Vehicle Control Communication Shutdown for MCU Fault Notification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In vehicles with multiple microcomputers, existing systems fail to notify the exterior of abnormalities when an abnormality arises at a microcomputer that can communicate directly with the exterior, as the microcomputer in an abnormal state cannot notify the exterior, and a microcomputer that cannot communicate directly with the exterior cannot assist in notification.
Innovation Solution
A vehicle control device with a first microcomputer that can communicate externally and a second microcomputer that cannot, where the communication section receives control signals from the exterior, and the second microcomputer stops the communication section's operation if the actual state of the object of control differs from the state indicated by the control signal, allowing external devices to sense the abnormality.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If only one microcomputer is equipped with external communication capability, then device complexity is reduced and cost is lowered, but reliability of abnormality notification deteriorates because the communication microcomputer itself may fail
Solution Approach 1:
The system divides microcomputer functions into two segments: one microcomputer (first microcomputer) handles external communication, while another microcomputer (second microcomputer) handles internal monitoring and control. This segmentation allows the communication function to be separated from the control function, so that if the communication microcomputer fails, the other microcomputer can still detect the failure and notify external devices through alternative means.
Solution Approach 2:
The patent introduces an intermediary mechanism where the second microcomputer acts as a mediator between the control system and external devices. When the first microcomputer (communication unit) fails, the second microcomputer receives control signals, detects the failure state, and transmits abnormality information to external devices, thereby maintaining notification reliability without requiring both microcomputers to have direct external communication capability.
2Reliability
If all microcomputers are equipped with external communication capability, then abnormality notification reliability is improved, but device complexity and construction cost increase
Solution Approach 1:
Instead of equipping all microcomputers with communication capability, the system segments the communication function to only one microcomputer while giving another microcomputer full control functionality. This reduces the overall communication hardware complexity while maintaining reliability through the failover mechanism where the second microcomputer can take over notification duties when the first fails.
Solution Approach 2:
The second microcomputer serves as a backup copy of the communication function. While it doesn't have direct external communication hardware, it can replicate the notification function by receiving control signals, detecting abnormalities, and transmitting status information to external devices, effectively copying the communication capability when needed.
3Reliability
If the microcomputer that cannot communicate directly with exterior is given communication capability, then abnormality notification is improved, but construction cost increases
Solution Approach 1:
Rather than giving the second microcomputer direct external communication capability (which would increase cost), the system uses the first microcomputer as an intermediary. The second microcomputer communicates with external devices indirectly through the first microcomputer's communication interface, reducing hardware costs while maintaining the ability to notify abnormalities.
Solution Approach 2:
The first microcomputer serves multiple functions: it acts as both the primary control unit and the communication interface for the entire system. When the second microcomputer needs to communicate abnormalities externally, it uses the first microcomputer's communication interface, making the communication hardware universal for both microcomputers and eliminating the need for separate communication interfaces.
Data Source
AI summary
A vehicle control device including a communication section, a first microcomputer that can communicate with an exterior via the communication section and a second microcomputer that cannot communicate directly with the exterior and can communicate with the first microcomputer. The communication section receives a control signal from the exterior, based on the control signal received by the communication section, the first microcomputer controls operation of an object of control, and outputs the control signal to the second microcomputer. In a case in which a state of the object of control that corresponds to the control signal and a state exhibited by the object of control differ, the second microcomputer effects control so as to stop operation of the communication section.