KR102623649B1 - Apparatus for diagnosing supply source and Method for estimating effectiveness of diagnostic information - Google Patents

Abstract

A supply power failure diagnosis device is disclosed that can diagnose a power failure by comparing flags stored in a non-volatile memory when a failure occurs in the controller power due to unexpected external factors. The supply power abnormality diagnosis device performs diagnosis in a non-volatile memory and every driving cycle, stores diagnostic information in the non-volatile memory as a driving cycle signature before the supply power is cut off, and stores the previously stored diagnostic information as a driving cycle signature when the supply power is restarted. It is characterized by comprising an MCU (Micro Control Unit) that compares the driving cycle signature of and the current driving cycle signature generated according to the driving cycle, and diagnoses the validity of the diagnostic information according to the comparison result.

Description

Apparatus for diagnosing supply power failure and method for determining effectiveness of diagnostic information using the same {Apparatus for diagnosing supply source and Method for estimating effectiveness of diagnostic information}

The present invention relates to a technology for diagnosing power supply abnormalities, and more specifically, to a diagnostic device for diagnosing power supply abnormalities in a vehicle controller using non-volatile memory information and a method for determining the validity of diagnostic information using the same.

The vehicle controller must continuously manage the diagnostic information defined in ISO14229-1, the vehicle diagnostic standard, throughout the life of the vehicle and store it in non-volatile memory every driving cycle.

However, non-volatile memory such as EEPROM (Electrically Erasable PROM) is physically damaged every time erase and write operations are performed, so the number of times is limited, and frequent memory access shortens the lifespan of the memory.

Therefore, when storing diagnostic information, the vehicle controller often does not perform a save operation periodically, but only performs a save operation when the controller is shut down through a key off.

If diagnostic information is stored in the EEPROM only when the controller is shut down through key off, the lifespan of the EEPROM can be maintained as long as possible. However, if the power supply to the controller is cut off due to an external factor other than a normal key-off operation, the diagnostic information for the corresponding operation cycle is not saved and is terminated.

Therefore, since no diagnostic information for the corresponding driving cycle is stored, updates to the vehicle diagnostic trouble code (DTC) may be ignored or various diagnostic counters may not be updated, thereby distorting vehicle diagnostic information.

1. Republic of Korea Patent No. 10-2020-0072906

The present invention was proposed to solve the problems caused by the above background technology, and when a power failure occurs in the controller due to unexpected external factors, the power failure can be diagnosed by comparing flags stored in non-volatile memory. The purpose is to provide a device for diagnosing power supply abnormalities and a method for determining the validity of diagnostic information using the same.

Another object of the present invention is to provide a power supply abnormality diagnostic device capable of determining the validity of information stored in a non-volatile memory and a method for determining the validity of diagnostic information using the same.

In order to achieve the task presented above, the present invention provides a supply power failure diagnosis device that can diagnose power failure by comparing flags stored in non-volatile memory when a failure occurs in the controller power due to unexpected external factors. to provide.

The device for diagnosing power supply abnormalities,

non-volatile memory; and

Diagnosis is performed every driving cycle, and the diagnostic information is stored as a driving cycle signature in the non-volatile memory before the supply power is cut off. When the supply power is restarted, the previous driving cycle signature stored and the current generated according to the driving cycle are generated. It is characterized in that it includes an MCU (Micro Control Unit) that compares the driving cycle signatures and diagnoses the validity of the diagnostic information according to the comparison result.

In addition, the device is characterized by including a power management module that detects an abnormality in the supplied power and transmits a detection signal to the MCU.

In addition, the MCU is characterized by storing the diagnostic information in the non-volatile memory through an external input interrupt in advance before the supply power failure occurs.

Additionally, in the event of a sudden power failure or short circuit, the MCU is shut down before performing a save operation to store the diagnostic information in the non-volatile memory.

In addition, the driving cycle signature is one of a storage start flag indicating the start of storage of the diagnostic information, an intermediate storage completion flag indicating completion of storage of the diagnostic information, and a final storage completion flag indicating final storage completion of the diagnostic information. It is characterized by

In addition, the MCU is characterized in classifying the diagnostic information as trust information if the flags of the previous driving cycle signature and the current driving cycle signature are the same.

Additionally, the MCU is characterized in classifying the diagnostic information as unreliable information if there is a flag that is not the same between the previous driving cycle signature and the current driving cycle signature.

In addition, the MCU is characterized in that it checks whether the diagnostic information classified as unreliable information is supply power-related information and updates the diagnostic information with the supply power-related information.

On the other hand, in another embodiment of the present invention, a storage step in which an MCU (Micro Control Unit) performs a diagnosis every driving cycle and stores the diagnostic information as a driving cycle signature in the non-volatile memory before the supply power is cut off. ; A comparison step in which the MCU compares a current driving cycle signature generated according to the driving cycle with a previous stored driving cycle signature when the supply power is restarted; and a validity diagnosis step in which the MCU diagnoses the validity of the diagnostic information according to the comparison result.

At this time, the method may include, before the storage step, a power management module detecting an abnormality in the supplied power and transmitting a detection signal to the MCU.

In addition, the method may include, before the storing step, the MCU storing the diagnostic information in the non-volatile memory through an external input interrupt in advance before the supply power failure occurs.

In addition, the method performs a storage operation to store the diagnostic information in the non-volatile memory when the MCU is cut off from supply power due to a sudden power failure or short circuit before the storage step or in one of the validity diagnosis steps. Characterized in that it includes a step of shutting down before.

In addition, the validity diagnosis step may include a classification step in which the MCU classifies the diagnostic information as trust information if the flags of the previous driving cycle signature and the current driving cycle signature are the same.

At this time, the classification step may include, by the MCU, classifying the diagnostic information as unreliable information if there is a flag that is not the same among the previous driving cycle signature and the current driving cycle signature.

In addition, the classification step includes the step of the MCU checking whether the diagnostic information classified as unreliable information is supply power-related information and updating the diagnostic information with the supply power-related information. .

According to the present invention, when the power failure-related diagnosis is not stored in the previous cycle, it is recognized as an error in the next operation cycle, the power-related failure can be diagnosed, and the related diagnostic information can be updated.

Additionally, another effect of the present invention is that when an abnormal power failure or shutdown occurs, the validity of the stored value can be confirmed by checking the value of the flag stored along with the diagnostic information.

1 is a block diagram of a device for diagnosing a supply power failure according to an embodiment of the present invention.
FIG. 2 is a detailed block diagram of the MCU shown in FIG. 1.
FIG. 3 is a conceptual diagram showing a state in which there is a failure in the external power supply to the MCU (Micro Control Unit) shown in FIG. 1.
Figure 4 is a diagram showing information in an update area at the start of a driving cycle according to an embodiment of the present invention.
Figure 5 is a conceptual diagram showing a storage area of a non-volatile memory according to an embodiment of the present invention.
Figure 6 is a flowchart showing the process of storing diagnostic information according to power supply abnormality.
Figure 7 is a flow chart showing the automatic mechanism following the start of the driving cycle according to Figure 5.
Figure 8 is an example showing a storage area of a non-volatile memory at the start of an operation cycle according to an embodiment of the present invention.
FIG. 9 is an example showing the storage area of the non-volatile memory when a power failure interrupt occurs during normal operation after the start of the operation cycle according to FIG. 8.
FIG. 10 is an example showing the storage area of the non-volatile memory at the start of the next operation cycle after turning on the power failure interrupt during normal operation according to FIG. 9.

Since the present invention can be modified in various ways and can have various embodiments, specific embodiments will be illustrated in the drawings and described in detail in the detailed description. However, this is not intended to limit the present invention to specific embodiments, and should be understood to include all changes, equivalents, and substitutes included in the spirit and technical scope of the present invention.

When describing each drawing, similar reference numerals are used for similar components.

Terms such as first, second, etc. may be used to describe various components, but the components should not be limited by the terms. The above terms are used only for the purpose of distinguishing one component from another.

For example, a first component may be referred to as a second component, and similarly, the second component may be referred to as a first component without departing from the scope of the present invention. The term “and/or” includes any of a plurality of related stated items or a combination of a plurality of related stated items.

Unless otherwise defined, all terms used herein, including technical or scientific terms, have the same meaning as generally understood by a person of ordinary skill in the technical field to which the present invention pertains.

Terms defined in commonly used dictionaries should be interpreted as having a meaning consistent with the meaning in the context of the related technology, and unless clearly defined in the present application, should not be interpreted in an ideal or excessively formal sense. It shouldn't be.

Hereinafter, with reference to the attached drawings, a device for diagnosing a power supply abnormality according to an embodiment of the present invention and a method for determining the validity of diagnostic information using the same will be described in detail.

Figure 1 is a block diagram of a power supply abnormality diagnosis device 100 according to an embodiment of the present invention. Referring to FIG. 1, the supply power failure diagnosis device 100 performs diagnosis at every operation cycle and stores diagnostic information in non-volatile memory before the supply power is cut off. When the supply power is restarted, the stored diagnostic information and the current diagnosis are stored. It may be configured to include a controller 110 that compares information and diagnoses a power supply abnormality according to the comparison result, and a diagnostic tester 120 that outputs a diagnosis result.

The controller 110 may include a non-volatile memory 111, a micro control unit (MCU) 112, and the like. The non-volatile memory 111 is mainly used as EEPROM (Electrically erasable programmable read-only memory), but is not limited to SRAM (Static RAM), FRAM (Ferro-electric RAM), PRAM (Phase-change RAM), Non-volatile memory such as MRAM (Magnetic RAM) and/or DRAM (Dynamic Random Access Memory), SDRAM (Synchronous Dynamic Random Access Memory), DDR-SDRAM (Double Data Rate-SDRAM), etc. may also be used.

The MCU 112 may be a microcomputer, microprocessor, etc. Accordingly, the MCU 112 may write and store diagnostic information in the non-volatile memory 111 or read the stored diagnostic information from the non-volatile memory 111.

Additionally, the MCU 112 may transmit diagnostic information, diagnostic results, etc. to the diagnostic tester 120 connected through communication. CAN communication may be mainly used, but is not limited to this and may include LIN (Local Interconnect Network), PLC (Power Line Communication), FlexRay, CP (Control Pilot), ZigBee, and Bluetooth.

The diagnostic tester 120 performs the function of generating diagnostic data using a vehicle trouble code (DTC: Diagnostic Trouble Code) generated by the controller 110, such as an Electronic Control Unit (ECU).

Of course, notification information can also be generated using diagnostic data. In general, vehicle manufacturers produce controllers such as ECUs based on automotive electronics standards, and the software structure is also structured so that it can be applied according to the standards. Therefore, diagnostic communication, diagnostic event processing, etc. are possible. Electrical standards can be ISO14229, OBD (On Board Diagnostics) standards, etc.

FIG. 2 is a detailed block diagram of the MCU 112 shown in FIG. 1. Referring to FIG. 2, the MCU 112 includes a reading unit 210 that reads diagnostic information, a comparator 220 that compares the read diagnostic information with the current diagnostic information, and a judgment device that determines an abnormality in the supplied power according to the comparison result. It may be configured to include a unit 230 and the like.

The reading unit 210, comparison unit 220, and determination unit 230 shown in FIG. 2 refer to units that process at least one function or operation, and may be implemented in software and/or hardware. In hardware implementation, an application specific integrated circuit (ASIC), digital signal processing (DSP), programmable logic device (PLD), field programmable gate array (FPGA), processor, microprocessor, and other devices designed to perform the above-described functions. It may be implemented as an electronic unit or a combination thereof.

In software implementation, software composition components (elements), object-oriented software composition components, class composition components and task composition components, processes, functions, properties, procedures, subroutines, segments of program code, drivers, firmware, microcode, and data. , databases, data structures, tables, arrays, and variables. Software, data, etc. can be stored in memory and executed by a processor. The memory or processor may employ various means well known to those skilled in the art.

FIG. 3 is a conceptual diagram showing a state in which there is a failure in the external power supply to the MCU (Micro Control Unit) shown in FIG. 1. Referring to FIG. 3, the power management module 310 supplies the necessary supply power to the MCU 112, detects an abnormality in the supply power, and transmits a detection signal. In other words, in the event of an external power failure, an H/W (Hardware) trigger signal is transmitted. To this end, the power management module 310 may include a current sensor, voltage sensor, regulator, AC/DC (Alternating Current/Direct Current) converter, DC/DC converter, microprocessor, memory, etc.

The MCU 112 may perform an EEPROM storage operation using an external input interrupt in advance before a problem occurs in the supplied power. Of course, the MCU 112 may be shut down before performing the save operation to the non-volatile memory 111 before performing the interrupt operation in the event of a sudden power failure or short circuit.

Figure 4 is a diagram showing information in an update area at the start of a driving cycle according to an embodiment of the present invention. Referring to FIG. 4, the driving attention signature 400 corresponds to the update area at the start of the driving cycle. This driving cycle signature 400 is generated when storing diagnostic information.

Figure 5 is a conceptual diagram showing the storage area of the non-volatile memory 111 according to an embodiment of the present invention. Referring to Figure 5, this is the storage area of the non-volatile memory 111 of diagnostic information after the end of the driving cycle. That is, the driving cycle signature 400 is stored in each flag 510, 520, 530, and 540 as shown below.

That is, it includes a storage start flag 510 indicating the start of storage of the diagnostic information, intermediate storage completion flags 520 and 530 indicating storage of the diagnostic information, and a final storage completion flag 540 indicating final storage of the diagnostic information. do.

Referring to FIG. 5, diagnostic information #1 is stored according to the [A] storage start flag, and when diagnostic information #1 is saved, [B] diagnostic information #1 storage complete flag is generated, and diagnostic information #2 is stored. It is saved, and when diagnostic information #2 is saved, the diagnostic information is saved again. If there is no diagnostic information to be finally saved, the [C] final save completion flag indicating final save is generated.

Through this flag, it is possible to determine which area has been saved even if the power is shut down in the middle of the operation. Additionally, it is possible to determine whether a power failure or abnormal shutdown occurred in the previous cycle.

Figure 6 is a flowchart showing the process of storing diagnostic information according to power supply abnormality. Referring to FIG. 6, when a power supply abnormality interrupt occurs, the MCU 112 updates diagnostic information related to the supply power and starts the operation cycle termination procedure (steps S610 and S620).

Afterwards, the MCU 112 starts storing the diagnostic information in the non-volatile memory 111 and stores the diagnostic information using the driving cycle signature [S] as the storage start flag [A] (steps S630 and S640).

Afterwards, the MCU 112 checks whether all diagnostic information has been saved (step S650). In other words, check whether diagnostic information continues to be generated.

In step S650, if it is determined that all diagnostic information has been saved, the MCU 112 stores the operation cycle signature [S] as the [C] final storage completion flag and ends the operation cycle (step S660).

On the other hand, in step S650, if it is not confirmed that all diagnostic information has been saved as a result of the confirmation, proceed to save the diagnostic information, save the operation cycle signature [S] as the storage completion flag [B], and proceed to step S650. (steps S651, S653).

Figure 7 is a flow chart showing the automatic mechanism following the start of the driving cycle according to Figure 5. Referring to FIG. 7, when the vehicle key is turned on or the driving cycle of the corresponding controller begins, the MCU 112 reads the driving cycle signature and previous driving cycle diagnosis information from the non-volatile memory 111 (steps S710 and S720). .

Check whether the operation cycle signature [S] is the final storage completion flag [C] (step S730).

As a result of confirmation, in step S730, if the driving cycle signature [S] is the last saved flag [C], all diagnostic information can be trusted, and the change in the driving cycle signature is updated to start the driving cycle normal operation (step S750,S760). In other words, if all diagnostic information storage flags are the same as the existing driving cycle signature, it is determined that all diagnostic information can be trusted.

In contrast, as a result of the confirmation, in step S730, if the driving cycle signature [S] is not the final storage completion flag [C], it is checked whether each diagnostic information area storage completion flag [B] is the driving cycle signature [S] (step S740). in other words,

As a result of the confirmation, in step S740, if the driving cycle signature [S] is the final storage completion flag [C], it is classified as normal diagnosis information and the driving cycle signature is changed and updated (steps S741 and S760).

On the other hand, as a result of the confirmation, if the operation cycle signature [S] is not the final storage completion flag [C], it is classified as unreliable information, and it is determined whether this diagnostic information is information related to supply power (steps S743 and S745).

In step S745, as a result of the determination, if the diagnostic information classified as unreliable diagnostic information is determined to be power-related information, a power supply abnormality in the previous driving cycle is determined, the diagnostic information is updated, and stored in the non-volatile memory (steps S747, S760). .

In other words, if there was a power-related failure in the previous cycle and the power-related diagnostic information is determined to be unreliable, the diagnostic information can be updated at this stage. Additionally, when the judgment is completed, a new operation cycle begins, so the non-volatile memory is updated by changing the signature.

Figure 8 is an example showing a storage area of a non-volatile memory at the start of an operation cycle according to an embodiment of the present invention. Referring to FIG. 8, when the driving cycle starts, 1 is added to the driving cycle signature [S] value. That is, S = 0x1111 + 1 => S = 0x1112.

FIG. 9 is an example showing the storage area of the non-volatile memory when a power failure interrupt occurs during normal operation after the start of the operation cycle according to FIG. 8. Referring to FIG. 9, the supply power is cut off, and the increase in value stops at the diagnostic information #2 storage completion flag. In other words, the diagnostic information #2 storage completion flag is stopped at S = 0x1111. That is, the diagnostic information #2 storage completion flag and the final storage completion flag are also stored in the non-volatile memory with the value maintained at S = 0x1111.

FIG. 10 is an example showing the storage area of the non-volatile memory at the start of the next operation cycle after turning on the power failure interrupt during normal operation according to FIG. 9. Referring to FIG. 10, diagnostic information with different diagnosis & flag values due to an abnormal power cut in the previous cycle is determined to be inaccurate information.

Additionally, the steps of the method or algorithm described in relation to the embodiments disclosed herein are implemented in the form of program instructions that can be executed through various computer means such as a microprocessor, processor, CPU (Central Processing Unit), etc., and are computer readable. Can be recorded on any available medium. The computer-readable medium may include program (instruction) codes, data files, data structures, etc., singly or in combination.

The program (instruction) code recorded on the medium may be specially designed and constructed for the present invention, or may be known and usable by those skilled in the art of computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROM, DVD, and Blu-ray, and ROM and RAM. Semiconductor memory elements specially configured to store and execute program (instruction) code, such as RAM, flash memory, etc., may be included.

Here, examples of program (instruction) code include not only machine language code such as that created by a compiler, but also high-level language code that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

100: Supply power failure diagnosis device
110: controller
111: Non-volatile memory 112: MCU (Micro Control Unit)
120: diagnostic tester
210: reading unit 220: comparison unit
230: Judgment unit
310: Power management module

Claims (16)

non-volatile memory; and
Diagnosis is performed every driving cycle, and the diagnostic information is stored as a driving cycle signature in the non-volatile memory before the supply power is cut off. When the supply power is restarted, the previous driving cycle signature stored and the current generated according to the driving cycle are generated. An MCU (Micro Control Unit) that compares the driving cycle signature and diagnoses the validity of the diagnostic information according to the comparison result, wherein the driving cycle signature includes a storage start flag indicating the start of storage of the diagnostic information, and the diagnostic information. A supply power failure diagnosis device, characterized in that it is one of an intermediate storage completion flag indicating completion of storage of information and a final storage completion flag indicating completion of final storage of the diagnostic information.
According to claim 1,
A power management module that detects an abnormality in the supplied power and transmits a detection signal to the MCU.
According to claim 1,
The MCU is a supply power failure diagnosis device characterized in that the diagnostic information is stored in the non-volatile memory in advance by an external input interrupt before the supply power failure occurs. According to claim 1,
The MCU is a supply power failure diagnosis device characterized in that when the supply power is cut off due to a sudden power failure or short circuit, the MCU is shut down before performing a storage operation for storing the diagnostic information in the non-volatile memory.
delete According to claim 1,
The MCU classifies the diagnostic information as trust information if the flags of the previous driving cycle signature and the current driving cycle signature are the same.
According to claim 1,
The MCU classifies the diagnostic information as unreliable information if there is a flag that is not the same between the previous driving cycle signature and the current driving cycle signature.
According to claim 7,
The MCU checks whether the diagnostic information classified as unreliable information is supply power-related information and updates the diagnostic information with the supply power-related information.
A storage step in which an MCU (Micro Control Unit) performs diagnosis at every operation cycle and stores the diagnosis information as an operation cycle signature in non-volatile memory before the supply power is cut off;
A comparison step in which the MCU compares a stored previous driving cycle signature with a current driving cycle signature generated according to the driving cycle when the supply power is restarted; and
A validity diagnosis step in which the MCU diagnoses the validity of the diagnostic information according to the comparison result,
The driving cycle signature is characterized in that it is one of a storage start flag indicating the start of storage of the diagnostic information, an intermediate storage completion flag indicating completion of storage of the diagnostic information, and a final storage completion flag indicating final storage completion of the diagnostic information. A method of determining the validity of diagnostic information. According to clause 9,
Before the storage step, a power management module detects an abnormality in the supplied power and transmits a detection signal to the MCU.
According to clause 9,
Before the storage step, the MCU stores the diagnostic information in the non-volatile memory through an external input interrupt in advance before the supply power failure occurs.
According to clause 9,
In any one of the storage step or the validity diagnosis step, if the MCU is cut off from supply due to a sudden power failure or short circuit, shutting down before performing a storage operation to store the diagnostic information in the non-volatile memory. A method for determining the validity of diagnostic information, comprising:
delete According to clause 9,
The validity diagnosis step includes a classification step in which the MCU classifies the diagnostic information as trust information if the flags of the previous driving cycle signature and the current driving cycle signature are the same. method.
According to claim 14,
The classification step includes, by the MCU, classifying the diagnostic information as unreliable information if there is a flag that is not the same between the previous driving cycle signature and the current driving cycle signature. How to judge.
According to claim 15,
The classification step includes the MCU checking whether the diagnostic information classified as unreliable information is information related to supply power and updating the diagnostic information with the information related to supply power. How to determine effectiveness.