Patent Application
20140117779
This application claims priority from and the benefit under 35 U.S.C. ยง119(a) of Korean Patent Application No 10-2012-0120356, filed on Oct. 29, 2012, which is hereby incorporated by reference for all purposes as if fully set forth herein.
1. Field of the Invention
The present invention relates to an electronic control apparatus, and more particularly to a method of checking a reset function in an electronic control apparatus.
2. Description of the Prior Art
Introduction of an Electric Control Unit (ECU) used in a car has strengthened a function of stability. A currently used Electric Power Steering (EPS) uses a sub-Motor Control Unit (MCU) that senses an abnormal operation of an MCU and resets the MCU when the MCU malfunctions. However, the current EPS does not check a reset function which is a final goal associated with the sub-MCU.
In addition to the EPS, an electronic control apparatus including sub-controller that monitors a main controller and generates a reset signal does not check a reset function which is a final goal of the sub-controller, either.
Referring to
When the sub-controller 12 performs the reset function normally, the main controller 11 that malfunctions may return to normal state through resetting. However, the sub-controller 12 abnormally performs the reset function, the main controller 11 that malfunctions may not return to the normal state through resetting.
Accordingly, the present invention has been made to solve the above-mentioned problems occurring in the prior art, and an object of the present invention is to provide a method of checking whether a reset function of a sub-controller normally operates.
In order to accomplish this object, there is provided an electronic control apparatus for checking a reset function, the electronic control apparatus including: a main controller that outputs a test failure signal, senses a reset signal output from a sub-controller in response to the test failure signal, and checks a reset function of the sub-controller; and the sub-controller that senses the test failure signal, outputs the reset signal, and controls the reset signal not to be output to a reset pin of the main controller.
In accordance with another aspect of the present invention, there is provided a method for an electronic control apparatus to check a reset function, the method to a reset pin of a main controller from a sub-controller; outputting a test failure signal from the main controller to the sub-controller; outputting a reset signal from the sub-controller in response to the test failure signal; and sensing, by the main controller, the reset signal so as to check a reset function of the sub-controller.
According to the present invention as described above, whether a sub-controller normally performs a reset function is checked.
The above and other objects, features and advantages of the present invention will be more apparent from the following detailed description taken in conjunction with the accompanying drawings, in which:
Referring to
Referring to
The failure signal output unit 30 of the main controller 110 outputs a test failure signal. The test failure signal is one of the signals output when the main controller 110 is in a failure state. The main controller 110 stores, in a data form, one of the signals output when the main controller 110 is in the failure state or stores a signal pattern, and generates a signal using the stored data or the pattern so as to output a test failure signal. The main controller 110 further includes a separate failure signal generator, and controls the failure signal output unit 330 to output a test failure signal using the failure signal generator.
When the failure signal output unit 330 of the main controller 110 outputs a test failure signal, the signal is transferred to the failure signal receiving unit 360 of the sub-controller 120 through a failure signal transceiving line 140. The test failure signal is identical to a normal failure signal that the sub-controller 120 may recognize and thus, when the sub-controller 120 senses a test failure signal that is received through the failure signal receiving unit 360, the sub-controller 120 generates a reset signal.
The generated reset signal is output through the reset signal output unit 340 of the sub-controller 120. The reset signal is a signal that may be transferred to the reset pin of the main controller 110 and may enable resetting to be executed in the main controller 110. Therefore, in a case of a test failure signal, the reset signal is prevented from being transmitted to the reset pin of the main controller 110. The reset signal output blocking unit 350 of the sub-controller 120 controls the reset signal generated by the test failure signal to not be output to the reset pin of the main controller 110.
The reset signal receiving unit 310 of the main controller 110 receives a reset signal from the sub-controller 120 when it is not in a test state that transmits a test failure signal and checks a reset function, so as to enable the main controller 110 to perform resetting. However, the reset signal generated by the test failure signal is not output to the reset pin of the main controller 110 and thus, the reset signal receiving unit 310 does not receive the reset signal.
A reset signal, of which output to the reset pin of the main controller 110 is blocked, is transferred to the reset function check unit 320 of the main controller 110. The reset function check unit 320 senses a reset signal output from the sub-controller 120 in response to a test failure signal, and checks a reset function of the sub-controller 120. The test failure signal is recognized by the sub-controller 120 equivalently in the same manner as a normal failure signal and thus, the sub-controller 120 outputs a reset signal in response to the test failure signal, and the reset function check unit 320 of the main controller 110 senses the reset signal and checks the reset function of the sub-controller 120.
When the sub-controller 120 normally performs the reset function, the sub-controller 120 outputs a normal reset signal with respect to a test failure signal, and the reset function check unit 320 of the main controller 110 senses the reset a signal and determines that the reset function of the sub-controller 120 is normal. Conversely, when the sub-controller 120 malfunctions, and abnormally performs the reset function, the sub-controller 120 may not output a normal reset signal with respect to a test failure signal and the reset function check unit 320 of the main controller 110 senses an abnormal reset signal or fails to sense a normal reset signal from the sub-controller 120 for at least a predetermined period of time and thus, the reset function check unit 320 determines that the reset function of the sub-controller 120 is in a failure state.
Although not illustrated in
Referring to
Referring continuously to
Referring continuously to
Referring again to
The reset pin 420 of the main controller 110 and the reset signal output pin 440 of the sub-controller 120 are connected through the switch 470. While reset function checking is not performed, the switch 470 is in an ON state and thus, the sub-controller 120 senses a failure signal of the main controller 110 and outputs a reset signal through the reset signal output pin 440, and the main controller 110 receives the reset signal through the reset pin 420 and performs resetting.
Conversely, while reset function checking is performed, the switch 470 is in an OFF state. In other words, the sub-controller 120 further includes the switch 470 in the reset signal output pin 440 that outputs a reset signal, and turns off the switch 470 so as to control a reset signal output in response to a test failure signal not to be output to the reset pin 420 of the main controller 110.
In this example, to sense the reset signal which is not output to the reset pin 420 of the main controller 110 since the switch 470 is turned off, the reset function check pin 410 of the main controller 110 is connected between the reset signal output pin 440 of the sub-controller 120 and the switch 470. The main controller 110 senses, between the reset signal output pin 440 and the switch, the reset signal output from the sub-controller 120, and checks a reset function of the sub-controller 120.
The switch 470 is a semi-conductor switch, such as a transistor. Examples of the semi-conductor switch include a transistor, a Field Effect Transistor (FET), and the like. The semi-conductor switch turns on and off a switch by inputting a control signal to a switch on/off control signal input unit such as a base (for a transistor) or a gate (for an FET). When the switch 470 is a transistor, the sub-controller 120 connects the reset signal output blocking pin 450 to a base of the transistor, and outputs a signal to the reset signal output blocking pin 450 so as to turn off the transistor.
The failure signal output pin 430 of the main controller 110 provides a path that is connected to the failure signal receiving pin 460 of the sub-controller 120, and in which a test failure signal output from the main controller 110 is transferred to the sub-controller 120.
Although it is described that the sub-controller 120 performs a function of controlling a reset signal output in response to a test failure signal not to be output to the reset pin 420 of the main controller 110, this is merely an embodiment of the present invention. A function of changing an output path so that a reset signal is not output to the reset pin 420 of the main controller 110 is performed by the main controller 110. For example, a reset signal output blocking block (not illustrated) such as the reset signal output blocking unit 350 that outputs an on/off control signal to the switch 470 of
The electronic control apparatus 100 that checks the reset function according to an embodiment of the present invention has been described. Hereinafter, a method for the electronic control apparatus 100 to check a reset function according to an embodiment of the present invention will be described. The method of checking a reset function according to an embodiment of the present invention may be performed by the electronic control apparatus 100 as illustrated in
Referring to
The sub-controller 120 blocks outputting a reset signal to the reset pin 420 of the main controller 110 in step S510. This is to prevent the main controller 110 from being reset by the reset signal generated in response to a test failure signal in a process in which the electronic control apparatus 100 checks a reset function of the sub-controller 120.
In step S510 that blocks outputting the reset signal to the reset pin 420, the sub-controller 120 further includes a switch in the reset signal output pin 440 that outputs a reset signal, and turns off a switch so as to block outputting the reset signal to the reset pin 420 of the main controller 110.
The main controller 110 outputs a test failure signal to the sub-controller 120 in step S520. The test failure signal is one of the signals output when the main controller 110 is in a failure state. The main controller 110 stores, in a form of data, one of the signals output when the main controller 110 is in a failure state or stores a signal pattern, and generates a signal using the stored data or pattern so as to output a test failure signal. The main controller 110 further includes a failure signal generator, and outputs a test failure signal using the failure signal generator.
The sub-controller 120 generates a reset signal based on the test failure signal output from the main controller 110. The generated reset signal is output to the main controller 110 in step S530.
The main controller 110 senses the reset signal output from the sub-controller 120, and checks a reset function of the sub-controller in step S540. When the sub-controller 120 further includes a switch in the reset signal output pin 440 that outputs the reset signal, the main controller 110 senses, between the reset signal output pin 440 and the switch, the reset signal output from the sub-controller 120, and checks the reset function of the sub-controller 120.
When the sub-controller 120 normally performs a reset function, the sub-controller 120 outputs a normal reset signal with respect to the test failure signal, and the main controller 110 senses the reset signal and determines that the reset function of the sub-controller 120 is normal. Conversely, when the sub-controller 120 malfunctions, and abnormally performs the reset function, the sub-controller 120 does not output a normal reset signal with respect to the test failure signal and the main controller 110 senses an abnormal reset signal or fails to sense a normal reset signal from the sub-controller 120 during at least a predetermined period of time. Therefore, the main controller 110 determines that the reset function of the sub-controller 120 is in a failure state.
After the main controller 110 checks the reset function in step S540, the main controller 110 outputs a control signal to the sub-controller 120 in step S550, and the sub-controller 120 cancels blocking so that the reset signal is output to the reset pin 420 of the main controller 110 based on the control signal in step S560. The additional steps S550 and S560 show that the main controller 110 terminates checking the reset function of the sub-controller 120, and changes a mode into a normal operation mode.
| Number | Date | Country | Kind |
|---|---|---|---|
| 10-2012-0120356 | Oct 2012 | KR | national |
