JPS5812004A - Controller for car - Google Patents

Abstract

PURPOSE:To improve the safety of a controller for a car, by initializing a microcomputer when a failure of a power supply or a microcomputer is detected and fixing an electric signal supplied to an electric moving device at a failure detection temporarily to the safety side. CONSTITUTION:In a signal repeater, a failure of power supply from the power supply of a car is detected at a comparator 4, and a failure in a microcomputer 1 is detected at a failure detection circuit 6 of the computer. Either one of the detection signal of the comparator 4 or the circuit 6 takes place, an output signal of an NOR circuit 3 gives a release signal to the computer 1. The two detection signals of the comparator 4 and the circuit 6 are given to an NOR gate 8, this output is given to an AND gate 11, an FF12 is reset at the detection of the failure, and an output P applied to an electric moving device is temporarily fixed to the safety side.

Description

[Detailed description of the invention] A digital combination machine with a built-in program is used to perform arithmetic control and optimally control the control elements of an automobile. This invention relates to an automobile control device equipped with safety measures.

Generally, these devices operate when the computer itself has an abnormality in its power supply voltage or when an abnormality is predicted to occur.
The computer is configured to provide an initialization signal to the computer. When an initialization signal is given, the computer starts the program from its initial state, and if there is no abnormality in the computer itself, the device will operate normally.

However, when the abnormality is removed by the initialization signal, the combiator repeats the initialization operation. Unfavorable In due to hindrance
The present invention provides that, under one of the above-mentioned favorable circumstances, an electrical movable device operated by a control signal from a computer reliably and safely controls a control element of a motor vehicle. K to be driven to the side
The first objective is to provide a control device for automobiles that has the following features.

A second aspect of the present invention is to provide an automobile control device that determines that it is difficult to remove the abnormality when the initialization operation is repeated, and disables the operation of the computer from now on. The purpose of

Furthermore, the present invention enables the control element to be driven to the safe side even when there is an abnormality in the electrical signal, regardless of any abnormality in the circuit before applying the electrical signal to the electrically movable device, not just the computer. Our 30th objective is to provide a control device for automobiles that has the following features.

In order to achieve the above-mentioned object, the device of the present invention is provided with a signal relay device between an electrically movable device that drives a control element of an automobile and a control signal generator for driving the electric movable device, and this signal relay device , monitors abnormalities in the power received from the power supply device of the vehicle and abnormalities in the control signal generator, and when at least one abnormality is detected, provides an initialization signal to the control signal generator, and at the same time outputs an electrical signal to the electrically movable device. The first feature is that the signal is temporarily fixed in a predetermined state.

A second feature of the device of the present invention is that a holding device is provided so that the above-mentioned electrical signal is continued to be fixed when the number of abnormality detections reaches a predetermined value. In devices where the electrical signal applied to the device is an on-off signal, a device is additionally provided to monitor whether the on-off signal deviates from the expected on-off ratio, and when the electrical signal is abnormal, the above-mentioned The 30th feature of the present invention is to continue fixing the electrical signal that has been set, and is suitable as a vehicle speed control device that controls opening of the throttle valve in order to set the actual vehicle speed of the vehicle to the target vehicle speed. .

The present invention will be described below with reference to embodiments shown in the accompanying drawings.

FIG. 1 shows a constant speed cruise control device for an automobile to which the present invention is applied. The electric movable device 16 is a known negative pressure actuator that uses the intake negative pressure of the automobile engine to generate an acting force on the speed increasing side. to adjust the engine torque.

The microcomputer 1, which is a control signal generator, performs arithmetic processing according to a built-in program, and by turning on the main switch 1b, sequentially inputs the vehicle speed signals from the vehicle speed sensor 1a and calculates the current actual vehicle speed of the vehicle. do. Here, when the set switch le is turned on, the actual vehicle speed data at that time is determined as the set vehicle speed, and using that vehicle speed as a target value, the vehicle speed data sequentially input from the vehicle speed sensor 1a is compared with this target value. The first and second signals m + 0 are controlled so as to approach the target value, and the negative pressure actuator 16
control pulp control pulp 16a.

Control the release pulp 16b. By controlling this negative pressure actuator, the throttle valve 17 is adjusted to bring the current vehicle speed closer to the set vehicle speed.

At the same time that the set switch lc is turned on,
The microcombiner outputs a set signal m (rlJ level) which is a second electrical signal, thereby setting the flip-flop 12 and energizing the release pulp drive circuit, thereby releasing the release pulp in the negative pressure actuator 16. 1
6b is energized and energized to close the valve leading to the air supply side. In this state, the control pulp 16& in the negative pressure actuator is energized and deenergized via the control pulp drive circuit 15 using the on/off signal 0, which is a second electric signal (control signal), to adjust the internal pressure of the actuator. By controlling the position of the throttle valve 17, the speed of the vehicle is maintained constant.

When the cancel switch 1d is turned on by depressing the brake pedal etc. during this constant speed driving, the AND gate I
The shift flip-flop 12 is reset by the L-level cancel signal generated by IK, and the release pulp 16b is deenergized to eliminate the acting force on the actuator 160, and the output P (rOJ level) of the flip-flop is input to the AND gate 14tC. Accordingly, the control pulp 16 is also deenergized. ζHere, the 20th electric signal 04 microcomputer l sends a deactivation signal (
For safety, AND
(Goo) In 14, two human forces are applied.

In this device, a partial IC indicated by a broken line frame is constructed as an integrated circuit, and includes nine interface circuits, including a signal relay device for a microcomputer 1 and a seven-actuator 16. 5 is the automotive batch voltage 10B (*12V)
04 is a constant voltage circuit that converts a microcomputer power supply to 5VK. It is a comparator that determines whether the constant voltage output voltage is normal. It compares it with a reference voltage, for example '4V.
When the voltage drops below v, the output becomes H level.

6 is a computer abnormality detection circuit that includes an oscillation circuit and a counter.Here, the detection method uses a method that is often used in the past, that is, the internal oscillation circuit constantly oscillates and generates clock pulses. , af) is entered into an internal counter. When the counter overflows, output g is output at H level. However, since the microcomputer 1 is inputting a constant pulse l to the clear terminal of the counter, the microcomputer is operating normally and giving a constant pulse to the 6 output.
The initialization (return) signal of the Tsumeya computer is in the form of a cursor. ζζ If the above power supply abnormality detection output f or - is present, the microcomputer runaway detection output g becomes H level. When a tab abnormality is detected, NOR gate 3
The output signal of becomes L, and immediately gives a reset signal to micro combinator 1. This reset time is the time until the power returns to normal in the case of a power supply abnormality. On the other hand, in the case of runaway detection, slow grinding circuit 2 It is a certain period of time (several tens of milliseconds to several hundred milliseconds) given by

Here, according to the present invention, the NOR gate 8 is provided, and the two detection signals of the previous flg are input to this gate input, and this output is applied to the AND game (AND game) 11, which resets the knob 70 and the knob 12 when an abnormality is detected, and outputs P. is fixed on the safe side. Therefore, the output of the 1440 becomes L level, and the drive circuit 15 is connected to the actuator 16.
0, which does not generate the energizing output of the control pulp 16a.
Finally, the on-off ratio is O attack. At the same time, the drive circuit 13 also cuts off the energizing output of the release pulp 16b, opens the pulp 16b, and makes the inside of the actuator atmospheric pressure. Therefore, the actuator does not generate any rounding force to open the throttle valve 17, and the throttle valve 17 is closed by the return spring 17m.Furthermore, according to the present invention, the output j of the NOR gate 8 is further input into the counter 9. In combination with the launch circuit 10 such as a flip-flop, when the number of abnormality detections reaches K several times (for example, 4 times), the output of the AND gate 22 is fixed at the PtL level and the operation of the actuator 16 is disabled.
This may occur if the microcomputer 1 becomes unrecoverable, for example, if the memo 9 (ROM, RAM) functionality declines, or if external noise persists for a long period of time and causes the computer 1 to malfunction. ◎ In this embodiment, when the power is turned on to the device, the counter 9 and the latte 10 are reset via the delay circuit 7 so that they can operate again. ! ! In response to the,
Furthermore, according to the present invention, the control pulp drive circuit 1 is installed in the power supply line for driving the VHA actuator in the entire device, thereby cutting off the power supply and the like, making re-operation very difficult.
The control pulp 16m outputs a duty ratio of 100% due to a failure occurring in the stage 5 or the previous stage, and the detection circuit 23 detects the case where the control pulp 16m outputs a duty ratio of 100% and stops constant speed running.

This circuit has the configuration shown in Figure 2, and the control
The final stage transistor 15 of the drive circuit 15
&yopIf there is no overcurrent, the electric charge charged to the capacitor F23m via the resistor 23b is transferred to the diode 23a.
Since the discharge time constant is set smaller than the charging time constant, the output signal is at the QaL level, but the transistor 15m is discharged through the control pulp 16m.
When ttK is turned on, point X becomes the bare battery power supply voltage (10B); Denna 23aK continues to be charged and increases the potential at point W, making the output signal OUT H level. - This detection output signal is applied to the i-microcomputer l, and on the other hand, the AND gate 11KL level is applied to reset the clip-flop 12 and deactivate the two pulps 16m and 16b of the actuator 16.

Note that this operation is performed by control pulse 7' 16 * (
It operates effectively even if the D solenoid is disconnected.

By the way, this device is used not only when the cancel switch ld is turned on and when the micro combinator itself generates a stop signal, n, but also when the installed voltage drops abnormally, the convenience switch is not normal. When the on-off ratio of the electrical signal applied to the a-kA loop becomes abnormal,
The clip flop 12 is reset and the control pulp 16&, release, and spur pulp 16b are deenergized to prevent the actuator 16 from being driven to the speed increasing side. The counter circuit 9 and latch circuit 10, which are reset when the switch is turned on, calculates the number of times an abnormality is detected (the number of abnormalities detected in 41 is Oo, which occurs when a convenience store runs out of control by 10g2). When the number of times is reached, the output of the latch circuit 10 causes the control pulp 16m and the release pulp 1
The deenergized state of 6b is held through until the power is turned on again.

It should be noted that the present invention is not limited to the above-described embodiments, but includes modified implementations as described below.

■Power supply abnormality detection is done by detecting from the voltage value of the stabilized voltage and correcting the battery voltage! It is also possible to detect an abnormal drop by determining the stabilized voltage O.In addition to detecting an abnormal drop in the stabilized voltage O, an abnormal rise may also be detected.

In addition, if it is predicted that there is a high possibility of an abnormal drop in the stabilizing voltage, for example when Star II is running, the O start switch input signal will be used as the abnormality detection signal at 1% A. Motyo-@ ■) Circuit elements that make up the interface circuit IC ・Children, especially logic circuits, can be replaced with other circuits that satisfy the same function ・In this case, for example, NOR game You may also use the connection.

As mentioned above, the present invention not only initializes the convenience store when an abnormality occurs, but also provides a rounding function that determines the electric signal t@ so that the actuator operates on the safe side, such as a control device for an automobile. This will ensure even greater safety.

Furthermore, in the second aspect of the present invention, the system responds to the number of abnormality detections of the computer, and the first aspect of the present invention is
In the third position of s, K is assigned to respond to an abnormality in the actuator electric signal, and the safety effect is further demonstrated.

[Brief explanation of drawings]

#Il- is an electrical wiring diagram showing one embodiment of the present invention, and Fig. 2 is a detailed circuit diagram of the detection circuit 23 in Fig. 1. Senna, 1c - set switch,
1d-cancellation switch, 2, 3-time constant circuit and NOR gate for providing initialization signal, 4-comparator for detecting power supply abnormality, 6-comviator O abnormality detection circuit, 8
-NOR gate, 9-Counter circuit for counting the number of abnormality detections, 1G-9 latch circuit-・11-AND gate, 12
-Flip-flop, 14-AND gate, 16-Electrical movable device Patent attorney Takashi Okabe

Claims (1)

[Claims] (1) An electrically movable device that drives a control element of a vehicle in response to an electric signal, and a control signal that generates a control signal to drive the control element in accordance with a predetermined control parameter. a control signal generating device; a signal relaying device disposed between the electric movable device and the electric movable device; the signal relaying device detects an abnormality in the power received from the power source of the vehicle; First thing to do
a device @2 that detects an abnormality in the control signal generating device; and the device #1 above. a third device that provides an initialization signal to the control signal generator when any one of the detection signals of the twentieth device occurs;
and the above-mentioned device No. 1. If there is no detection signal of the twentieth device, the control signal is operatively supplied to the electrically movable device, and if there is at least one abnormality, the electrical signal supplied to the electrically movable device is temporarily changed to a predetermined value. A fourth device for fixing the state. (2) The fourth device includes circuit means for holding the abnormality detection signal, and circuit means for prohibiting passage of the control signal by the hold output thereof. The automotive control device described. (3) A patent in which the fourth device includes circuit means for holding the abnormality detection signal, and circuit means for prohibiting passage of the control signal by a logical sum of the hold output and the abnormality detection signal. Automotive control device according to claim 1 (4) The hold circuit means is a free-lag flop whose setting and reset are reversed by the abnormality determination output and the start signal from the control signal generation circuit. An automobile control device according to claim 2 or 3. (S) The vehicle control according to claim 1, wherein the 40th device is configured to prohibit the passage of the control signal and stop the activation signal of the electrically movable device plate. device. (Phrase according to any one of claims 1 to 3 O, wherein the 30th device receives an external signal other than the first and second detection signals and also has the function of giving an initialization signal. Description O
Automotive control device. (η The signal relay device is connected to the first, second, third and fourth
7. An automobile control device according to any one of claims 1 to 6, wherein the main parts of the device are constructed as an integrated circuit. (Q: an electrical movable device that drives a control element of a vehicle in response to an electrical signal; a control signal generator that generates a control signal for driving the control element in accordance with a predetermined control parameter; and a good signal relay device disposed between the signal generator and the electrically movable device;
a second device that detects an abnormality in the control signal generating device; and a second device that detects an abnormality in the control signal generator; a third device that provides an initialization signal to the control signal generator when any one of the detection signals of the second device occurs;
and the above-mentioned device No. 1. The control signal is operatively supplied to the electrically movable device when there is no detection signal of the twentieth device, and when there is at least one abnormality, the electrical signal supplied to the electrically movable device is temporarily set to a predetermined value. and a fiftieth device that counts the number of times the detection signal is generated and fixes the electrical signal supplied to the electrically movable device in a predetermined state when the number of occurrences of the detection signal reaches a predetermined number of times. An automobile control device comprising: (9) an electrically movable device for driving a control element of a motor vehicle in response to a first electric signal when a second electric signal is applied; and for driving said control element in accordance with a predetermined control parameter. a control signal generation device that generates an on/off control signal for the vehicle; and a good signal relay device disposed between the control signal generation device and the electrically movable device, wherein the signal relay device is connected to the power source of the vehicle. The first step is to detect abnormalities in the received power supply.
0 device; a second device that detects an abnormality in the control signal generating device; a third device that provides an initialization signal to the control signal 3 generator when any one of the detection signals of the twentieth device occurs; and an on-off ratio of the first electrical signal applied to the electrically movable device. a sixth device for detecting an abnormality in the first device; Second
．． If there is no detection signal from the sixth device, a second electrical signal is given to the electrically movable device and the control a4 is supplied as the first electrical signal, and if there is at least one abnormality, a second electrical signal is given to the electrically movable device. An automobile control device comprising: @4C) device for stopping a signal. (2) The fourth device stops the second electric signal and stops the first electric signal.
10. The automobile control device according to claim 9, which also performs the functions of stopping the passage of the electric signal.