In-Vehicle ECU Abnormality Response via Preliminary Action
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional in-vehicle electronic control units fail to notify external entities of abnormalities, leading to impaired communication and potential safety risks when an actuator's control circuit experiences issues, as the monitoring circuit stops power supply and communication is disabled, preventing the second in-vehicle electronic control unit from responding to the abnormality.
Innovation Solution
An in-vehicle electronic control unit with a monitoring circuit that blocks control signals to the actuator, initializes the control circuit, and restarts it when conditions are met, allowing for abnormality response processing and communication with external entities, using both volatile and non-volatile memories to store diagnostic information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the monitoring circuit stops power supply to the control circuit upon detecting an abnormality, then the actuator is protected from faulty control, but communication with external entities is disabled and abnormality information cannot be transmitted
Solution Approach 1:
The control circuit performs abnormality response processing (storing diagnostic information to non-volatile memory and communicating with external entities) before the monitoring circuit stops power supply. This preliminary action ensures that abnormality information is preserved and transmitted while the control circuit is still operational, resolving the contradiction between protecting the actuator and maintaining communication capability.
2Object-affected harmful factors
If the monitoring circuit stops power supply to the control circuit immediately upon abnormality detection, then faulty control signals are blocked, but the control circuit cannot execute abnormality response processing
Solution Approach 1:
The control circuit executes abnormality response processing (storing diagnostic information and external communication) before power supply is stopped. This timing ensures that the control circuit can complete its protective functions while still operational, preventing loss of abnormality information and maintaining system productivity in the abnormality response phase.
Data Source
AI summary
A control circuit configured to control an actuator mounted in a vehicle performs a self-diagnostic procedure. A monitoring circuit is configured to monitor an operating state of the control circuit based on diagnostic information resulting from the self-diagnostic procedure. When determining that the control circuit operates abnormally, the monitoring circuit blocks a control signal output from the control circuit to the actuator and outputs a reset signal to initialize the control circuit while maintaining the diagnostic information resulting from the self-diagnostic procedure in a RAM. Furthermore, when a predetermined condition is further satisfied, the monitoring circuit stops outputting the reset signal, thereby restarting the control circuit so that the control circuit performs abnormality response processing.