ECU Microcomputer Anomaly Monitoring and Reset Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional anomaly monitoring systems for microcomputers in vehicles may abruptly stop engine control when anomalous operations exceed a reference threshold, leading to unsafe situations as they fail to continuously restore normal operation, especially when reset signals are not effectively held.
Innovation Solution
An electronic control unit with a detection device for anomalous operations, a first reset device for temporary resets, a failsafe control device for safer engine operation, a counting device to track anomalous occurrences, and a second reset device to hold resets when a predetermined count is reached, ensuring continuous control and safety.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the control by the microcomputer is stopped immediately when anomalous operation occurs more frequently than a reference number of times, then the anomaly monitoring apparatus can prevent further anomalous operations, but the engine is stopped and the vehicle is rendered inoperable
Solution Approach 1:
The patent implements dynamic control strategies where the monitoring apparatus adjusts its response based on the number of anomalous operations. When the count is below the reference threshold, the system executes reset hold treatment to maintain operability. When the count exceeds the threshold, the system executes stop treatment to ensure safety. This dynamic adjustment resolves the contradiction by adapting the control state to the severity of the anomaly situation.
2Reliability
If the anomaly monitoring apparatus continuously detects anomalous operation after a reset signal is outputted, then the microcomputer can be monitored for restoration to normal state, but the microcomputer is not restored to normal state and control may be stopped
Solution Approach 1:
The patent implements preliminary reset hold treatment before the number of anomalous operations exceeds the reference threshold. This preliminary action maintains the reset signal in a held state, preventing immediate stop treatment from being executed. The system prepares to restore normal control operation by maintaining the reset signal, thereby preventing unnecessary control stops while still monitoring for anomalous operations.
3Reliability
If failsafe control is executed when anomalous operation occurs, then the controlled object is controlled to be safer, but the microcomputer control is simplified and may not restore normal operation
Solution Approach 1:
The patent executes failsafe control as a preliminary safety measure when anomalous operations are detected. This beforehand cushioning ensures that even if the microcomputer cannot be restored to normal operation, the controlled object is protected by safer control parameters. The failsafe control acts as a safety buffer that prevents catastrophic failures while maintaining a simpler control state than normal operation.
Data Source
AI summary
An ECU having a microcomputer for controlling a control object includes: a detection device that detects an anomalous operation of the microcomputer; a first reset device that outputs a reset signal for the microcomputer when the detection device detects the anomalous operation; a failsafe control device that executes a failsafe control operation for controlling the control object to be safer than the control object before resetting the microcomputer when the microcomputer is reset to a normal state; a counting device that counts a number of times of occurrence of the anomalous operation when the detection device detects the anomalous operation again after the failsafe control device starts to execute the failsafe control operation; and a second reset device that outputs the reset signal and holds an output of the reset signal when the number of times of occurrence reaches a predetermined number of times.