Controller for automobile

Abstract

To provide a technique for reducing time and effort for writing a program for inspection.SOLUTION: A controller controls an automobile. The controller is incorporated in a unit including a predetermined electric device. A self-diagnostic program for inspecting the controller itself, a product program for controlling the automobile, and a unit inspection program for inspecting the unit are written in the controller. The controller activates the self-diagnostic program prior to activation of the product program and the unit inspection program. The controller deactivates the self-diagnostic program when execution of the self-diagnostic program is completed. The controller activates the unit inspection program when detecting that the electric device is electrically connected to the controller. The controller deactivates the unit inspection program when execution of the unit inspection program is completed.SELECTED DRAWING: Figure 2

Description

[Technical Field]

[0001] The technology disclosed in this specification relates to a controller for an automobile. [Background technology]

[0002] During the manufacturing process of a device that includes a controller, a product program is written into the controller. In this specification, a product program refers to a program that realizes the original functions of the device. Patent Document 1 discloses a technology for writing an inspection program before writing the product program. An inspection program refers to a program that checks whether the product's controller (or an electrical device connected to the controller) is normal during the manufacturing process of the device. Patent Document 2 discloses an optical disk device in which an inspection program and a product program are written, and when the controller's CPU detects the inspection program, it executes the inspection program. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2005-011214 [Patent Document 2] Japanese Patent Application Laid-Open No. 2007-250146 Summary of the Invention [Problem to be solved by the invention]

[0004] In both of the technologies disclosed in Patent Documents 1 and 2, the inspection program and product program are written after the product is completed. In the case of a large device such as an automobile, the program needs to be written to the controller before the entire device (i.e., the automobile) is completed. In such cases, conventionally, the inspection program for a device connected to the controller was written to the controller after the device was connected. When multiple devices are connected to a controller, the inspection program for that device had to be written to the controller each time a device was connected. This specification provides a technology that reduces the effort required to write inspection programs. [Means for solving the problem]

[0005] This specification discloses a controller that controls an automobile. The controller is incorporated in a unit that includes a predetermined electrical device. The controller is programmed with a self-diagnostic program that tests the controller itself, a product program for controlling the automobile, and a unit inspection program that tests the unit. The controller starts the self-diagnostic program before starting the product program and the unit inspection program. The controller disables the self-diagnostic program after completing execution of the self-diagnostic program. The controller starts the unit inspection program when it detects that an electrical device is electrically connected to the controller. The controller disables the unit inspection program after completing execution of the unit inspection program. Note that "disabling a program" means making the program inoperable. "Disabling" can also be synonymous with "masking." In contrast, "terminating a program" means that the program normally terminates when the power is turned off or the vehicle is stopped.

[0006] The controller disclosed in this specification is written with a program (unit inspection program) for inspecting a unit including an electric device before the electric device is connected, and a product program, and the controller starts the unit inspection program when it detects the connection of the electric device. In other words, the detection of the connection of the electric device triggers the start of the unit inspection program. The controller disclosed in this specification can write the unit inspection program at the same time as the product program, thereby reducing the effort required to write the unit inspection program alone.

[0007] Details and further improvements of the technology disclosed in this specification are described in the following "Description of Embodiments of the Invention." [Brief explanation of the drawings]

[0008] [Figure 1] FIG. 1 is a block diagram of an automobile 2 including a controller 10 according to an embodiment. [Figure 2] FIG. 10 is a state transition diagram of a program in a controller. [Figure 3] 10 is a flowchart of the inspection process from when a program is written into the controller to when the automobile is completed. [Figure 4] This is a flowchart of the inspection process from when the program is written into the controller to when the car is completed (continuation of Figure 3). [Figure 5] This is a flowchart of the inspection process from when the program is written into the controller to when the car is completed (continuation of Figure 4). DETAILED DESCRIPTION OF THE INVENTION

[0009] A controller 10 of the embodiment will be described with reference to the drawings. The controller 10 is mounted on an automobile 2. FIG. 1 shows a block diagram of the automobile 2 including the controller 10. The automobile 2 is an electric automobile that runs on an electric motor (motor 4).

[0010] The controller 10 includes a central processing unit (CPU 11) and a storage device 12. The storage device 12 is, for example, a non-volatile memory, and programs and data written therein will not be erased even if power is cut off.

[0011] The controller 10 is incorporated into the power unit 20. The power unit 20 includes an inverter 21. The inverter 21 converts DC power from the battery 3 into AC power and supplies it to the motor 4. The inverter 21 is equipped with a current sensor 22 for measuring the AC current output to the motor 4 and a temperature sensor 23 for measuring the temperature of the inverter 21's switching elements. The current sensor 22 and the temperature sensor 23 are connected to the controller 10, and the measurement data of these sensors is sent to the controller 10. The controller 10 is also connected to a host controller 30, from which the controller 10 receives data on the target output of the motor 4. The motor 4 is also equipped with a rotation speed sensor 31 for measuring the rotation speed of the motor 4, and the rotation speed sensor 31 is also connected to the controller 10. The measurement data of the rotation speed sensor 31 is also sent to the controller 10. The controller 10 controls the inverter 21 based on the target output data and the measurement data of the sensors 22, 23, and 31. Note that the dotted arrows in FIG. 1 represent signal lines. The power unit 20 includes a number of other electrical devices, but these are not shown or described here.

[0012] During the manufacturing process of the automobile 2, multiple programs are written into the controller 10. After the controller 10 is completed, a basic program, a self-diagnosis program, a unit inspection program, and a product program are written into the controller 10. Each program is executed sequentially. Figure 2 shows a state transition diagram of the programs written into the controller 10. Note that in Figure 2 and the following figures, the symbol "PG" means "program." In the following explanation, "PG" also means "program." Figures 3-5 show flowcharts of the inspection process from when the programs are written into the controller 10 to when the automobile 2 is completed.

[0013] In the manufacturing process of the controller 10, immediately after the hardware of the controller 10 is completed, the four programs (basic PG, self-diagnosis PG, unit test PG, and product PG) mentioned above are written (FIG. 3, step S12). The four programs are written to the controller 10 all at once. Writing all the programs at once takes less time than writing the four programs individually.

[0014] The basic PG is a program equivalent to an operating system, and activates and enables / deactivates other programs. The basic PG activates when power is supplied to the controller 10 (step S13). When the basic PG is activated for the first time, it activates the self-diagnosis PG (step S14). As shown in (1) of FIG. 2, the basic PG and self-diagnosis PG are active during the manufacturing process of the controller 10. During the manufacturing process of the controller 10, the unit inspection PG and product PG are active but inactive.

[0015] The self-diagnosis PG is a program that checks whether or not there is an abnormality in the controller 10 itself when no electrical devices are connected. If the test result shows no abnormality, the self-diagnosis PG stores "self-diagnosis history: OK" in a predetermined memory area of ​​the storage device 12 (step S15). Although not shown in the figure, if an abnormality is detected in the test by the self-diagnosis PG (if "self-diagnosis history: OK" is not stored), the controller 10 turns on a predetermined caution lamp (caution lamp) provided on the controller 10 and ends the process. In this case, the self-diagnosis PG is "ended" rather than "disabled." Therefore, when the basic PG is restarted, the self-diagnosis PG is started again.

[0016] When the controller 10 (basic PG) confirms that the self-diagnosis history: OK is stored, it terminates and disables the self-diagnosis PG (steps S16: YES, S17). Since the self-diagnosis PG is "disabled," it will not be restarted thereafter. When the basic PG is restarted in the next power unit assembly process, the self-diagnosis PG will not be started, and the unit inspection PG will be started instead.

[0017] When the controller 10 is completed, it is assembled into the power unit 20. In the process of assembling the controller 10 into the power unit 20, the current sensor 22, the temperature sensor 23, and the inverter 21 are connected to predetermined terminals of the controller 10, respectively.

[0018] The unit inspection PG is a program for inspecting the power unit 20 shown in FIG. 1. When the controller 10 (basic PG) detects that the current sensor 22 is connected to the controller 10, it starts the unit inspection PG (FIG. 4, step S22: YES, S23, S24). As shown in FIG. 2 (2), in the assembly process to the power unit, the basic PG and unit inspection PG operate. The self-diagnosis PG has already been disabled, and the product PG is still in an inactive state.

[0019] The controller 10 (basic PG) monitors the resistance value of the terminal to which the current sensor 22 is connected, and determines that the current sensor 22 is connected when the resistance value drops from infinity to a predetermined resistance threshold or less. The controller 10 (basic PG) stores the connection history of the current sensor 22: OK in the storage device 12 (step S23), and starts the unit inspection PG (step S24).

[0020] The controller 10, in which the unit inspection PG is being executed, checks the status of the connected sensors (current sensor 22, temperature sensor 23) and the status of the connected inverter 21. For example, when the resistance value of the terminal to which the current sensor 22 is connected, the resistance value of the terminal to which the temperature sensor 23 is connected, and the resistance value of the terminal to which the inverter 21 is connected are each within an appropriate range, the controller 10 determines that the connected device is normal. Although not shown in the figure, if an abnormality is detected in the inspection by the unit inspection PG, the controller 10 (unit inspection PG) turns on a predetermined caution lamp (caution lamp) provided on the controller 10 and ends the processing.

[0021] If no abnormality is detected in the unit inspection PG, the controller 10 (unit inspection PG) stores unit inspection history: OK (step S25). If the current sensor connection history: OK and unit inspection history: OK are stored in the storage device 12, the controller 10 (basic PG) ends and disables the unit inspection PG (steps S26: YES, S27: YES, S28). Checking the settings of both the current sensor connection history and the unit inspection history is a foolproof process.

[0022] The product PG is a program for controlling the automobile 2 in which the controller 10 is installed. Specifically, the controller 10 installed in the power unit 20 receives target output data from the host controller 30 and controls the inverter 21 so that the output of the motor 4 follows the target output based on measurement data from various sensors. This control is the main process of the product PG. The product PG also includes processes for detecting and dealing with malfunctions (sensor abnormalities, etc.) that occur while the automobile 2 is running. If the product PG detects a serious malfunction, it will disable the automobile 2 from running.

[0023] When the power unit 20 is completed, the power unit 20 including the controller 10 is assembled into the automobile 2. In the assembly process into the automobile 2, the power unit 20 is mounted on the automobile 2, and the rotation speed sensor 31 is connected to a predetermined terminal of the controller 10.

[0024] The controller 10 (basic PG) activates the product PG when it detects that an electric unit, which is an electric device mounted on the automobile 2 and is mounted outside the power unit 20, has been connected to the controller 10. Specifically, when the controller 10 (basic PG) detects that the rotation speed sensor 31 has been connected to the controller 10, it activates the product PG (FIG. 5, steps S31: YES, S32). The controller 10 monitors the resistance value of the terminal to which the rotation speed sensor 31 is connected, and when the resistance value drops from infinity to a predetermined resistance threshold or less, it determines that the rotation speed sensor 31 has been connected.

[0025] As shown in (3) of Figure 2, during the process of assembling the power unit 20 into the automobile 2, the basic PG is in operation, the self-diagnosis PG and unit inspection PG are disabled, and the product PG is in an operable state. The product PG only becomes valid when both the self-diagnosis history and the unit inspection history are OK. After the automobile 2 is completed, the product PG starts up when the main switch of the automobile 2 is turned on. In this way, the automobile 2 is completed.

[0026] The controller 10 described in the embodiment starts the unit inspection PG when it detects the connection of an electric device (current sensor 22) included in the power unit 20. The unit inspection PG is written to the controller 10 (storage device 12) together with the basic PG during the manufacturing process of the controller 10. In this controller 10, the unit inspection PG is written together with other programs before the electric device (current sensor 22) is connected. The controller 10 can eliminate (reduce) the effort of writing the unit inspection PG alone into the controller 10.

[0027] The electrical device that triggers the start of the unit inspection PG does not have to be the current sensor 22. The power unit 20 includes an inverter 21 and a temperature sensor 23 in addition to the controller 10 and the current sensor 22. The controller 10 may start the unit inspection PG when it detects that the temperature sensor 23 is connected. Alternatively, the controller 10 may start the unit inspection PG when it detects that the inverter 21 is connected. The controller 10 may start the unit inspection PG when it detects that an electrical device included in the power unit 20 is electrically connected to the controller 10. When the unit inspection PG ends, the controller 10 (basic PG) disables the unit inspection PG.

[0028] The controller 10 may have multiple inspection PGs written in addition to the basic PG. A corresponding electric device is determined for each of the multiple inspection PGs. The correspondence between the inspection PG and the electric device is included in the basic PG. The basic PG starts up when power is supplied to the controller 10. When the basic PG detects that an electric device is connected to the controller 10, it executes the inspection PG corresponding to that electric device.

[0029] In the above embodiment, the basic PG associates the current sensor 22 with the unit inspection PG. When the basic PG detects that the current sensor 22 is connected to the controller 10, it starts the unit inspection PG. For example, a first unit inspection PG, a second unit inspection PG, and a third unit inspection PG are written in the unit inspection PG. The first unit inspection PG is a program that inspects the current sensor 22, and the second unit inspection PG is a program that inspects the temperature sensor 23. The third unit inspection PG is a program that inspects the inverter 21. When the basic PG detects that the current sensor 22 is connected to the controller 10, it starts the first unit inspection PG. When the basic PG detects that the temperature sensor 23 is connected to the controller 10, it starts the second unit inspection PG. When the basic PG detects that the rotation speed sensor 31 is connected to the controller 10, it starts the third unit inspection PG.

[0030] After disabling the unit inspection PG, the controller 10 (basic PG) puts the product PG into an executable state. After that, when the main switch (ignition switch) of the automobile 2 is turned on, the basic PG starts up the product PG.

[0031] Although specific examples of the present invention have been described in detail above, these are merely examples and do not limit the scope of the claims. The technology described in the claims includes various modifications and variations of the specific examples exemplified above. The technical elements described in this specification or drawings exhibit technical utility alone or in various combinations, and are not limited to the combinations described in the claims at the time of filing. Furthermore, the technology exemplified in this specification or drawings can achieve multiple objectives simultaneously, and achieving one of these objectives alone is technically useful. [Explanation of symbols]

[0032] 2: Automobile 3: Battery 4: Motor 10: Controller 11: CPU 12: Storage device 20: Power unit 21: Inverter 22: Current sensor 23: Temperature sensor 30: Host controller 31: Rotation speed sensor

Claims

[Claim 1] A controller for controlling an automobile, the controller being incorporated in a unit including a predetermined on-board electrical device; a self-diagnosis program for inspecting the controller itself, a product program for controlling the vehicle, and a unit inspection program for inspecting the unit are written in the controller; The self-diagnostic program is started before the product program and the unit test program are started, and the self-diagnostic program is disabled when the execution of the self-diagnostic program is completed; When it is detected that the electrical device is electrically connected to the controller, the unit inspection program is started, and when the execution of the unit inspection program is completed, the unit inspection program is disabled. Automotive controller.

Images