Electronic controller apparatus

Abstract

To provide an electronic controller apparatus which can prevent any false operation even if a plurality of ECUs are integrated into a single ECU.SOLUTION: An electronic controller apparatus 1 according to the present invention, when an activation factor A (switch) of an A-application 11a of a main microcomputer 11 mounted with a first application is set to its ON state, activates the A-application 11a and outputs a monitoring signal (WDG), and, when a monitoring microcomputer 12 detects any abnormality based on the monitoring signal, resets the main microcomputer 11.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present disclosure relates to electronic control devices. [Background technology]

[0002] Patent Document 1 discloses a technique that prevents malfunctions when multiple systems are integrated and implemented in a single ECU (Electronic Control Unit) and activated according to other system requirements. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2006-327217 Summary of the Invention [Problem to be solved by the invention]

[0004] However, when multiple ECUs that start up using different power sources are integrated into a single ECU, the startup factors differ from conventional startup factors, and there is a risk that the ECU's application (hereinafter simply referred to as "app") will start up at an unintended time, causing malfunctions, leaving room for improvement.

[0005] The present disclosure has been made in consideration of the above, and aims to provide an electronic control device that can prevent malfunctions even when multiple ECUs are integrated into a single ECU. [Means for solving the problem]

[0006] In order to solve the above-mentioned problems and achieve the objectives, the electronic control device of the present disclosure is an electronic control device that controls multiple microcontrollers with a single power supply, and when a switch for a first application is ON, a first microcontroller that is equipped with a first application starts the first application and outputs a monitoring signal, and when a second microcontroller that is equipped with a second microcontroller that is equipped with a second application detects an abnormality based on the monitoring signal, resets the first microcontroller. [Effects of the Invention]

[0007] According to the present disclosure, it is possible to prevent malfunctions even when multiple ECUs are integrated into one ECU. [Brief explanation of the drawings]

[0008] [Figure 1] FIG. 1 is a block diagram showing a functional configuration of an electronic control device according to an embodiment. [Figure 2] FIG. 2 is a diagram of a start-up and end sequence in an electronic control device according to an embodiment. [Figure 3] FIG. 3 is a table showing an example of application start conditions for an electronic control device according to an embodiment. [Figure 4] FIG. 4 is a flowchart showing an outline of the startup process executed by the main microcomputer of the electronic control unit according to one embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0009] Hereinafter, an electronic control device according to an embodiment of the present disclosure will be described with reference to the drawings. Note that the components in the following embodiments include those that are easily replaceable by those skilled in the art, or those that are substantially identical. Furthermore, the drawings referred to in the following description merely show a schematic representation of the shape, size, and positional relationship to the extent that the contents of the present disclosure can be understood. In other words, the present disclosure is not limited to only the shape, size, and positional relationship illustrated in each drawing.

[0010] [Configuration of electronic control device] Fig. 1 is a block diagram showing the functional configuration of an electronic control device according to one embodiment. The electronic control device 1 (integrated ECU) shown in Fig. 1 is composed of a power supply generating unit 10, a main microcomputer 11 functioning as a first microcontroller, a monitoring microcomputer 12 functioning as a second microcontroller, and a bus line connecting these components. The electronic control device 1 is mounted on a vehicle.

[0011] The power supply generating unit 10 receives various external signals and outputs the power supply state and activation requirements to the main microcomputer 11 and the monitoring microcomputer 12. Specifically, the power supply generating unit 10 receives signals of activation factor A or activation factor B from a timer, a battery, a push switch, a brake switch, an ignition switch, a communication IC, etc. The power supply generating unit 10 is configured using a power supply IC, etc.

[0012] The main microcomputer 11 is configured by linking an application (hereinafter simply referred to as "application") program, A-application 11a, and a hardware-dependent program, platform 11b. When activation factor A (switch) is input via the power supply generation unit 10, the main microcomputer 11 turns on the power, activates A-application 11a, and outputs a monitoring signal (WDG: Watchdog) to the monitoring microcomputer 12. A-application 11a is a group of applications that run when the ignition is turned on, such as an A system (e.g., a powertrain-related application), and includes engine control, transmission control, etc. Platform 11b notifies A-application 11a of the microcomputer power supply input from the power supply generation unit 10. That is, platform 11b notifies A-application 11a of activation factors A and B. A-application 11a determines whether to operate based on the requirements (signals) notified by platform 11b, and activates if its own operating conditions are met, and does not activate if its own operating conditions are not met.

[0013] The monitoring microcontroller 12 is configured by linking a main microcontroller monitor 12a (main microcontroller monitoring application) that monitors the main microcontroller 11, a B application program B 12b, and a hardware-dependent program platform 12c. The monitoring microcontroller 12 monitors the abnormal state of the main microcontroller 11. Specifically, the monitoring microcontroller 12 resets the main microcontroller 11 when it detects an abnormality based on a monitoring signal (WDG) input from the main microcontroller 11. The B application 12b comprises a B system, such as power management, push start, eco-run, and starting / charging. The platform 11b notifies the main microcontroller monitor 12a in response to the microcontroller power and monitoring signal (WDG) input from the power generation unit 10. That is, the platform 11b notifies the main microcontroller monitor 12a of the monitoring signal. The main microcontroller monitor 12a determines whether to operate based on the requirements (signals) notified from the platform 12c, and starts the application if its operating conditions are met, and does not start the application if its operating conditions are not met.

[0014] [Start-up and shutdown sequence of electronic control unit] Next, the startup and shutdown sequence of the electronic control unit 1 will be described in detail. Fig. 2 is a diagram showing the startup and shutdown sequence in the electronic control unit 1. Fig. 3 is a table showing an example of application startup conditions. Fig. 2 shows, from the top, the operation sequences of startup factor A, startup factor B, power supply generation unit 10, main microcomputer 11, and monitoring microcomputer 12.

[0015] 2, the main microcomputer 11 starts the A-application 11a when the activation factor A is turned on in the platform 11b. Specifically, when the activation factor A is turned on in the platform 11b, the main microcomputer 11 initializes the A-application 11a and executes periodic processing.

[0016] Next, the main microcomputer 11 terminates the A-application 11a when the activation factor A is turned OFF. Specifically, the main microcomputer 11 executes a termination process to terminate the A-application 11a when the activation factor A is turned OFF, and stops the WDC when the next activation factor A is turned ON.

[0017] In this case, the monitoring microcomputer 12 monitors the main microcomputer 11, and if it detects a WDC abnormality, it resets the main microcomputer 11. This causes the main microcomputer 11 to initialize the A-application 11a and execute periodic processing. That is, the monitoring microcomputer 12 terminates the A-application 11a when activation factor A is turned OFF, and inputs a reset the next time activation factor A is turned ON, thereby terminating and initializing the A-application 11a and preventing malfunctions.

[0018] [Main microcomputer startup process] Next, a description will be given of the startup process executed by the main microcomputer 11. FIG.

[0019] As shown in FIG. 4, when the main microcomputer 11 is powered on (step S101), it initializes the platform 11b (step S102).

[0020] Next, the main microcomputer 11 determines whether the start-up factor A is ON (step S103), and if the start-up factor A is ON (step S103: Yes), it performs a normal start-up (step S104) and returns to step S103. Here, normal start-up means that the main microcomputer 11 initializes the A-application 11a and executes periodic processing.

[0021] In step S103, if the start factor A is not ON (step S103: No), the main microcomputer 11 executes the termination process (step S105).

[0022] Next, the main microcomputer 11 determines whether the start factor A is ON (step S106), and if the start factor A is ON (step S106: Yes), stops the WDC (step S107) and resets the A-application 11a (step S108).

[0023] Thereafter, the main microcomputer 11 determines whether the power supply has been turned off (step S109), and if the power supply has been turned off (step S109: Yes), the main microcomputer 11 terminates this processing, whereas if the power supply has not been turned off (step S109: No), the main microcomputer 11 returns to step S102.

[0024] In step S105, if the start factor A is not ON (step S106: No), the process waits until the start factor A is ON.

[0025] According to the embodiment described above, when the monitoring microcontroller 12 detects an abnormality based on the monitoring signal (WDG) input from the main microcontroller 11, the main microcontroller 11 is reset. Therefore, the configuration in which the main microcontroller 11 and the monitoring microcontroller 12 are connected by a single power supply can be maintained, as was the case before the integration of multiple ECUs. Therefore, the main microcontroller 11 can be controlled in the same manner as in the conventional configuration without increasing the number of microcontrollers.

[0026] (Other forms) Further advantages and modifications will readily occur to those skilled in the art. The invention in its broader aspects is not limited to the specific details and representative embodiments shown and described above. Accordingly, various modifications may be made without departing from the spirit or scope of the general inventive concept as defined by the appended claims and their equivalents.

[0027] Although some of the embodiments of the present application have been described in detail above with reference to the drawings, these are merely examples, and the present invention can be implemented in other forms that have undergone various modifications and improvements based on the knowledge of those skilled in the art, including the aspects described in the disclosure of the present invention. [Explanation of symbols]

[0028] 1. Electronic control device 10 Power generation section 11 Main microcomputer 11a A-App 11b,12c Platform 12 Monitoring microcomputer 12a Main microcomputer monitoring 12b B App

Claims

[Claim 1] An electronic control device that controls multiple microcontrollers with one power supply, a first microcontroller having a first application installed therein starts the first application and outputs a monitoring signal when a switch of the first application is turned on; resetting the first microcontroller when a second microcontroller having a second application installed therein detects an abnormality based on the monitoring signal; Electronic control unit.

Images