Electronic control device

Abstract

To provide an electronic control device capable of implementing reprogramming even when a power supply switch is turned off.SOLUTION: An electronic control device 20 includes: a device power supply 22 that is supplied with electrical power from a battery 10 and performs the supply and the supply stop of the electrical power by performing turning on / off of a power supply switch 12; a composite power supply 26 that is supplied with the electrical power from the device power supply 22 when the power supply switch 12 is turned on; and a controller 50 that is supplied with the electrical power from the composite power supply 26 and implements reprogramming. When the power supply switch 12 is turned off from the on-state and the reprogramming of the controller 50 is implemented, the device power supply 22 supplies the electrical power to the controller 50 through the composite power supply 26, by maintaining the supply of the electrical power from the device power supply 22 by the composite power supply 26 when the power supply switch 12 is turned on.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present disclosure relates to an electronic control device. [Background technology]

[0002] As described in Patent Document 1, a control device for an electric vehicle is known that includes a power supply and a first microcomputer and a second microcomputer that share the power supply, have separate control functions, and whose respective control programs can be independently rewritten. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] International Publication No. 2014 / 045785 Summary of the Invention [Problem to be solved by the invention]

[0004] In a control device such as that described in Patent Document 1, when reprogramming (rewriting a program) is performed, the power switch, which turns on and off to supply and stop the supply of power from the power supply, is sometimes turned off. When the power switch is turned off, power is not supplied from the power supply to the first microcomputer and the second microcomputer, and therefore the programs of the first microcomputer and the second microcomputer cannot be rewritten.

[0005] An object of the present disclosure is to provide an electronic control device that allows reprogramming to be performed even when the power switch is turned off. [Means for solving the problem]

[0006] The invention described in claim 1 is an electronic control device comprising: a device power supply (22) that is supplied with power from a power supply (10) and that supplies and stops the power supply by turning a power switch (12) on and off; a composite power supply (26) that is supplied with power from the device power supply when the power switch is turned on; and a control unit (50) that is supplied with power from the composite power supply and performs reprogramming; when the power switch is turned on, the composite power supply maintains the supply of power from the device power supply, and when the power switch is turned from on to off and reprogramming of the control unit is performed, the device power supply supplies power to the control unit via the composite power supply.

[0007] This allows the power supply to the control unit to be maintained even when the power switch is turned off, making it possible to reprogram the control unit.

[0008] The reference symbols in parentheses attached to each component indicate an example of the correspondence between the component and the specific components described in the embodiments described below. [Brief explanation of the drawings]

[0009] [Figure 1] 1 is a configuration diagram of a system in which an electronic control device according to an embodiment is used; [Figure 2] 4 is a flowchart showing the processing of a control unit of the electronic control device. DETAILED DESCRIPTION OF THE INVENTION

[0010] Hereinafter, embodiments will be described with reference to the drawings. In the following embodiments, identical or equivalent parts will be denoted by the same reference numerals, and description thereof will be omitted.

[0011] The electronic control unit of this embodiment is capable of performing reprogramming even when the power switch is turned off, and is used, for example, in a system mounted on a vehicle. First, this system will be described.

[0012] As shown in FIG. 1, the system includes a battery 10, a power switch 12, an external device 14, and an electronic control device 20.

[0013] The battery 10 corresponds to a power source, and is disposed outside an electronic control device 20 (described later) and connected to the electronic control device 20. The battery 10 also supplies power to the electronic control device 20.

[0014] The power switch 12 is, for example, an ignition switch of a vehicle. Furthermore, the power switch 12 is disposed outside an electronic control device 20 (described later) and is connected to the electronic control device 20. Furthermore, when the power switch 12 is turned on, it transmits a signal having a high voltage level to the electronic control device 20. Furthermore, when the power switch 12 is turned off, it transmits a signal having a low voltage level to the electronic control device 20.

[0015] The external device 14 has a computer, a communication interface, etc., and is disposed outside the electronic control device 20 described below, and is connected to the electronic control device 20. The external device 14 also causes the electronic control device 20 to perform reprogramming.

[0016] The electronic control device 20 includes a device power supply 22, a power supply-side diode 24, a composite power supply 26, a first diode 31, a second diode 32, an OR circuit 34, a transmitter / receiver 36, parallel wiring 38, and a transmitter / receiver-side diode 40. The electronic control device 20 further includes a control unit 50, a power supply-side communication line 52, a reset signal line 54, a power line 56, and a transmitter / receiver-side communication line 58.

[0017] The device power supply 22 includes a DC-DC converter, a regulator, etc. The device power supply 22 is also connected to the cathode of a power supply-side diode 24. The anode of the power supply-side diode 24 is also connected to the battery 10. Therefore, power from the battery 10 is supplied to the device power supply 22 via the power supply-side diode 24.

[0018] The composite power supply 26 is a PMIC. Power is supplied to the composite power supply 26 from the device power supply 22. PMIC is an abbreviation for Power Management Integrated Circuit.

[0019] The anode of the first diode 31 is connected to the power switch 12. The anode of the second diode 32 is connected to the composite power supply .

[0020] The OR circuit 34 is connected to the cathode of the first diode 31, the cathode of the second diode 32, and the device power supply 22. Furthermore, the OR circuit 34 performs a logical OR on the signal from the power switch 12 and the signal from the composite power supply 26. Therefore, when the voltage level of the signal from the power switch 12 is high, or when the voltage level of the signal from the composite power supply 26 is high, the OR circuit 34 transmits a signal with a high voltage level to the device power supply 22. Furthermore, when the voltage level of the signal from the power switch 12 is low and the voltage level of the signal from the composite power supply 26 is low, the OR circuit 34 transmits a signal with a low voltage level to the device power supply 22.

[0021] The transmitter / receiver 36 includes an AD converter and the like. The transmitter / receiver 36 is further connected to a parallel wiring 38. The parallel wiring 38 is made up of two parallel wirings and is connected to the cathode of a transmitter / receiver-side diode 40. The anode of the transmitter / receiver-side diode 40 is further connected to the power switch 12. Therefore, the transmitter / receiver 36 receives a signal corresponding to the on / off state of the power switch 12 via the transmitter / receiver-side diode 40 and the parallel wiring 38. This allows the transmitter / receiver 36 to monitor the on / off state of the power switch 12. The transmitter / receiver 36 also transmits a signal corresponding to the on / off state of the power switch 12 to a control unit 50, which will be described later.

[0022] The control unit 50 is mainly composed of a microcomputer and includes a CPU, ROM, flash memory, RAM, I / O, and bus lines connecting these components. The control unit 50 is also connected to one end of a power supply side communication line 52, a reset signal line 54, and a power line 56. The other ends of the power supply side communication line 52, the reset signal line 54, and the power line 56 are connected to the composite power supply 26.

[0023] Furthermore, the control unit 50 communicates with the composite power supply 26 using I2C or the like via the power supply side communication line 52. I2C stands for Inter-Integrated Circuit, and is one type of synchronous serial communication that communicates data in synchronization with a clock.

[0024] The control unit 50 also receives a reset signal, which will be described later, from the composite power supply 26 via a reset signal line 54. Furthermore, power is supplied to the control unit 50 from the composite power supply 26 via a power line 56.

[0025] The control unit 50 is also connected to one end of a transceiver-side communication line 58. The other end of the transceiver-side communication line 58 is connected to the transceiver 36. The control unit 50 communicates with the transceiver 36 via the transceiver-side communication line 58 using SPI or the like. SPI stands for Serial Peripheral Interface, and is a type of synchronous serial communication in which data is communicated in synchronization with a clock. Furthermore, the communication speed using SPI is faster than the communication speed using I2C.

[0026] When the power switch 12 is turned on from off, the voltage level of the signal from the power switch 12 changes from low to high. The high-voltage signal from the power switch 12 is then sent to the OR circuit 34. The OR circuit 34 then sends a high-voltage signal to the device power supply 22. At this time, the device power supply 22 supplies power to the combined power supply 26. The combined power supply 26 supplies power to the control unit 50 via the power line 56.

[0027] At this time, the control unit 50 executes a program stored in the ROM of the control unit 50. As a result, the control unit 50 determines whether the transceiver unit 36 ​​is malfunctioning based on a signal from the transceiver unit 36. Furthermore, the control unit 50 controls the combined power supply 26 to perform reprogramming even when the power switch 12 is turned off. Details of the malfunction determination of the transceiver unit 36 ​​and the control of the combined power supply 26 will be described later.

[0028] As described above, the system using the electronic control device 20 is configured. Next, the abnormality determination of the transceiver unit 36 ​​and the control of the composite power supply 26 when the program of the control unit 50 is executed will be described with reference to the flowchart in FIG.

[0029] In step S100, the control unit 50 determines whether or not there is an abnormality in the transceiver unit 36. As a result, the control unit 50 determines whether or not the transceiver unit 36 ​​is properly monitoring the on / off of the power switch 12.

[0030] Specifically, the control unit 50 acquires, for example, signals of the two power switches 12 received by the transceiver unit 36 ​​via the parallel wiring 38 from the transceiver unit 36. Furthermore, since the signals of these two power switches 12 are the same signal, if the transceiver unit 36 ​​is normal, the absolute value of the difference between the signals of the two power switches 12 is small. Therefore, when the absolute value of the difference between the acquired two signals is less than a threshold, the control unit 50 determines that the transceiver unit 36 ​​is normal. Furthermore, when the absolute value of the difference between the acquired two signals is equal to or greater than a threshold, the control unit 50 determines that the transceiver unit 36 ​​is abnormal. Note that the threshold is set by experiment, simulation, or the like so that abnormality determination of the transceiver unit 36 ​​can be performed.

[0031] Furthermore, instead of the above-described determination method, the control unit 50 may determine whether the transmission / reception unit 36 ​​is abnormal by using, for example, a CRC, since the control unit 50 communicates with the transmission / reception unit 36. Note that CRC is an abbreviation for Cyclic Redundancy Check.

[0032] Furthermore, if the transceiver 36 is normal, the voltage within the transceiver 36 is set to the reference voltage. Therefore, instead of the above-described determination method, the control unit 50 may determine whether the transceiver 36 is abnormal based on the voltage within the transceiver 36 and the reference voltage. Specifically, the control unit 50 acquires the voltage within the transceiver 36 from the transceiver 36. Furthermore, the control unit 50 determines that the transceiver 36 is normal when the absolute value of the difference between the acquired voltage within the transceiver 36 and the reference voltage is less than the reference threshold. Furthermore, the control unit 50 determines that the transceiver 36 is abnormal when the absolute value of the difference between the acquired voltage within the transceiver 36 and the reference voltage is equal to or greater than the reference threshold. Note that the reference threshold is set by experiment, simulation, or the like so that abnormality determination of the transceiver 36 can be performed.

[0033] If the transmitting / receiving unit 36 ​​is abnormal, the transmitting / receiving unit 36 ​​is not properly monitoring the on / off of the power switch 12, and the processing of the control unit 50 proceeds to step S120. If the transmitting / receiving unit 36 ​​is normal, the transmitting / receiving unit 36 ​​is properly monitoring the on / off of the power switch 12, and the processing of the control unit 50 proceeds to step S102.

[0034] In step S102 following step S100, the control unit 50 transmits a signal to the composite power supply 26 to change the voltage level of the signal from the composite power supply 26 to the OR circuit 34 to a high level, so that reprogramming can be performed even when the power switch 12 is turned off. As a result, the composite power supply 26 changes the voltage level of the signal from the composite power supply 26 to the OR circuit 34 to a high level. The composite power supply 26 then transmits the signal with the high voltage level to the OR circuit 34. As a result, the OR circuit 34 transmits a signal with a high voltage level to the device power supply 22, regardless of the voltage level of the on / off signal of the power switch 12. Therefore, the device power supply 22 supplies power to the composite power supply 26 even when the power switch 12 is turned off. Furthermore, the composite power supply 26 supplies power to the control unit 50 via the power line 56 even when the power switch 12 is turned off. Therefore, power is supplied to the control unit 50 even when the power switch 12 is turned off, so the control unit 50 can perform reprogramming.

[0035] Subsequently, in step S104, the control unit 50 determines whether or not the power switch 12 is off and whether or not reprogramming can be started, since reprogramming can be performed.

[0036] Specifically, the control unit 50 acquires the voltage level of the signal of the power switch 12 from the transceiver unit 36. Furthermore, when the voltage level of the acquired signal of the power switch 12 is low, the control unit 50 determines that the power switch 12 is off. Furthermore, when the voltage level of the acquired signal of the power switch 12 is high, the control unit 50 determines that the power switch 12 is on.

[0037] Furthermore, the control unit 50 determines to start reprogramming when it receives a signal for performing reprogramming from the external device 14. Furthermore, the control unit 50 determines not to start reprogramming when it does not receive a signal for performing reprogramming from the external device 14.

[0038] When the power switch 12 is on or when reprogramming is not to be started, the process of the control unit 50 returns to step S100. Furthermore, when the power switch 12 is off and when reprogramming is to be started, the process of the control unit 50 proceeds to step S106.

[0039] In step S106 following step S104, the control unit 50 performs reprogramming in response to a signal from the external device 14.

[0040] When the reprogramming of the control unit 50 is performed, the combined power supply 26 communicates with the control unit 50 to determine whether or not the control unit 50 is malfunctioning.

[0041] Specifically, the composite power supply 26 uses, for example, a watchdog timer to determine whether the control unit 50 is malfunctioning.

[0042] Furthermore, instead of the above determination method, the composite power source 26 may calculate a value for determining whether the control unit 50 is malfunctioning together with the control unit 50, and determine whether the value calculated by the composite power source 26 matches the value calculated by the control unit 50. In this way, the composite power source 26 may determine whether the control unit 50 is malfunctioning. In this case, when the value calculated by the composite power source 26 matches the value calculated by the control unit 50, the composite power source 26 determines that the control unit 50 is malfunctioning. On the other hand, when the value calculated by the composite power source 26 does not match the value calculated by the control unit 50, the composite power source 26 determines that the control unit 50 is malfunctioning.

[0043] Furthermore, instead of the above-described determination method, the composite power source 26 may determine whether the control unit 50 is malfunctioning by determining whether or not it can receive a signal from the control unit 50. In this case, the composite power source 26 determines that the control unit 50 is malfunctioning when it can receive a signal from the control unit 50. Furthermore, the composite power source 26 determines that the control unit 50 is malfunctioning when it cannot receive a signal from the control unit 50.

[0044] When the control unit 50 is abnormal, the control unit 50 cannot properly perform reprogramming. Therefore, when the control unit 50 is abnormal, the combined power supply 26 sets the voltage level of the signal from the combined power supply 26 to the OR circuit 34 to low. Furthermore, the combined power supply 26 sends a signal with a low voltage level to the OR circuit 34. At this time, the voltage level of the signal from the power switch 12 is low, and the voltage level of the signal from the combined power supply 26 is low. Therefore, the OR circuit 34 sends a signal with a low voltage level to the device power supply 22. Therefore, the device power supply 22 stops supplying power to the combined power supply 26. Furthermore, the combined power supply 26 stops supplying power to the control unit 50. This reduces the waste of power consumed within the electronic control device 20 when reprogramming of the control unit 50 is not properly performed. Note that when the control unit 50 is normal, the combined power supply 26 maintains the voltage level of the signal from the combined power supply 26 to the OR circuit 34 at high.

[0045] In step S108 following step S106, the control unit 50 determines whether the reprogramming performed in step S106 is complete. If the reprogramming is not complete, the process of the control unit 50 returns to step S106, and reprogramming is performed until the reprogramming is complete. Furthermore, when the reprogramming is complete, the process of the control unit 50 proceeds to step S110.

[0046] Here, when reprogramming is complete, the combined power supply 26 may send a reset signal via a reset signal line, thereby initializing the control unit 50 and initializing the signal sent from the control unit 50 to the combined power supply 26. When the signal sent from the control unit 50 to the combined power supply 26 is initialized, the voltage level of the signal from the combined power supply 26 to the OR circuit 34 changes from high to low, which is the initial state. At this time, the voltage level of the signal from the power switch 12 is low, and the voltage level of the signal from the combined power supply 26 is low. Therefore, the OR circuit 34 sends a signal with a low voltage level to the device power supply 22. Therefore, the device power supply 22 stops supplying power to the combined power supply 26. Furthermore, the combined power supply 26 stops supplying power to the control unit 50. Therefore, although reprogramming is complete, the control unit 50 cannot check the reprogramming that has been performed.

[0047] Therefore, in step S110 following step S108, the control unit 50 transmits to the composite power source 26 a signal that causes the voltage level of the signal from the composite power source 26 to the OR circuit 34 to be maintained at a high level.

[0048] Next, in step S112, the control unit 50 receives a reset signal from the composite power supply 26 via the reset signal line 54. This initializes the control unit 50. However, the signal from the control unit 50 in step S110 causes the composite power supply 26 to maintain the voltage level of the signal from the composite power supply 26 to the OR circuit 34 at a high level. As a result, the device power supply 22 maintains the supply of power to the composite power supply 26. Furthermore, the composite power supply 26 maintains the supply of power to the control unit 50.

[0049] Subsequently, in step S114, the control unit 50 checks the reprogramming performed in step S106.

[0050] Next, in step S116, the control unit 50 determines whether the reprogramming check performed in step S114 is complete. If the reprogramming check is not complete, the control unit 50 returns to step S114 and continues to perform reprogramming checks until the reprogramming check is complete. Furthermore, if the reprogramming check is complete, the control unit 50 proceeds to step S118.

[0051] In step S118 following step S116, the reprogramming and its check are completed. Therefore, in order to terminate the processing of the control unit 50, the control unit 50 sends a signal to the combined power source 26 to change the voltage level of the signal from the combined power source 26 to the OR circuit 34 to a low level.

[0052] As a result, the composite power supply 26 sets the voltage level of the signal from the composite power supply 26 to the OR circuit 34 to low. The composite power supply 26 also sends a signal with a low voltage level to the OR circuit 34. At this time, the voltage level of the signal from the power switch 12 is low, and the voltage level of the signal from the composite power supply 26 is also low. Therefore, the OR circuit 34 sends a signal with a low voltage level to the device power supply 22. Therefore, the device power supply 22 stops supplying power to the composite power supply 26. Furthermore, the composite power supply 26 stops supplying power to the control unit 50. Therefore, the processing of the control unit 50 ends.

[0053] Step S120, which follows step S100, is performed when an abnormality occurs in the transceiver unit 36. When an abnormality occurs in the transceiver unit 36, the transceiver unit 36 ​​does not properly monitor the on / off state of the power switch 12. As a result, the control unit 50, which communicates with the transceiver unit 36, is unable to properly perform processing, and there is a high possibility that the power supplied to the control unit 50 will be wasted.

[0054] Therefore, in step S120, the control unit 50 transmits to the composite power source 26 a signal that changes the voltage level of the signal from the composite power source 26 to the OR circuit 34 to low level. Then, the processing of the control unit 50 ends.

[0055] As a result, the composite power supply 26 sets the voltage level of the signal from the composite power supply 26 to the OR circuit 34 to low. The composite power supply 26 also sends a signal with a low voltage level to the OR circuit 34. At this time, the voltage level of the signal from the composite power supply 26 is low, but because the power switch 12 is on, the voltage level of the signal from the power switch 12 is high. As a result, the OR circuit 34 sends a signal with a high voltage level to the device power supply 22.

[0056] At this time, when the power switch 12 is turned off, the voltage level of the signal from the power switch 12 becomes low. Therefore, when the power switch 12 is turned off, the voltage level of the signal from the power switch 12 becomes low, and the voltage level of the signal from the combined power supply 26 also becomes low. Therefore, when the power switch 12 is turned off, the OR circuit 34 sends a signal with a low voltage level to the device power supply 22. Therefore, when the power switch 12 is turned off, the device power supply 22 stops supplying power to the combined power supply 26. Furthermore, when the power switch 12 is turned off, the combined power supply 26 stops supplying power to the control unit 50. Therefore, when the power switch 12 is turned from on to off while the transceiver unit 36 ​​is abnormal, the combined power supply 26 stops supplying power from the device power supply 22. This reduces waste of power consumed within the electronic control device 20 when the transceiver unit 36 ​​and the control unit 50 are unable to perform processing properly.

[0057] As described above, the control unit 50 performs the processing. Next, it will be explained how the electronic control unit 20 of this embodiment can perform reprogramming even when the power switch 12 is turned off.

[0058] The electronic control device 20 includes a device power supply 22, a combined power supply 26, and a control unit 50. The device power supply 22 receives power from the battery 10 and starts and stops power supply by turning the power switch 12 on and off. The combined power supply 26 receives power from the device power supply 22 when the power switch 12 is turned on. The control unit 50 performs reprogramming while receiving power from the combined power supply 26. In addition, in response to a signal from the control unit 50 in step S102, the combined power supply 26 maintains the supply of power from the device power supply 22 when the power switch 12 is turned on. As a result, when the power switch 12 is turned from on to off and the control unit 50 is reprogrammed, as in steps S104 and S106, the device power supply 22 supplies power to the control unit 50 via the combined power supply 26 and the power line 56.

[0059] As a result, even if the power switch 12 is turned off, the supply of power to the control unit 50 is maintained, making it possible to reprogram the control unit 50.

[0060] Furthermore, the electronic control device 20 of this embodiment also provides the following effects.

[0061] [1] In step S110, a signal from the control unit 50 causes the combined power supply 26 to maintain power supply from the device power supply 22 when the reprogramming of the control unit 50 is complete.

[0062] This maintains the supply of power to the control unit 50 even if the control unit 50 receives a reset signal or the like that initializes the control unit 50. Therefore, even if the control unit 50 receives a reset signal or the like, it becomes possible to check the reprogramming that is performed after the reprogramming of the control unit 50 is completed.

[0063] [2] When reprogramming of the control unit 50 is performed, the combined power supply 26 communicates with the control unit 50 to determine whether the control unit 50 is malfunctioning. Furthermore, if the control unit 50 is malfunctioning, the combined power supply 26 stops the supply of power from the device power supply 22.

[0064] This reduces the waste of power consumed within the electronic control device 20 when reprogramming of the control unit 50 is not performed normally. Furthermore, when the power source supplying power to the device power supply 22 is the battery 10, the battery 10 is prevented from running down.

[0065] [3] As in step S100, the control unit 50 determines whether the transceiver unit 36 ​​is malfunctioning based on a signal from the transceiver unit 36. Also, in step S120, in response to a signal from the control unit 50, the combined power supply 26 stops the supply of power from the device power supply 22 when the power switch 12 is changed from on to off if the transceiver unit 36 ​​is malfunctioning.

[0066] This reduces the waste of power consumed within the electronic control device 20 when the processing of the transceiver 36 and the control unit 50 cannot be performed properly. Furthermore, when the power source supplying power to the device power supply 22 is the battery 10, the battery 10 is prevented from running down.

[0067] (Other embodiments) The present disclosure is not limited to the above-described embodiments, and appropriate modifications can be made to the above-described embodiments. Furthermore, it goes without saying that the elements constituting the embodiments in the above-described embodiments are not necessarily essential unless they are specifically stated as essential or are considered to be clearly essential in principle.

[0068] The controller and the method described herein may be implemented by a special-purpose computer configured with a processor and memory programmed to perform one or more functions embodied in a computer program. Alternatively, the controller and the method described herein may be implemented by a special-purpose computer configured with a processor configured with one or more dedicated hardware logic circuits. Alternatively, the controller and the method described herein may be implemented by one or more special-purpose computers configured with a processor and memory programmed to perform one or more functions in combination with a processor configured with one or more hardware logic circuits. Furthermore, the computer program may be stored as instructions executed by a computer on a computer-readable non-transitory tangible storage medium.

[0069] In the above embodiment, the power supply that supplies power to the device power supply 22 is the battery 10. However, the power supply that supplies power to the device power supply 22 is not limited to the battery 10, and may be a system power supply or the like.

[0070] In the above embodiment, the power switch 12 is an ignition switch of the vehicle. However, the power switch 12 is not limited to being an ignition switch of the vehicle, and may be any switch that supplies power within the electronic control device 20.

[0071] (Aspects of the present disclosure) [Point 1] An electronic control device, a device power supply (22) that receives power from a power source (10) and that starts and stops the power supply by turning a power switch (12) on and off; a composite power supply (26) to which power is supplied from the device power supply when the power switch is turned on; a control unit (50) that receives power from the combined power supply and performs reprogramming; Equipped with When the power switch is turned on, the combined power supply maintains the supply of power from the device power supply, so that when the power switch is turned from on to off and reprogramming of the control unit is performed, the device power supply supplies power to the control unit via the combined power supply. [Point 2] 2. The electronic control device according to claim 1, wherein the combined power supply maintains the supply of power from the device power supply when reprogramming of the control unit is completed. [Point 3] The composite power supply comprises: When the reprogramming of the control unit is performed, by communicating with the control unit, it is determined whether the control unit is abnormal; 3. The electronic control device according to aspect 1 or 2, wherein when the control unit is abnormal, the supply of power from the device power supply is stopped. [Point 4] The electronic control device further includes a transceiver unit (36) that receives a signal corresponding to the on / off state of the power switch and transmits the signal corresponding to the on / off state of the power switch to the control unit, The control unit determines whether the transmitting and receiving unit is abnormal based on the signal from the transmitting and receiving unit, The electronic control device according to any one of Aspects 1 to 3, wherein the composite power supply stops the supply of power from the device power supply when the power switch is changed from on to off in the event of an abnormality in the transmitter / receiver unit. [Explanation of symbols]

[0072] 10 Battery 12 Power switch 20 Electronic control device 22 Device power supply 26 Combined power supply 36 Transmitter / Receiver 50 control section

Claims

1. An electronic control device, a device power supply (22) that receives power from a power source (10) and that starts and stops the power supply by turning a power switch (12) on and off; a composite power supply (26) to which power is supplied from the device power supply when the power switch is turned on; a control unit (50) that receives power from the composite power supply and performs reprogramming; Equipped with When the power switch is turned on, the combined power supply maintains the supply of power from the device power supply, so that when the power switch is turned from on to off and reprogramming of the control unit is performed, the device power supply supplies power to the control unit via the combined power supply.

2. 2. The electronic control device of claim 1, wherein the combined power supply maintains power supply from the device power supply when reprogramming of the control unit is complete.

3. The composite power supply comprises: When the reprogramming of the control unit is performed, by communicating with the control unit, it is determined whether the control unit is abnormal; 2. The electronic control device according to claim 1, wherein when the control unit is abnormal, the supply of power from the device power supply is stopped.

4. The electronic control device further includes a transceiver (36) that receives a signal corresponding to the on / off state of the power switch and transmits the signal corresponding to the on / off state of the power switch to the control unit, The control unit determines whether the transmitting and receiving unit is abnormal based on the signal from the transmitting and receiving unit, 4. The electronic control device according to claim 1, wherein the composite power supply stops the supply of power from the device power supply when the power switch is turned from on to off in the event of an abnormality in the transmitting / receiving unit.

Images