JP6524925B2 - Vehicle control device - Google Patents

Description

  The present invention relates to a control device for a vehicle that changes the process of writing vehicle information according to the state of power supply from a battery.

  In a vehicle, when power is not supplied from the battery even when the ignition is off, for example, the power supply fuse for constant current conduction may be removed and the fuse may be disconnected. The fuse may be removed, for example, to prevent battery run-up during long-term storage. As described above, even when there is no electric power constantly supplied from the battery, the vehicle control device is configured to be able to turn on the operating power by the operation of the user. In other words, ACC can be turned on and the ignition can be turned on by the user's operation even when power is not always applied.

  However, when the power is not constantly applied, the information can not be read from the RAM when the operation power is turned on by the user, and the system may operate in the initial state, and the previous traveling state may not be reflected. In addition, when the operation power is turned off, the power supply from the battery is stopped, so the processing at the time of the power off which is usually performed can not be performed, and the information and various states before the power off may not be saved. 1).

JP, 2015-58751, A

  For example, in the case of the meter, when the constant current supply from the battery is cut off, the current supply and non-current supply are switched by turning on and off the ignition. Therefore, when the ignition is turned off in a state in which the current is always shut off, the ignition off process that should normally be performed may not be performed due to the stop of the supplied power.

  In addition, in the situation where there is no constant power supply, it should be the situation where the operation power off process is not originally performed, but the operation power off process is partially executed under the influence of the residual voltage of the short interruption prevention circuit, and the process is unreliable May be implemented.

  Furthermore, in a system in which operation power off processing is performed using residual voltage even if there is no constant power supply, the same applies to reliability even when the reset voltage of the microcomputer falls below the completion of operation power off processing. It becomes a missing process.

  Therefore, the present invention has been made in view of the above-mentioned problems, and, even when the constant energization from the battery is interrupted, the reliability of the information written to the storage unit after the ignition is turned off It is an object of the present invention to provide a vehicle control device that can be improved.

  The present invention adopts the following technical means to achieve the above-mentioned object.

  In the present invention, when power is supplied from the battery (20) through the constant connection line (11) by the detection of the battery detection unit (17), the ignition of the vehicle is turned on by the detection of the ignition detection unit (18). When the vehicle is turned off, predetermined end information in the vehicle information is written in the storage unit (30), and power is not supplied from the battery via the constant connection line by the detection of the battery detection unit, and the operation connection line (12) When power is supplied via the power supply, and the ignition detection unit detects that the ignition is turned on from off, a plurality of processes for writing the end information over a period in which the power can be driven by the power supplied from the storage unit (16) Is a vehicle control device that sequentially executes division processing divided into two, and in each division processing, writes partial information of end information in the storage unit

  According to the present invention, when power is supplied from the battery via the constant connection line, when the ignition of the vehicle is switched from on to off, predetermined end information of the vehicle information is written in the storage unit. Be Since power is normally supplied from the battery via the constant connection line, there is no need to consider the power for writing the termination information. However, when power is not supplied from the battery via the connection line and power is supplied via the operation connection line, the power is not supplied from the battery when the ignition is turned off, so the end information is displayed. There is a risk that the power for writing will be insufficient. Therefore, in the present invention, division processing in which processing for writing end information is divided into a plurality of parts is sequentially performed over a period in which driving can be performed by the power supplied from the storage unit. In the division process, since a part of the end information is written in the storage unit, the information written in the completed division process can be used as valid information next time. This makes it possible to write more reliable information to the storage unit without having time to write all the end information.

  In addition, the code | symbol in the parenthesis of each above-mentioned means is an example which shows the correspondence with the specific means as described in embodiment mentioned later.

It is a block diagram which shows the connection state of the battery 20 and ECU10. FIG. 2 is a block diagram showing an electrical configuration of the ECU 10. It is a time chart which shows a power-off process. It is a flowchart which shows a power-on process. It is a flowchart which shows a power-off process. It is a time chart explaining division processing.

First Embodiment
A first embodiment of the present invention will be described with reference to FIGS. As shown in FIG. 1, an electronic control unit (ECU) 10 is supplied with power from a battery 20. The ECU 10 is connected to the battery 20 via the constant connection line 11 and the operation connection line 12. Therefore, the ECU 10 is driven by the electric power supplied via either the constant connection line 11 or the operation connection line 12. The ECU 10 is a control device for a vehicle.

  A fuse 13 is provided on the constant connection line 11. The fuse 13 always interrupts the connection line 11 when an excessive current flows in the connection line 11 at all times.

  A switch 14 is provided on the operation connection line 12. The switch 14 is interlocked with on / off of the ignition. The switch 14 is energized when the ignition is turned on, and is deenergized when the ignition is turned off. As a result, the actuation connection line 12 is de-energized when the ignition of the vehicle is turned off, and is energized when the ignition is turned on. Ignition on / off includes on / off of vehicle accessories (hereinafter ACC).

  The ECU 10 is supplied with power from the battery 20 via the connection line 11 even when the ignition is off. On the other hand, when the fuse 13 of the constant connection line 11 is removed and the fuse 13 is broken, power is not supplied from the battery 20 via the constant connection line 11 when the ignition is off. Even when power is not supplied via the constant connection line 11, power is supplied to the ECU 10 via the operation connection line 12 when the ignition is turned on and the switch 14 is turned on by the operation of the user.

  As shown in FIG. 2, the ECU 10 is configured to include a microcomputer 15, an instantaneous power failure prevention circuit 16, a constant power supply determination circuit 17, an operating power supply determination circuit 18, and a microcomputer power supply 19. The microcomputer 15 executes a program stored in the storage unit 30, and controls each unit (not shown). The microcomputer 15 is a control unit, is driven by the power supplied from the battery 20, writes vehicle information to the storage unit 30, and reads vehicle information from the storage unit 30.

The storage unit 30 is a non-transitory tangible storage medium storing non-transitory computer readable programs and data. The storage unit 30 is realized by a semiconductor memory or a magnetic disk. The storage unit 30 stores vehicle information related to control and traveling of the vehicle. In the present embodiment, the storage unit 30 includes a volatile memory 31 and a non-volatile memory 32. The volatile memory 31 is a memory that can not hold stored information unless power is supplied. The non-volatile memory 32 is a memory that does not lose information even when power is not supplied.

  The microcomputer power supply 19 supplies power to the microcomputer 15. The microcomputer power supply 19 steps down the DC voltage supplied from the battery 20 and supplies power for the microcomputer 15 to operate.

  The constant power supply determination circuit 17 determines whether power is supplied from the battery 20 via the constant connection line 11 and gives the determination result to the voltage monitoring terminal 15 a of the microcomputer 15. The constant power supply determination circuit 17 functions as a battery detection unit that detects the power state supplied from the battery 20 via the constant connection line 11. The operation power supply determination circuit 18 determines whether power is supplied from the battery 20 via the operation connection line 12 and gives the determination result to the voltage monitoring terminal 15 a of the microcomputer 15. The operating power supply determination circuit 18 functions as an ignition detection unit that detects the on / off state of the ignition.

  The instantaneous interruption prevention circuit 16 is an instantaneous interruption prevention unit, and is a circuit that prevents an instantaneous interruption of the power supplied from the battery 20 to the microcomputer power supply 19. The instantaneous interruption prevention circuit 16 includes a power storage unit that stores the power supplied from the battery 20. The storage unit is realized by, for example, a capacitor called a backup capacitor. The backup capacitor supplies electric power to the microcomputer power supply 19 by the charge accumulated in advance at the momentary power failure. Thus, the microcomputer power supply 19 can continue the supply of power to the microcomputer 15 even at the momentary interruption.

  Next, processing when the operating power is switched from on to off will be described. FIG. 3 shows three comparative examples and the present embodiment. Comparative Example 1 shows the case where the power is always on. The always-on state is a state in which power is supplied from the battery 20 via the always-connected line 11. In this case, when the ignition is turned on and the operation power is turned on, the ECU 10 is starting until the power is turned off. Then, even if the ignition is turned off and the operation power supply is turned off, power is continuously supplied from the battery 20 via the constant connection line 11. Therefore, even if the operation power is turned off, the power off process can be performed. The power off process is a process of storing data customized by the user in the storage unit 30. In other words, the power-off process is a process of writing predetermined end information of the vehicle information in the storage unit 30 when the ignition is turned off from on. The end information includes, for example, user-customized data, integrated data, and vehicle information. As customized data, for example, there are date information, display design information, and setting information of the presence or absence of functions. As vehicle information, there are, for example, a following distance, fuel usage information, fuel consumption information and remaining fuel.

  Comparative Example 2 shows the case where the power is always off. The state in which the power supply is always off is a state in which power is not supplied from the battery 20 via the connection line 11. Also in this case, when the ignition is turned on and the operation power is turned on, the ECU 10 is starting until the power is turned off. Then, when the ignition is turned off and the operation power is turned off, the power supply is stopped, so the power off process can not be performed.

  Thus, as in Comparative Example 3, there is a processing method using the power of the instantaneous interruption prevention circuit 16. In Comparative Example 3, as in Comparative Example 2, the case where the constant power supply is off is shown. Then, when the ignition is turned off and the operation power is turned off while the ECU 10 is starting up, the power off process is performed by the residual voltage of the instantaneous interruption prevention circuit 16. However, when the residual voltage gradually decreases and falls below the microcomputer reset voltage, the power off process is forcibly terminated. Therefore, part of the power-off process is performed, and a process that is not reliable is performed.

  In the present embodiment, as in the third comparative example, the power of the instantaneous interruption prevention circuit 16 is used. When the ignition is turned off and the operation power supply is turned off, the power off process is implemented by the residual voltage of the instantaneous interruption prevention circuit 16. Then, in the power-off process, the division process in which the process of writing the end information is divided into a plurality of parts is sequentially performed over a period in which the process can be driven by the power supplied from the instantaneous loss prevention circuit 16. Therefore, the end information written by the divided processing can be treated as reliable information.

  Next, control of the specific power-off process of the ECU 10 will be described with reference to FIGS. 4 to 6. FIG. 4 is a process repeatedly executed by the ECU 10 in a short time. In step S11, it is determined whether or not the operation power supply is turned on from off. If it is turned on, the process proceeds to step S12, and if it is not turned on, the present flow ends.

  In step S12, since the operation power supply is turned on, the initial process is performed, and the process proceeds to step S13. In the initial process, necessary information is read from the storage unit 30. At this time, the information stored correctly is read. Whether or not the data is correctly stored can be determined by the presence or absence of the write completion flag. In addition, in the case of information that is not stored correctly, information that has been stored correctly recently may be used, or initial values may be used.

  In step S13, the connection state of the battery 20 is stored, and the process proceeds to step S14. The connection state of the battery 20 is constantly acquired from the power supply determination circuit 17. In step S14, a normal process that is performed when the operation power is on is performed, and this flow ends. If the state of power supply from the battery 20 changes while executing step S14, the power off process is immediately performed in the event process.

  Next, the power off process will be described. The process shown in FIG. 5 is a process that is repeatedly performed in a short time with the operating power on. In step S21, it is determined whether or not the operation power supply is turned off from on. If the operation power is turned off, the process proceeds to step S22. If the operation power is not turned off, the present flow ends.

  In step S22, it is determined whether or not there is a constant power supply. If there is no continuous power supply, the process proceeds to step 3, and if there is a continuous power supply, the process proceeds to step S28. In step S28, since there is a constant power supply, a normal power-off process is performed, and this flow is ended. The normal power-off process is performed as in the process shown in Comparative Example 1. At this time, the end information is stored in the volatile memory 31 of the storage unit 30.

  In step S23, since there is no power supply at all times, 1 is set as an initial value to the division number n in order to start the power off process when there is no power supply at all times, and the process moves to step S24. The division number n indicates that the power-off process has been subdivided into n. The power-off process is divided in advance into blocks of processes, and the divided processes are performed in a predetermined order.

  In step S24, it is determined whether the nth process, that is, the first process is completed. If completed, the process proceeds to step S25, and the process of step S24 is repeated until the process is completed. In step S25, data of the nth process, that is, the first process is stored in the non-volatile memory 32 of the storage unit 30, and the process proceeds to step S26. At this time, a flag indicating that the writing of the nth process has been completed may be written, that is, success information of the successful writing.

  In step S26, n is increased by 1 to 2 and the process proceeds to step S27. In step S27, it is determined whether or not the power off process has been completed. If it has not been completed, the process proceeds to step S29. If it has been completed, the present flow is terminated. In step S29, the nth process, that is, the second process is started, and the process proceeds to step S24.

  Therefore, when electric power is supplied from battery 20 via connection line 11 constantly, microcomputer 15 stores predetermined end information of the vehicle information as shown in step S28 when the ignition is turned off from on. Write to section 30. When the ignition is turned off from the on state, the microcomputer 15 proceeds to step S23 when the power is not supplied from the battery 20 via the connection line 11 at all times and is supplied via the operation connection line 12. Then, division processing is sequentially performed over a period in which the circuit can be driven by the power supplied from the instantaneous failure prevention circuit 16.

  Specifically, as shown in FIG. 6, when the operating power supply is turned on from off in a state where there is no power supply at all times, division processing is sequentially executed. Then, division processing is performed until the supplied power falls below the microcomputer reset voltage. When the supplied power falls below the microcomputer reset voltage, the process is forcibly terminated even during the power-off process. However, since division processing divided into processing chunks is performed, data of the division processing that has been completed can be used even if all division processing has not been completed. For example, even if step S24, step S25, step S26, step S27 and step S29 of FIG. 5 are sequentially repeated and forced termination is made during the repetition, the data stored in step S25 is reliable data.

  As described above, when the electric power is supplied from the battery 20 via the constant connection line 11, the vehicle control device of the present embodiment terminates predetermined ones of the vehicle information when the ignition changes from on to off. Information is written to the storage unit 30. Since power is normally supplied from the battery 20 via the connection line 11, there is no need to consider the power for writing the end information. However, when power is not supplied from the battery 20 via the constant connection line 11 and power is supplied via the operation connection line 12, no power is supplied from the battery 20 when the ignition is turned off. , There is a possibility that the power for writing the end information is insufficient. Therefore, division processing in which the process of writing the end information is divided into a plurality of parts is sequentially performed over a period in which driving can be performed by the power supplied from the storage unit of the short interruption prevention circuit 16. In the division process, since a part of the end information is written in the storage unit 30, the information written in the ended division process can be used as valid information next time. As a result, more reliable information can be written in the storage unit 30 without having time to write all the end information.

  In other words, in the present embodiment, the power-off process is subdivided, and each time the subdivided process is completed, it is stored how far the process is completed. As a result, when the power is turned on next time, it is possible to determine how far the processing has been completed when the power was turned off last time, and it is possible to judge and use data that can be trusted. Also, it may be stored whether or not stored data is not stored at the end of processing, but is data stored normally.

  Further, in the present embodiment, an instantaneous interruption prevention circuit 16 for preventing an instantaneous interruption is provided. Then, when the power supplied from battery 20 is momentarily interrupted, instantaneous interruption prevention circuit 16 supplies the electric power of the storage unit to microcomputer power supply 19. As a result, even if the power from the battery 20 is momentarily interrupted, the power can be continuously supplied to the microcomputer 15. Further, the power off process can be performed using the power of the power storage unit included in the short interruption prevention circuit 16.

  Furthermore, in the present embodiment, in the division processing, part of the end information is written to the storage unit 30, and success information indicating that the writing is completed is also written. By this, when the initial processing is performed next time, it is possible to determine which information can be trusted. In other words, the information in which the success information is written is reliable information. By reading only such information, it is possible to suppress the use of the information whose writing has failed.

  Further, in the present embodiment, the storage unit 30 includes the non-volatile memory 32 and the volatile memory 31 and writes end information to the volatile memory 31 in the case of normal power-off processing, and non-volatile when there is no power supply at all times. End information is written to the sex memory 32. Therefore, the number of times of writing to the nonvolatile memory 32 can be reduced by writing also to the volatile memory 31 rather than the process of writing to the nonvolatile memory 32 all the time. Further, since the non-volatile memory 32 is limited in storage area, it is preferable to select data to be stored. Selection is prioritized by the importance of data in the system and the processing time for each data.

Furthermore, in the present embodiment, the order of the end information to be written by the division process is preferably the order in which the priority to be set is high. For example, if the priority is set based on the importance, it is possible to increase the probability that high importance data can be stored. When the priority is set in the ascending order of the processing time, the number of data to be stored can be increased by processing the one with the short processing time first. The priority may be system dependent or user set. Also, the priority may be higher priority of user customization data. In addition, the priority of information related to laws and regulations may be increased, such as odo information, which is integrated data of travel distance.

(Other embodiments)
The preferred embodiments of the present invention have been described above. However, the present invention is not limited to the above-described embodiments, and can be variously modified and implemented without departing from the spirit of the present invention.

  The structures of the aforementioned embodiments are merely illustrative, and the scope of the present invention is not limited to the scope of these descriptions. The scope of the present invention is shown by the statement of a claim, and also includes the meaning of a statement of a claim, an equivalent meaning, and all the changes within the range.

  In the first embodiment described above, the storage unit constitutes the instantaneous interruption prevention circuit 16, but the present invention is not limited to such a configuration, and a dedicated storage unit for power off processing may be provided.

  Although the flag is used as the success information in the first embodiment described above, the present invention is not limited to the flag, and the writing time may be used. If there is a write time, it can be determined that the write process has ended normally. In addition, power-off processing may be performed without writing success information.

  Although the storage unit 30 includes the non-volatile memory 32 and the volatile memory 31 in the first embodiment described above, the present invention is not limited to such a configuration. The assignment of information to be stored may also be changed.

  In the first embodiment described above, the functions implemented by the ECU 10 may be implemented by hardware and software different from those described above, or a combination thereof. The ECU 10 may communicate with, for example, another ECU 10, and the other ECU 10 may execute part or all of the processing. When the ECU 10 is implemented by an electronic circuit, it can be implemented by a digital circuit including a number of logic circuits or an analog circuit.

11 ... Always connected line 12 ... Operated connection line 13 ... Fuse 14 ... Switch 15 ... Microcomputer (control unit) 15 a ... Terminal for voltage monitoring 16 ... Momentary interruption prevention circuit (power storage unit, momentary interruption prevention unit)
17 ... Constant power supply determination circuit (battery detection unit)
18 Operation power supply determination circuit (ignition detection unit) 19 Microcomputer power supply 20 Battery 30 Storage unit 31 Volatile memory 32 Nonvolatile memory

Claims (5)

A control device for a vehicle connected to a battery (20) via a constant connection line (11) and an operation connection line (12) and driven by power supplied via either the constant connection line or the operation connection line And
A fuse (13) is provided on the constant connection line,
The actuation connection line is de-energized when the ignition of the vehicle is turned off, and is energized when the ignition is turned on,
A storage unit (16) for storing power supplied from the battery;
A storage unit (30) in which vehicle information related to control and travel of the vehicle is stored;
An ignition detection unit (18) for detecting the on / off state of the ignition;
A battery detection unit (17) for detecting a state of power supplied from the battery via the constant connection line;
A control unit (15) which is driven by the power supplied from the battery, writes the vehicle information to the storage unit, and reads the vehicle information from the storage unit;
The control unit
When electric power is supplied from the battery via the constant connection line by the detection of the battery detection unit, when the ignition is turned off from the on state by the detection of the ignition detection unit, a predetermined one of the vehicle information is selected. Write end information to the storage unit;
When power is not supplied from the battery via the constant connection line due to detection by the battery detection unit and power is supplied via the operation connection line, the ignition is turned on by detection by the ignition detection unit When the power supply is turned off, division processing in which the processing of writing the end information is divided into a plurality of divisions is sequentially performed over a period in which the storage unit can be driven by the power supplied from the storage unit.
The control apparatus for vehicles which writes a part of information on end information into the storage part in each division processing. It further includes an instantaneous interruption prevention unit (16) for preventing an instantaneous interruption,
The power storage unit constitutes the instantaneous interruption prevention unit,
The control apparatus for a vehicle according to claim 1, wherein the momentary loss prevention unit supplies the power of the power storage unit to the control unit when the power supplied from the battery is momentarily interrupted.   The vehicle control device according to claim 1 or 2, wherein in the division processing, a part of the end information is written in the storage unit, and success information indicating that the writing is completed is also written. Wherein the storage unit, and a volatile memory (3 1) and non-volatile memory (32),
The control unit
If the power through the constant connection line from the battery is supplied, when the ignition is turned off from on, writes the end information before Ki揮-volatile memory,
When the power is not supplied from the battery via the permanent connection line and the power is supplied via the operation connection line, the power is supplied from the storage unit when the ignition is turned off from on The vehicle control device according to any one of claims 1 to 3, wherein the end information is written to the non-volatile memory by the division process during a period in which power can be driven.   The vehicle control device according to any one of claims 1 to 4, wherein the order of the end information written by the division process is an order of high priority to be set.

Images