KR100836384B1 - Self-diagnosis/recovery ECU in vehicle and method for operating the same - Google Patents

Abstract

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic control apparatus for a self-diagnosis / recovery vehicle and a method of operating the same. The present invention relates to a RAM area in which driving information is recorded for stable operation of an electronic control apparatus mounted on a vehicle. And recovering the damaged information based on the diagnosis or reviewing the compatibility with the control program embedded in the electronic control device to ensure the stability of the vehicle. To this end, the present invention is a program memory that stores the control logic for performing the electronic control for each electronic device in the vehicle, the driving record and the state of the electronic device, the value required for the self-diagnosis / recovery operation during vehicle operation The stored information recording memory, a battery for outputting a predetermined voltage, a sub-regulator for supplying a driving voltage, and a central processing unit for reading control logic from the program memory and performing predetermined electronic control. The recording memory includes a flag area, a check sum area, a version area in which a version value of control logic is recorded, and an information recording area.

Vehicle, automobile, electronic controller, ECU, memory, navigation, information, nonvolatile, checksum

Description

Self-diagnosis / recovery ECU in vehicle and method for operating the same}

1 is a block diagram illustrating an internal configuration of an electronic control apparatus for a self-diagnosis / recovery vehicle according to an exemplary embodiment of the present invention.

2 is an internal allocation map of an information recording memory according to an embodiment of the present invention.

3 is a flowchart illustrating a process of self-diagnosis / recovery in an electronic control apparatus for a vehicle according to an exemplary embodiment of the present invention.

* Description of the symbols for the main parts of the drawings *

10: central processing unit 11: program memory

12: Information recording memory 13: Main regulator

14: sub regulator 15: ignition switch

16: battery

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic control apparatus for a self-diagnosis / recovery vehicle and a method of operating the same. The present invention relates to a RAM region in which driving information of a vehicle is recorded, and diagnoses damaged information based on the diagnosed contents. Or, the compatibility with the control program embedded in the electronic control device has a feature to ensure the stability of the vehicle.

In general, a vehicle is composed of a power train consisting of an engine and a transmission, a chassis, and a body, and each of these components is equipped with an electronic control unit (ECU) for stable and precise control. The role, type, and number of the electronic control apparatuses vary according to the requirements of each vehicle.

In addition, the electronic control device keeps and manages various information necessary for the control process in a separate area. This information is necessary information for the normal operation of the electronic control apparatus, and should be able to be updated and recorded at a specific point in time due to the nature of the information. For this reason, in general, the vehicle electronic controller uses a RAM as a separate place for storing such information.

Since the RAM area storing the driving information is a volatile memory, information is lost when the power is not supplied at all times. In a vehicle, a constant power source is a vehicle battery, and a situation in which the vehicle battery cannot supply power to the electronic control apparatus due to burning or replacement or the like may occur. In addition, there may be a situation in which power cannot be supplied to the electronic control apparatus due to deterioration or replacement of the vehicle. In addition, abnormal noise may occur due to aging of the vehicle or other reasons, and this noise may also cause an error in the RAM area for recording driving information. Alternatively, when changing the program of the control device according to the change of the control logic of the electronic control device, it may not be synonymous with the previous driving information.

Therefore, there is a possibility that the information of the RAM area for recording the driving information is always damaged due to the above various reasons.

In order to solve the above problems, the present invention has been made, and for the stable operation of the electronic control device mounted on the vehicle, the ram area, which records the driving information, is diagnosed and diagnosed for various causes that may cause a malfunction. Based on the contents, the damaged information is recovered or the compatibility with the control program embedded in the electronic control device is checked to ensure the stability of the vehicle.

In order to achieve the above object, the present invention provides an ignition switch in which ignition switching of a vehicle is started, a program memory in which control logic for performing electronic control of each electronic device in a vehicle is stored, a driving record while driving a vehicle, and the electronic The information recording memory, which stores the state of the device and the values required for the self-diagnosis / recovery operation, the battery which outputs a constant voltage, and the constant voltage output from the battery, is converted into a predetermined driving voltage to record the information. A sub-regulator for constantly supplying a driving voltage to a memory, and a central processing unit for reading a control logic from the program memory and performing a predetermined electronic control when the ignition switch is turned on. The recording memory includes a flag area and noise in which the value used to check whether the battery is removed or not. A checksum area in which the check sum value used in the integrity check is recorded, a version area in which the version value of the control logic used in the control logic compatibility check is recorded, a driving record while driving the vehicle, and And an information recording area in which the state of the electronic device is stored.

In addition, the present invention is to check the physical error of the information recording memory in which the vehicle operation information is stored when the vehicle ignition is started and the control logic in the electronic control device is booted, and the battery is removed by checking whether the battery is removed. And after initializing the data in the information recording memory, determining whether the current checksum value matches the previous checksum value, and checking the physical error of the information recording memory. Initializing the data; and initializing the data in the information recording memory when the version of the control logic currently being driven does not match the version of the control logic stored in the information recording memory.

Hereinafter, the detailed description of the preferred embodiments of the present invention will be described with reference to the accompanying drawings. In the following description of the reference numerals to the components of the drawings it should be noted that the same reference numerals as possible even if displayed on different drawings.

1 is a block diagram illustrating a self-diagnosis / recovery apparatus of an electronic control apparatus for a vehicle according to an exemplary embodiment of the present disclosure.

As shown in FIG. 1, an electronic control apparatus for a vehicle according to the present invention includes an information recording memory 12 for recording driving information of a vehicle, a central processing unit 10 (CPU) which is a central processing unit of the electronic control apparatus, and electronic control. The program memory 11, which contains the control logic necessary for the operation of the device, the main regulator 13, the sub regulator 14, and the main regulator 13 and the sub regulator 14 to supply power to them. And an ignition switch 15 (IG key) for controlling the power supply switching to the battery 16 to be supplied and the main regulator.

In the configuration of the system according to the present invention, various information is required for the control logic embedded in the program memory 11 to operate normally. An example of this information is important information that can determine the behavior of the system in the operation of the vehicle, such as the driver's driving habits, the history of previous driving cycles and malfunctions. Therefore, the system must be maintained even if the ignition switch 15 is turned off. In addition, the information should be able to be modified and recorded at any time during the operation of the system, since it should be possible to change according to the operating state of the system. The driving record while driving the vehicle and the state of the electronic device are stored in the information recording memory 12.

When the driver turns on the ignition switch (IG Key On) to drive the vehicle, power of the battery is applied to the main regulator 13. Then, the main regulator 13 lowers the voltage supplied from the battery 16 (for example, DC 12 Volt) to the voltage required for the central processing unit 10 and the program memory 11 to operate (for example, DC 5 Volt). The central processing unit 10 and the program memory 11 are supplied. When power is applied to the central processing unit 10 and the program memory 11 as described above, the self-diagnosis / recovery operation is started.

Apart from this, the sub-regulator 14 receives power from the battery 16 and converts the voltage into a voltage (eg, DC 5 Volt) required for the information recording memory to operate regardless of whether the ignition switch 15 is turned on or off. The recording memory 12 is supplied to. Therefore, the information recording memory 12 maintains the power supply state at all times.

The reason why the power is always applied to the information recording memory 12 as described above is as follows. Due to the requirements of the information recording memory 12, a read-only ROM is not suitable for storing data in the information recording memory, and thus, non-volatile RAM (NVRAM) such as flash memory that can be read and written. Should be implemented as: Generally, RAM stores information only when power is applied. The information recording memory 12 using the RAM requires a power supply. Since the nonvolatile memory (NVRAM) used for the information recording memory 12 is also a type of RAM, the nonvolatile memory also stores information only when power is applied, and thus is implemented as a nonvolatile memory. The information recording memory requires a constant power supply.

An internal memory allocation map of the information recording memory 12 is shown in FIG. 2, which is divided into a header area 21 and an information recording area 22. The information recording memory is divided into two parts. The information recording area 22 is an area for storing various vehicle driving information generated when driving a vehicle. In the header area 21, vehicle driving information is not recorded, and information necessary for self-diagnosis / recovery is recorded. The flag area 23 in which a flag value used when checking whether a battery is removed is recorded, noise and A checksum region 24 in which a check sum value used in the integrity check is recorded, and a version region 25 in which a version value of the control logic used in the control logic compatibility check is recorded. Equipped.

In the flag area 23, a flag value (eg, 0xA55A) of a predetermined pattern is recorded in advance, and the pattern may be inspected at system startup to determine whether the battery is removed. That is, it is determined whether the battery is removed by determining whether the flag value recorded in the flag area 23 and the flag value of the control logic match each other. As a flag value of a predetermined pattern, data values having a low probability of occurring naturally randomly, such as OxA55A, are recorded. In the case of OxA55A, since 0 and 1 are repeated patterns, the probability of occurrence of random natural occurrences is small.

3 is a flowchart illustrating a self-diagnosis / recovery process according to an embodiment of the present invention.

When the ignition switch 15 (IG key) is turned on to drive the vehicle, the main regulator depressurizes the DC 12 Volt power supplied from the battery to the DC 5 Volt power supply, thereby providing a central processing unit 10 (CPU) and a program memory. At this time, the central processing unit 10 reads an operation code from the program memory 11 and performs a control function. At this time, regardless of whether the ignition switch 15 is on or off, the information recording memory 12 is always supplied with power from the battery 16 through the sub regulator 14.

In the electronic control device implemented as described above, when the ignition switch is turned on, the system starts operation (S30). When the system starts operation (S30), first, a step (S40) of checking whether a battery is removed and a check sum (S50) for processing noise are processed.

Since the information recording memory is implemented as a nonvolatile memory such as a flash memory, the reliability of the data of the information recording memory cannot be guaranteed when the battery is removed. Therefore, the flag value (e.g., 0xA55A) of a predetermined pattern is recorded in the flag area 23 at a specific position in the information recording memory, and this pattern is inspected at system startup (S41) to determine whether or not the battery is removed. can do. It is determined whether or not the battery is removed by determining whether the flag value recorded in the flag area and the flag value of the control logic coincide with each other (S42).

 If the scheduled pattern is not found, the battery may have been removed or physical damage of the information recording area may be taken into consideration. Therefore, the battery has been removed to another information memory (S43). The physical check (S70) is performed.

If a promised pattern is found, it is determined that there is no battery removal and the process goes to a check-sum step S50 of checking the integrity of the information stored in the information recording memory.

Referring to the check sum step S50, after the electronic control apparatus according to the present invention completes the operation (the vehicle is in the IG OFF state), there may be a change in the information of the information recording memory area that is changed within the current driving cycle. Therefore, a checksum is performed on the changed information (S51), and the checksum value is recorded in the checksum area which is a specific position of the information recording memory. After that, the checksum is found again in the next driving cycle, and compared with the previous checksum value (S52). If there is no abnormality, it is determined that the information in the information recording memory is valid, and the next step S60 is continued. If an error is detected in the above step, physical damage of the information recording memory area may be taken into account, so that an error has occurred in the checksum value in another information memory (S53), and then into the information recording memory. Physical inspection (S70) is performed.

If an error occurs in the battery removal test step S40 or the check sum step S50, it should be checked whether the error is due to physical damage of the information recording memory (S70). The physical inspection method writes a predetermined value in the entire area in the information recording memory, arithmetically calculates a checksum with respect to the value (S71), and then compares the calculated value by reading the recorded value for the entire area in the information recording memory. (S72) It is used. If the area of the information recording memory is physically destroyed, the read / write function itself has an error and self-recovery is impossible. Since this is a serious error that must be accompanied by the replacement of the electronic control device according to the present proposal, the information on the corresponding error must be stored (S74), and the control logic must detect this to switch to an emergency operation mode such as a system stop (S82). If no error is found in the physical inspection, it is determined that the error is caused by simple noise or the like and initialization of the entire area of the information recording memory is performed (S90).

If no error is found in the checksum step (S50) for the information recording memory, the next step is to check with the control logic embedded in the program memory. Check for compatibility (S60). The compatibility check method records the version of the control logic in the version area 25 at a specific position in the information recording memory, and compares the version known by the control logic with the version of the control logic recorded in the version area (S61). (S62). In general, when the control logic is updated in the vehicle controller, a case of re-programming the entire area of the program memory 11 may occur. In this case, since the control logic has been changed, the information in the header area may also change, so even if there is no error, the header area itself needs to be initialized with data corresponding to the updated control logic. If the version of the control logic and the version of the information recording memory are different, it is difficult to expect the normal operation of the control logic, and thus initialization of the header area is necessary. The initialization is performed by writing a specific value in the flag area (S91), writing a new version value in the version area (S92), and increasing the check abnormal counter by one (S93).

In all processes of the information recording memory, when an error occurs, the error counter value is increased by one (S93). If all the checking processes are completed without errors, the error counter value is decreased by one (S80). The control logic can refer to this value to check how frequently an error occurs in the information recording memory during the operation of the controller by means of a scan tool or other means. These values can be used for self-diagnosis in conjunction with OBD.

If all processes are completed without abnormality, the electronic control apparatus according to the present invention performs a normal operation (S81).

In the foregoing description of the present invention, specific embodiments have been described, but various modifications may be made without departing from the scope of the present invention. Therefore, the scope of the present invention is not to be determined by the embodiments described above, but will be apparent in the claims as well as equivalent scope.

As described above, the present invention has an effect of checking whether there is an abnormality due to battery removal and recovering itself when the battery is removed. In addition, the checksum improves the resistance to noise and the like, and has an effect of self-recovery. In addition, there is an effect of enhancing the reliability of the information stored in the information recording memory through physical inspection. In addition, control malfunction can be prevented by checking compatibility with control logic, and self-diagnosis function is enhanced through error counting function.

Claims (11)

An ignition switch in which ignition switching of vehicle starting is performed, A program memory in which control logic for performing electronic control of each electronic device in the vehicle is stored; An information recording memory for storing a driving record while driving a vehicle, a state of the electronic device, and a value required for a self-diagnosis / recovery operation; A battery that outputs a constant voltage, A sub-regulator for converting a predetermined voltage output from the battery into a predetermined driving voltage and supplying a driving voltage to the information recording memory at all times; A central processing unit that reads control logic from the program memory and performs a predetermined electronic control when the ignition switch is turned on. Vehicle electronic control device comprising a. The memory device of claim 1, wherein the information recording memory comprises: a flag area in which a value used to check whether a battery is removed or a check sum area in which a check sum value used in a noise and integrity test is recorded; And a version area in which a version value of the control logic used for the control logic compatibility test is recorded, a driving record while driving the vehicle, and an information recording area in which the state of the electronic device is stored. The vehicle electronic control apparatus of claim 1, wherein the vehicle electronic controller converts a predetermined voltage output from the battery into a predetermined driving voltage only when the ignition switch is turned on to convert the driving voltage converted into the program memory and the central processing unit. An electronic control device for a vehicle further comprising a main regulator for supplying. The method of claim 1 or 3, wherein the control logic, If there is a battery removal history, the physical error of the information recording memory in which the vehicle driving information is stored is checked, and the data in the information recording memory is initialized. If the current check sum value does not match the previous check sum value, After checking the physical error of the information recording memory, the data in the information recording memory is initialized, and when the version of the control logic currently being driven does not match the version of the control logic stored in the information recording memory, the information recording. An electronic control apparatus for a vehicle, characterized by initializing data in a memory. A first step in which the vehicle ignition starts and the control logic in the electronic controller is booted; Checking whether the battery has been removed, and if the battery has been removed, a second step of initializing data in the information recording memory after inspecting a physical error in the information recording memory in which the vehicle driving information is stored; A third step of initializing the data in the information recording memory after checking a physical error of the information recording memory when it is determined that the current checksum value matches the previous checksum value and does not match; A fourth step of initializing data in the information recording memory when the version of the control logic currently being driven and the version of the control logic stored in the information recording memory do not match. Self-diagnosis / recovery method of the electronic control device for a vehicle comprising a. The method of claim 5, wherein checking whether the battery is removed in the second step, Reading a specific flag value recorded in the flag area in the information recording memory and determining whether the flag value matches the flag value of the control logic; If they do not match, recording in a different information memory that the battery has been removed Self-diagnosis / recovery method of the electronic control device for a vehicle comprising a. The method of claim 5, wherein in the third step, determining whether the current check sum value coincides with a previous check sum value includes: Determining whether a checksum value obtained by performing a checksum on the information recording memory and a checksum value recorded in the checksum area in the information recording memory coincide with each other; If the checksum values do not match, recording in different information memory Self-diagnosis / recovery method of the electronic control device for a vehicle comprising a. The information recording method of claim 5, wherein when the version of the control logic currently being driven in the fourth step does not match the version of the control logic stored in the information recording memory, information indicating that the version does not match is recorded in another information memory. Self-diagnosis / recovery method of the electronic control device for a vehicle further comprising the step of. The method of claim 5, wherein the checking of the physical error, Computing a checksum for the particular value after writing any particular value in the entire area of the information recording memory; Re-reading the recorded specific value to calculate a checksum, and determining whether the checksum values coincide with each other; If it does not match, recording in another information memory that a physical error has occurred in the information recording memory. Self-diagnosis / recovery method of the electronic control device for a vehicle comprising a. 6. The self-diagnosis of the electronic control apparatus for a vehicle according to claim 5, wherein initializing data in the information recording memory writes a specific flag value in a flag area in the information recording memory and updates a version of the control logic currently being driven. / Recovery method. The method of claim 5, wherein when the flag value does not match, the check sum value does not match, or the version value of the control logic does not match, an error counter value is increased by one, and an error is generated. Self-diagnosis / recovery method of electronic control device for vehicle that stores error counter value by 1 and saves it to other information memory when all inspection process is completed without error.

Images