JPS60135332A - Protecting device for automobile control system - Google Patents

Abstract

PURPOSE:To fully recover and maintain the state of control as before the occurrence of trouble, by providing a second control means which is driven by detection of any trouble in a first control means and controls the parts in the automobile through calculation in place of the first control means in trouble. CONSTITUTION:Normally, a first control section 23 consists of a CPU21 and a ROM22 exchanges data with a section to be controlled 24. When any trouble occurs in the CPU21, a detecting section 25 immediately stops the operation of the CPU21 while switching input/output lines of the section to be controlled 24 from 24a and 24b to 24c and 24d, so that a second control section 28 consisting of a CPU26 and a ROM27 can exchange data with the section to be controlled 24.

Description

DETAILED DESCRIPTION OF THE INVENTION [Technical Field of the Invention] The present invention relates to a protection device for an automobile control system that controls all operations of various parts of an automobile, such as an engine and an instrument panel.

[Technical background of the invention]

As is well known, microcombi,
L-=L (central processing unit) is widely used.

Figure 1 shows such a microcomputer (hereinafter referred to as CP).
This figure shows a conventional automobile control system using the U.

That is, the control unit 13, which is the FiCPU 1J and the ROM (read only memory) 12, controls the controlled unit 1.
This is realized by inputting and outputting data as shown in FIG. In this case, if an abnormal situation occurs, such as the CPU 11 going out of control, the vehicle cannot be controlled and the situation is extremely dangerous. However, if a CPU JJK error occurs, immediately
In addition to pre-conditioning U J l to a stop condition, the control unit 14 is forcibly controlled to, for example, stop the running of the automobile.

[Problems with background technology]

However, in the conventional automobile control system as described above, when an abnormality occurs in the CPU 1J, the controlled unit 14 only forcibly performs a predetermined operation, so this forced operation is not necessarily performed at that time. It cannot be said that this is the safest direction for automobile driving conditions, and there is still a need for improvement.

[Purpose of the invention]

The present invention has been made based on the above-mentioned circumstances, and an object of the present invention is to provide an extremely good protection device for a vehicle control system that can sufficiently maintain the previous control state even if an abnormality occurs in the control section.

[Summary of the invention]

That is, the protection device for a vehicle control system according to the present invention includes a first control means that includes an arithmetic processing unit and automatically controls each part of the vehicle, and a system that detects whether or not an abnormality has occurred in the first control means. a second control system that is driven in a state in which an abnormality of the first control means is detected by the detection means, and controls each part of the vehicle in place of the first control means; The invention is characterized in that it is equipped with a control means.

[Embodiments of the invention]

Hereinafter, one embodiment of the present invention will be described in detail with reference to the drawings. That is, as shown in Figure 2, normally C
First control unit 23 consisting of PU 21 and ROM 22
However, the controlled section 24 is controlled by inputting and outputting data to and from the controlled section 24. At this time, C
The operating status of the PU 21 is detected by the detection unit 25 at appropriate timing. When an abnormality occurs in the CPU 22, the detection unit 25 immediately stops the operation of the CPU 2J, and also shuts down the CPU 26 and ROM 27.
The input/output lines 24*, 24b, 24a, and 24df of the controlled section 24 are switched so that the second control section 28 consisting of the controlled section 24 can input and output data to and from the controlled section 24.

This switching is performed, for example, by a multiplexer (not shown) provided in the controlled section 24, and when the first control section 23 is operating normally, the line 2
4. *, 24b is connected to the controlled part 24, and the line 2
4c and 24d are separated from the controlled section 24.

When an abnormality occurs in the CPU 2 J, lines 24* and 24bf are disconnected from the controlled section 24, and lines 24a and 24df are connected to the controlled section 24.

Therefore, even if an abnormality occurs in the CPU 2J, the control of the controlled unit 24 is immediately continued by the second control unit 28, so that the controlled unit 4-4 is controlled in the same way as before. It is what it is.

It should be noted that the present invention is not limited to the above-mentioned embodiments, and can be implemented with various modifications without departing from the gist thereof.

〔Effect of the invention〕

Therefore, as described in detail above, according to the present invention, it is possible to provide an extremely good protection device for a vehicle control system that can sufficiently maintain the previous control state even if an abnormality occurs in the control section.

[Brief explanation of drawings]

FIG. 1 is a block diagram showing a conventional vehicle control system, and FIG. 2 is a block diagram showing an embodiment of a protection device for a vehicle control system according to the present invention. 2no...CPU, 22...ROM, 2J...1st
control unit, 24... controlled unit, 25... detection unit, 2
6... CPU, 27... ROM, 28... second control unit.

Claims (1)

[Claims] In an automobile control system comprising: a first control means that includes an arithmetic processing unit and automatically controls various parts of the automobile; and a detection means that detects whether or not an abnormality has occurred in the first control means, the detection means The second control means is driven in a state in which an abnormality in the first control means is detected and includes a processing unit and controls each part of the vehicle in place of the first control means. A protection device for an automobile control system characterized by: