JPH0697011B2 - Control unit inspection device - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION <Industrial Application Field> The present invention is used to check the suitability of the entire software when a part of the software (program and data) of the control unit for controlling the in-vehicle electronic device is changed. Control unit inspection device.

<Prior Art> In an engine control device for an automobile (for example, an electronically controlled fuel injection device) or an automatic transmission control device, a control unit with a built-in microcomputer converts an input signal from various sensors and various data according to a program. Based on the calculation processing, the output to various electronic devices (for example, fuel injection valves) is controlled.

When the software (program and data) of the control unit of such a control device is created, it is necessary to check (debug) whether or not it operates without error according to the control specifications.

In this case, it is common to change the input signal according to the control specifications by an inspection device (checker) and check whether or not an output signal corresponding to it is output (Japanese Utility Model Publication No. 62-187347, Japanese Utility Model Publication). (See JP 63-135401).

<Problems to be Solved by the Invention> However, in such a conventional inspection apparatus,
When a part of the software is changed, the changed part can be checked by the above method, but there is a problem that it cannot be verified whether or not the unmodified part is operating as before.

Further, when comparing two control units by giving an input corresponding to a transient operation state, there is a problem that the output of the control unit may differ due to the difference in sampling timing even if the program operation is exactly the same. There was also.

In view of such a conventional problem, the present invention provides a control unit inspection device that can easily and accurately check the entire software after the change when the software of the control unit for controlling the in-vehicle electronic device is partially changed. The purpose is to provide.

<Means for Solving the Problems> Therefore, according to the present invention, it is possible to set two control units for controlling in-vehicle electronic equipment, one before change and one after change, and the same control unit can be used for these two control units. It is provided with a simulated input applying device for applying a reset signal to those microcomputers at a timing and then for providing a simulated input corresponding to a transient operation state, and a comparison / determination device for comparing and comparing the outputs from the respective control units at this time. A control unit inspection device is provided.

<Operation> In the control unit inspection apparatus described above, first, two control units, one before software change and one after software change, are set. The pre-change version mentioned here is one that has already been used and has a proven track record.

Next, the two simulated control input devices simultaneously apply the same simulated input to the two control units to operate them.

During this operation, the comparison and determination device compares and determines the output from each control unit.

Here, regarding the changed portion, since a specific difference determined by the specification of the change should occur in the output, it is checked whether or not the difference is appropriate. For the part that has not been changed, there should be no difference in output, so check whether there is a difference.

With these, both the changed part and the unmodified part can be checked.

In addition, when comparing two control units,
With the input corresponding to the transient operation state, the difference in sampling timing causes the output of the control unit to be different even if the program operation is exactly the same. Therefore, when giving the simulated input, the two control units have the same timing. After giving a reset signal to these microcomputers, a simulated input corresponding to a transient operating state is given and the outputs at this time are compared and judged. That is, the respective microcomputers are reset at the same time to synchronize the sampling timing, and then the inspection in the transient operation state is performed.

<Example> An example of the present invention will be described below. In the control unit of the electronically controlled fuel injection device for an engine, a valve opening drive pulse signal (hereinafter referred to as a fuel injection pulse) synchronized with the engine rotation is output to an electromagnetic fuel injection valve, and the fuel injection amount is determined by the pulse width. A description will be given of a case in which the acceleration response is improved by controlling the engine speed and outputting a valve opening drive pulse signal (hereinafter referred to as an interrupt injection pulse) that is asynchronous with the engine rotation at the start of acceleration.

FIG. 1 shows an outline of the inspection apparatus, and two control units 1A and 1B are set in a checker 3 connected to a personal computer 2.

The control unit 1A, on the other hand, is a unit before software change and is referred to as a master unit which has already been used and has a proven software.

The other control unit 1B is a unit under development after software modification, and this is the inspection target.

A signal generator 4 is connected to the input side of each control unit 1A, 1B, and a simulated input is given by this. The simulated input creates appropriate steady-state operation mode data and transient operation mode data, gives them to the personal computer 2, and causes the signal generator 4 to output a corresponding signal based on the signal from the personal computer 2. . The mode data is specifically, the reference signal REF for each reference crank angle output from the crank angle sensor in synchronization with the engine rotation, the unit signal POS for each unit crank angle, the intake air flow rate Q, the water temperature Tw. , Throttle valve opening TV
Time series data such as O and battery voltage V _B.

Here, when the transient operation mode data, for example, the mode data in which the throttle valve opening TVO corresponding to acceleration rapidly increases with time, as shown in FIG. 2, prior to that, each control unit 1A , 1B is given a reset signal at the same timing. Note that each control unit 1A, since the inside 1B are provided with a reset circuit for outputting a reset signal to the microcomputer when low battery voltage V _B, temporarily lowering the battery voltage V _B as a simulated input Gives a reset signal. This reset signal is given to synchronize the sampling timing.

Therefore, the personal computer 2 and the signal generator 4 correspond to a simulated input application device.

Further, a feedback signal is obtained from a part of the output of each control unit 1A, 1B via each feedback model 5A, 5B, and this is given to the input side of each control unit 1A, 1B. This is, for example, a substitute for the air-fuel ratio detection signal from the oxygen sensor.
Calculated from the data of fuel injection amount, intake air flow rate, engine speed, etc. obtained from A and 1B and given.

Here, each of the control units 1A and 1B calculates a fuel injection pulse (pulse width) Ti to the fuel injection valve by the following equation for fuel injection control according to the respective programs.

Ti = Tp ・ COEF ・ LAMBDA + Ts where Tp is the basic pulse width and Tp = K ・ Q / N. K
Is a constant, Q is the intake air flow rate, and N is the engine speed.
The engine speed N is calculated from the cycle of the reference signal REF and the like.

COEF is various correction coefficients based on the water temperature Tw, throttle valve opening change amount ΔTVO, LAMBDA is an air-fuel ratio feedback correction coefficient based on the air-fuel ratio detection signal, and Ts is a voltage correction amount.

Then, each control unit 1A, 1B outputs the fuel injection pulse Ti at a predetermined timing based on the reference signal REF from the crank angle sensor.

For interrupt injection control during acceleration, the throttle valve opening TVO is sampled at every predetermined time, and the acceleration judgment is made from the change amount ΔTVO of the throttle valve opening. It outputs the interrupt injection pulse Tint with the pulse width.

Actual loads 6A, 6B such as fuel injection valves are mounted on the output side of each control unit 1A, 1B. This is necessary when evaluating the back electromotive force and considering its effect.

The fuel injection pulse Ti or the interrupt injection pulse Tint taken out directly from the output side of each control unit 1A, 1B or via the actual load 6A, 6B are both input to the comparison and determination device 7, and the difference between them is compared. To be judged. Note that only the comparison determination of the interrupt injection pulse Tint in the transient operation mode will be described below.

The comparison / determination device 7 has measuring units 8A, 8B for measuring the output state of the interrupt injection pulse Tint from each control unit 1A, 1B as shown in FIG.

Each measuring unit 8A, 8B measures at least one of the following.

Reference time (eg reference signal RE from crank angle sensor
It measures the elapsed time from the point of generation of F) to the start of output of the interrupt injection pulse Tint.

Measure the pulse width of the interrupt ejection pulse Tint.

The measurement data from these measuring units 8A and 8B are input to the difference calculation circuit 9 in real time, and the difference between them is calculated. Then, the difference is input to the comparison circuit 10 and compared with a predetermined comparison value.

Then, when the difference> the comparison value, an output is issued from the comparison circuit 10, and this output becomes a latch signal and is sent to the ring memory (loop memory) 12 in the large capacity memory 11.

The large-capacity memory 11 is connected to the control units 1A and 1B, and receives the program flow (data on the address bus and data bus). When the latch signal is input to the ring memory 12, the program flow before and after that (data on the address bus and data bus)
Is temporarily stored. When new data enters the ring memory 12, the oldest data is discarded.

The data in the ring memory 12 is, for example, visualized (graphically processed) by the processing device 13, sent to the personal computer 2, and displayed on the display by an appropriate method.

In this way, regarding the changed part of the software, there should be a certain difference in the output state that is determined by the specification of the change,
Since there should be no difference in the output state for the part that has not changed, compare the difference with a predetermined comparison value,
If the difference> the comparison value, it is determined that the software has an abnormality, and thus both the changed portion and the unchanged portion can be checked. In addition, at the time of abnormality determination, the flow of the program before and after that time can be temporarily stored to facilitate finding / correcting the abnormal portion.

When comparing the two control units 1A and 1B, the throttle valve opening TV that simply corresponds to the transient operating state
When an O change input is given, as shown in FIG. 4, even if the program operation is exactly the same, the acceleration judgment timing is different and the ΔTVO at that time is different due to the difference ΔS in each sampling timing. Pulse T
Since there is a difference in int output timing and pulse width, when applying such a simulated input, as shown in FIG. 2, the two control units 1A and 1B have the same timing with respect to their microcomputers. A reset signal is given to synchronize the sampling timing, and then an input for changing the throttle valve opening TVO is given, and the output of the interrupt injection pulse Tint at this time is compared and judged. As a result, accurate inspection can be performed without being affected by the sampling timing.

<Effect of the Invention> As described above, according to the present invention, when a part of the software of the control unit is changed, when the same simulated input is given to the existing software before the change. By comparing and determining the outputs, it is possible to easily and surely check (debug) both the changed portion and the non-changed portion, and it is possible to obtain the effect of significantly improving the reliability.

Also, when applying an input corresponding to the transient operating state,
Since the reset signals for the microcomputers are given to the two control units at the same timing to synchronize the sampling timings, the simulated input corresponding to the transient operating state is given, and the outputs at this time are compared and determined. Accurate inspection is possible without being affected by the deviation of the sampling timing.

[Brief description of drawings]

FIG. 1 is a schematic view of the entire inspection apparatus showing an embodiment of the present invention, FIG. 2 is a timing chart showing simulated input and output at that time, and FIG. 3 is a part of the comparison / determination apparatus in FIG. FIG. 4 is a timing chart showing a simulated input and an output at that time in the related art. 1A, 1B ... Control unit, 2 ... Personal computer, 3 ... Checker, 4 ... Signal generator, 6A, 6B ... Actual load, 7 ... Comparison judgment device, 8A, 8B ...
… Measurement section, 9 …… Difference calculation circuit, 10 …… Comparison circuit, 11 ……
Large memory, 12 …… Ring memory

Claims (1)

[Claims] 1. A control unit inspection device for checking the operation of a control unit for controlling in-vehicle electronic equipment after software change, wherein two control units can be set, one before change and one after change.
A comparison is made between the output from each control unit and a simulated input application device that provides a reset signal to these two control units at the same timing and then provides a simulated input corresponding to a transient operating state. A control unit inspection device comprising a comparison and determination device.