device occurs. Is possible.

  Here, since each instruction of the program for executing the self-diagnosis of the electronic control device and the program pointer have a one-to-one correspondence, refer to the program pointer for which instruction the program is currently executing. This is easy to understand. However, during a function call, the address of the program that made the function call is stored in the program pointer, so to know the execution address before entering the interrupt, the link pointer that stores the address before the interrupt Please refer to.

  In order to perform freeze processing on the program pointers without interruption, it is necessary to perform freeze processing for each instruction of the program and store all program pointers in the nonvolatile memory 30. However, since it is actually difficult to perform the freeze processing of all program pointers due to the processing speed, the link pointer freeze processing is performed at the fastest interrupt timing.

  FIG. 10 is a schematic diagram showing a procedure for selecting all bytes of a RAM section or addresses corresponding to the number of bytes from the head address of the section in the embodiment of the present invention.

  In FIG. 10, a plurality of sections of the RAM constituting the first data storage means 2 (see FIG. 1), and addresses corresponding to a predetermined number of bytes are narrowed down to some extent from the head address of each section. It is stored in the storage means 80 (see FIG. 1) of the nonvolatile memory. More specifically, as shown in the enlarged display screen 84 of FIG. 10, “1. section of engine (ENG), 2. section of continuously variable transmission (CVT), 3. platform (PF). ) Section, 4. diagnosis relation (OBD) section... ”Are narrowed down to a plurality of sections SE. On the other hand, the total number of bytes in each section or the number of bytes from the start address of each section (** Byte from the start address of the section) is designated. Here, the “section” refers to a plurality of areas defined in the RAM definition map.

  Here, when the user or the like operates the selection button 81, all of the RAMs in a specific section (here, the section of 2. continuously variable transmission) in the plurality of sections SE displayed on the display screen 84 are stored. An address for a specific number of bytes is selected from the address or the start address of the specific section. The addresses of all the RAMs of the specific section selected in this way, or the addresses corresponding to the specific number of bytes from the start address of the specific section are the second data storage means 3 (see FIG. 1) is stored in a nonvolatile memory 30 (SRAM, EEPROM, or the like).

  Thereafter, when an abnormal state of the electronic control device is formally detected, the CPU 4 (see FIG. 1), the address of all the RAMs of the specific section previously stored in the nonvolatile memory 30, or the specific According to the address for a specific number of bytes from the head address of the section, the data related to either the former address or the latter address is taken out from the first data storage means 2 and stored in the nonvolatile memory 30. Yes. This makes it possible to narrow down and limit the number of bytes from the RAM section subject to freeze processing, or the start address of the RAM section, and accurately analyze the cause of abnormalities in electronic control equipment. In addition, it is possible to quickly identify the background of the occurrence of an abnormality.

  FIG. 11 is a data format diagram showing a method of designating all RAM addresses used in the module or the maximum value or minimum value of data in the RAM when there is an indication of an abnormal state.

  In FIG. 11, it is assumed that a program for executing a self-diagnosis of an electronic control device in a moving body is constituted by a plurality of modules (or a plurality of logics). As described above, the electronic control unit 1 of FIG. 1 includes the auxiliary information storage unit 6 (see FIG. 1) including a nonvolatile memory such as SRAM. In this auxiliary information storage means 6, for each of the plurality of modules, the RAM of the first data storage means 2 and the peak hold for the maximum value or the minimum value of the data held in the RAM are performed. Various auxiliary information including a value and a flag indicating that an abnormality has occurred in the electronic control device is stored in the auxiliary information storage means 6 in the form of a RAM definition table RT.

  In other words, each of a plurality of modules (for example, module 1 to module 5) has a RAM definition table RT individually, and reads and writes data values in the RAM based on the RAM definition table RT. Is done.

  More specifically, as shown in FIG. 11, the RAM definition table RT for one module includes a management number (for example, No. 1 to No. 5) and a RAM address (for example, 0xFFFFA800, 0xFFFF9610, 0xFFFFAB128). , 0xFFFFBC718 and 0xFFFFB8372 (all values expressed in hexadecimal)), RAM type, LSB (Least Significant Bit) which is the minimum unit when performing A / D conversion of the data value in the RAM Stores the peak hold value with respect to the maximum value (MAX) or minimum value (MIN) of the data in the RAM, the value defining the peak hold direction, and the sampling timing (sampling number) when performing the freeze processing Has been.

  More specifically, regarding the “RAM type” in the RAM definition table, SN1 to SN4 represent macros that are signed and defined, and the numbers added after SN are signed. This indicates the number of macro bytes. On the other hand, UN1 to UN4 represent macros that are defined as unsigned, and the number appended after UN represents the number of bytes of the unsigned macro. On the other hand, FLAG represents a flag indicating that an abnormality has occurred in the electronic control device.

  Further, regarding “LSB” in the RAM definition table, the data corresponding to the RAM addresses displayed by 0xFFFFA800, 0xFFFF9610, 0xFFFFAB128, 0xFFFFBCBC718, and 0xFFFFFB8372 are 5/1024, 100/2550, 1/1, 1, 1 respectively. A / D conversion is performed based on LSBs of / 10 and 0.

  Further, regarding the “direction of peak hold with respect to the maximum value or minimum value of data in the RAM” in the RAM definition table, the number 1 means that the maximum value of data in the RAM is peak-held. The number 2 means that the minimum value of data in the RAM is peak-held, and the number 0 means that the peak is not held.

  Further, regarding the “sampling timing when performing freeze processing” in the RAM definition table, the number 1 means that sampling is performed on the data in the RAM every time, and the number 2 indicates that the RAM This means that sampling is performed once every two times for the data in the data, and the number 3 means that sampling is performed once every three times for the data in the RAM. The number 4 means that sampling is performed at a rate of once every four times for the data in the RAM.

  Here, when it is detected that an abnormality has occurred in the electronic control device at a certain sampling time based on data acquired by a plurality of sensors in the moving body for a specific module among the plurality of modules, the RAM definition A flag is set in the table indicating that an abnormality has occurred in the electronic control device. When this flag is detected by the CPU, it is considered that there is a sign of abnormality in the electronic control device. However, at this time, the freeze processing of the data in the RAM has not yet started. Finally, when a flag indicating that an abnormality has occurred in the electronic control device is detected more than a predetermined number of times within a predetermined sampling time, the abnormal state of the electronic control device has been formally detected. It is determined by the CPU, and the data in the RAM is frozen.

  Preferably, in FIG. 11, when a flag indicating an abnormal state of the electronic control device is detected in a specific module among the plurality of modules and the electronic control device is regarded as having an abnormality occurrence, the specific The RAM address used in the module is read from the RAM definition table, and all the data related to the RAM address is extracted from the first data storage means 2 (see FIG. 1) and stored in the second data storage. It is preserve | saved at the means 3 (refer FIG. 1). As described above, when a sign of abnormality occurrence of the electronic control device is found by the RAM definition table, by selecting all the addresses of the RAM used in a specific module related to the sign of abnormality occurrence After the occurrence of an abnormality in the electronic control device, the cause of the abnormality occurrence in the electronic control device can be analyzed accurately and quickly.

  Further preferably, in FIG. 11, when a flag indicating an abnormal state of the electronic control device is detected in a specific module among the plurality of modules, and when it is considered that there is an indication that the electronic control device is abnormal, The peak hold value of the maximum value or the minimum value of the data in the RAM used in the specific module is read from the RAM definition table, and the data related to the maximum value or the minimum value of the data in the RAM is the first value. The data is taken out from the first data storage unit 2 (see FIG. 1) and stored in the second data storage unit 3 (see FIG. 1). As described above, when a sign of occurrence of abnormality of the electronic control device is found by the RAM definition table, the maximum value or minimum value of data in the RAM used in a specific module related to the sign of abnormality occurrence. By peak-holding the value, the cause of the abnormality of the electronic control device can be analyzed accurately and promptly after the abnormality of the electronic control device occurs.

  FIG. 12 is a flowchart for explaining a procedure for performing freeze processing using a RAM definition table. Here, a processing flow for performing a freeze process by the CPU or the like when a sign of occurrence of abnormality of the electronic control device is found in a specific module from the RAM definition table as shown in FIG.

  In the start portion of the flowchart of FIG. 12, detection signals detected by a plurality of sensors in the moving body during the period when the ignition switch of the moving body is turned on are stored in the RAM (first data storage) as sensor detection data. Means) temporarily. On the other hand, for each of the plurality of modules constituting the program for executing the self-diagnosis of the electronic control device in the moving body, auxiliary information including the RAM address and the maximum value or the minimum value of the data in the RAM is stored in the RAM. It is stored in the auxiliary information storage means in the definition table format.

  Further, in step S11 of FIG. 12, it is checked whether a flag indicating an abnormal state of the electronic control device is set in a specific module among the plurality of modules. If it is detected that this flag is set, it is considered that there is a sign of an abnormality in the electronic control device.

  After detecting that the flag is raised in a specific module, in step S12 of FIG. 12, the address of the RAM used in the specific module or the data in the RAM used in the specific module The maximum value or the minimum value is designated and read from the RAM definition table. Further, the address of the RAM or data related to the maximum value or the minimum value of the data in the RAM is extracted from the RAM and sent to a non-volatile memory (SRAM or EEPROM), and the freeze process is executed. Such a process is executed until there is no more data to be stored in the nonvolatile memory during the freeze process (the end of the flowchart in FIG. 12).

  FIG. 13 is a flowchart for explaining a procedure for performing freeze processing by designating a program pointer. Here, when a sign of abnormality of the electronic control device is found in a specific module among a plurality of modules, the CPU or the like performs the freeze processing of the program pointer of the program used in the specific module. A processing flow for this will be described.

  In the start part of the flowchart of FIG. 13, a program pointer of a program composed of a plurality of modules for executing a self-diagnosis of the electronic control device during the period in which the ignition switch of the moving body is on is displayed in the moving body. Are stored in a RAM (first data storage means) together with data acquired by the sensors.

  Further, in step S21 in FIG. 13, it is checked whether a flag indicating an abnormal state of the electronic control device is set in a specific module among the plurality of modules. If it is detected that this flag is set, it is considered that there is a sign of an abnormality in the electronic control device.

  After it is detected that the flag is raised in a specific module, in step S22 in FIG. 12, the program pointer of the program used in the specific module is taken out from the RAM and a non-volatile memory (SRAM or EEPROM or the like). ) And the program pointer freeze process is executed at the timing of the fastest interrupt (the fastest = the interrupt frequency is high). Such a process is executed until there is no program pointer to be stored in the nonvolatile memory during the freeze process (the end of the flowchart of FIG. 13).

  In step S22 described above, each instruction of the program for executing the self-diagnosis of the electronic control device and the program pointer have a one-to-one correspondence, so which instruction the program is currently executing is determined by the program. It can be easily understood by referring to the pointer. However, during a function call, the address of the program that made the function call is stored in the program pointer, so to know the execution address before entering the interrupt, the link pointer that stores the address before the interrupt Please refer to.

  In order to perform freeze processing on program pointers without interruption, it is necessary to execute freeze processing for each instruction of the program and store all program pointers in a nonvolatile memory. However, since it is virtually impossible to execute the freeze processing for all program pointers, the link pointer freeze processing is preferably executed at the timing of the fastest interrupt.

  FIGS. 14 and 15 are flowcharts (No. 1 and No. 2) for explaining the flow until the program pointer is stored in the embodiment of the present invention.

  In FIG. 14, an example of a program for executing the self-diagnosis of the electronic control device in the mobile body is described in the form of an assembler expansion result of a certain source. In this assembler expansion result, “address”, “machine language”, and “assemble language” are described from the left. Here, the program pointer points to an address corresponding to each instruction of the program, and corresponds to the leftmost “address”.

  Further, a flow for performing a program pointer freeze process by storing a program pointer (actually a link pointer) in a nonvolatile memory will be described with reference to FIG.

  When the first interrupt occurs in the program shown in FIG. 14, the address before the interrupt (0x3026 of “address” in FIG. 14) at this time is stored in the link pointer (register). Such an operation is automatically performed by the CPU. Furthermore, the freeze processing of the link pointer value is executed in the processing in the first interrupt. Thereafter, interrupt processing is performed in accordance with the generated first interrupt.

  Next, when the second interrupt occurs in the program shown in FIG. 14, the address before the interrupt (0x304e of “address” in FIG. 14) at this time is the same as in the case of the first interrupt described above. Is stored in the link pointer. Such an operation is automatically performed by the CPU as well. Further, the freeze processing of the value of the link pointer is executed in the processing in the second interrupt. Thereafter, interrupt processing is executed in accordance with the second interrupt.

  After that, when the third interrupt occurs in the program of FIG. 14, the address before the interrupt (0x306a of “address” in FIG. 14) at this time is the same as in the case of the first interrupt described above. Is stored in the link pointer. Such an operation is automatically performed by the CPU as well. Further, the freeze processing of the value of the link pointer is executed in the processing in the third interrupt. After that, interrupt processing is executed according to the third interrupt.

  As described above, by freezing the program pointer (actually the link pointer) at the timing of the fastest interrupt, the program flow can be easily grasped. For example, when the software is deadlocked, it is possible to accurately track how the deadlock occurred.

  The present invention is a computer for controlling an electronic control device such as an electronically controlled engine in a moving body such as a vehicle, and an SRAM is detected when an abnormal state of the electronic control device is detected by a plurality of sensors in the moving body. Applied to a computer system for engine control including an electronic control unit (ECU) having a built-in computer having a function of performing self-diagnosis of the electronic control device based on sensor detection data stored in a non-volatile memory such as EEPROM or EEPROM Is possible.

It is a block diagram which shows the structure of the electronic controller which concerns on one Example of this invention. It is a schematic diagram which shows the procedure which selects the data item of freeze processing object in the Example of this invention. It is a schematic diagram which shows the procedure which selects the group of the number of bytes of freeze processing object in the Example of this invention. It is a schematic diagram which shows the procedure which selects the address of RAM for freeze processing in the Example of this invention. It is a schematic diagram which shows the procedure which selects the group of the data of freeze processing object in the Example of this invention. It is a schematic diagram which shows the procedure which designates all the data in RAM collectively in the Example of this invention. It is a schematic diagram which shows the procedure which selects the address for the number of bytes from the head address of RAM in the Example of this invention. It is a schematic diagram which shows the procedure which designates the maximum value or minimum value of the data in RAM in the Example of this invention. It is a schematic diagram which shows the procedure which designates a program pointer in the Example of this invention. FIG. 5 is a schematic diagram showing a procedure for selecting all bytes of a RAM section or addresses corresponding to the number of bytes from the head address of the section in the embodiment of the present invention. FIG. 5 is a data format diagram showing a method for designating all RAM addresses used in a module or the maximum value or minimum value of data in the RAM when there is an indication of an abnormal state. It is a flowchart for demonstrating the procedure which performs a freeze process using a RAM definition table. It is a flowchart for demonstrating the procedure which performs a freeze process by designating a program pointer. It is a flowchart (the 1) for demonstrating the flow until it stores a program pointer in the Example of this invention. It is a flowchart (the 2) for demonstrating the flow until it stores a program pointer in the Example of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Electronic controller 2 1st data storage means 3 2nd data storage means 4 CPU (central processing unit)
5 Sensor section 6 Auxiliary information storage means 7 Battery 8 External inspection tool 9 Electronic control device 10 ROM (read only memory)
11 Input interface circuit 12 A / D converter 13 Output interface circuit 50 A / F sensor (air-fuel ratio sensor)
DESCRIPTION OF SYMBOLS 51 Water temperature sensor 52 Oxygen concentration sensor 53 Knocking sensor 54 Oil temperature sensor 55 Exhaust temperature sensor 56 Intake temperature sensor 57 Torque sensor 58 Crank angle sensor 59 Vehicle speed sensor 60 Throttle position sensor 70 Constant voltage power supply 71 Backup power supply 80 Storage means 81 Selection means 82 Display means

Claims (5)

In an electronic control device having a function of controlling the electronic control device in the moving body and performing a self-diagnosis of the electronic control device, a program used to realize the function is composed of a plurality of modules.
First data storage means for temporarily storing data acquired by a plurality of sensors attached to a moving body and a program pointer of a program used to realize the function of the electronic control unit When,
Non-volatile second data storage means for storing the data in the first data storage means and the program pointer of the program at a predetermined sampling interval when an abnormal state of the electronic control device is detected. Prepared,
When a flag indicating the abnormal state is detected in a specific module among the plurality of modules, the program pointer held in the first data storage means is used in the specific module. An electronic control device, wherein a program pointer of a program is fetched from the first data storage means and sent to the second data storage means. When the program pointer of the program used in the specific module is extracted from the first data storage unit and sent to the second data storage unit, and an interrupt occurs in the program, the program pointer is the fastest. 2. The electronic control apparatus according to claim 1, wherein a freeze process for storing the program pointer in the second data storage means is executed at the timing of interruption. 3. The electronic control apparatus according to claim 2, wherein the freeze process is executed until there is no program pointer to be stored in the second data storage unit during the freeze process. In an electronic control device having a function of controlling the electronic control device in the moving body and performing a self-diagnosis of the electronic control device,
First data storage means for temporarily holding data acquired by a plurality of sensors attached to the moving body;
Non-volatile second data storage means for storing data in the first data storage means at a predetermined sampling interval when an abnormal state of the electronic control device is detected;
Storage means for storing in advance a program pointer of a program used to realize the function of the electronic control unit;
An electronic control device, wherein a program pointer of a program stored in the storage means is taken out and sent to the second data storage means together with the data in the first data storage means . The storage means is provided in an external inspection tool that supports self-diagnosis of the electronic control device, and a program pointer of a program stored in the storage means is read out by the external inspection tool. The electronic control device according to claim 4 .

Images