Patent Grant
7248959
This application is based on and incorporates herein by reference Japanese Patent Application No. 2005-177941 filed on Jun. 17, 2005.
1. Field of Application
The present invention relates to an electronic control apparatus incorporating a control circuit and having a power supply holding function whereby, when an externally produced command designates that the operating power of the control circuit is to be switched off, the supplying of that power is continued during an interval in which the control circuit completes the execution of specific processing.
2. Description of Related Art
In recent years, types of electronic control apparatus have been proposed which have a power supply holding function as described above and also a power supply shut-off function, for example as described in Japanese patent publication No. 2003-312386 which is concerned with an ECU (electronic control unit) of a motor vehicle. With that ECU, when the vehicle driver turns the ignition switch to the on position, so that an ignition switch signal (which serves as a power supply on/off changeover command signal) goes to a high level (corresponding to a power-on command status of the command signal), a power supply control circuit supplies a fixed supply voltage (derived from the vehicle battery voltage) to a CPU (central processing unit), and operation of the CPU then begins. When the ignition switch is subsequently set to the off position, so that the ignition switch signal goes to a low level (corresponding to a power-off command status of the command signal), the CPU executes shut-off processing whereby system operation information is written into an EEPROM (electrically erasable programmable memory). When that shut-off processing is completed, the CPU 11 outputs a power-down permission signal to the power supply control circuit, i.e., constituting a power supply halt command.
At that point, the power supply control circuit halts the supplying of operating power to the CPU, with the operation of the CPU then being halted.
In order to detect abnormality of the operation of the power supply holding function with that apparatus, after the shut-off processing has been executed to completion and before outputting the power-down permission signal, the CPU sets a specific flag that is held in the EEPROM, i.e., a “normal termination indication flag”, to the 1 state. Each time the ignition switch is switched on, the normal termination indication flag is examined and if it is not found to be set in the 1 state (thereby indicating that processing by the CPU was not terminated normally at the preceding occasion when the ignition switch was switched off), then it is judged that an abnormality of the power supply holding function has occurred.
With such an electronic control apparatus, it is possible to detect an abnormality whereby (after the ignition switch is switched off) the power supply voltage does not continue to be supplied to the CPU until completion of the shut-off processing. However it is not possible to detect an abnormality whereby the power supply voltage to the CPU is not cut off even after the shut-off processing has been completed, i.e., a power supply interruption failure type of abnormality occurs. When such an abnormality occurs, then since the predetermined processing (shut-off processing) will be executed to completion by the CPU after the ignition switch has been switched off, the CPU will set the normal termination indication flag to the 1 state.
In the case of a motor vehicle, the vehicle battery is used as the power source for deriving the power supply voltage of the ECU. If a power supply interruption failure abnormality is not detected, then a significant level of current may continue to be supplied to the ECU from the vehicle battery after the ignition switch has been switched off and the ignition key removed. In particular, the aforementioned specific processing may become repetitively executed after the ignition switch has been switched off and the ignition key removed. As a result of this, and due to other control operations that may be performed in such a condition (for controlling actuators etc., normally performed only while the vehicle is being driven) the vehicle battery may become completely discharged.
It is an objective of the present invention to overcome the above problem that arises with an electronic control apparatus having a power supply holding function, by enabling not only a power supply holding failure abnormality but also a power supply interruption failure abnormality of the power supply holding function to be reliably detected.
The invention is applicable to an electronic control apparatus having a control circuit which performs processing for controlling a control object, and a controlled power supply circuit that receives an externally supplied power supply on/off changeover command, and supplies a power supply voltage to operate the control circuit when that command is in a power-on command status, with the controlled power supply means having a power supply holding function whereby the controlled power supply responds to changeover from the power-off command status to the power-on command status by supplying the power supply voltage to the control circuit, and responds to changeover from the power-on command status to the power-off command status of the power supply on/off changeover command by terminating the supplying of power to the control circuit after a predetermined delay interval has elapsed following the start of the power-off command status. That delay interval is referred to in the following as the power supply holding interval. In normal operation, the power supply holding interval is of sufficient duration to allow completion of specific processing by the control circuit, i.e., processing which is to be executed immediately prior to shut-down of the control circuit.
In order to overcome the above-described problem, according to a first aspect the present invention provides an electronic control apparatus having such a power supply holding function, characterized in comprising:
(a) measurement means for measuring the duration of the power supply holding interval, i.e., the actual interval that extends from beginning the power-off command status until termination of supplying the power supply voltage to the control circuit, and
(b) abnormality detection means for detecting an abnormality of the power supply holding function based upon the measured duration obtained by the measurement means.
In that way, it becomes possible to detect an abnormality in the operation of the power supply holding function, irrespective of whether:
(1) a power supply holding failure abnormality occurs, resulting in a failure to maintain the power supply voltage of the control circuit for a sufficiently long duration to enable the specific processing to be completed, after the start of the power-off command status, or
(2) a power supply interruption failure abnormality occurs, resulting in a failure to interrupt the supplying of the power supply voltage to the control circuit after the start of the power-off command status.
In addition, the invention enables the above two types of abnormality of the power supply holding function to be respectively distinguished, so that appropriate countermeasures can be applied in accordance with the type of abnormality.
To achieve this, for example to detect a power supply holding failure abnormality, the abnormality detection means compares the measured duration of the power supply holding interval with a predetermined power supply holding failure threshold value, and judges that a power supply holding failure abnormality is occurring when the measured duration value is found to be smaller than the power supply holding failure abnormality detection threshold value.
The power supply holding failure threshold value is preferably set as corresponding to a duration which is shorter than the minimum amount of delay that could occur (during normal operation) between a point at which the power supply on/off switching command goes to the switch-off command status and the subsequent point at which the supplying of the power supply voltage to the control circuit becomes actually halted. That minimum amount of delay is the sum of:
(a) the logical minimum duration of the specific processing, and
(b) the delay that would occur between entering the power supply switch-off command status and the point of terminating operation of the control circuit, if the power supply holding function were not incorporated. Specifically, that is the delay from the point of completion of the specific processing (the point when an operation for actual shut-off of power to the control circuit is initiated) to the subsequent point of actual cessation of operation of the control circuit, i.e., a delay caused by functioning of hardware such as a relay, etc. The latter delay will be referred to in the following as the “hardware” delay for convenience of description.
In that way, erroneous judgement of occurrence of a power supply holding failure abnormality, during normal operation, can be avoided.
Similarly, to detect a power supply interruption failure abnormality, the abnormality detection means compares the measured duration of the power supply holding interval with a predetermined power supply interruption failure threshold value, and judges that a power supply holding failure abnormality is occurring when the measured duration value is found to be greater than the power supply interruption failure abnormality detection threshold value.
The power supply interruption failure threshold value is preferably set as corresponding to a duration which is longer than the maximum amount of delay that could occur (during normal operation) between a point at which the power supply on/off switching command goes to the switch-off command status and the subsequent point at which the supplying of the power supply voltage to the control circuit is actually terminated. That maximum amount of delay is the sum of:
(a) the logical maximum duration of the specific processing, and
(b) the delay that would occur between entering the power supply switch-off command status and the point of terminating operation of the control circuit, if the power supply holding function were not incorporated, i.e., the aforementioned hardware delay.
Furthermore the apparatus is preferably configured to perform fail-safe processing whereby the aforementioned specific processing is executed by the control circuit at each changeover from the power-off command status to the power-on command status, after the abnormality detection means has detected that a power supply holding failure abnormality is occurring. In that way, although in that condition the control circuit cannot perform the specific processing in the normal manner each time the power supply on/off changeover command goes to the power-on command status, the specific processing will be reliably executed each time that the supplying of power to the control circuit is restarted and the operation of the control circuit thereby restarts.
In addition, the apparatus is preferably configured such that (as an additional component of the fail-safe processing), when the abnormality detection means has detected that the power supply interruption failure abnormality is occurring, the control circuit performs the specific processing at each changeover from the power-off command status to the power-on command status, instead of each changeover from the power-on command status to the power-off command status.
This has the advantage that the amount of vehicle battery power that is consumed can be minimized, since it is ensured that there is no possibility of the specific processing (and any associated control operations) being repetitively executed during each interval in which the vehicle is not being driven but the control circuit remains operational.
Furthermore, in the case of a system in which the control circuit performs driving of a predetermined actuator after a fixed time interval has elapsed following changeover to the power-off command status, the control circuit is preferably configured to inhibit the driving of the actuator when the abnormality detection means detects that the power supply interruption failure abnormality is occurring. This further serves to minimize the level of battery power that will be consumed in the event of occurrence of the power supply interruption failure abnormality.
By taking such measures, it becomes possible to reduce the possibility of the vehicle battery becoming completely discharged (during an interval in which the vehicle is not being utilized) as a result of occurrence of the power supply interruption failure abnormality.
From another aspect, the measurement means can comprise a non-volatile memory which successively stores respective updated measured values of the power supply holding interval, and the abnormality detection means detects an abnormality of the power supply holding function based upon the power supply holding interval value that is currently held in the non-volatile memory.
Specifically, each time there is a changeover to the power-off command status, the duration of the power supply holding interval which thereafter elapses is measured, and the measured value stored in the non-volatile memory. Each time there is a changeover to the power-on command status, the most recently stored duration of the power supply holding interval is read out, and used as a basis for abnormality detection.
Alternatively, the measured value of power supply holding interval can be stored in a backup RAM.
Typically, the power supply on/off changeover command function will be implemented by an ignition switch signal of a vehicle, i.e., which goes to an on or an off level in accordance with the ignition switch being set to the on or off position.
Alternatively, the power supply on/off changeover command function may be implemented as a key switch signal, which goes to an on or an off level in accordance with the ignition key being inserted in or removed from the ignition key cylinder.
In addition, the power supply on/off changeover command status is not necessarily determined by the state of a single signal, but may be determined by a combination of conditions of a plurality of signals. For example, it may be arranged that when at least one of the plurality of signals is at an active level, this constitutes the power-on command status, while when all of the signals are at the inactive level, this constitutes the power-off command status.
An embodiment of a vehicle ECU (electronic control unit) will be described in the following. It will be assumed that this is an engine control ECU. Referring to
The microcomputer 3 has a usual type of configuration, being formed of a CPU 11, a ROM 13, RAM 15, etc., but in addition the microcomputer 3 includes a backup RAM 17, i.e., which has a backup power supply, but is supplied with the auxiliary power supply voltage Vs during normal operation.
The auxiliary power supply circuit 5s of the power supply section 5 operates from the output voltage from the positive terminal of the vehicle battery 19 (referred to in the following as the battery voltage VB), to produce the auxiliary power supply voltage Vs.
The main power supply circuit 5m of the power supply section 5 operates from the battery voltage VB, supplied from the battery 19 via a main relay 25, which is disposed external to the ECU 1. When the ignition switch 21 of the vehicle is switched on (i.e., by the ignition key being inserted and set to the on position), or when a key switch 23 of the ignition is switched on (i.e., by the ignition key being inserted in the key cylinder), or a power supply holding signal SH produced from the microcomputer 3 goes to a high level, so that at least one of the three inputs of a main relay drive circuit 27 within the ECU 1 goes to the high level, the main relay drive circuit 27 drives the coil of the main relay 25 to close the relay contacts, so that the battery voltage VB is supplied (as voltage VP in
The operation is as follows. When the ignition key is inserted in the key cylinder, the contacts of the key switch 23 are thereby closed, so that the key switch signal Sk is inputted to the ECU 1 at a high level. When the ignition key is then set to the on position, so that the contacts of the ignition switch 21 are closed, the key switch signal Sk is also inputted to the ECU 1 at the high level.
The logic circuit components of the main relay drive circuit 27 operate from the auxiliary power supply voltage Vs.
When the main power supply circuit 5m begins to produce the main power supply voltage Vm, the power supply section 5 outputs a reset signal to the microcomputer 3 during a specific short duration which is sufficient to allow the main power supply voltage Vm to stabilize, i.e., the microcomputer 3 has a power-on reset function. As a result, the microcomputer 3 begins to operate correctly from an initial status when the supplying of the main power supply voltage Vm begins.
The microcomputer 3 also receives as inputs the ignition switch signal Si and the key switch signal Sk, transferred via respective buffer circuits 29 and 31. Although not shown in the drawings, the microcomputer 3 also receives various other types of signal for use in monitoring the running condition of the vehicle. Such signals include an engine coolant temperature sensor, a speed sensor signal (indicating the speed at which the vehicle is running), etc.
Equipment that are controlled by output signals from the microcomputer 3 (transferred via a output circuit 9, as shown) with this embodiment include an actuator 33 of a variable intake valve timing control system (which controls the opening and closing timings of the engine intake valves), an actuator 35 of a variable exhaust valve timing control system (which controls the opening and closing timings of the engine exhaust valves), an intake flow control valve 37 (which controls the engine air intake flow rate), and an actuator 39 of an electronic throttle control system, etc.
When either of the ignition switch 21 or key switch 23 is actuated by the vehicle user, so that the ignition switch signal Si or key switch signal Sk goes to the high level, the main relay 25 is thereby set on so that the battery voltage is supplies as voltage VP to the power supply section 5, and the main power supply circuit 5m thereby supplies the main power supply voltage Vm to the microcomputer 3. The microcomputer 3 thereby begins operation. It can be considered that this activation of the microcomputer 3 constitutes activation of the ECU 1 itself, with the battery voltage VP transferred from the main relay 25 constituting the power supply voltage for the ECU 1.
When the ignition switch 21 and key switch 23 are subsequently both set in the off state, so that both the ignition switch signal Si and the key switch signal Sk go to the low level (i.e., ground potential, with this embodiment), the power supply holding signal SH begins to be supplied from the microcomputer 3 to the main relay drive circuit 27 at the high level. The main relay drive circuit 27 is thereby held in the on state, with the battery voltage VP continuing to be supplied to the power supply section 5, so that supplying of the main power supply voltage Vm to the microcomputer 3 is continued. This condition is maintained during an interval referred to herein as the power supply holding interval, during which the microcomputer 3 executes specific processing. When the microcomputer 3 completes the specific processing, it sets the power supply holding signal SH to the low level, so that the main relay drive circuit 27 opens the relay contacts of the main relay 25, and the supplying of the battery voltage VP to the power supply section 5 is halted. The operation of the microcomputer 3 is thereby halted, i.e., the operation of the ECU 1 is halted. This function, whereby the operation of the ECU 1 is continued during the power supply holding interval after both of the switches 21, 23 have been switched off, will be referred to as the power supply holding function.
The aforementioned specific processing that is executed by the microcomputer 3 during the power supply holding interval will be referred to as the power supply holding interval processing. This can for example consist of data backup processing, whereby learned values that relate to control of the engine or the automatic transmission of the vehicle are read out from the backup RAM 17 and written into the flash ROM 13. Alternatively or in addition, the power supply holding interval processing can include processing for improving the engine starting performance, by driving the actuators of the variable intake valve timing control system 33 and variable exhaust valve timing control system 35 to optimum conditions for the intake and exhaust valves, in preparation for the next time that the engine is started. As an example of such optimum conditions, the intake valve timing may be set for maximum angle of delay, and the exhaust valve timing may be set for maximum angle of advancement.
The overall flow of processing executed by the microcomputer 3 will be described referring to the flow diagram of
Next, in step S120, initialization processing is executed for initializing the RAM 15 and registers (not shown in the drawings) within the microcomputer 3. As a result of this initialization processing, switch information (i.e., on/off detection values) held in the RAM 15 indicating the on and off statuses of the power supply switches SW, is reset to indicate that both switches are in the off state.
Next, in step S130, a decision is made as to whether either of the power supply switches SW is in the on state. If one or both of the power supply switches SW is in the on state, then operation proceeds to step S140. The judgement as to the on/off statuses of the power supply switches SW is made based on the output signals from the buffer circuits 29 and 31.
In step S140 a decision is made as to whether this is the first time (since the operation of the ECU 1 was restarted) that a YES decision has been reached in step S130, i.e., the first time that it has been judged that at least one of the power supply switches SW is switched on. If there is a NO decision in step S140 then operation proceeds to step S150, in which the microcomputer 3 performs usual control processing to control one or more control objects. Operation then returns to step S140. The usual control processing can for example consist of control of the engine fuel injection system and ignition system, control of engine valve opening/closing timings in accordance with the running condition of the vehicle, control of the degree of throttle opening, etc.
If there is a YES decision in step S140 (i.e., this is the first time that either of the power supply switches SW has been found to be in the on state) then operation proceeds to step S160. In step S160 a decision is made as to whether predetermined processing timing alteration conditions (described hereinafter) are met. If these conditions are not met, then operation proceeds to step S150.
If it is found in step S160 that the processing timing alteration conditions are met, then step S170 is executed, in which fail-safe processing is performed for the case of power supply interruption failure abnormality occurrence. Essentially, this consists of executing the aforementioned power supply holding interval processing. (That processing is also executed in step S190, described hereinafter).
The judgement performed in step S160 is based on the condition of a processing timing alteration flag that is held in the flash ROM 13 or the backup RAM 17, and which is set (e.g., to a logic “1” state) when there a NO decision is reached in a step S180, described hereinafter referring to
(a) the processing timing alteration flag has been set (indicating that the above-described power supply interruption failure abnormality is occurring), and
(b) this is the first execution of step S160 since the operation of the microcomputer 3 was restarted, (i.e., since a change occurred from the condition of both of the power supply switches SW being switched off to a condition in which one of these switches has become switched on).
A YES decision in step S160 signifies that the timing of executing the aforementioned specific processing by the microcomputer 3 is to be changed from
(1) a transition from the condition of at least one of the power supply switches SW being switched on to the condition of both of the power supply switches SW being switched off, to
(2) a transition from the condition of both of the power supply switches SW being switched off to the condition of either of the power supply switches SW being switched on.
If there is a NO decision in step S130, indicating that both of the power supply switches SW are off, then operation proceeds to step S180. In step S180, a decision is made as to whether the operation halt conditions (i.e., for halting operation of the microcomputer 3) are satisfied. Specifically, it is found that these conditions are satisfied, and a YES decision reached in step S180 if:
(a) the aforementioned processing timing alteration flag is found to be set, or
(b) the power supply holding interval processing has previously been executed in step S190 (i.e., as a result of a NO decision having been previously reached in step S130).
If a NO decision is reached in step S180 at this time, then the power supply holding interval processing (described hereinafter) is executed, in step S190.
If a YES decision is reached in step S180, i.e., the operation halt conditions are satisfied, then in step S200 the power supply holding signal SH is inputted to the main relay drive circuit 27 at the low level. Operation then returns to step S130.
If the power supply holding function is operating normally, then at the time point when the power supply holding signal SH is set to the low level in step S200, the main relay 25 will be switched off (i.e., relay contacts open), so that the supplying of power from the main power supply circuit 5m to the microcomputer 3 will be halted. The operation of the microcomputer 3 and hence of the ECU 1 is thereby halted.
However if a power supply interruption failure abnormality of the power supply holding function is occurring, then even when the power supply holding signal SH is inputted to the main relay drive circuit 27 from the microcomputer 3 at the low level, the main power supply voltage Vm will continue to be supplied from the main power supply circuit 5m to the microcomputer 3. As a result, the microcomputer 3 will repetitively execute the processing loop:
[S200:NO→S180:YES S200]
As shown in
However if it is found in step S210 that both of the power supply switches SW are off, then operation proceeds to step S230 in which the count value CT is incremented by a fixed amount. Next in step S240 the incremented count value CT is stored in the RAM 15, and this execution of the routine is ended.
It can thus be understood that with this processing, the duration for which the main power supply voltage Vm continues to be supplied to the microcomputer 3 after both of the power supply switches SW have entered the switched-off condition is measured as a count value CT that is incremented at regular intervals and stored in the RAM 15. When the supplying of the main power supply voltage Vm to the microcomputer 3 is halted, so that the operation of the microcomputer 3 is accordingly halted, the incrementing of the count value CT is terminated. After being subsequently utilized when the microcomputer 3 is restarted, as described hereinafter, CT is reset to zero.
A malfunction judgement processing routine will be described referring to the flow diagram of
As shown in
In step S320, the aforementioned count value CT is read out from the flash ROM 13 (i.e., the most recently updated version of CT, that is currently held in the flash ROM 13), and a decision is made as to whether CT is lower than a predetermined value referred as the No. 1 threshold value HA. This constitutes a threshold value for judging whether a power supply holding failure abnormality is occurring.
With this embodiment, occurrence of a power supply holding failure abnormality signifies that, after it is detected that both of the power supply switches SW have become switched off, the processing of step S190 is not continued until the power supply holding interval processing has been completely executed.
The No. 1 threshold value HA is made smaller than a count value of CT corresponding to a delay that will normally occur (i.e., when the power supply holding function is operating normally) between a point at which it is detected that both of the power supply switches SW have become switched off, so that the power-off command status is entered, and a subsequent point at which the operation the microcomputer 3 becomes actually halted. Specifically, HA is made smaller than a count value corresponding to the total of:
(1) the logical minimum duration that is required to complete the execution of the specific processing, and
(2) the delay that occurs from the point of completion of the specific processing (i.e., the point when cessation of supplying power to the control circuit is initiated, by setting the signal SH to the low level) to the subsequent point of actual cessation of operation of the control circuit, i.e., the hardware delay due to functioning of the main relay 25, etc.
If it is found in step S320 that the count value CT read out from the flash ROM 13 is smaller than HA, then it is judged that a power supply holding failure abnormality is occurring, so that operation proceeds to step S330. In step S330, information specifying this malfunction is stored in the flash ROM 13 or in the backup RAM 17, as part of an operation history. Processing is then executed to notify the vehicle user of the malfunction occurrence. This processing can for example cause a warning lamp to flash, or cause a warning message to appear on a display.
Next in step S340, the same power supply holding interval processing is executed as for step S190 of
Step S350 is then executed, in which the count value CT held in the flash ROM 13 is reset to zero.
However if it is found in step S320 that the count value CT is not smaller than the No. 1 threshold value HA, then operation proceeds to step S360, in which a decision is made as to whether CT is greater than a No. 2 threshold value HB that is used to detect occurrence of a power supply interruption failure abnormality.
The No. 2 threshold value HB is predetermined to be larger than a count value corresponding to the maximum duration of the power supply holding interval that would occur in the case of normal operation of the power supply holding function. Specifically, HB is made is made larger than a count value corresponding to the total of:
(1) the logical maximum duration that is required to complete the execution of the specific processing, and
(2) the delay that occurs from the point of completion of the specific processing to the subsequent point of actual cessation of operation of the control circuit, i.e., the hardware delay due to the operation of the main relay 25, etc.
If it is found in step S360 that the count value CT is greater than the No. 2 threshold value HB, then it is judged that a power supply interruption failure abnormality is occurring, and operation proceeds to step S370. In step S370, information specifying this malfunction is stored in the flash ROM 13 or the backup RAM 17, as part of the operation history. Processing is then executed to notify the vehicle user of the malfunction occurrence. This processing can for example cause a warning lamp to flash, or cause a warning message to appear on a display.
Next, in step S380 fail-safe processing is executed in response to the power supply interruption failure abnormality occurrence. Specifically, the aforementioned processing timing alteration flag that is held in the flash ROM 13 or the backup RAM 17 is set.
As a result of that flag being set, and that “set” status being detected in step S180 of
After step S380 of
However if it is found in step S360 that the count value CT is not greater than the No. 2 threshold value HB (i.e., HA≦CT≦HB) then it is judged that the power supply holding function is normal, and operation proceeds to step S390. In step S390, information specifying that the power supply holding function is operating normally is stored in the flash ROM 13 or the backup RAM 17, as part of the operation history.
Step S350 is then performed to reset CT, and this execution of the routine is then ended.
The information stored in the flash ROM 13 or backup RAM 17 as an operation history, in steps S330, S370 or S390 as described above, can for example be read out and supplied to a failure diagnosis apparatus that is coupled to the ECU 1.
The operation of the ECU 1 as described above referring to
Thereafter, so long as either of the power supply switches SW is in the on state, the processing sequence [S150→S130:YES→S140:NO→S150] will be repetitively executed.
Subsequently, when both of the power supply switches SW go to the off state, i.e., a power-off command status is entered, so that a NO decision is reached in step S130, operation proceeds to step S180. At that point, if the processing timing alteration flag has not been set, it will be judged that the conditions for altering the timing of executing the power supply holding interval processing are not met. Hence, operation proceeds to step S190, in which the power supply holding interval processing is executed.
On completion of step S190, operation proceeds to step S200 in which the power supply holding signal SH is inputted to the main relay drive circuit 27 at the low level. As a result, the main relay 25 is switched off, so that as shown in
Thus, until the operation of the microcomputer 3 is halted, even if the sequence of processing steps [S200→S130:NO→S180] is returned to a few times (after the processing of step S190 has been completed and prior to the microcomputer 3 actually ceasing operation as a result of signal SH going to the low level), then since the power supply holding interval processing will already have been executed by that point, it will be judged in the second execution of step S180 (and in each of subsequent executions of that step) that the conditions for halting operation are satisfied. Thus, operation will proceed directly to step S200, omitting step S190.
That is to say, after the power supply holding interval processing has been completed, until the operation of the microcomputer 3 ceases, the sequence of processing steps [S200→S130:NO→S180:YES→S200] will be repetitively executed while both of the power supply switches SW remain off.
During the power supply holding interval, the count value CT held in the flash ROM 13 is successively incremented, by the power supply holding interval storage processing of
In normal operation, that stored value of CT will be between the No. 1 threshold value HA and the No. 2 threshold value HB, i.e., within a normal range.
Hence thereafter, when one of the power supply switches SW is switched on (i.e., a change from the condition of both switches being off) so that the operation of the microcomputer 3 is restarted, the sequence of steps [S310:YES→S320:NO→S360:NO→S390→S350] will be executed, in the malfunction detection processing routine of
The case of power supply interruption failure abnormality of the power supply holding function will now be described. In that condition, once all of the power supply switches SW become switched off, then although the power supply holding signal SH is set at the low level by the microcomputer 3 (in step S200 of
Hence, as the microcomputer 3 continues to execute the processing of
Furthermore, as a result of executing the power supply holding interval storage processing of
Hence, when either of the power supply switches SW is subsequently switched on, the microcomputer 3 will execute processing (in the malfunction judgement processing of
[S310:YES→S320:NO→S360:YES→S370→S380→S350]
That is to say, it will be judged that a power supply interruption failure abnormality of the power supply holding function is occurring (i.e., YES decision in step S360). Information specifying this malfunction is stored, as part of the operation history, and processing performed to produce a warning of the malfunction occurrence (step S370). The processing timing alteration flag is then set (step S380).
Moreover when one of the power supply switches SW becomes switched on (i.e., a change from the condition of both switches being off), the microcomputer 3 will make a YES decision in each of steps S130, S140 of
Thereafter, while either of the power supply switches SW is switched on, the processing sequence [S150→S130:YES→S140:NO→S150] will be repetitively executed.
When both of the power supply switches SW thereafter become switched off, a NO decision will be reached in step S130, so that operation proceeds to step S180. However at that point in time, the processing timing alteration flag is already set, so that it will be judged in step S180 that the conditions for halting operation of the microcomputer 3 at that time are satisfied. Thus, operation proceeds to step S200 instead of the power supply holding interval processing of step S190.
Hence in that case, as a result of the power supply interruption failure abnormality occurring, the microcomputer 3 will continue to operate while repetitively executing the processing loop: [S200→S130:NO→S180:YES→S200]. In that way, it is ensured that there is no danger of the power supply holding interval processing being repetitively performed after the vehicle ignition key has been removed so that the engine is halted.
Thereafter, when one of the power supply switches SW becomes switched on, the microcomputer 3 will reach a YES decision in each of steps S130, S140 of
Operation then proceeds to step S150, in which the usual control processing is performed by the microcomputer 3.
Thus with the malfunction judgement processing of
The operation for the case in which a power supply holding failure abnormality occurs will be summarized in the following. In this case, as illustrated in
That is to say, the time which elapses from the start of the condition in which both of the power supply switches SW are switched off until the supplying of power to the microcomputer 3 is halted is of insufficient duration. As a result, the power supply holding interval processing may not be executed to completion before the operation of the ECU 1 is halted, so that the (final) count value CT does not attain the No. 1 threshold value HA, as shown in
When one of the power supply switches SW is subsequently switched on, so that the operation of the microcomputer 3 is restarted, then the following sequence of steps will be executed with the malfunction judgement processing of
[S310:YES→S320:YES→S330→S340→S350]
That is to say, it will be judged that a power supply holding failure abnormality of the power supply holding function is occurring (i.e., YES in step S320). Information specifying this malfunction is then stored, as part of the operation history, and processing is performed to produce a warning of the malfunction occurrence (step S330). Next, the power supply holding interval processing is executed in step S340 (i.e., the same processing as is performed when it is detected that both of the power supply switches SW have become switched off, during normal operation). Thus, when a power supply holding failure abnormality is detected, the power supply holding interval processing is executed when the main power supply voltage Vm begins to be supplied to the microcomputer 3, i.e., after either of the power supply switches SW becomes switched on.
It can thus be understood that with this embodiment, the ECU 1 measures the power supply holding interval duration, and detects abnormal operation of the power supply holding function based upon the measured values (i.e., the stored count value CT). It thereby becomes possible to detect both a power supply holding failure abnormality and a power supply interruption failure abnormality, and to reliably distinguish between these two different types of abnormality of the power supply holding function.
Moreover, appropriate fail-safe processing can be performed in accordance with the specific type of abnormality that is detected.
As described above, the fail-safe processing that is executed by the ECU 1 of this embodiment, in the event of power supply holding failure abnormality being detected, consists of performing the power supply holding interval processing (in step S340 of
As a result, the power supply holding interval processing can be reliably performed even if a power supply holding failure abnormality occurs. With this embodiment, the power supply holding interval processing consists of data backup processing whereby learned values that have been stored in the backup RAM 17 are read out and written into the flash ROM 13, and processing for improving the engine starting performance, and it can be understood that the embodiment enables this power supply holding interval processing to be reliably performed even when a power supply holding failure abnormality occurs. Loss of the learned values can thereby be prevented, and the engine starting performance can be improved.
Furthermore with this embodiment, the ECU 1 performs fail-safe processing in the event of detecting a power supply interruption failure abnormality of the power supply holding function. In this case, the power supply holding interval processing is executed (in step S170 of
As a result, when power supply interruption failure abnormality occurs, it becomes possible to reduce the amount of power from the vehicle battery that is unnecessarily consumed while both of the power supply switches SW are in the off condition, since it can be ensured that the power supply holding interval processing will not be executed during that condition. The possibility of the vehicle battery becoming completely discharged can thereby be reduced.
In addition, it can be reliably ensured that the power supply holding interval processing will be reliably executed, each time that the operation of the ECU 1 begins.
Respective means that are set out in the appended claims are related to the above embodiment as follows. The main relay 25, the main relay drive circuit 27 and the main power supply circuit 5m of the power supply section 5, in combination, corresponds to the power supply control means. The logical sum of the respective states of the ignition switch signal Si and the key switch signal Sk corresponds to the power supply on/off changeover command. Hence, the condition of at least one of these signals being at the high level corresponds to the power-on command status. A change of the power supply holding signal SH (produced from the microcomputer 3) from the high level to the low level corresponds to the power supply halt command produced from the control circuit. The condition of both of the ignition switch signal Si and the key switch signal Sk being at the low level corresponds to the power-off command status. The processing routine shown in
It should be noted that the scope of the invention is not limited to the above embodiment, and that various modifications or alternative configurations could be envisaged.
In particular, respectively different types of fail-safe processing could be applied, in accordance with the type of abnormality of the power supply holding function that is detected. For example, the ECU 1 could have an actuator control function whereby a specific actuator is driven after a fixed time interval has elapsed following the point at which both of the power supply switches SW have become switched off. In that case, the system could be configured to execute fail-safe processing for that actuator control function, in the event that a power supply interruption failure abnormality of the power supply holding function is detected. As an example of such fail-safe processing (which could be performed as step S380 of
In that way, unnecessary discharging of the vehicle battery in the event of a power supply interruption failure abnormality can be reduced, so that the possibility of the battery becoming completely discharged (during an interval in which the vehicle engine is halted) can be reduced.
Such an actuator can for example be used in failure diagnosis of a fuel tank vapor collection system of a vehicle (e.g., as described in Japanese patent publication No. 2003-139874). With such a failure diagnosis method, evaporated fuel vapor in the fuel tank is collected and is subjected to increases or lowering in pressure by means of an actuator, with resultant changes in vapor pressure being detected by a sensor, to thereby detect the vapor density within the collection system and so judge whether vapor leakage is occurring.
With the present invention, unnecessary execution of such a diagnosis operation can be prevented, thereby reducing unnecessary consumption of battery power while the vehicle engine is halted.
The following configurations would be equally possible for the power supply system of the ECU 1:
(1) A power supply circuit could be incorporated in the ECU 1 that would be supplied with the battery voltage VB via either the ignition switch 21 or the key switch 23 (i.e., controlled by the ignition switch signal Si or the key switch signal Sk), for producing the main power supply voltage Vm.
(2) It would be possible to input only the power supply holding signal SH to the main relay drive circuit 27.
(3) A main power supply voltage Vm produced from the power supply circuit of the alternative configuration (1) above, and also the main power supply voltage Vm that is produced from the main power supply circuit 5m based on the battery voltage VP from the main relay 25, could be supplied to the microcomputer 3 in a wired-OR configuration.
With any of the above alternative configurations (1) to (3), the same advantages would be obtained as described for the above embodiment.
Furthermore with the above embodiment, the power supply ON/OFF changeover command corresponds to the logical OR sum of the respective states of the ignition switch signal Si and the key switch signal Sk, i.e., if at least one of the ignition switch 21 and key switch 23 is on, so that the corresponding switch signal is at the active level this constitutes the “on” status of the power supply on/off changeover command, while when both of the ignition switch 21 and key switch 23 are off, this constitutes the “off” status of the power supply on/off changeover command. However it would be equally possible to use only a single switch signal to implement the power supply on/off changeover command, for example the signal from the ignition switch signal Si alone, or the signal from the key switch signal Sk alone.
Moreover it would be possible to store the power supply holding interval value in a backup RAM. A RAM has a higher speed of data write-in than a non-volatile memory, so that it would become possible to store more accurate values of the power supply holding interval.
| Number | Date | Country | Kind |
|---|---|---|---|
| 2005-177941 | Jun 2005 | JP | national |
| Number | Name | Date | Kind |
|---|---|---|---|
| 6094975 | Hasegawa et al. | Aug 2000 | A |
| 6708089 | Hashimoto et al. | Mar 2004 | B2 |
| 6732044 | Hashimoto et al. | May 2004 | B2 |
| 7155326 | Nagata | Dec 2006 | B2 |
| Number | Date | Country |
|---|---|---|
| 11-099890 | Apr 1999 | JP |
| 2000-065691 | Mar 2000 | JP |
| 2003-312386 | Nov 2003 | JP |
| 2003-312387 | Nov 2003 | JP |
| Number | Date | Country | |
|---|---|---|---|
| 20060287805 A1 | Dec 2006 | US |
