JPH09263215A - Prime mover control device with burglary preventive function - Google Patents

Abstract

PROBLEM TO BE SOLVED: To allow to exercise a burglary preventive function adequately, even though a backup control is carried out, in an engine control device having a burglary preventive function. SOLUTION: A second microcomputer 200 outputs an injection timing signal and an ignition timing signal to carry out the engine control, depending on the sensor signals from a rotating angle sensor 3 and the like. A first microcomputer 100 has an injection block 111 and an ignition block 112, and when the injection timing signal and the ignition timing signal are normal, it outputs those signals to the first and the second driving circuits 300 and 400, and when they are abnormal, it outputs a backup signal. The CPU 101 of the first microcomputer 100 carries out a burglary deciding, and when a burglary is decided, it turns off the switches 113 to 115, and the output to the first and the second driving circuits 300 and 400 is stopped. Consequently, even when the second microcomputer 200 is broken intentionally and a backup control is carried out, the engine control is prohibited.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a motor control device applied to a moving body such as a vehicle and having a function of preventing theft of the vehicle.

[0002]

In an engine control device having an anti-theft function, a personal identification code stored in the vehicle and a key (start instruction member for instructing start of the engine) stored in the vehicle are provided at the start of operation of the vehicle. It collates with the stored secret code, and when the collation result is coincident, the engine control signal (ignition timing control signal, fuel injection signal) is allowed to be output so that the engine control can be performed, and when the collation result does not coincide. , There is a system that prohibits engine control signal output so that engine control cannot be performed.

There is also an engine control device provided with a backup control circuit for performing backup control of the engine when the program goes out of control due to a broken device or the like and the engine control signal becomes abnormal. Therefore, when the above-mentioned backup control circuit is provided in an engine control device having an anti-theft function, the engine is started by the operation of the backup control circuit if the engine control device is intentionally broken, and the anti-theft function can be achieved. The problem of disappearing occurs.

The present invention has been made in view of the above problems, and it is an object of the present invention to enable a motor control device having an antitheft function to properly exhibit the antitheft function even if backup control is performed.

[0005]

In order to achieve the above object, in the invention described in claims 1 to 5, the personal identification code from the user side is collated with the pre-stored personal identification code, and the collation result is Allows control of the prime mover when they match, prohibits control of the prime mover when there is a mismatch or no match, and
Even during backup control, it is characterized in that the backup control is permitted when the collation results match, and the backup control is prohibited when the collation results do not match.

Therefore, even if the normal control of the prime mover is intentionally disabled to perform the backup control, the backup control is prohibited due to the mismatch of the collation results. Therefore, the theft is prevented even in such a case. be able to.

[0007]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments in which the present invention is applied to an engine control device for a vehicle will be described below. In FIG. 1, the engine control device (engine control ECU) is
It has two microcomputers (hereinafter, simply referred to as microcomputers) 100 and 200. First microcomputer 10
0 has a theft determination function and a backup control function, and includes a CPU 101, a RAM 102, and a ROM 10.
3, input / output buffer 104 and the like. Second
The microcomputer 200 of the
It is composed of a U201, a RAM202, a ROM203, an input / output buffer 204 and the like.

In the first microcomputer 100, the sensor signals from the cylinder-by-cylinder sensor 2 and the rotation angle sensor 3 as the sensor means are input through the filters 105 and 106 and waveform-shaped by the waveform-shaping circuit 107. Further, sensor signals such as water temperature, intake air temperature, and air flow meter are input via a multiplexer (MPX) 108 and converted into digital signals by an A / D converter 109. Further, switch signals such as idle SW and air conditioner (A / C) SW are input via the input buffer 110.

CPU in the first microcomputer 100
101 is an ignition switch (not shown) (hereinafter,
When the IG switch) is turned on, power is supplied from the on-vehicle battery to activate the battery. Then, the amplifier 6 is controlled so that transmission / reception is performed between the Annate 5 and the key 4, and the secret code of the key 4 is input from the amplifier 6 to perform EE (not shown)
PROM (PIN code storage means for storing PIN code)
It matches with the PIN code stored in. The engine control is permitted when the collation results match, and the engine control is prohibited when the collation results do not match.

CPU 20 in the second microcomputer 200
1 receives a waveform-shaped signal such as a cylinder discrimination signal and a rotation angle signal via the input / output buffer 204, calculates an ignition timing and an injection timing, and outputs an ignition timing signal and an injection timing signal. The first microcomputer 100 uses the injection timing signal,
It has an injection block 111 and an ignition block 112 as a backup control circuit that outputs an ignition timing signal to the first and second drive circuits 300 and 400.

The jetting block 111 is the second microcomputer 2
When the injection timing signal output from 00 is a normal (appropriate) signal, the injection timing signal is output, and when it is an abnormal signal, the injection timing signal created by the fixed injection circuit 111a is output. The ignition block 112 outputs the ignition timing signal when the ignition timing signal output from the second microcomputer 200 is a normal signal, and the ignition timing signal generated by the hard ignition circuit 112a when the ignition timing signal is an abnormal signal. Is output.

It should be noted that when the power supply voltage of the second microcomputer 200 is lowered, the second microcomputer 200 is broken, and the program goes out of control, or when the injection timing signal line and the ignition timing signal line are abnormal, The injection timing signal and the ignition timing signal from the second microcomputer 200 become abnormal signals. The fixed injection circuit 111a and the hard ignition circuit 112a use an injection timing signal and an ignition timing signal (backup control) necessary for operating the engine to a minimum based on the cylinder discrimination signal and the rotation angle signal that are waveform-shaped by the waveform shaping circuit 107. A backup circuit for creating a signal), which is a well-known backup circuit composed of hardware.

The fixed injection circuit 111a and the hard ignition circuit 112a are constructed so that they can operate at a voltage lower than the operating voltage of the second microcomputer 200. The backup control signal can be output even when the injection timing signal and the ignition timing signal become abnormal. The first drive circuit 300 drives the injector 7 by the injection timing signal from the injection block 111. Second drive circuit 4
00 drives the igniter 8 by the ignition timing signal from the ignition block 112. The injector 7 and the igniter 8 form a part of the engine.

In the first microcomputer 100, the first microcomputer 100 is provided between the waveform shaping circuit 107 and the input / output buffer 104 for turning on / off (that is, permitting / not permitting) transmission of a signal from the waveform shaping circuit 107. Switch 113 is provided. Further, a second switch 114 for turning on / off the sending of a signal from the injection block 111 is provided between the injection block 111 and the first drive circuit 300. Further, between the ignition block 112 and the second drive circuit 400, a third switch 115 for turning on / off transmission of a signal from the ignition block 112 is provided.

CPU 10 in the first microcomputer 100
1 indicates the first to third switches 1 when the collation result of the secret code from the key 4 and the pre-stored secret code is coincident.
13 to 115 are turned on, engine control is permitted by the injection timing signal and the ignition timing signal from the second microcomputer 200, and when the verification results do not match, the first to third switches 113 to 115 are turned off, and the engine is turned off. Prohibit control.

In the above configuration, the operation is performed by the CPU 1
The control processing executed by 01 and 201 will be described. When the key 4 is inserted into the key cylinder at the start of operation of this vehicle and the key 4 is rotated to turn on an IG switch (not shown), power is supplied from the vehicle-mounted battery to the CP.
The electric system of each part including U101 and U201 is in an operating state.

CPU 10 in the first microcomputer 100
In step 1, the theft determination process shown in FIG. 2 is executed. First, the personal identification code is fetched from the key 4 via the amplifier 6 (step S100), and the retrieved personal identification code is compared with the pre-stored personal identification code (step S1).
01). When the two personal identification codes match, the first to third switches 113 to 115 are turned on (step S10).
2), the collation result “match” to the second microcomputer 200,
It is transmitted using MA communication or the like (step S103).

CPU 20 in the second microcomputer 200
At 1, the engine control process shown in FIG. 3 is executed. First, the waveform-shaped signal for each cylinder, the rotation angle signal, and the like are received via the input / output buffer 204 (step S200), and the ignition timing and the injection timing are calculated based on these signals (step S201). An ignition timing signal and an injection timing signal are output according to the result (step S20).
2).

The injection block 111 is the second microcomputer 2
When the injection timing signal output from 00 is a normal signal, the injection timing signal is output. At this time, since the second switch 114 is on, the injection timing signal is sent to the first drive circuit 300 and the injector 7 is driven. Further, the ignition block 112 outputs the ignition timing signal when the ignition timing signal output from the second microcomputer 200 is a normal signal. At this time, since the third switch 115 is on, the ignition timing signal is sent to the second drive circuit 400, and the igniter 8 is driven.

When the injection timing signal and the ignition timing signal from the second microcomputer 200 become abnormal, the injection block 1
In 11, the fixed injection circuit 111a outputs an injection timing signal to the first drive circuit 300, and in the ignition block 112, the hard ignition circuit 112a outputs an ignition timing signal to the second drive circuit 400. As a result, engine backup control is performed.

On the other hand, when the vehicle is started, when the IG switch is turned on, it is determined that the collation result of the personal identification code from the key 4 and the personal identification code stored in the vehicle does not match (step S101 in FIG. 2). If the determination is NO), that is, if the theft is determined, the first to third switches 113 to 1
15 is turned off (step S104), and the collation result "mismatch" is transmitted to the second microcomputer 200 (step S1).
05).

In this case, since the first switch 113 is turned off, the cylinder-specific signal and the rotation angle signal are not input to the CPU 201, and the appropriate ignition timing signal and injection timing signal are not output. Therefore, in the injection block 111, the fixed injection circuit 111a outputs the injection timing signal, and in the ignition block 112, the hard ignition circuit 112a outputs the ignition timing signal. In this case, the second and third switches 11
Since 4 and 115 are both off, those signals are not sent to the first and second drive circuits 300 and 400,
The injector 7 and the igniter 8 are not driven. Therefore, engine control is prohibited when the comparison result by the secret code from the key 4 does not match.

Thus, when the collation results do not match,
Since the signal lines between the injection block 111 and the first drive circuit 300 and between the ignition block 112 and the second drive circuit 400 are cut, for example, the second microcomputer 200 is intentionally destroyed and the injection is output. When the timing signal and the ignition timing signal become abnormal signals, the backup control circuits 111, 1
Even if the backup control signal is output from 12,
The engine operation by it is prohibited.

Even if the injection timing signal line and the ignition timing signal line from the second microcomputer 200 are intentionally connected to the first and second drive circuits 300 and 400, the first switch 113 is turned off. Therefore, the normal injection timing signal and ignition timing signal are not output from the second microcomputer 200,
You can turn off the engine. Further, the CPU 201 in the second microcomputer 200 executes the diagnostic process shown in FIG.

First, the above-mentioned collation result is received from the first microcomputer 100 (step S300), and when the collation results match (when the determination in step S301 is "match"), the ignition timing signal to be output is output. The injection timing signal and the like are monitored to determine an abnormality, and the abnormality information is stored as diagnostic information (step S302). Further, a process of making an abnormality determination of various sensor signals and the like and storing as diagnostic information at the time of the abnormality determination is also performed (step S303).

When the collation results do not match (step S
When the judgment of 301 is “mismatch”), abnormal information of the secret code from the key 4 (for example, the secret code cannot be received from the key 4, the secret code is an abnormal code due to communication abnormality, etc.) is displayed. It is stored as diagnostic information (step S304). It should be noted that the process of step S302 is not performed when the collation results do not match. This is to prevent erroneous diagnosis information from being stored because the ignition timing signal and the injection timing signal output from the second microcomputer 200 are abnormal signals when the verification results do not match. is there.

The above-described embodiment has the following effects. (1) For example, when the first microcomputer performs backup control and the second microcomputer performs the theft determination and the engine control, even if the second microcomputer determines the theft, the second microcomputer performs the second determination. Microcomputer is broken, Microcomputer 2
When the engine control signal from the controller becomes abnormal, the first microcomputer performs backup control. However, as in the above embodiment, the first microcomputer 100 performs the theft determination and backup control. By doing so, it is possible to prevent the backup control from being performed even when the signal from the second microcomputer 200 becomes abnormal at the time of the theft determination, and it is possible to surely prevent the theft. (2) When the theft determination and the engine control are performed by one microcomputer, since the theft determination process is first performed after the IG switch is turned on, engine startability and control may be delayed. In the above embodiment, since the theft determination process is not performed by the second microcomputer 200, the engine control can be performed immediately after the IG switch is turned on, and the engine startability can be improved. it can. (Other Embodiments) In the above embodiment, the second and third switches 114, 115 are constituted by ON / OFF switches. However, as shown in FIG.
Is a switch configuration capable of selecting the three states of the injection timing signal from the second microcomputer 200, the injection timing signal from the fixed injection circuit 111a, and the open state. Timing signal,
The ignition timing signal from the hard ignition circuit 112a and the switch configuration capable of selecting three states of open may be used.

In this case, the CPU 101 of the first microcomputer 100 sets the second and third switches 114 and 115 to the open state when the theft is determined. Also, the second
When the injection timing signal and the ignition timing signal output from the microcomputer 200 are monitored and it is determined that they are abnormal signals, the injection timing signal from the fixed injection circuit 111a and the ignition timing signal from the hard ignition circuit 112a are detected. select.
In other normal times, the injection timing signal and the ignition timing signal output from the second microcomputer 200 are selected. Further, when the first microcomputer 100 detects disconnection or abnormality of various sensors, the injection timing signal and the ignition timing signal are stopped,
Alternatively, the injection timing signal from the fixed injection circuit 111a and the ignition timing signal from the hard ignition circuit 112a can be switched.

In this embodiment, the fixed injection circuit 111a, the hard ignition circuit 112a, and the CPU
In 101, the processing portion for selecting the injection timing signal from the fixed injection circuit 111a and the ignition timing signal from the hard ignition circuit 112a corresponds to the backup control means. Further, the fixed injection circuit 111a and the hard ignition circuit 112a may be configured by software by the CPU 101 without being configured by hardware. In this case, the second
The injection timing signal and the ignition timing signal from the microcomputer 200 are fetched, and when those signals are abnormal signals, the injection timing signal and the ignition timing signal for backup control are output,
Also, at the time of theft judgment, set the theft judgment flag,
A signal is not output to the first and second drive circuits 300 and 400.

Further, although the one in which the first to third switches 111 to 115 are turned off to stop the output of the signal when the theft is judged is shown, the waveform shaping circuit 107, the fixed injection circuit 111a,
It is also possible to stop the operation of the hard ignition circuit 112a and stop the output from them. Further, the CPU 101 in the first microcomputer 100 is not limited to the one that operates when the IG switch is turned on, but may start operating by receiving power supply when the key 4 is inserted into the key cylinder.

Although the start instruction member is constituted by the key 4 in the above description, it may be constituted by a card in which a personal identification code is incorporated. Furthermore, the present invention is not limited to being applied to a vehicle equipped with an engine, but can also be applied to a vehicle not equipped with an engine, such as an electric vehicle.
In this case, the prime mover is composed of an electric motor. Moreover, you may apply to a moving body other than a vehicle, for example, a boat.

[Brief description of drawings]

FIG. 1 is a block diagram showing an overall configuration of an engine control device according to an embodiment of the present invention.

FIG. 2 is a flowchart showing a theft determination process of a CPU 101 in the first microcomputer 100.

FIG. 3 is a flowchart showing an engine control process of a CPU 201 in the second microcomputer 200.

FIG. 4 is a flowchart showing a diagnosis process of a CPU 201 in the second microcomputer 200.

FIG. 5 is a block diagram showing an overall configuration of an engine control device according to another embodiment of the present invention.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1 ... Engine control device, 2 ... Cylinder sensor, 3 ... Rotation angle sensor, 4 ... Key, 7 ... Injector, 8 ... Igniter, 100 ... 1st microcomputer, 200 ... 2nd microcomputer, 111a ... Fixed injection circuit, 112a ... Hard ignition circuit, 113-115 ... Switch.

Continuation of front page (51) Int.Cl. ⁶ Identification code Office reference number FI Technical display location F02N 15/00 F02N 15/00 FG08B 15/00 G08B 15/00

Claims (5)

[Claims] 1. A first control means (200) for inputting a sensor signal necessary for controlling a prime mover and outputting a prime mover control signal for controlling the prime mover based on the sensor signal, and the prime mover. Second control means (100) for outputting the prime mover control signal when the control signal is normal, and for outputting a backup control signal for backup controlling the prime mover when the prime mover control signal becomes abnormal; Drive means (300, 40) for driving the prime mover based on one of the prime mover control signal and the backup control signal output from the control means.
0), the second control means collates the personal identification code from the user side with a pre-stored personal identification code, and when the collation result is coincident, the second control means transfers to the driving means. Of the motor control device having an anti-theft function, wherein the output is prohibited and the output is prohibited when the collation result does not match. 2. The second control means includes first switch means (114, 115) for turning off the output to the driving means when the comparison results do not match. 1. The prime mover control device according to 1. 3. The second control means includes second switch means (113) for turning off the input of the sensor signal to the prime mover control means when the comparison results do not match. The prime mover control device according to claim 1. 4. A prime mover control means (200) which inputs a sensor signal necessary for controlling the prime mover and outputs a prime mover control signal for controlling the prime mover based on the sensor signal, and the prime mover control When the signal is normal, the prime mover control signal is output, and when the prime mover control signal becomes abnormal, a backup control means (111, 112) for outputting a backup control signal for backup controlling the prime mover in place of the prime mover control signal. ) And a drive means (30) for driving the prime mover based on one of the prime mover control signal and the backup control signal output from the backup control means.
0, 400) and the personal identification code from the user side and the pre-stored personal identification code are collated, and when the collation result is coincident, the output from the backup control means to the drive means is permitted, and the collation result is obtained. Means for prohibiting the output when the values do not match (S
100, S102, S104, 114, 115, etc.), and a prime mover control device having an antitheft function. 5. A prime mover control means (20) for controlling the prime mover.
0) and the personal identification code from the user side and the pre-stored personal identification code are collated, and when the collation result is coincident, the control of the prime mover by the prime mover control means is permitted, and when the collation result is not coincident, the above-mentioned collation result is judged as Anti-theft means (S100, S102, S10) for prohibiting control of the prime mover by the prime mover control means.
4, 114, 115, etc.) having an anti-theft function, the backup control means (111, 112) for controlling the backup of the prime mover when the control signal from the prime mover control means becomes abnormal. A motor control device having an antitheft function, characterized in that the antitheft means allows the backup control when the verification results match, and prohibits the backup control when the verification results do not match. .