Fuel tank system

Abstract

A control unit diagnoses a failure of a fuel storage unit that seals a fuel tank and a processing unit that processes fuel evaporative gas in the fuel tank. A first pressure detection unit of the fuel storage unit detects the pressure of the fuel tank. A second pressure detection unit of the fuel storage unit is disposed at a position different from the first pressure detection unit, and detects the pressure of the fuel tank. The control unit specifies a failure portion of the fuel storage unit and the processing unit based on a change in either one or both of a first pressure value detected by the first pressure detection unit and a second pressure value detected by the second pressure detection unit when the pressure of the fuel tank is changed.

Description

TECHNICAL FIELD

The present disclosure relates to a fuel tank system.

BACKGROUND ART

In the related art, there has been known a fuel tank system that seals a fuel tank of a vehicle having an internal combustion engine in order to prevent fuel evaporative gas generated in the fuel tank from being discharged to the atmosphere (for example, JP4110931B2 and JP6015936B2). A fuel tank system of JP4110931B2 includes a sealing valve that controls a communication state between a fuel tank and a canister. In the fuel tank system of JP4110931B2, the sealing valve is closed to seal the fuel tank while the internal combustion engine is stopped, and the sealing valve is opened when the fuel is supplied to the fuel tank. A fuel tank system of JP6015936B2 includes a sealing valve, a first on-off valve that opens and closes between a communication passage and an intake passage of an internal combustion engine, and a second on-off valve that opens and closes between a canister and the communication passage. In the fuel tank system of JP6015936B2, when the pressure of the fuel tank is lowered, the sealing valve and the first on-off valve are opened, and the second on-off valve is closed.

The fuel tank system of JP4110931B2 and the fuel tank system of JP6015936B2 detect a change in pressure in the fuel tank by opening the sealing valve from a closed state in order to diagnose a failure of the sealing valve.

The fuel tank system of JP4110931B2 and the fuel tank system of JP6015936B2 do not diagnose failure of a device other than the sealing valve (for example, a pressure sensor) among the devices included in the fuel tank system. Even when a device other than the sealing valve included in the fuel tank system fails, the fuel evaporative gas may also leak from the fuel tank system. Therefore, when a device other than the sealing valve included in the fuel tank system fails, the fuel evaporative gas may be discharged to the atmosphere.

Further, in the fuel tank system of JP4110931B2 and the fuel tank system of JP6015936B2, since a failure portion is not specified, fail-safe control according to the failed portion cannot be performed. For this reason, the fuel tank system of JP4110931B2 and the fuel tank system of JP6015936B2 perform the fail-safe control for uniformly limiting a function of the vehicle regardless of the failure portion. As a result, there is a problem that usability is reduced.

SUMMARY OF INVENTION

An embodiment of the present disclosure provides a fuel tank system capable of reducing a decrease in usability.

Solution to Problem

A fuel tank system according to the present disclosure is a fuel tank system for a vehicle having an internal combustion engine. The fuel tank system according to the present disclosure includes a fuel storage unit, a processing unit, and a control unit. The fuel storage unit has a sealing valve and seals a fuel tank that stores fuel. The processing unit processes fuel evaporative gas in the fuel tank. The control unit diagnoses a failure of the fuel storage unit and the processing unit. The fuel storage unit includes a first pressure detection unit and a second pressure detection unit. The first pressure detection unit detects a pressure in the fuel tank. The second pressure detection unit is disposed at a position different from the first pressure detection unit, and detects a pressure of the fuel tank. The control unit specifies a failure portion of the fuel storage unit and the processing unit based on a change in at least one or both of a first pressure value detected by the first pressure detection unit and a second pressure value detected by the second pressure detection unit when the pressure of the fuel tank is changed, and performs fail-safe control according to the failure portion.

According to this fuel tank system, which of the devices included in the fuel tank system has a failure is diagnosed using the two detection units, and the fail-safe control is performed by specifying the failure portion. Therefore, for example, fail-safe control for uniformly prohibiting specific control regardless of the failure portion is not performed. As a result, it is possible to provide a fuel tank system capable of reducing a decrease in usability due to fail-safe control.

The fail-safe control may include a control for prohibiting pressure control and a control for prohibiting fuel supply control. The pressure control lowers a pressure of the fuel tank. The fuel supply control allows a fuel supply port, which is a supply port of the fuel tank, to be opened. The control unit may perform at least one of the control for prohibiting the pressure control and the control for prohibiting the fuel supply control according to the failure portion.

The processing unit may include a canister, a pressure generation unit, and a third pressure detection unit. The control unit may specify the failure portion as one of the first pressure detection unit and the second pressure detection unit based on a change in either one of or both of the first pressure value and the second pressure value and a change in a third pressure value detected by the third pressure detection unit when the pressure of the fuel tank is changed by the pressure generation unit.

In a case where the third pressure value and the second pressure value change and the first pressure value does not change, the control unit may specify the failure portion as the first pressure detection unit and prohibit the pressure control.

In a case where the third pressure value and the first pressure value change and the second pressure value does not change, the control unit may specify the failure portion as the second pressure detection unit and prohibit the fuel supply control

The processing unit may include a communication passage, a first on-off valve, and a second on-off valve. The communication passage may communicate the sealing valve with an intake passage of the internal combustion engine. The first on-off valve may open and close a communication between the intake passage and the communication passage. The second on-off valve may open and close a communication between the canister and the communication passage. The control unit may control specify the failure portion and a failure of the failure portion as open-sticking of the sealing valve in a case where both the first pressure value and the second pressure value become atmospheric pressure when the sealing valve is subjected to closing control and the first on-off valve and the second on-off valve are subjected to opening control. The control unit may specify the open-sticking of the sealing valve and prohibit the fuel supply control.

The control unit may specify the failure portion and a failure of the failure portion as closed-sticking of the sealing valve in a case where both the first pressure value and the second pressure value do not change when the pressure of the fuel tank is changed by the pressure generation unit, and thereafter, the third pressure value does not change when pressure of the canister is changed by closing the second on-off valve. The control unit may specify the closed-sticking of the sealing valve and prohibit the pressure control and the fuel supply control.

A fuel tank system according to another aspect of the present disclosure is a fuel tank system for a vehicle including an internal combustion engine. The fuel tank system according to the present disclosure includes a fuel storage unit, a processing unit, and a control unit. The fuel storage unit has a sealing valve and seals a fuel tank that stores fuel. The processing unit processes fuel evaporative gas in the fuel tank. The control unit performs a first failure diagnosis and a second failure diagnosis to diagnose a failure of the fuel storage unit and the processing unit. When the fuel storage unit and the processing unit are normal, the control unit ends the failure diagnosis. When there is a possibility that either one of or both of the fuel storage unit and the processing unit fails, the control unit performs a third failure diagnosis and a fourth failure diagnosis to specify a failure portion. In the first failure diagnosis, the failure diagnosis of the fuel storage unit is performed in a state where the sealing valve is closed. In the second failure diagnosis, the failure diagnosis of the processing unit is performed in a state where the sealing valve is closed. In the third failure diagnosis, the failure diagnosis is performed by changing a pressure of the fuel tank in a state where the sealing valve is opened. In the fourth failure diagnosis, the failure diagnosis is performed by bringing the processing unit into an atmosphere open state in a state where the sealing valve is closed. The control unit performs fail-safe control according to the failure portion.

According to this fuel tank system, by performing the first failure diagnosis and the second failure diagnosis, failure diagnosis of a device included in the fuel tank system can be performed without opening the sealing valve. Further, the third failure diagnosis and the fourth failure diagnosis are performed to specify the failure portion only when there is a possibility that either one of or both of the fuel storage unit and the processing unit fails in the first failure diagnosis and the second failure diagnosis. That is, if all of the devices included in the fuel tank system are normal, it is possible to diagnose a failure without opening the sealing valve even once. In addition, even if there is a possibility that either one of or both of the fuel storage unit and the processing unit fails, the failure portion is quickly specified by simply opening the sealing valve once in the third failure diagnosis and the fourth failure diagnosis, and the fail-safe control is performed. As a result, it is possible to provide a fuel tank system capable of reducing a decrease in usability due to fail-safe control.

BRIEF DESCRIPTION OF DRAWINGS

FIG. 1 is a diagram showing a configuration of a fuel tank system according to an embodiment of the present disclosure.

FIG. 2 is a diagram showing a switching valve of FIG. 1 in an opened state.

FIG. 3 is a diagram showing the switching valve of FIG. 1 in a closed state.

FIG. 4 is a flowchart of a first failure diagnosis performed by a control unit of FIG. 1.

FIG. 5 is a flowchart of a second failure diagnosis performed by the control unit of FIG. 1.

FIG. 6 is a flowchart of a third failure diagnosis performed by the control unit of FIG. 1.

FIG. 7 is a timing chart in the third failure diagnosis of FIG. 6.

FIG. 8 is a flowchart of a fourth failure diagnosis performed by the control unit of FIG. 1.

FIG. 9 is a timing chart in the fourth failure diagnosis of FIG. 8.

DESCRIPTION OF EMBODIMENTS

Hereinafter, embodiments of the present disclosure will be described with reference to the drawings.

As shown in FIG. 1, a fuel tank system 1 includes a fuel storage unit 20, a processing unit 30, and a control unit 40. The fuel tank system 1 is mounted on a vehicle C. In the present embodiment, the vehicle C includes a motor (not shown) and an internal combustion engine 10, and is a hybrid vehicle or a plug-in hybrid vehicle that travels using one or both of the motor and the internal combustion engine 10. The vehicle C includes an ignition switch 40a. The ignition switch 40a is electrically connected to an electrical control unit (ECU) 42, which will be described later. The control unit 40 is activated when the ignition switch 40a is turned on by the user of the vehicle C. The control unit 40 enters a sleep state when the ignition switch 40a is turned off by the user. The internal combustion engine 10 includes an intake passage 10a, a fuel injection valve 10b, and a fuel pipe 10c, and mixes and combusts air sucked from the intake passage 10a and fuel injected from the fuel injection valve 10b.

The fuel storage unit 20 includes a fuel tank 21, a sealing valve 22, a first tank pressure sensor (an example of a first pressure detection unit) 23, a second tank pressure sensor (an example of a second pressure detection unit) 24, and a vapor passage 25. The fuel storage unit 20 seals the fuel tank 21.

The fuel tank 21 includes a fuel supply port 21a, a fuel pump 21b, a fuel cutoff valve 21c, and a leveling valve 21d. The fuel supply port 21a is a fuel inlet to the fuel tank 21. The fuel pump 21b supplies fuel from the fuel tank 21 to the fuel injection valve 10b via the fuel pipe 10c. The fuel cutoff valve 21c prevents the fuel from flowing out from the fuel tank 21 to the processing unit 30. The leveling valve 21d controls a liquid level in the fuel tank 21 at the time of fuel supply. The fuel evaporative gas generated in the fuel tank 21 is discharged to the processing unit 30 via the fuel cutoff valve 21c and the leveling valve 21d.

The sealing valve 22 seals the fuel tank 21 by opening and closing the vapor passage 25. In the present embodiment, the sealing valve 22 is an electromagnetic solenoid valve, and is a normally closed type electromagnetic valve that is closed when the electromagnetic solenoid is in a non-energized state (OFF) and is opened when a drive signal is supplied to the electromagnetic solenoid from the outside and the electromagnetic solenoid is in an energized state (ON). The vapor passage 25 allows the fuel tank 21 and the sealing valve 22 to communicate with each other.

The first tank pressure sensor 23 is disposed on the vapor passage 25 and detects the pressure in the fuel tank 21 in the vapor passage 25. The first tank pressure sensor 23 is an absolute pressure sensor, and detects the pressure in the fuel tank 21 as an absolute pressure.

The second tank pressure sensor 24 is disposed at a position different from that of the first tank pressure sensor 23. In the present embodiment, the second tank pressure sensor 24 is disposed above the fuel tank 21. The second tank pressure sensor 24 is a differential pressure type sensor that detects the pressure by a difference from the atmospheric pressure, and detects the pressure in the fuel tank 21 as a gauge pressure.

The first tank pressure sensor 23 is provided so as to be able to detect the pressure mainly even when the pressure in the fuel tank 21 increases. On the other hand, the second tank pressure sensor 24 is provided so as to be able to detect whether or not the pressure in the fuel tank 21 is near the atmospheric pressure mainly at the time of fuel supply. Therefore, the first tank pressure sensor 23 has a wider range of pressure that can be detected than that of the second tank pressure sensor 24. On the other hand, the second tank pressure sensor 24 can detect the pressure more accurately than the first tank pressure sensor 23.

As shown in FIGS. 1 and 2, the processing unit 30 includes a canister 31, a purge passage (communication passage) 32, a purge valve (an example of a first on-off valve) 33, a bypass valve (an example of a second on-off valve) 34, a negative pressure pump (an example of a pressure generation unit) 35, a switching valve 36, and a canister pressure sensor (an example of a third pressure detection unit) 37. The processing unit 30 performs processing by combusting the fuel evaporative gas of the fuel tank 21 in the internal combustion engine 10 or causing the fuel evaporative gas to be adsorbed by the canister 31.

The canister 31 adsorbs the fuel evaporative gas in the fuel tank 21. The purge passage 32 allows the sealing valve 22 and the intake passage 10a of the internal combustion engine to communicate with each other. The canister 31 includes activated carbon therein, and adsorbs the fuel evaporative gas generated in the fuel tank 21 by the activated carbon. The canister 31 is connected to a passage branched from the purge passage 32. The canister 31 is provided to supply the fuel evaporative gas adsorbed by the canister 31 to the intake passage 10a via the purge passage 32.

The purge valve 33 opens and closes between the intake passage 10a and the purge passage 32. In the present embodiment, the purge valve 33 is an electromagnetic solenoid valve, and is opened in response to an instruction from the control unit 40 to supply the fuel evaporative gas to the intake passage 10a at the time of pressure control and purge control (release control), which will be described later. The purge valve 33 is, for example, a normally closed type electromagnetic valve that is closed when the electromagnetic solenoid is in a non-energized state (OFF) and is opened when a drive signal is supplied to the electromagnetic solenoid from the outside and the electromagnetic solenoid is in an energized state (ON).

The bypass valve 34 opens and closes a communication between the canister 31 and the purge passage 32. In the present embodiment, the bypass valve 34 is an electromagnetic solenoid valve, and is closed in response to an instruction from the control unit 40 to cut off the supply of the fuel evaporative gas to the canister 31 in the case of pressure control to be described later. On the other hand, in the case of the purge control (release control), the bypass valve 34 is opened in response to an instruction from the control unit 40 to supply the fuel evaporative gas adsorbed by the canister 31 to the purge passage 32. The bypass valve 34 is, for example, a normally open type electromagnetic valve that is opened when the electromagnetic solenoid is in a non-energized state (OFF) and is closed when a drive signal is supplied to the electromagnetic solenoid from the outside and the electromagnetic solenoid is in an energized state (ON).

The negative pressure pump 35, the switching valve 36, and the canister pressure sensor 37 are provided in a module 38 connected to the canister 31. As shown in FIG. 2, the module 38 is provided with a canister side passage 38a, an atmosphere side passage 38b, a pump passage 38c, and a bypass passage 38d. The negative pressure pump 35 is provided between the pump passage 38c and the atmosphere side passage 38b. The bypass passage 38d is provided with a reference orifice 38e for generating a pressure serving as a reference for leak diagnosis. The canister pressure sensor 37 is provided in the pump passage 38c, and detects a pressure when a negative pressure is generated in the canister 31 by the negative pressure pump 35.

The switching valve 36 causes the canister side passage 38a and the atmosphere side passage 38b to communicate with each other in the opened state, so that the canister 31 is in an atmosphere open state. When the negative pressure pump 35 is operated in this state, a negative pressure corresponding to a diameter of the reference orifice 38e is generated in the pump passage 38c. The control unit 40 stores a value of the negative pressure detected by the canister pressure sensor 37 at this time as a reference pressure Pref. On the other hand, as shown in FIG. 3, the switching valve 36 causes the canister side passage 38a and the pump passage 38c to communicate with each other in the closed state, so that a negative pressure can be generated in the canister 31. In this state, when the negative pressure pump 35 generates a negative pressure in the canister 31, the negative pressure detected by the canister pressure sensor 37 becomes smaller than the reference pressure Pref in a case where a hole larger than the reference orifice 38e is present in the fuel storage unit 20 or the processing unit 30. In this way, the control unit 40 diagnoses the leakage of the fuel evaporative gas in the fuel storage unit 20 or the processing unit 30. The switching valve 36 is driven by, for example, an electromagnetic solenoid. The switching valve 36 is in an open state when the electromagnetic solenoid is in a non-energized state (OFF), and is in a closed state when a drive signal is supplied to the electromagnetic solenoid from the outside and the electromagnetic solenoid is in an energized state (ON).

The control unit 40 acquires information from each detection unit of the fuel storage unit 20 and the processing unit 30, and transmits a signal for controlling individual valve to each valve. In the present embodiment, “opening control” indicates that the control unit 40 transmits a control signal for bringing each valve into an opened state and instructs each valve to actually open. Each valve receives the control signal for opening control, and actually opens if there is no failure. Similarly, “closing control” indicates that the control unit 40 transmits a control signal for bringing each valve into a closed state and instructs each valve to actually close. Each valve receives the control signal for closing control, and actually closes if there is no failure.

The control unit 40 performs at least the first failure diagnosis, the second failure diagnosis, the third failure diagnosis, the fourth failure diagnosis, and a fail-safe control. When the pressure in the fuel tank 21 increases to a certain level or higher, the control unit 40 performs the opening control on the sealing valve 22 and the purge valve 33 and performs the closing control on the bypass valve 34, so as to decrease the pressure in the fuel tank 21. In addition, the control unit 40 performs the opening control on the sealing valve 22 and the bypass valve 34 to set the pressure of the fuel tank 21 to the atmospheric pressure at the time of fuel supply. In this way, the control unit 40 performs pressure control (depressurization control) for decreasing the pressure in the fuel tank 21, and records that there is an abnormality when the pressure does not decrease. In addition, the control unit 40 performs the opening control on the purge valve 33 and the bypass valve 34, and performs purge control (release control) for sucking the fuel evaporative gas adsorbed by the canister 31 into the internal combustion engine 10 in operation. Further, when the pressure control at the time of fuel supply is completed, the control unit 40 performs fuel supply control for unlocking the lock of a fuel lid (not shown) so that the fuel supply port 21a can be opened and notifying the user of the vehicle C. On the other hand, for example, when the fuel supply control is prohibited (fuel supply is prohibited) as the fail-safe control, the control unit 40 does not unlock the lock of the fuel lid and notifies the user that fuel supply is prohibited.

In the present embodiment, the control unit 40 is a functional configuration implemented by software stored in the ECU 42. The ECU 42 is actually implemented by a microcomputer including an arithmetic device including a timer, a memory, an input and output buffer, and the like. The ECU 42 controls the various devices so that the internal combustion engine 10 is in a desired operating state based on signals from the sensors and the various devices, and maps and programs stored in the memory. Various types of control are not limited to processing by software, and may be processed by dedicated hardware (electronic circuit). The sensors and the valves are electrically connected to the ECU 42.

Next, a control procedure of the control unit 40 will be described with reference to flowcharts of FIGS. 4, 5, 6, and 8, and timing charts of FIGS. 7 and 9. Note that ON-OFF corresponding to various devices in each timing chart indicates a state in which the control unit 40 transmits a control signal instructing the various devices to be energized (ON) and de-energized (OFF) to the various devices. That is, the ON-OFF state of each timing chart does not indicate an actual operation state of the various devices. A value of a sensor in each timing chart is a value acquired from individual sensor, and is not a value indicating an actual pressure of various devices. That is, each timing chart is a timing chart corresponding to the control procedure of the control unit 40.

FIG. 4 shows a control procedure in the first failure diagnosis performed by the control unit 40. After the ignition switch 40a is turned off, the control unit 40 starts the first failure diagnosis for diagnosing a failure of the fuel storage unit 20 in a state where the sealing valve 22 is closed after a predetermined period TmIG elapses (S1). Here, the state in which the sealing valve 22 is closed refers to a state in which the sealing valve 22 is subjected to the closing control, and is a state in which the control unit 40 does not transmit a control signal for instructing the sealing valve 22 to be energized (ON). The control unit 40 acquires a first pressure value P1 detected by the first tank pressure sensor 23. When the absolute value of the first pressure value P1 is equal to or greater than a first predetermined value D1 (Yes in S2), the control unit 40 proceeds the process to S3.

The control unit 40 acquires a record of abnormality during the pressure control, and if there is no record of abnormality (Yes in S3), the process proceeds to S4. Here, the abnormality during the pressure control refers to a case where the pressure control when the pressure of the fuel tank 21 increases to a certain level or more does not end within a predetermined time, a case where the pressure control at the time of fuel supply does not end within a predetermined time, and a case where some kind of failure is not diagnosed in the fuel storage unit 20 and the processing unit 30 during these controls.

The control unit 40 acquires a second pressure value P2 detected by the second tank pressure sensor 24. The control unit 40 calculates a difference between the first pressure value P1 and the second pressure value P2. When the difference is within a predetermined range ΔQ (Yes in S4), the control unit 40 proceeds the process to S5. As described above, the first tank pressure sensor 23 and the second tank pressure sensor 24 are different from each other in the place where they are disposed and in the pressure detection characteristics. Therefore, although an actual pressure value in the fuel tank 21 is the same, the first pressure value P1 and the second pressure value P2 have a difference within the predetermined range ΔQ. The predetermined range ΔQ is a value set in advance according to the places where the first tank pressure sensor 23 and the second tank pressure sensor 24 are disposed and the pressure detection characteristics thereof.

The control unit 40 diagnoses that the fuel storage unit 20 is normal (S5). Then, the control unit 40 proceeds to the second failure diagnosis for diagnosing a failure of the processing unit 30 in a state where the sealing valve 22 is closed (S6).

When the absolute value of the first pressure value P1 is smaller than the first predetermined value D1 (No in S2), when there is an abnormality during the pressure control (No in S3), or when the difference between the first pressure value P1 and the second pressure value P2 is larger than the predetermined range ΔQ (No in S4), it is determined that there is a failure in the fuel storage unit 20, and the control unit 40 determines that the normal diagnosis is not established (S8). That is, the control unit 40 diagnoses that one or more of the first tank pressure sensor 23, the second tank pressure sensor 24, and the vapor passage 25 included in the fuel storage unit 20 have a failure. When the control unit 40 diagnoses that the fuel storage unit 20 is not normal, the control unit 40 performs the third failure diagnosis, which will be described later, by performing the opening control on the sealing valve 22, and specifies a failure portion (S9).

In addition, in the second failure diagnosis to be described later, when the control unit 40 diagnoses that there is a failure in the processing unit 30 (Yes in S7), the control unit 40 performs the third failure diagnosis by performing the opening control on the sealing valve 22, and specifies the failure portion (S9).

Next, a control procedure in the second failure diagnosis performed by the control unit 40 will be described with reference to the flowchart of FIG. 5. The second failure diagnosis is started in a state where the bypass valve 34 is subjected to the opening control.

The control unit 40 starts the negative pressure pump 35 (S21). At this time, a third pressure value P3 detected by the canister pressure sensor 37 decreases to the reference pressure Pref. Thereafter, the control unit 40 performs the closing control on the switching valve 36 to start decreasing the pressure of the canister 31 (S22). In this state, if the bypass valve 34 is actually opened in response to an instruction from the control unit 40, the purge passage 32 and the canister 31 are decreased in pressure. When a first predetermined period Tm1 has elapsed (Yes in S23) after the start of the pressure decrease (after the closing control of the switching valve 36), the control unit 40 acquires the third pressure value P3 of a first time as an acquired value P31 (S24). Thereafter, the control unit 40 performs the closing control on the bypass valve 34 (S25). When a second predetermined period Tm2 has elapsed after the pressure decrease (Yes in S26), the control unit 40 acquires the third pressure value P3 of a second time as the acquired value P32. When the acquired value P32, which is the third pressure value P3 of the second time, is equal to or less than a first predetermined pressure PT1 (Yes in S28), a ratio (P32/P31) of the acquired value P32, which is the third pressure value P3 of the second time, to the acquired value P31, which is the third pressure value P3 of the first time, is calculated, and when the ratio is equal to or less than a second predetermined value D2, it is diagnosed that there is no leak in the purge passage 32 (S30).

That is, the acquired value P31, which is the third pressure value P3 of the first time, is a value when the bypass valve 34 is subjected to the opening control, and is a pressure value of a space including the canister 31 and the purge passage 32 when the bypass valve 34 is actually opened. On the other hand, the acquired value P32, which is the third pressure value P3 of the second time, is a value when the bypass valve 34 is subjected to the closing control, and is a pressure value of a space including only the canister 31 and not including the purge passage 32 when the bypass valve 34 is actually closed. Therefore, if there is no leak in any of the canister 31 and the purge passage 32, the ratio between the acquired value P31 and the acquired value P32 becomes equal to or less than the second predetermined value D2. In addition, even when there is a possibility of leak only in the canister 31, both the acquired value P31 and the acquired value P32 are maintained in a state in which a pressure decrease amount is small. As a result, the ratio of the acquired value P32 to the acquired value P31 becomes equal to or less than the second predetermined value D2. On the other hand, if there is a leak in the purge passage 32, the acquired value P31 is maintained in a state in which a pressure decrease amount is small, and the acquired value P32 is maintained in a state in which the pressure decrease amount is large. As a result, the ratio of the acquired value P32 to the acquired value P31 becomes larger than the second predetermined value D2. As described above, when the ratio of the acquired value P32 to the acquired value P31 is larger than the second predetermined value D2 (No in S29), the control unit 40 diagnoses that there is a leak in the purge passage 32 (S38). When the acquired value P32 is larger than the first predetermined pressure PT1 (No in S28), it is diagnosed that there is some kind of failure (for example, there is a possibility that the canister 31 leaks), and the process proceeds to S37.

Next, the control unit 40 performs the opening control on the purge valve 33 (S31), calculates a difference between the atmospheric pressure P0 and the third pressure value P3, and diagnoses whether the difference is equal to or greater than a second predetermined pressure PT2 (S32). That is, the control unit 40 diagnoses whether the processing unit 30 (the canister 31) is maintained at a negative pressure. When the difference is equal to or greater than the second predetermined pressure PT2 (Yes in S32), the control unit 40 diagnoses that there is no open-sticking of the bypass valve 34 (S33). That is, in a case where there is the open-sticking in the bypass valve 34, when the purge valve 33 is actually opened, a communication state is established between the canister 31 and the intake passage 10a, and the processing unit 30 is in the atmosphere open state. In this state, the negative pressure of the processing unit 30 cannot be maintained. As a result, the control unit 40 can diagnose the presence or absence of open-sticking of the bypass valve 34. Therefore, when the difference is smaller than the second predetermined pressure PT2 (No in S32), the control unit 40 diagnoses that the bypass valve 34 is in the open-sticking (S39). When the control unit 40 diagnoses that the bypass valve 34 is in the open-sticking, the control unit 40 prohibits the fuel supply control (fuel supply is prohibited) as the fail-safe control (S41), returns the process to the first failure diagnosis, and records a flag indicating the end of the failure diagnosis.

On the other hand, when the control unit 40 diagnoses that there is no open-sticking of the bypass valve 34, the control unit 40 performs the opening control on the bypass valve 34 (S34), calculates a difference between the atmospheric pressure P0 and the third pressure value P3, and diagnoses whether the difference is equal to or less than a third predetermined pressure PT3 (S35). That is, in a state where the bypass valve 34 and the purge valve 33 are actually opened, the communication state is established between the canister 31 and the intake passage 10a, and the processing unit 30 is in the atmosphere open state. In this state, the third pressure value P3 returns to a value close to the atmospheric pressure P0. If the third pressure value P3 does not return to a value close to the atmospheric pressure P0, one or both of the purge valve 33 and the bypass valve 34 are in a closed-sticking state. Therefore, when the difference between the atmospheric pressure P0 and the third pressure value P3 is equal to or less than the third predetermined pressure PT3 which is a value close to the atmospheric pressure (Yes in S35), the control unit 40 diagnoses that there is no closed-sticking for both the purge valve 33 and the bypass valve 34 (S36). On the other hand, when the difference between the atmospheric pressure P0 and the third pressure value P3 is larger than the third predetermined pressure PT3 which is a value close to the atmospheric pressure (No in S35), the control unit 40 diagnoses that one or both of the purge valve 33 and the bypass valve 34 may be in the closed-sticking state (S40). When the above diagnosis ends, the control unit 40 opens the switching valve 36 (S37), ends the processing of the second failure diagnosis, and returns to the flow of the first failure diagnosis. When the diagnosis is completed, the control unit 40 records a diagnosis completion flag.

Next, a control procedure in the third failure diagnosis performed by the control unit 40 will be described with reference to the flowchart of FIG. 6 and the timing chart of FIG. 7. The third failure diagnosis is performed after the state V4 shown in the timing chart of FIG. 7.

In the third failure diagnosis, the control unit 40 diagnoses whether the negative pressure pump 35 is in operation (S50), and when the negative pressure pump 35 is not in operation (No in S50), the control unit 40 starts the negative pressure pump 35 (S51). The control unit 40 performs the opening control on the sealing valve 22 to open (S52), and performs the closing control, the opening control, and then closing control on the purge valve 33 (S53). As a result, if the purge valve 33 is not in closed-sticking, the fuel tank 21 communicates with the intake passage 10a and becomes the atmospheric pressure P0 (see time t8 to time t9 in FIG. 7).

The control unit 40 acquires the second pressure value P2 of the second tank pressure sensor 24 as an acquired value P21, and diagnoses whether the acquired value P21 is within a predetermined pressure range ΔPx (a range from −Px to +Px) as a first condition (S54). When the first condition is satisfied (Yes in S54), the control unit 40 diagnoses that the second tank pressure sensor 24 has not failed (S69). Here, when the second tank pressure sensor 24 is operating normally, the actual pressure of the fuel tank 21 becomes the atmospheric pressure P0. Therefore, the acquired value P21 should also be a value within the predetermined pressure range ΔPx and close to the atmospheric pressure P0 (refer to the solid line of the second pressure value P2 from the time t7 to the time t10 in FIG. 7). On the other hand, if the second tank pressure sensor 24 has a shift failure, the acquired value P21 is shifted from the range (refer to the broken line E1 of the second pressure value P2 from time t7 to time t10 in FIG. 7).

The control unit 40 performs the closing control on the switching valve 36 to start decreasing the pressure of the fuel tank 21 (S55). The control unit 40 diagnoses whether a change value ΔP1 of the first pressure value P1 acquired from the first tank pressure sensor 23 after the switching valve 36 is subjected to the closing control is a fifth predetermined pressure PT5 (for example, 1 kPa) as a second condition (S56). That is, in a case where the first pressure value P1 indicates a constant value even though the control unit 40 performs the opening control on the sealing valve 22 and controls the pressure of the fuel tank 21 to be decreased (refer to the two-dot chain line E2 from the time t10 to the time t11 of the first pressure value P1 in FIG. 7, No in S56), it is suspected that the first tank pressure sensor 23 is stuck, the sealing valve 22 is in the closed-sticking, and the bypass valve 34 is in the closed-sticking. On the other hand, when the first pressure value P1 changes (Yes in S56), the control unit 40 can diagnose that there are no failures such as the sticking of the first tank pressure sensor 23, the closed-sticking of the sealing valve 22, and the closed-sticking of the bypass valve 34 (S70).

The control unit 40 diagnoses a change value ΔP2 of the second pressure value P2 acquired from the second tank pressure sensor 24 after the switching valve 36 is subjected to the closing control is a fourth predetermined pressure PT4 (for example, 1 kPa) as a third condition (S57). That is, in a case where the second pressure value P2 indicates a constant value even though the control unit 40 performs the opening control on the sealing valve 22 and controls the pressure of the fuel tank 21 to be decreased (refer to the two-dot chain line E3 from the time t10 to the time t11 of the second pressure value P2 in FIG. 7, No in S57), it is suspected that the sealing valve 22 is in the closed-sticking, and the bypass valve 34 is in the closed-sticking. The first tank pressure sensor 23 is provided in the vapor passage 25, and the second tank pressure sensor 24 is provided in an upper portion of the fuel tank 21. Therefore, the vapor passage 25 is suspected to be clogged. On the other hand, when the second pressure value P2 changes (Yes in S57), the control unit 40 can diagnose that there are no failures such as the closed-sticking of the sealing valve 22, the closed-sticking of the bypass valve 34, and the clogging of the vapor passage 25 (S71).

The control unit 40 determines whether the second condition and the third condition described above are satisfied (S58). However, regardless of whether the second condition and the third condition are satisfied (Yes in S58, No in S58), the control unit 40 continues the pressure decrease until a third predetermined period Tm3 elapses after the switching valve 36 is subjected to the closing control to start decreasing the pressure of the fuel tank 21 (No in S59). On the other hand, when the third predetermined period Tm3 has elapsed (Yes in S59), the control unit 40 proceeds the process to S60.

The control unit 40 acquires a change value ΔP3 of the third pressure value P3 detected by the canister pressure sensor 37 after the switching valve 36 is subjected to the closing control, and diagnoses whether the change value ΔP3 of the third pressure value P3 is decreased to a sixth predetermined pressure PT6 lower than the reference pressure Pref (S60). When the third pressure value P3 is not equal to the sixth predetermined pressure PT6 (No in S60), the control unit 40 continues until a fourth predetermined period Tm4 elapses after the pressure decrease (No in S74). As a result, the control unit 40 can diagnose that the cause of no change in one or both of the first pressure value P1 and the second pressure value P2 is not an operation failure of the module 38 including the negative pressure pump 35 or a failure of leakage or clogging of the canister 31. Therefore, the control unit 40 specifies a failure portion that causes no change in one or both of the first pressure value P1 and the second pressure value P2 by combining the first condition to the third condition. On the other hand, when the third pressure value P3 is not equal to the sixth predetermined pressure PT6 (No in S60) and the fourth predetermined period Tm4 has elapsed after the pressure decrease, the process returns to the first failure diagnosis (Yes in S74).

When only the second condition is not satisfied, the control unit 40 determines that the first tank pressure sensor 23 is stuck (S72). That is, when the second pressure value P2 normally changes and only the first pressure value P1 does not change, the pressure in the fuel tank 21 is actually decreased, and it can be determined that the first tank pressure sensor 23 is stuck. When the control unit 40 determines that the first tank pressure sensor 23 is stuck, the control unit 40 prohibits the pressure control as the fail-safe control (S73), returns the process to the first failure diagnosis, and records a flag indicating the end of the failure diagnosis.

In a case where the second condition is satisfied (Yes in S61) and only the third condition is not satisfied (Yes in S62), the control unit 40 specifies that the vapor passage 25 is clogged (S65). That is, if the first pressure value P1 normally changes and only the second pressure value P2 does not change, it is suspected that the second tank pressure sensor 24 is stuck or the vapor passage 25 between the second tank pressure sensor 24 and the first tank pressure sensor 23 is clogged.

Here, the control unit 40 detects the pressure in the fuel tank 21 by the second tank pressure sensor 24 while the ignition switch 40a is on, so as to record that there is no sticking of the second tank pressure sensor 24. Therefore, the control unit 40 can specify that the vapor passage 25 is clogged. When the control unit 40 specifies that the vapor passage 25 is clogged, the control unit 40 prohibits the fuel supply control and the pressure control as the fail-safe control (S66), returns the process to the first failure diagnosis, and records a flag indicating the end of the failure diagnosis.

When the second condition and the third condition are satisfied (No in S62, Yes in S58), the control unit 40 diagnoses whether the first condition is satisfied (Step S63). In a case where the first condition is not satisfied (No in S63), the control unit 40 specifies that the shift failure of the second tank pressure sensor 24 has occurred (S67). That is, in a case where the first tank pressure sensor 23 is not stuck and the vapor passage 25 is not clogged, and only the first condition is not satisfied, the control unit 40 can specify that the shift failure of the second tank pressure sensor 24 is the cause because the second pressure value P2 is an abnormal value. When the control unit 40 specifies that the shift failure of the second tank pressure sensor 24 has occurred, the control unit 40 prohibits the fuel supply control as the fail-safe control (S68). On the other hand, when the first condition is satisfied (Yes in S63), the control unit 40 can diagnose that none of the sticking of the first tank pressure sensor 23, the shift failure of the second tank pressure sensor 24, and the clogging of the vapor passage 25 has occurred. That is, the failure diagnosis of the devices except for the sealing valve 22 in the fuel storage unit 20 is completed, it is diagnosed that there is a failure of the closed-sticking of the purge valve 33 and the bypass valve 34 of the processing unit 30, the open-sticking or the closed-sticking of the sealing valve 22 of the fuel storage unit 20, and the process proceeds to the fourth failure diagnosis (S64).

Next, a control procedure in the fourth failure diagnosis performed by the control unit 40 will be described with reference to the flowchart of FIG. 8 and the timing chart of FIG. 9. The fourth failure diagnosis is performed after the state V6 shown in the timing chart of FIG. 9.

In the fourth failure diagnosis, the control unit 40 performs the closing control on the bypass valve 34 (S81), and separates the canister 31 from the purge passage 32. In this state, the control unit 40 opens the switching valve 36, sets the canister 31 into the atmosphere open state (S82), and sets the pressure in the canister 31 to the reference pressure Pref (refer to the third pressure value P3 at time t13 in FIG. 9). Thereafter, the control unit 40 performs the closing control on the sealing valve 22 to seal the fuel tank 21 (S83). As a result, the control unit 40 separates the fuel storage unit 20 and the processing unit 30, and proceeds to the failure diagnosis of the purge valve 33 and the bypass valve 34 of the processing unit 30 and the sealing valve 22 of the fuel storage unit 20.

The control unit 40 performs the opening control on the purge valve 33 and the bypass valve 34 (S84). As a result, the processing unit 30 communicates with the intake passage 10a and turns into the atmosphere open state (refer to the third pressure value P3 from time t14 to time t15 in FIG. 9). When the first pressure value P1 and the second pressure value P2 become the atmospheric pressure P0 in this state (Yes in S85), the control unit 40 specifies that the sealing valve 22 is in the open-sticking (S97). That is, in a case where the first pressure value P1 and the second pressure value P2 become the atmospheric pressure P0 (refer to the one-dot chain line E4 from time t14 to time t15 of the first pressure value P1 in FIG. 9) even though the control unit 40 performs the closing control on the sealing valve 22, the sealing valve 22 is actually in an open state in spite of the instruction of the control unit 40. Accordingly, the control unit 40 can specify that the sealing valve 22 is in the open-sticking. When the control unit 40 specifies that the sealing valve 22 is in the open-sticking, the control unit 40 prohibits the fuel supply control as the fail-safe control (S98), returns the process to the third failure diagnosis, and records a flag indicating the end of the failure diagnosis.

When there is no change in the first pressure value P1 and the second pressure value P2 (No in S85), the control unit 40 closes the switching valve 36 to start decreasing the pressure of the processing unit 30 (S86). The control unit 40 acquires the third pressure value P3 and diagnoses whether the pressure of the canister 31 is decreased (S87).

In a case where the pressure of the canister 31 is decreased and the third pressure value P3 changes (Yes in S87) even though the processing unit 30 is in the atmosphere open state, the control unit 40 acquires the results of the second condition and the third condition in the third failure diagnosis (S88). When one or both of the first pressure value P1 and the second pressure value P2 changes in the third failure diagnosis (Yes in S88), the control unit 40 specifies that the purge valve 33 is in the closed-sticking (S89). That is, when one or both of the first pressure value P1 and the second pressure value P2 changes in the third failure diagnosis, it means that the bypass valve 34 and the sealing valve 22 are opened by the control signal from the control unit 40 (refer to S70 and S71 in FIG. 6). As a result, the control unit 40 can diagnose that the bypass valve 34 is not in the closed-sticking. In addition, the control unit 40 can diagnose that the sealing valve 22 is not in the closed-sticking. As a result, the control unit 40 can specify that the cause of the pressure decrease of the canister 31 (refer to the broken line E5 of the third pressure value P3 from the time t15 to the time t16 in FIG. 9) is that the purge valve 33 is in the closed-sticking. When the control unit 40 specifies that the purge valve 33 is in the closed-sticking, the control unit 40 prohibits the pressure control and the release control as the fail-safe control (S90), returns the process to the third failure diagnosis, and records a flag indicating the end of the failure diagnosis.

When neither of the first pressure value P1 and the second pressure value P2 changes in the third failure diagnosis (No in S88), the control unit 40 specifies that the bypass valve 34 is in the closed-sticking (S91). That is, when neither of the first pressure value P1 and the second pressure value P2 changes in the third failure diagnosis, there is a failure on the passage from the fuel tank 21 to the negative pressure pump 35. That is, it is suspected that the bypass valve 34 is in the closed-sticking or the sealing valve 22 is in the closed-sticking. However, in the fourth failure diagnosis, the pressure of the canister 31 can be decreased (refer to the broken line E6 of the third pressure value P3 from the time t15 to the time t16 in FIG. 9) regardless of whether the processing unit 30 is in the atmosphere open state means that the bypass valve 34 is not actually opened and is in the closed-sticking. Accordingly, the control unit 40 can specify that the bypass valve 34 is in the closed-sticking. When the control unit 40 specifies that the bypass valve 34 is in the closed-sticking, the control unit 40 prohibits the fuel supply control and the release control as the fail-safe control (S92), returns the process to the third failure diagnosis, and records a flag indicating the end of the failure diagnosis.

In a case where the pressure of the canister 31 is not decreased and the third pressure value P3 is not changed (No in S87), the control unit 40 acquires the results of the second condition and the third condition in the third failure diagnosis (S93). When one or both of the first pressure value P1 and the second pressure value P2 changes (Yes in S93), the control unit 40 diagnoses that the purge valve 33 is not in the closed-sticking and is normal (S94). That is, when one or both of the first pressure value P1 and the second pressure value P2 changes in the third failure diagnosis, it means that the bypass valve 34 and the sealing valve 22 are actually opened in response to the control signal of the control unit 40 (refer to S70 and S71 in FIG. 6). In addition, in the fourth failure diagnosis, the fact that the pressure of the canister 31 cannot be decreased means that the purge valve 33 is not in the closed-sticking and actually opened in response to the control signal of the control unit 40. As a result, the control unit 40 can identify that the purge valve 33 is normal.

When neither of the first pressure value P1 and the second pressure value P2 changes (No in S93), the control unit 40 diagnoses that the sealing valve 22 is in the closed-sticking (S95). That is, when neither of the first pressure value P1 and the second pressure value P2 changes in the third failure diagnosis, there is a failure on the passage from the fuel tank 21 to the negative pressure pump 35. That is, it is suspected that the bypass valve 34 is in the closed-sticking or the sealing valve 22 is in the closed-sticking. However, in the fourth failure diagnosis, the fact that the processing unit 30 is in the atmosphere open state and the pressure of the canister 31 cannot be decreased means that the bypass valve 34 is actually open and is not in the closed-sticking. Accordingly, the control unit 40 can specify that the sealing valve 22 is in the closed-sticking. When the control unit 40 specifies that the sealing valve 22 is in the closed-sticking, the control unit 40 prohibits the pressure control and the fuel supply control as the fail-safe control (S96), returns the process to the third failure diagnosis, and records a flag indicating the end of the failure diagnosis.

As described above, according to the fuel tank system 1, the failure portion can be specified using the first tank pressure sensor 23 and the second tank pressure sensor 24. As a result, the fail-safe control according to the failure portion can be performed. For example, when the first tank pressure sensor 23 is stuck, the fuel supply control can be performed if the second tank pressure sensor 24, the sealing valve 22, and the bypass valve 34 are normal. Therefore, when the first tank pressure sensor 23 is stuck, the control unit 40 does not perform the fuel supply prohibition as the fail-safe control. As a result, it is possible to provide a fuel tank system capable of reducing a decrease in usability even when the first tank pressure sensor 23 is stuck. When the first tank pressure sensor 23 is stuck, the release control is not prohibited either. As a result, it is possible to prevent the pressure of the fuel tank 21 from increasing. Therefore, it is possible to prevent the function of the vehicle C from being limited due to an increase in the pressure of the fuel tank 21. As a result, it is possible to reduce a decrease in usability.

When the sealing valve 22 is in the closed-sticking, the control unit 40 does not prohibit the release control. Therefore, the fuel evaporative gas adsorbed in the canister 31 can be processed. As a result, it is possible to prevent the function of the vehicle C from being limited due to an excessive amount of fuel evaporative gas adsorbed by the canister 31. Further, when the bypass valve 34 is in the closed-sticking, there is no influence on the pressure control performed by the control unit 40 by performing the closing control on the bypass valve 34. Therefore, when it is specified that the bypass valve 34 is in the closed-sticking, the control unit 40 does not prohibit the pressure control. Thus, even when it is specified that the bypass valve 34 is in the closed-sticking, the pressure of the fuel tank 21 can be lowered. As a result, it is possible to prevent the function of the vehicle from being limited due to an increase in the pressure of the fuel tank 21.

That is, since the control unit 40 can specify the failure portion, the control unit 40 can determine whether or not the pressure control, the release control, and the fuel supply control can be performed according to the failure portion. Therefore, it is not necessary to perform fail-safe control for uniformly prohibiting specific control regardless of the failure portion. As a result, the function of the vehicle C is limited by the fail-safe control, and it is possible to reduce a decrease in usability.

Further, the control unit 40 performs the first failure diagnosis and the second failure diagnosis, so that the failure diagnosis of the purge valve 33 and the bypass valve 34 can be performed without actually opening the sealing valve 22. That is, if all of these devices included in the fuel tank system 1 are normal, the control unit 40 can diagnose a failure without opening the sealing valve 22 even once.

In addition, in a case where there is a possibility that a device in either one of or both of the fuel storage unit 20 and the processing unit 30 fails in the first failure diagnosis and the second failure diagnosis, the control unit 40 performs the third failure diagnosis and the fourth failure diagnosis to specify the failure portion. Further, since the sealing valve 22 is opened in the third failure diagnosis and the sealing valve 22 is closed in the fourth failure diagnosis, the control unit 40 can specify the failure portion by opening the sealing valve 22 only once. Thus, the fuel tank system 1 can reduce an amount of the fuel evaporative gas adsorbed by the canister 31.

Further, as the number of times the sealing valve 22 is actually opened increases, the sealing valve 22 is consumed. In addition, the longer the startup time of the fuel tank system 1 is, the larger the power consumption is. According to the fuel tank system 1, since the control unit 40 can quickly specify the failure portion by opening the sealing valve 22 only once, it is possible to process the first failure diagnosis to the fourth failure diagnosis in a short time. Therefore, the durability of the fuel tank system 1 is improved, and the power consumption can be reduced. As a result, in the fuel tank system 1, it is possible not only to reduce a decrease in the usability due to the fail-safe control, but also to reduce a decrease in the usability because of the function of the vehicle C being limited due to the durability or the power consumption of the fuel tank system 1.

Other Embodiments

Although the embodiment of the present disclosure has been described above, the present disclosure is not limited to the above-described embodiment, and various modifications can be made without departing from the gist of the invention. In particular, a plurality of modifications described in the present specification can be optionally combined as necessary.

In the above embodiment, the first tank pressure sensor 23 and the second tank pressure sensor 24 have different arrangements and different detection characteristics, but the present disclosure is not limited thereto. The first tank pressure sensor and the second tank pressure sensor may be different from each other in either the arrangement or the detection characteristic.

In the above embodiment, although the processing unit 30 includes the bypass valve 34 as the second on-off valve, the present disclosure is not limited thereto. If there is no bypass valve 34, the control unit 40 may perform only the diagnosis of the existence of the closed-sticking of the purge valve 33 in a condition where the sealing valve 22 is closed.

In the above embodiment, the processing unit 30 uses the negative pressure pump 35 as the pressure generation unit, but the present disclosure is not limited thereto. The pressure generation unit may be a pressure pump.

The present application is based on Japanese Patent Application No. 2019-139520 filed on Jul. 30, 2019, the contents of which are incorporated herein as reference.

REFERENCE SIGNS LIST

• • 1 fuel tank system
  • 10 internal combustion engine
  • 10 a intake passage
  • 20 fuel storage unit
  • 21 fuel tank
  • 22 sealing valve
  • 23 first tank pressure sensor (first pressure detection unit)
  • 24 second tank pressure sensor (second pressure detection unit)
  • 25 vapor passage
  • 30 processing unit
  • 31 canister
  • 32 purge passage (communication passage)
  • 33 purge valve (first on-off valve)
  • 34 bypass valve (second on-off valve)
  • 35 negative pressure pump
  • 36 switching valve
  • 37 canister pressure sensor (third pressure detection unit)
  • 40 control unit
  • 40 a ignition switch
  • C vehicle
  • P0 atmospheric pressure
  • P1 first pressure value
  • P2 second pressure value
  • P3 third pressure value

Claims

1. A fuel tank system for a vehicle having an internal combustion engine, the fuel tank system comprising: a fuel storage unit having a sealing valve and configured to seal a fuel tank that stores fuel;a processing unit configured to process fuel evaporative gas in the fuel tank; anda control unit configured to diagnose a failure of the fuel storage unit and the processing unit,wherein the fuel storage unit includes a first pressure detection unit configured to detect a pressure of the fuel tank, anda second pressure detection unit disposed at a position different from the first pressure detection unit and configured to detect a pressure of the fuel tank, andwherein the control unit is configured to specify a failure portion of the fuel storage unit and the processing unit based on a change in at least one or both of a first pressure value detected by the first pressure detection unit and a second pressure value detected by the second pressure detection unit when the pressure of the fuel tank is changed, andperform fail-safe control according to the failure portion.

2. The fuel tank system according to claim 1, wherein the fail-safe control includes a control for prohibiting pressure control for lowering a pressure of the fuel tank, anda control for prohibiting fuel supply control for opening a fuel supply port which is a supply port of the fuel tank, andwherein the control unit is configured to perform at least one of the control for prohibiting the pressure control and the control for prohibiting the fuel supply control according to the failed portion.

3. The fuel tank system according to claim 1, wherein the processing unit includes a canister configured to adsorb fuel evaporative gas in the fuel tank,a pressure generation unit connected to the canister and configured to generate pressure, anda third pressure detection unit configured to detect a pressure of the canister, andwherein the control unit is configured to specify the failure portion as one of the first pressure detection unit and the second pressure detection unit based on a change in either one of or both of the first pressure value and the second pressure value and a change in a third pressure value detected by the third pressure detection unit when the pressure of the fuel tank is changed by the pressure generation unit.

4. The fuel tank system according to claim 3, wherein the control unit is configured to specify the failure portion as the first pressure detection unit and prohibit the pressure control, in a case where the third pressure value and the second pressure value change and the first pressure value does not change.

5. The fuel tank system according to claim 3, wherein the control unit is configured to specify the failure portion as the second pressure detection unit and prohibit the fuel supply control, in a case where the third pressure value and the first pressure value change and the second pressure value does not change.

6. The fuel tank system according to claim 3, wherein the processing unit includes a communication passage through which the sealing valve and an intake passage of the internal combustion engine are communicated with each other,a first on-off valve configured to be opened and closed a communication between the intake passage and the communication passage, anda second on-off valve configured to be opened and closed a communication between the canister and the communication passage, andwherein the control unit is configured to specify the failure portion and a failure of the failure portion as open-sticking of the sealing valve, in a case where both the first pressure value and the second pressure value become atmospheric pressure when the sealing valve is subjected to closing control and the first on-off valve and the second on-off valve are subjected to opening control, andprohibit the fuel supply control.

7. The fuel tank system according to claim 6, wherein the control unit is configured to specify the failure portion and a failure of the failure portion as closed-sticking of the sealing valve, in a case where both the first pressure value and the second pressure value do not change when the pressure of the fuel tank is changed by the pressure generation unit, and thereafter, the third pressure value does not change when pressure of the canister is changed by closing the second on-off valve, andprohibit the pressure control and the fuel supply control.

8. A fuel tank system for a vehicle having an internal combustion engine, the fuel tank system comprising: a fuel storage unit having a sealing valve and configured to seal a fuel tank that stores fuel;a processing unit configured to process fuel evaporative gas in the fuel tank; anda control unit configured to diagnose a failure of the fuel storage unit and the processing unit,wherein the control unit is configured to diagnose a failure of the fuel storage unit and the processing unit by performing a first failure diagnosis of diagnosing a failure of the fuel storage unit in a state where the sealing valve is closed, andby performing a second failure diagnosis of diagnosing a failure of the processing unit in a state where the sealing valve is closed,end the failure diagnosis when the processing unit and the fuel storage unit are normal,when there is a possibility that either one of or both of the fuel storage unit and the processing unit fails, specify a failure portion by performing a third failure diagnosis of diagnosing a failure by changing a pressure of the fuel tank in a state where the sealing valve is opened, andby performing a fourth failure diagnosis of diagnosing a failure by bringing the processing unit into an atmosphere open state in a state where the sealing valve is closed, andperform fail-safe control according to the failure portion.

9. The fuel tank system according to claim 2, wherein the processing unit includes a canister configured to adsorb fuel evaporative gas in the fuel tank,a pressure generation unit connected to the canister and configured to generate pressure, anda third pressure detection unit configured to detect a pressure of the canister, andwherein the control unit is configured to specify the failure portion as one of the first pressure detection unit and the second pressure detection unit based on a change in either one of or both of the first pressure value and the second pressure value and a change in a third pressure value detected by the third pressure detection unit when the pressure of the fuel tank is changed by the pressure generation unit.

10. The fuel tank system according to claim 4, wherein the control unit is configured to specify the failure portion as the second pressure detection unit and prohibit the fuel supply control, in a case where the third pressure value and the first pressure value change and the second pressure value does not change.

11. The fuel tank system according to claim 4, wherein the processing unit includes a communication passage through which the sealing valve and an intake passage of the internal combustion engine are communicated with each other,a first on-off valve configured to be opened and closed a communication between the intake passage and the communication passage, anda second on-off valve configured to be opened and closed a communication between the canister and the communication passage, andwherein the control unit is configured to specify the failure portion and a failure of the failure portion as open-sticking of the sealing valve, in a case where both the first pressure value and the second pressure value become atmospheric pressure when the sealing valve is subjected to closing control and the first on-off valve and the second on-off valve are subjected to opening control, andprohibit the fuel supply control.

12. The fuel tank system according to claim 5, wherein the processing unit includes a communication passage through which the sealing valve and an intake passage of the internal combustion engine are communicated with each other,a first on-off valve configured to be opened and closed a communication between the intake passage and the communication passage, anda second on-off valve configured to be opened and closed a communication between the canister and the communication passage, andwherein the control unit is configured to specify the failure portion and a failure of the failure portion as open-sticking of the sealing valve, in a case where both the first pressure value and the second pressure value become atmospheric pressure when the sealing valve is subjected to closing control and the first on-off valve and the second on-off valve are subjected to opening control, andprohibit the fuel supply control.