JP6593976B2 - Control device and driving method - Google Patents

Description

  The present invention relates to a control device, particularly a transmission control device, including an arithmetic unit and a device for supplying voltage to the arithmetic unit and controlling the system state. The control device has a power conditioning module that is connected or connectable to an energy store on the one hand and, on the other hand, connected to the computing unit, for supplying voltage to the computing unit.

  Furthermore, the invention relates to a method for driving a corresponding control device.

  Control devices and methods for driving control devices according to the form mentioned at the outset are known in the prior art. In order to improve the operation reliability, a device mounted with a so-called system base chip (SBC) useful for supplying voltage to the arithmetic unit and controlling the system state is used. In doing so, the device on the one hand monitors the system status of the computing unit and on the other hand the voltage supply it provides for the computing unit. For this purpose, the device is on the one hand connected to an energy store and on the other hand always connected to the arithmetic unit via at least one line for communication and / or voltage supply.

  With regard to operational reliability, it is inconvenient for the system base chip itself to monitor the voltage supply. If there is an error in the operation of the system base chip, it cannot be guaranteed that an erroneous voltage supply will be detected. Similarly, it cannot be guaranteed that an error in the arithmetic unit or an abnormal system state is reliably detected.

  The control device according to the invention with the features of claim 1 has the advantage that the operational reliability is improved compared to known solutions. In this regard, according to the invention, the device is a safety device for monitoring the voltage supply by the voltage regulation module and the system state of the arithmetic unit, the safety device being configured to stop and / or activate the control unit. It is envisaged to have a device. In accordance with the present invention, in addition to the voltage regulation module, a safety device is provided that monitors the voltage supply and the arithmetic unit. Thereby, the functions in the control device relating to the voltage supply and its inspection are distributed separately from one another to different components or groups of components. The safety device is then connected between the voltage regulation module and the arithmetic unit. The safety device checks the voltage supply by the voltage regulation module, so that the monitoring of the voltage supply is carried out outside the voltage regulation module and independent of the voltage regulation module. Thereby, the operation reliability of the control device is improved in a simple and inexpensive form as a whole.

  According to a preferred development of the invention, it is envisaged that the safety device is configured as an integrated circuit. Integrated circuits are the cheapest solution for presenting a safety device with the desired function. The integrated circuit may have one or more comparators, for example, for voltage supply monitoring. Preferably, the safety device is particularly configured to evaluate the data of the computing unit in order to control the system state of the computing unit. Particularly preferably, the safety device is also configured to monitor the voltage supply by the voltage regulation module.

  According to a preferred embodiment of the present invention, it is envisaged that the integrated circuit has a further separate arithmetic unit. This further further computing unit is configured to perform the above functions. At that time, the arithmetic unit is incorporated in the integrated circuit. With the integrated circuit, it is possible in a simple and cheapest way to configure further further arithmetic units to be resistant to battery voltage. Alternatively, the further separate arithmetic unit may be monolithically integrated into a separate chip configured to be resistant to battery voltage.

  According to a particularly preferred development of the invention, it is envisaged that the safety device is connected to the arithmetic unit through a reset path. Conventionally, the voltage regulation module is normally connected to the arithmetic unit through a reset path. However, in this embodiment, the reset path is rather assigned to a safety device. This further improves the operational reliability of the control device, and an independent safety device gains control of the system state of the computing unit.

  According to an advantageous development of the invention, at least one switchgear for forming or eliminating electrical connection lines, in particular voltage supply lines and / or signal lines, is connected to the safety device and is moved by the safety device. It is envisaged that it is provided as at least one unit. Thus, in addition to the arithmetic unit and the device for system state control and voltage supply, the control device has at least one useful for connecting or disconnecting the device that can be driven by the control device from the control device. Has a switchgear. In doing so, the switchgear is preferably assigned to a signal line and / or a voltage supply line of the control device. The safety device is connected to the switching device, and when an error occurs, the safety device can directly stop the switching device. For this purpose, a so-called stop path is provided between the safety device and the switchgear.

  According to an advantageous development of the invention, it is envisaged that at least one control unit is provided for an actuator that is moved by a control device and that is connected to the safety device and can be stopped by the safety device. The The at least one control unit is a further separate unit of the control unit. Furthermore, the at least one control unit is preferably connected to the safety device through a stop path, and in the event of an error, the safety device prevents further actuation of the actuator and safeguards the system with the control device. It is possible to stop the control unit directly in order to move to a new state.

  Preferably, the voltage regulation module is envisaged to be connected to or connectable to an energy store, preferably a rechargeable battery. By means of the energy reservoir, the voltage regulation module obtains the energy supply it needs to provide the supply voltage for the computing unit. Preferably, the safety device is likewise supplied with an operating voltage by the voltage regulation module to perform the required task / function.

  Particularly preferably, however, it is envisaged that the safety device is connected to or connectable to the energy store without depending on the voltage regulation module. Due to the independent connection to the energy store, the safety device as a whole can be driven independently of the voltage regulation module, which further improves the operational reliability of the control device.

  According to an advantageous development, it is envisaged that the control device has an activation device connected to the safety device and / or the voltage regulation module. The activation device is activated or activated by an external device and activates the voltage regulation module and / or the safety device as needed. For example, when a trigger command is issued by an external device, the activation device controls the safety device and / or the voltage regulation module so that the supply voltage is set and the arithmetic unit is driven. At that time, the safety device is preferably further connected to the arithmetic unit via a reset path. This makes it possible to start the arithmetic unit on the one hand, if necessary, using a safety device, and on the other hand to bring the arithmetic unit to a safe state when a system state error is detected. It is possible to return.

  The method according to the invention with the features of claim 12 is such that the device monitors the voltage supply by the voltage regulation module and the system state of the arithmetic unit and stops at least one unit of the control device when an error condition occurs. It is better because it is assigned to a safety device. This obtains the advantages already mentioned. Further further advantages and embodiments of the method will be apparent from the previous description.

In the following, the present invention will be explained in more detail using the drawings.
1 shows a circuit topology of a control device according to the prior art. 2 shows a circuit topology of a control device according to an advantageous embodiment; Fig. 4 shows a circuit topology of a control device according to yet another advantageous embodiment.

  FIG. 1 shows a simplified circuit topology of a control device 1 configured, for example, as a transmission control device 1.

  In this regard, the control device 1 has an arithmetic unit 2 that outputs a control command in accordance with a switching request. In order to output a control command, the arithmetic unit 2 is connected to the control unit 3 according to the present embodiment, which receives the control command of the arithmetic unit 2 and is used for the actuator 4 of the transmission. Convert to control instruction. The actuator 4 is assigned to the transmission and is connected to the control device 1 via a corresponding line. The actuator 4 may be, for example, a shift actuator that operates the shift linkage of the transmission in response to a command from the control unit 3 or the arithmetic unit 2.

  The control device 1 further comprises an opening / closing device 5 that serves to supply a voltage to the actuator 4. In order to supply voltage to the actuator 4, the switching device 5 is connected to or connectable to the actuator 4 by a voltage supply line. The control device 1 is further connected or connectable to an electrical energy storage 6, by which an operating voltage can be supplied to the actuator 4 via the switchgear 5 and the arithmetic unit 2.

  In order to supply an operating voltage to the actuator 4 via the switchgear 5 and the arithmetic unit 2, the arithmetic unit 2 is connected to the energy storage 6 through a voltage regulation module 7 configured as a system base chip 8. The voltage adjustment module 7 supplies a necessary operating voltage to the arithmetic unit 2 via the voltage supply line 9. At the same time, the system base chip 8 is connected to the arithmetic unit 2 via the signal line 10, and the system state of the arithmetic unit 2 is continuously monitored via the signal line 10. Furthermore, a so-called reset path 11 is provided, and this reset path 11 may be a separate body or may be incorporated in the voltage supply line 9 and / or the monitoring line 10, and this reset path 11 allows the system to be The base chip 8 can move the arithmetic unit 2 to a safer state by restarting, for example.

  Furthermore, the system base chip 8 and the arithmetic unit 2 are connected to the switchgear 5 via the stop paths 12 or 13, respectively. Therefore, the arithmetic unit 2 and the system base chip 8 can be connected to the energy storage device when necessary. In order to isolate the actuator 4 from the voltage supply by 6, the switchgear 5 can be operated.

  Furthermore, the system base chip 8 is assigned an activation device 14 that can be activated from the outside, and this activation device 14 supplies an operation voltage to the arithmetic unit 2 and drives the arithmetic unit 2 in particular. The voltage adjustment module 7 of the system base chip 8 is started.

  Conventionally, in such a control device 1, the voltage supply to the arithmetic unit 2 is monitored by the system base chip 8 or the voltage adjustment module itself. The voltage adjustment module 7 or the system base chip 8 constitutes a device for supplying voltage to the arithmetic unit 2 and controlling the system state. However, if there is an error in the operation of the voltage adjustment module 7, it is not guaranteed that the voltage monitoring will function without error.

  With reference to FIGS. 2 and 3, a development of a controller with higher operational reliability is exemplarily presented. Insofar as the above description is referred to, elements already described in FIG. In the following, basically only the differences will be mentioned.

  FIG. 2 shows a first embodiment of an advantageous development of the control device 1. Unlike the prior art, a safety device 15 is additionally provided that includes an integrated circuit (IC) and / or a computing unit. The safety device 15 is connected between the arithmetic unit 2 and the voltage adjustment module 7 or the system base chip 8. The safety device 15 is connected to the voltage supply line 9 and monitors the supply voltage provided by the voltage adjustment module 7. At the same time, the safety device 15 is connected to the arithmetic unit 2 through the communication line 10 for system state control of the arithmetic unit 2. Optionally, further separate communication lines 16 may be provided between the safety device 15 and the system base chip 8 to allow redundant monitoring. Stop paths 12 and 13 are no longer assigned to the system base chip 8 but to the safety device 15. Further, as indicated by a dotted line 17, a direct connection line may be provided between the arithmetic unit 2 and the system base chip 8.

  It is envisaged that, unlike the prior art, the supply voltage provided by the voltage regulation module 7 is monitored by a separate safety device 15 that also controls the system state of the computing unit 2. As a result, the voltage supply monitoring is carried out independently of the voltage supply, which increases the safety class of the control device 1 in a simple and inexpensive manner. Due to this simple development of the control device 1, the control device 1 can also be used in systems that require a higher safety level than before.

  FIG. 3 shows an alternative embodiment in which the safety device 15 is further connected to the energy store 6 without relying on the system base chip 8. With the embodiment of FIG. 3, the independent drive of the safety device 15 is consistently ensured. Furthermore, according to the embodiment of FIG. 3, it is envisaged that the activation device 14 is arbitrarily assigned to the safety device 15 as indicated by the dotted line 18 rather than to the system base chip 8. In this case, a further further activation / deactivation path 19 is preferably provided between the safety device 15 and the system base chip 8 or the voltage regulation module 7. If the activation device 14 is activated, the control device 1 can be started by the safety device 15. Alternatively, the safety device 15 may be activated by the system base chip 8 or the voltage regulation module 7 of the system base chip 8. Optionally, as shown by the exemplary module 20, the voltage supply line 9 may be connected with further peripheral elements 20 of the control device 1.

The system base chip 8 is designed to transmit a specified voltage and a specified current for the arithmetic unit 2 and the peripheral element 20 and to have an activation / deactivation input. Reset monitoring and low voltage monitoring are not well envisioned. Overall, therefore, a particularly simple solution for improving the safety of the control device 1 is provided.

Claims (11)

An arithmetic unit (2);
An apparatus for supplying voltage to the arithmetic unit (2) and controlling the system state;
A control device (1) comprising:
The device comprises a voltage regulation module (7), which is connected or connected to an energy storage (6) on the one hand for supplying voltage to the arithmetic unit (2) On the other hand, in the control device (1) connected to the arithmetic unit (2),
The device is a safety device (15) for monitoring the voltage supply by the voltage regulation module (7) and the system state of the arithmetic unit (2), comprising at least one unit of the control device (1). configured to stop and / or operating the have a safety device (15),
Said safety device (15) does not depend on the voltage regulator module (7), characterized by connected or connectable der Rukoto to the energy reservoir (6), the control unit (1).   The control device according to claim 1, wherein the safety device is configured as an integrated circuit.   The control device according to claim 2, wherein the integrated circuit further includes another arithmetic unit.   The control device according to any one of claims 1 to 3, characterized in that the safety device (15) is connected to the arithmetic unit (2) through a reset path (11).   At least one switchgear (5) for forming or eliminating an electrical connection line provided as the at least one unit connected to the safety device (15) and moved by the safety device (15) The control apparatus according to any one of claims 1 to 4, wherein   The control device according to claim 5, wherein the electrical connection line is a voltage supply line and / or a signal line.   At least one control unit for the actuator (4) which is moved by the control device (1) and is connected to the safety device (15) and can be stopped by the safety device (15) The control device according to claim 1, comprising:   The control device according to any one of claims 1 to 7, characterized in that the voltage regulation module (7) is connected to or connectable to an energy store (6). It said safety device, comprising a connected actuating device (14) and (5) and / or the voltage regulator module (7), the control device according to any one of claims 1-8.   The control device according to claim 1, wherein the control device is a transmission control device. A method for driving the control device (1) according to any one of claims 1 to 10 , comprising a device for voltage supply and system state control to the arithmetic unit (2).
In the method, the apparatus supplies an operating voltage to the computing unit (2) using a voltage regulation module (7) and is connected to an energy store (6) for supplying the operating voltage.
The device monitors the voltage supply by the voltage regulation module (7) and the system state of the arithmetic unit (2), and at least one unit of the control device (1) when an error state occurs safety device (15) is assigned to stop,
It said safety device (15) does not depend on the voltage regulator module (7), characterized by connected or connectable der Rukoto to the energy reservoir (6), the method.

Images