JP5628142B2 - Electronic control unit - Google Patents

Description

  The present invention relates to an electronic control device including a wakeup timer.

  An electronic control device having a WakeUP timer is mounted on a vehicle such as an automobile. Some vehicles, such as engine systems and fuel cell systems, rise in temperature during operation. When trying to diagnose failures of these items, the contents of the failure diagnosis, for example, leak diagnosis around the fuel tank of the engine system, etc. It is necessary to stop the engine system and the like, and the temperature is lowered and the atmosphere in the system is stable. Then, after turning off the ignition switch and stopping the engine system etc., when the temperature falls, it is proposed to start the electronic control device with the WakeUP timer and perform a leak diagnosis (Patent Document 1, (See 2nd grade). It has also been proposed to perform failure diagnosis of the WakeUP timer.

JP 2003-139874 A JP-A-2005-301615

  However, in Patent Document 1, in the method of setting a flag indicating that the CPU has started after a predetermined time has elapsed while the ignition switch is off, the capacity of the RAM for setting this flag increases or the RAM In some cases, the previous flag is set, so that the battery capacity decreases and the subsequent flag cannot be set. In addition, if the timer is reset each time a predetermined time elapses while the ignition switch is turned off, for example, even if it is necessary to start only once while the ignition switch is turned off, the timer is reset every time the predetermined time elapses. Therefore, it is considered that the WakeUP timer may be determined to be abnormal even though the timer is normal. Further, in Patent Document 2, it is considered that even if the CPU is started up assuming that the WakeUP timer is a predetermined time, a deviation (advancing or delaying of the WakeUp timer) cannot be detected as an abnormality.

  Therefore, an object of the present invention is to provide an electronic control device that can reliably perform failure diagnosis of a WakeUP timer.

The present invention relates to a first timer for measuring a time during which an ignition switch of a vehicle is turned off, and when the first timer measures a time equal to a set time while the ignition switch is turned off, or when the ignition switch is turned on from off In an electronic control device equipped with a microcomputer that starts when
A second timer for measuring a time during which the ignition switch is off;
The first timer, when measuring a time equal to the set time, resets the measured time, continues to measure the time after the reset,
When the ignition switch is turned on, if the difference in time measured by the first timer and the second timer is different from the set time, or the set time is added to the time measured by the first timer If the measured time is different from the time measured by the second timer, or the time obtained by subtracting the set time from the time measured by the second timer is different from the time measured by the first timer. It is characterized by judging.

  According to this, after restarting the measurement of the time of the first timer, if the time is normal, the difference between the times measured by the first timer and the second timer is the same regardless of the length of the time measured by each. , Which coincides with the set time. Similarly, the time obtained by adding the set time to the time measured by the first timer coincides with the time measured by the second timer, and the time obtained by subtracting the set time from the time measured by the second timer is the first time. Matches the time measured by the timer. That is, even when the measured time becomes longer, the difference between the times measured by the first timer and the second timer is different from the set time, or the time obtained by adding the set time to the time measured by the first timer. If the time is different from the time measured by the second timer or the time obtained by subtracting the set time from the time measured by the second timer is different from the time measured by the first timer, it can be determined that there is an abnormality. Then, this determination may be made based on the time measured when the first timer and the second timer are turned on, so that the determination is made after the ignition switch is turned on. Therefore, it is not necessary to store the determination result as a flag before the ignition switch is turned on, and an abnormality can be determined without increasing the capacity of the RAM regardless of the length of the measured time.

  Further, according to the present invention, the time is simultaneously measured by the first timer and the second timer. Since it is considered rare that both the first timer and the second timer are shifted at the same time (time advance or delay of the timer itself), if there is a shift, either It is considered that a deviation has occurred. For example, when a deviation occurs in one of the first timer and the second timer, the deviation is reflected in a difference in time measured by the first timer and the second timer and is different from the set time. As a result, abnormality determination can be made. The failure diagnosis of the first timer and the second timer can be performed reliably.

  The first timer functions as a WakeUP timer because the microcomputer is activated when a time equal to the set time is measured, and the microcomputer is so-called WakeUP (wakes up). It can be said. Further, since the first timer and the second timer measure the time from when the ignition switch is turned off, it can be said that they function as a SOAK (soak) timer.

In the present invention, when the first timer measures a time equal to the set time,
It is preferable that the maximum measurement time of the first timer is shortened by a time equal to the set time.

  Usually, the timer does not measure an infinite time, but there is an upper limit value (maximum measurement time) of the time to be measured. Thereby, when it is going to measure time exceeding measurement maximum time, measurement time becomes fixed with measurement maximum time. According to the present invention, if the first timer and the second timer try to measure the time exceeding the maximum measurement time (the first timer and the second timer may be equal or different), The measurement time of the timer is shorter than the maximum measurement time of the first timer by the set time, and the measurement time of the second timer is the maximum measurement time of the second timer. Therefore, the difference between the measurement times of the first timer and the second timer is The set time is equal to the time considering the difference between the maximum measurement times of the first timer and the second timer, and is not determined to be abnormal. It is possible to prevent the abnormality from being inadvertently determined simply because the measurement time is long. On the contrary, when the measurement time has reached the maximum time in the first timer and the second timer, but the abnormality is determined, the maximum time of the first timer is not performed without wakeup (wake-up). Abnormalities such as not being reset again shortly by the set time can be detected.

  In the present invention, when the first timer measures a time equal to the set time, the time measured by the first timer and the second timer is compared, and the first timer and the second timer are compared. It is preferable to determine that there is an abnormality when the measurement time of the two timers differs by a predetermined time or more.

  According to this, if the abnormality flag is set at the time when the first timer measures the time equal to the set time, the abnormality can be determined when the ignition switch is turned on. Even when the measurement time of the second timer reaches the maximum time, the abnormality can be determined.

  ADVANTAGE OF THE INVENTION According to this invention, the electronic control apparatus which can perform the failure diagnosis of a 1st timer (WakeUP timer) reliably can be provided.

It is a block diagram of the electronic control apparatus which concerns on embodiment of this invention. It is a flowchart of the failure diagnosis method by the electronic controller which concerns on embodiment of this invention. It is a timing chart of count value waveforms of a low-speed clock timer and a high-speed clock timer for explaining a method of timer clock deviation check (timer initial check). It is a timing chart for demonstrating the WakeUP time shift determination method. It is a timing chart in the time of normal of a failure diagnosis method (measurement time of a SOAK timer: less than 72 hours). It is a timing chart in the time of normal of a failure diagnosis method (measurement time of a SOAK timer: 72 hours or more). It is a timing chart in the time of abnormality of the failure diagnosis method (the 1: initial check error). It is a timing chart at the time of abnormality of the failure diagnosis method (part 2: WakeUP error). It is a timing chart at the time of abnormality of the failure diagnosis method (part 3: error not to wake up: less than 72 hours). It is a timing chart at the time of abnormality of the failure diagnosis method (part 4: error not to wake up: 72 hours or more).

  Next, modes for carrying out the present invention (referred to as “embodiments”) will be described in detail with reference to the drawings as appropriate.

  FIG. 1 shows a configuration diagram of an electronic control unit (FIECU) 1 for fuel injection as an example of an electronic control unit according to an embodiment of the present invention. Various electronic control devices 1 are mounted on vehicles such as automobiles, and the present invention can be applied to the respective electronic control devices 1. In this embodiment, however, fuel injection (FI) for injecting fuel into the engine is performed. ) An explanation will be given by taking an FIECU (electronic control unit) 1 for controlling the system as an example. The vehicle is equipped with a plurality of systems such as an engine system (FC system in the case of a fuel cell vehicle), a steering system, etc., and each system has an electronic control unit 1 that controls its own system. ing. For example, the engine system further includes a fuel injection (FI) system in the system, and the fuel injection (FI) system includes a FIECU (electronic control unit) 1.

  The vehicle also has an ignition switch (IGSW) 9, a main relay (MAIN RLY) 8, and a battery (+ B). When the driver of the vehicle turns on the ignition switch 9, the main relay 8 is turned on, and the fuel is injected from the battery (+ B) via the main relay 8 and the fuel including the FIECU (electronic control unit) 1. (FI) Supplied to the entire system, and further to the entire system constituting the vehicle. Then, the vehicle, a plurality of systems of the vehicle, and the electronic control device 1 of the system are started. Further, when the driver turns off the ignition switch 9, the main relay 8 is turned off, and the power supply from the battery (+ B) is stopped. A plurality of systems including the FIECU (electronic control unit) 1 and further the vehicle can be stopped.

  A system such as a fuel injection (FI) system mounted on a vehicle has a self-diagnosis function and can automatically perform a failure diagnosis. Most failure diagnosis is performed when the ignition switch 9 is turned on, particularly immediately after the ignition switch 9 is turned on. However, some failure diagnosis is performed when the ignition switch 9 is turned off. . Specifically, it is a leak diagnosis around the fuel tank. This leak diagnosis or the like needs to be performed in a state in which the engine system or the like is stopped, the temperature is lowered, and the atmosphere in the system is stable. Therefore, after turning off the ignition switch 9 and stopping the vehicle (entire system including the engine system, etc.), a wakeup timer (low speed) is set for a time equal to a set time of several hours for the temperature around the fuel tank to drop. After measurement by the clock timer, first timer) 3a, the fuel injection (FI) system, in particular, the main CPU (Main CPU) 2 of the FIECU (electronic control unit) 1 is started, and leak diagnosis is performed. A failure diagnosis (part of) of the WakeUP timer 3a is performed. When the leak diagnosis and the failure diagnosis (a part of) the WakeUP timer 3a are completed, the main CPU (Main CPU, microcomputer) 2 and the like are stopped.

  The FI ECU (electronic control unit) 1 includes a main CPU (Main CPU) 2, a sub CPU (Sub CPU) 3, a custom IC 4, a first power supply circuit 5, a main relay (MRLY) control circuit 6, and a second CPU. And a power supply circuit 7.

  The second power supply circuit 7 is directly connected to the battery (+ B). For this reason, the second power supply circuit 7 constantly supplies (energizes) power to the sub CPU (SubCPU) 3 and the custom IC 4. The second power supply circuit 7 is a constant voltage source that is always supplied with power of the voltage VBU from the battery (+ B) and outputs power of the constant voltage VCC_S.

  The sub CPU (SubCPU) 3 is always energized and turned on. The sub CPU 3 includes a low-speed clock timer (WakeUP timer, first timer) 3a and a high-speed clock timer (for failure detection) 3b. In the following description, the WakeUP timer is referred to as a low speed clock timer 3a. The sub CPU 3 switches the clock mode between the high-speed clock mode and the low-speed clock mode depending on whether the ignition switch 9 is on or off, thereby suppressing power consumption. In the ON state of the ignition switch 9, in order to execute various applications at high speed (for example, 20 MHz) in the main CPU 2, the high-speed clock timer 3b counts at high speed (high-speed clock mode). For this reason, power consumption per hour tends to increase. In the OFF state of the ignition switch 9, it is only necessary to be able to measure the time since the ignition switch 9 was turned off, for example, the time until wakeup (the time until the set time is reached), so the number of counts per hour is small and the speed is low. A low-speed clock timer (WakeUP timer, first timer) 3a (for example, 30 kHz) can be used (low-speed clock mode). And the power consumption per time can be reduced. When an application such as leak diagnosis is executed in the main CPU 2 by WakeUP with the ignition switch 9 turned off, the high-speed clock timer 3b performs high-speed counting (high-speed clock mode). The measured time of the low-speed clock timer (WakeUP timer, first timer) 3a when the wakeup is performed (until) and when the ignition switch 9 is turned on (until) is transmitted to the main CPU 2 by communication such as serial communication. The

  The low-speed clock timer (WakeUP timer, first timer) 3a measures the time from when the ignition switch 9 is turned off as described above. When the low-speed clock timer 3a measures a time equal to the WakeUP set time (set time), the low-speed clock timer 3a resets the measured time so far and restarts the time measurement. In the main CPU 2, a difference from the SOAK time reception value is taken as the WakeUP timer reception value in the main CPU 2. By comparing this difference with the WakeUP set time (set time) or a predetermined time, it is possible to determine the abnormality of the low-speed clock timer (WakeUP timer, first timer) 3a. Note that after the processing in WakeUP is completed, the low-speed clock mode is restored.

  Although details will be described later, a failure such as clock deviation (clock advance or delay) is detected by measuring time simultaneously with the low-speed clock timer (WakeUP timer, first timer) 3a and the high-speed clock timer 3b. can do. According to this, it can be considered that the high-speed clock timer 3b functions as a failure detection timer for the low-speed clock timer (WakeUP timer, first timer) 3a.

  The sub CPU (SubCPU) 3 has a memory 3c. The memory 3c can store a WakeUP activation request flag, a maximum time, a WakeUP set time (set time), and the like. The WakeUP set time (set time) is set by the main CPU, and is transmitted and stored as a WakeUP set time transmission value to the memory 3c of the sub CPU 3 by communication such as serial communication. When the measurement time of the low-speed clock timer (WakeUP timer, first timer) 3a reaches the WakeUP set time (set time), the sub CPU 3 sends an MRLY ON (main relay ON) request to the main relay (MRLY) control circuit 6. Send to. As a result, the main CPU 2 is activated as WakeUP. The WakeUP activation request flag permits the sub CPU 3 to transmit an MRLY ON (main relay on) request only when it is set (turned on).

  Diagnosis such as leak diagnosis may be performed once when the vehicle stops once. Therefore, the number of WakeUPs may be one. Therefore, first, a WakeUP activation request flag is set before WakeUP (measurement time reaches the WakeUP setting time), and the WakeUP activation request flag is turned off immediately after WakeUP. According to this, even if the measurement time reaches the WakeUP setting time again after WakeUP, the MRLY ON request is not transmitted, and the main CPU 2 does not start WakeUP. When the low-speed clock timer 3a measures a time equal to the WakeUP set time (set time) (after the first WakeUP), it resets the measured time so far and restarts the time measurement. The time since then can be measured.

  The maximum time stored in the memory 3c is the maximum time that can be measured by the low-speed clock timer 3a, and the sub CPU 3 can change the maximum time. Although details will be described later, the sub CPU 3 reduces the maximum time by the WakeUP setting time when the low-speed clock timer 3a measures a time equal to the WakeUP setting time (in the case of WakeUP). When the measurement time of the low-speed clock timer 3a reaches the maximum time, the sub CPU 3 thereafter stores the maximum time and transmits it to the main CPU 2 as a WakeUP timer reception value.

  As with the sub CPU 3, the custom IC 4 is always energized and turned on. The custom IC 4 includes a SOAK time measuring circuit (SOAK timer, second timer) 4a and a memory 4b. The SOAK time measuring circuit (SOAK timer, second timer) 4a measures the time from when the ignition switch 9 is turned on to when it is turned on. For this reason, the custom IC 4 (SOAK time measuring circuit 4a) does not necessarily have to be turned on at all times, and is turned on after the ignition switch 9 is turned on, that is, only when the ignition switch 9 is turned off. If you do. The measurement time of the SOAK time measuring circuit (SOAK timer, second timer) 4a when the wakeup is performed (until) and when the ignition switch 9 is turned on (until) is received by the communication such as serial communication. A value is transmitted to the main CPU 2.

  The sub CPU 3 may have a SOAK time measuring circuit (SOAK timer, second timer) 4a. In this case, the custom IC 4 may have a low-speed clock timer (WakeUP timer, first timer) 3a. The roles of the low-speed clock timer (WakeUP timer, first timer) 3a and the SOAK time measuring circuit (SOAK timer, second timer) 4a may be interchanged.

  The memory 4b stores the maximum time that the SOAK time measuring circuit 4a can measure. This maximum time is set to be equal to the maximum time stored in the memory 3c before WakeUP. When the measurement time of the SOAK time measurement circuit 4a reaches the maximum time, the custom IC 4 thereafter stores the maximum time and transmits it to the main CPU 2 as the SOAK time reception value.

  The main CPU 2 has a memory 2a. The memory 2a stores the on / off state of the temporary normal flag and the on / off state of the abnormality flag. When the ignition switch 9 is turned on and activated, the main CPU 2 determines the abnormality of the low-speed clock timer (WakeUP timer, first timer) 3a based on the status of the temporary normal flag and the abnormality flag stored in the memory 2a. can do. The temporary normal flag and the abnormality flag are set to ON / OFF based on a short time when the main CPU 2 is turned off after the ignition switch 9 is turned off or a failure diagnosis performed during WakeUP activation of the main CPU 2. Can do. Note that the memory 2a is preferably a non-volatile memory so that the memory is retained even when power is not supplied to the main CPU 2.

  The main CPU 2 is connected to a first power supply circuit 5 and a main relay (MRLY) control circuit 6. When the MRLY control circuit 6 receives the signal IG1 output when the ignition switch 9 is in the ON state or the MRLY ON request output from the sub CPU 3, the main relay (MAIN RLY) connected via the wiring MRLY is received. ) Turn on 8. Thereby, electric power is supplied from the battery (+ B) to the first power supply circuit 5 via the wiring IGP. The first power supply circuit 5 supplies (energizes) power to the main CPU 2 when the main relay 8 is turned on. The first power supply circuit 5 is a constant voltage source that is supplied with power of the voltage VBU from the battery (+ B) and outputs power of the constant voltage VCC_M. The main relay 8 is turned on by the MRLY control circuit 6 when the ignition switch 9 is turned on and turned off when the ignition switch 9 is turned off. However, the main relay 8 is turned on immediately after the ignition switch 9 is turned on by the MRLY control circuit 6, but when the ignition switch 9 is turned off, the main relay 8 is turned off with a delay from the turn-off. During this delay time, steps S1 to S6 in FIG. 2 to be described later are performed.

  The main relay 8 is temporarily turned on when the MRLY control circuit 6 receives the MRLY ON request output from the sub CPU 3. The MRLY ON request does not need to be output during the period of the leak diagnosis after the main CPU 2 starts WakeUP. Once the MRLY ON request is input to the MRLY control circuit 6, the ON state of the main relay 8 continues. Is done. When the WakeUP is activated, the main CPU 2 outputs an SSD request (MRLY holding request) for requesting that the main relay 8 be held in an ON state, and performs this output until the leak diagnosis is completed. Turn off the request. The main relay 8 is turned off by this turn-off, and the main CPU 2 is cut off from the power supply from the first power supply circuit 5 and stopped.

  FIG. 2 shows a flowchart of a failure diagnosis method for the low-speed clock timer (WakeUP timer, first timer) 3a by the electronic control unit (FIECU) 1 according to the embodiment of the present invention. FIG. 3 is a timing chart for explaining a method of timer clock deviation check (initial check of the failure diagnosis method of the low-speed clock timer 3a). FIG. 4 shows a WakeUP time deviation determination method (of the low-speed clock timer 3a). It is a timing chart for demonstrating the principal part of a failure diagnosis method. This failure diagnosis method starts when the ignition switch (IGSW) 9 is turned off by the driver as shown in FIG.

  First, in step S1, the sub CPU 3 turns on the WakeUP activation request flag in the memory 3c.

  Next, in step S2, the sub CPU 3 performs an initial check. A method of timer initial check (timer clock deviation check) will be described with reference to FIG. FIG. 3 is a timing chart of count value waveforms of the low-speed clock (timer) 3a and the high-speed clock (timer) 3b. A series of operations (1) to (3) such as (1) reset, (2) count start, (3) count stop when the count value reaches the timer register Max value, to the low-speed clock (timer) 3a Is repeated once or a plurality of times (6 times in the example of FIG. 3). If the low-speed clock (timer) 3a is normal, the time from the reset of (1) to the count stop of (3) (or the time until the count value of (3) reaches the timer register Max value) is It is considered that it shows a certain time. At the count stop timing of (1) and (3), the count value of the high-speed clock (timer) 3b is detected. The difference between the count values obtained by subtracting the count value of the high speed clock (timer) 3b at the count stop timing of (3) from the count value of the high speed clock (timer) 3b at the reset timing of (1) is the low speed clock This corresponds to a fixed time (measurement time) from the reset of (1) measured by (timer) 3a to the count stop of (3). Therefore, it is considered that the difference between the count values becomes a constant value if the low-speed clock (timer) 3a is normal. If the difference between the count values is within a range in which an error is added to the constant value, it can be determined that the low-speed clock timer 3a is normal, and if it is outside the range, it is abnormal. If the timer register Max value is regarded as the WakeUP set time and the "WakeUP process interruption" is performed to turn on the main relay 8 in a pseudo manner, failure diagnosis including the main relay control circuit 6 and the main relay 8 is performed. Can do.

  Next, in step S3, the sub CPU 3 determines whether or not the low-speed clock timer 3a is normal according to the above. If it is determined that the low-speed clock timer 3a is normal (step S3, Yes), the process proceeds to step S5. If it is determined that the low-speed clock timer 3a is not normal (abnormal) (step S3, No), the process proceeds to step S4.

  In step S4, the main CPU 2 turns on the abnormality flag in the memory 2a. Further, the sub CPU 3 turns off the WakeUP activation request flag in the memory 3c.

  In step S5, the main CPU 2 turns on the temporary normal flag in the memory 2a.

  In step S <b> 6, the main CPU 2 sets the WakeUP setting time (setting time) to 5 hr in the example of FIG. 4 and transmits it to the sub CPU 3. The sub CPU 3 stores the WakeUP setting time in the memory 3c. The sub CPU 3 stores the maximum time in the memory 3c, thereby setting a guard value in the low-speed clock timer (WakeUP timer, first timer) 3a. The custom IC 4 sets the guard value in the SOAK time measuring circuit (SOAK timer, second timer) 4a by storing the maximum time in the memory 4b. The sub CPU 3 resets the low-speed clock timer (WakeUP timer, first timer) 3a and starts counting (time measurement) as shown in S6 of FIG. The custom IC 4 resets the SOAK time measuring circuit (24h timer, SOAK timer, second timer) 4a and starts counting (time measurement) as shown in S6 of FIG.

  In step S7, the main relay control circuit 6 turns off the main relay 8. As shown in S7 of FIG. 4, the potential of the wiring IGP decreases, and the main CPU (microcomputer) 2 is turned off.

  In step S8, the sub CPU 3 determines whether or not the measurement time of the low-speed clock timer (WakeUP timer) 3a has reached the WakeUP set time (set time, which is 5 hr in the example of FIG. 4). If the measured time of the low-speed clock timer 3a has reached the set time (step S8, Yes), the process proceeds to step S8a. If the set time has not been reached (step S8, No), the process proceeds to step S13. As the waveform of the measurement time of the low-speed clock timer (WakeUP timer) 3a in FIG. 4, a case C0 (normal) that wakes up according to the set time, a case C1 (failure, abnormal) that wakes up earlier than the set time, and set A case C2 (failure, abnormality) that is WakeUP later than the time is depicted. In any case C0, C1, C2, the set time has been reached although there is a difference in the time reached.

  In step S8a, the sub CPU 3 determines whether or not the WakeUP activation request flag stored in the memory 3c is on. If it is in the on state (step S8a, Yes), the process proceeds to step S9. If it is not in the on state (step S8a, No), the process proceeds to step S13.

  In step S9, the sub CPU 3 resets the measurement time of the low-speed clock timer (WakeUP timer) 3a and restarts time measurement in any case C0, C1, C2 shown in FIG. The sub CPU 3 lowers the guard value of the low-speed clock timer (WakeUP timer) 3a by storing the maximum time stored in the memory 3c by decreasing the set time. The sub CPU 3 transmits an MRLY ON request to the main relay control circuit 6 on condition that the WakeUP activation request flag stored in the memory 3c is on. As a result, the main relay control circuit 6 turns on the main relay 8. As shown in S9 of FIG. 4, the potential of the wiring IGP rises, and the main CPU (microcomputer) 2 is turned on (activated). The main CPU (microcomputer) 2 outputs an SSD request and performs a leak diagnosis (a fuel tank leak diagnosis) while maintaining the on-state.

  In step S10, the main CPU (microcomputer) 2 waits for the leak diagnosis to end and stops outputting the SSD request. As a result, the main relay control circuit 6 turns off the main relay 8. As shown in S10 of FIG. 4, the potential of the wiring IGP decreases, and the main CPU (microcomputer) 2 is turned off. The sub CPU 3 changes the WakeUP activation request flag stored in the memory 3c from on to off and stores it.

  In step S11, the main CPU 2 measures the measurement time (S count) of the SOAK time measurement circuit (SOAK timer, second timer) 4a at the time when the measurement time of the low-speed clock timer (WakeUP timer) 3a reaches the (WakeUP) set time. (Value) is equal to the (WakeUP) set time or the measured time of the low-speed clock timer (WakeUP timer) 3a (measured time (S count value) of the SOAK time measuring circuit 4a) = (WakeUP) set time = low-speed clock timer 3a Measurement time). Since the same time is measured, it is equal if it is normal. Specifically, taking into account the measurement error of a predetermined time, the difference between the measurement time (S count value) of the SOAK time measurement circuit 4a and the (WakeUP) set time, or the measurement time (S of the SOAK time measurement circuit 4a) It is determined whether or not the difference between the (count value) and the measurement time of the low-speed clock timer 3a is smaller than the predetermined time. If it is determined that it is equal to the set time (less than the predetermined time) (step S11, Yes), the process proceeds to step S13 as normal, and if it is determined that it is not equal to the set time (not less than the predetermined time) ( In step S11, No), it is determined that there is an abnormality, and the process proceeds to step S12.

  In step S12, the main CPU 2 turns on the abnormality flag and turns off the temporary normal flag in the memory 2a.

  In step S13, the sub CPU 3 determines whether or not the ignition switch (IGSW) 9 is turned on by the driver. If it is determined that it is turned on (step S13, Yes), the process proceeds to step S14, and if it is determined that it is not turned on (step S13, No), the process returns to step S8.

  In step S14, as shown in S13 of FIG. 4, since the ignition switch (IGSW) 9 is on, the main relay control circuit 6 turns on the main relay 8. As shown in S14 of FIG. 4, the potential of the wiring IGP rises, and the main CPU (microcomputer) 2 is turned on (activated).

  In step S15, the main CPU 2 determines whether or not the abnormality flag stored in the memory 2a is on. If it is determined that the abnormality flag is on (step S15, Yes), the process proceeds to step S18. If it is determined that the abnormality flag is not on (step S15, No), the process proceeds to step S16.

  In step S16, the main CPU 2 adds the (WakeUP) set time to the measurement time (W count value) of the low-speed clock timer (WakeUP timer) 3a to calculate an added value. The subtraction value may be calculated by subtracting the (WakeUP) set time from the measurement time (S count value) of the SOAK time measurement circuit (SOAK timer, second timer) 4a. The difference between the measurement time (S count value) of the SOAK time measurement circuit (SOAK timer, second timer) 4a and the measurement time (W count value) of the low speed clock timer (WakeUP timer) 3a may be calculated.

  Specifically, in the case C0 (normal) shown by a solid line in FIG. 4, the set time 5hr is added to 8hr which is the measurement time of the low-speed clock timer (WakeUP timer) 3a to calculate the added value 13hr (= 8 + 5). To do. Alternatively, the subtraction value 8 hr (= 13−8) is calculated by subtracting 5 hr of the set time from the measurement time 13 hr of the SOAK time measurement circuit (SOAK timer) 4 a. Alternatively, a difference 5hr (13-8) between the measurement time 13hr of the SOAK time measurement circuit (SOAK timer) 4a and the measurement time 8hr of the low-speed clock timer (WakeUP timer) 3a is calculated.

  Specifically, in the case C1 (abnormal) example indicated by the one-dot chain line in FIG. 4, the set time 5hr is added to the measurement time 16hr of the low-speed clock timer (WakeUP timer) 3a to calculate the added value 21hr (= 16 + 5). Alternatively, the subtraction value 8 hr (= 13−8) is calculated by subtracting 5 hr of the set time from the measurement time 13 hr of the SOAK time measurement circuit (SOAK timer) 4 a. Alternatively, a difference -3hr (13-16) between the measurement time 13hr of the SOAK time measurement circuit (SOAK timer) 4a and the measurement time 16hr of the low speed clock timer (WakeUP timer) 3a is calculated.

  Specifically, in the case C2 (abnormal) shown by a two-dot chain line in FIG. 4, the set time 5hr is added to the measurement time 4hr of the low-speed clock timer (WakeUP timer) 3a to calculate the added value 9hr (= 4 + 5). . Alternatively, the subtraction value 8 hr (= 13−8) is calculated by subtracting 5 hr of the set time from the measurement time 13 hr of the SOAK time measurement circuit (SOAK timer) 4 a. Alternatively, a difference 9hr (13-4) between the measurement time 13hr of the SOAK time measurement circuit (SOAK timer) 4a and the measurement time 4hr of the low-speed clock timer (WakeUP timer) 3a is calculated.

  In step S17, the main CPU 2 determines whether or not the addition value is equal to the measurement time (S count value) of the SOAK time measurement circuit (SOAK timer, second timer) 4a. It may be determined whether or not the subtraction value is equal to the measurement time (W count value) of the low-speed clock timer (WakeUP timer) 3a. It may be determined whether the difference between the S count value and the W count value is equal to the (WakeUP) set time. If it is determined that they are equal (step S17, Yes), it is determined that the failure diagnosis result of the low-speed clock timer 3a is normal, and the flow (chart) of the failure diagnosis method is terminated. If it is determined that they are not equal (step S17, No), it is determined that the failure diagnosis result of the low-speed clock timer 3a is abnormal, the process proceeds to step S18, and the vehicle instrument panel or the like is abnormal to warn the driver of the abnormality. Display to notify.

  Specifically, in the example of the case C0 (normal) shown by a solid line in FIG. 4, the added value 13hr (= 8 + 5) obtained by adding the set time 5hr to the measurement time 8hr of the low-speed clock timer (WakeUP timer) 3a is the SOAK time measuring circuit. (Because it is equal to the measurement time 13hr of the SOAK timer 4a (step S17, Yes), the failure diagnosis result of the low-speed clock timer 3a becomes normal, or the set time from the measurement time 13hr of the SOAK time measurement circuit (SOAK timer) 4a. Since the subtraction value 8hr (= 13-8) obtained by subtracting 5hr is equal to the measurement time 8hr of the low-speed clock timer (WakeUP timer) 3a (Yes in step S17), the failure diagnosis result of the low-speed clock timer 3a becomes normal. Alternatively, the measurement time 13 hr of the SOAK time measurement circuit (SOAK timer) 4a Slow clock timer difference between (WakeUP timer) 3a of the measurement time 8hr 5hr (13-8) is equal to the set time 5 hr (step S17, Yes), the fault diagnosis result of the low-speed clock timer 3a becomes normal.

  Specifically, in the case C1 (abnormal) example shown in FIG. 4, an added value 21hr (= 16 + 5) obtained by adding the set time 5hr to the measurement time 16hr of the low-speed clock timer (WakeUP timer) 3a is the SOAK time measuring circuit (SOAK). Since it is not equal to the measurement time 13hr of the timer 4a (step S17, No), the failure diagnosis result of the low-speed clock timer 3a becomes abnormal, or the set time 5hr from the measurement time 13hr of the SOAK time measurement circuit (SOAK timer) 4a. The subtracted value 8hr (= 13-8) after the subtraction is not equal to the measurement time 16hr of the low speed clock timer (WakeUP timer) 3a (No in step S17), so that the failure diagnosis result of the low speed clock timer 3a becomes abnormal. , SOAK time measuring circuit (SOAK timer) 4a measuring time 13h Since the difference -3hr (13-16) between the measured time 16hr of the low-speed clock timer (WakeUP timer) 3a is not equal to the set time 5hr (No in step S17), the failure diagnosis result of the low-speed clock timer 3a is abnormal. Become.

  Specifically, in the case C2 (abnormal) example shown in FIG. 4, an addition value 9hr (= 4 + 5) obtained by adding the set time 5hr to the measurement time 4hr of the low-speed clock timer (WakeUP timer) 3a is the SOAK time measurement circuit (SOAK). Since it is not equal to the measurement time 13hr of the timer 4a (step S17, No), the failure diagnosis result of the low-speed clock timer 3a becomes abnormal, or the set time 5hr from the measurement time 13hr of the SOAK time measurement circuit (SOAK timer) 4a. Since the subtracted value 8hr (= 13-8) after subtraction is not equal to the measurement time 4hr of the low-speed clock timer (WakeUP timer) 3a (step S17, No), the failure diagnosis result of the low-speed clock timer 3a becomes abnormal. , SOAK time measurement circuit (SOAK timer) 4a measurement time 13hr and low speed Lock timer difference between (WakeUP timer) 3a of the measurement time 4hr 9hr (13-4), since not equal the set time 5 hr (step S17, No), the fault diagnosis result of the low-speed clock timer 3a becomes abnormal.

  FIG. 5 shows a timing chart when the failure diagnosis method is performed and the low-speed clock timer 3a is in a normal state (maximum measurable time of the SOAK timer or the WakeUp timer: less than 100 hours). First, the engine starts when the ignition switch (IGSW) 9 is turned off by the driver. Next, in step S1, the WakeUP activation request flag is turned on. Next, in step S2, a timer initial check is performed. Next, in step S3, it is determined whether the low-speed clock timer 3a is normal in the timer initial check. It is determined that the low-speed clock timer 3a is normal (step S3, Yes), the process proceeds to step S5, and the temporary normal flag is turned on. In step S6, the WakeUP set time (set time) is set to 5 hr, and the maximum measurable time 100H (hr) is set in the memories 3c and 4b as the count UP guard value. The low-speed clock timer (WakeUP timer, first timer) 3a and the SOAK time measurement circuit (24h timer, SOAK timer, second timer) 4a are reset, and the count (time measurement) is started simultaneously. In step S7, the main relay 8 is turned off, the potential of the wiring IGP is lowered, and the main CPU (microcomputer) 2 is turned off.

In step S8, it is determined whether or not the measurement time of the low-speed clock timer (WakeUP timer) 3a has reached 5 hours of the WakeUP set time. When the measurement time of the low-speed clock timer 3a reaches 5 hours of the WakeUP setting time (step S8, Yes), the process proceeds to step S8a, and it is determined whether or not the WakeUP activation request flag is in an on state. Since it is in the ON state (step S8a, Yes), the process proceeds to step S9, the measurement time of the low-speed clock timer (WakeUP timer) 3a is reset, and the time measurement is restarted. The sub CPU 3 transmits an MRLY ON request to the main relay control circuit 6, and the main relay control circuit 6 turns on the main relay 8. The potential of the wiring IGP rises, and the main CPU (microcomputer) 2 is turned on (activated). The main relay is turned on (started), and the maximum time (low-speed clock timer (WakeUP timer) 3a count UP guard value 100hr stored in the memory 3c is reduced by 5hr of the WakeUP set time 5hr, 95hr (= 100- In addition, the main CPU (microcomputer) 2 performs a leak diagnosis (a fuel tank leak diagnosis).
Note that the main CPU or the sub CPU may output the command for lowering the guard value.

  In step S10, after the leak diagnosis is completed, the main relay control circuit 6 turns off the main relay 8. The potential of the wiring IGP is lowered, and the main CPU (microcomputer) 2 is turned off. The WakeUP activation request flag is changed from on to off.

  In step S11, the measurement time of the SOAK time measurement circuit (SOAK timer) 4a at the time when the measurement time of the low-speed clock timer (WakeUP timer) 3a reaches 5 hours of the (WakeUP) setting time is 5 hours of the (WakeUP) setting time. Or, since it is equal (equivalent) to the measurement time of the low-speed clock timer (WakeUP timer) 3a and is normal (step S11, Yes), the temporary normal flag is kept on.

  If it is determined in step S13 that the ignition switch (IGSW) 9 is turned on by the driver (step S13, Yes), the process proceeds to step S14, and the ignition switch (IGSW) 9 is turned on, so that the main relay control circuit 6 turns on the main relay 8. The potential of the wiring IGP rises, and the main CPU (microcomputer) 2 is turned on (started up). In step S15, it is determined that the abnormality flag is not on (step S15, No), and the process proceeds to step S16.

  In step S16, 5 hours of the WakeUP set time is added to 7H (hr) of the measurement time of the low-speed clock timer (WakeUP timer) 3a to calculate an added value 12H (hr). In step S17, it is determined whether or not the addition value 12hr is equal to 12H (hr) of the measurement time of the SOAK time measurement circuit (SOAK timer, second timer) 4a. Since it is determined that they are equal (step S17, Yes), the failure diagnosis result flow (chart) is terminated assuming that the failure diagnosis result of the low-speed clock timer 3a is normal.

  FIG. 6 shows a timing chart when the failure diagnosis method is implemented and the low-speed clock timer 3a is normal (SOAK timer measurement time: 100 hours or more). As shown in FIG. 5, the WakeUp timer or the SOAK timer has a maximum measurable time. For example, when the time is 100 hours as described above, the main CPU is correctly started when the ignition off time exceeds 100 hours. Regardless of whether or not the count value of the WakeUp timer and the SOAK timer is 100 hours. FIG. 6 is a timing chart showing the failure diagnosis method when the ignition switch is off for a long time. The timing chart of FIG. 6 differs from the timing chart of FIG. 5 in the processes before and after step S16. That is, before it is determined in step S13 that the ignition switch (IGSW) 9 is turned on (Yes in step S13), the measurement time of the low-speed clock timer (WakeUP timer) 3a is the maximum count UP guard value 95H (hr ) And the measurement time of the SOAK time measurement circuit (SOAK timer) 4a reaches the maximum count UP guard value 100H (hr).

  In step S16, 5 hours of the WakeUP setting time is added to 95H (hr) of the measurement time of the low-speed clock timer (WakeUP timer) 3a to calculate an added value 100H (hr). In step S17, it is determined whether or not the added value 100hr is equal to 100H (hr) of the measurement time of the SOAK time measurement circuit (SOAK timer, second timer) 4a. Since it is determined that they are equal (step S17, Yes), the failure diagnosis result flow (chart) is terminated assuming that the failure diagnosis result of the low-speed clock timer 3a is normal.

  FIG. 7 shows a timing chart when the failure diagnosis method is implemented and the low-speed clock timer 3a is abnormal (part 1: initial check error). First, the engine starts when the ignition switch (IGSW) 9 is turned off by the driver. Next, in step S1, the WakeUP activation request flag is turned on. Next, in step S2, a timer initial check is performed. Next, in step S3, it is determined whether the low-speed clock timer 3a is normal in the timer initial check. It is determined that the low-speed clock timer 3a is not normal (step S3, No), the process proceeds to step S4, the abnormality flag is turned on, and the WakeUP activation request flag is turned off. In step S6, a WakeUP set time (set time) and a count UP guard value (maximum time) are set. The low-speed clock timer (WakeUP timer, first timer) 3a does not start counting (time measurement) because the temporary normal flag is not on. The SOAK time measuring circuit (24h timer, SOAK timer, second timer) 4a resets and starts counting (time measurement). In step S7, the main relay 8 is turned off, the potential of the wiring IGP is lowered, and the main CPU (microcomputer) 2 is turned off.

  In step S8, it is determined whether or not the measurement time of the low-speed clock timer (WakeUP timer) 3a has reached 5 hours of the WakeUP set time. Since the measurement time of the low-speed clock timer 3a does not reach the set time (No in step S8), the process proceeds to step S13.

  If it is determined in step S13 that the ignition switch (IGSW) 9 is turned on by the driver (step S13, Yes), the process proceeds to step S14, and the ignition switch (IGSW) 9 is turned on, so that the main relay control circuit 6 turns on the main relay 8. The potential of the wiring IGP rises, and the main CPU (microcomputer) 2 is turned on (started up). In step S15, it is determined that the abnormality flag is on (step S15, Yes), and the process proceeds to step S18. In step S18, assuming that the failure diagnosis result of the low-speed clock timer 3a is abnormal, a display for notifying the abnormality to the vehicle instrument panel or the like is performed to warn the driver of the abnormality. The flow (chart) of the failure diagnosis method is terminated.

  FIG. 8 shows a timing chart when the failure diagnosis method is implemented and the low-speed clock timer 3a is abnormal (part 2: WakeUP error). The timing chart of FIG. 8 differs from the timing chart of FIG. That is, in step S11, the measurement time of the SOAK time measurement circuit (SOAK timer) 4a at the time when the measurement time of the low-speed clock timer (WakeUP timer) 3a reaches 5 hours of the (WakeUP) setting time is (WakeUP) setting time. 5hr, or because it is not equal to (or different from) the measurement time of the low-speed clock timer (WakeUP timer) 3a and is abnormal (No in step S11), the process proceeds to step S12, the abnormal flag is turned on, and the temporary normal flag is turned off. To.

  If it is determined in step S13 that the ignition switch (IGSW) 9 is turned on by the driver (step S13, Yes), the process proceeds to step S14, and the ignition switch (IGSW) 9 is turned on, so that the main relay control circuit 6 turns on the main relay 8. The potential of the wiring IGP rises, and the main CPU (microcomputer) 2 is turned on (started up). In step S15, it is determined that the abnormality flag is on (step S15, Yes), and the process proceeds to step S18. In step S18, assuming that the failure diagnosis result of the low-speed clock timer 3a is abnormal, a display for notifying the abnormality to the vehicle instrument panel or the like is performed to warn the driver of the abnormality. The flow (chart) of the failure diagnosis method is terminated.

  FIG. 9 shows a timing chart when the failure diagnosis method is implemented and the low-speed clock timer 3a is abnormal (No. 3: WakeUP not error: less than 100 hours). Compared with the timing chart of FIG. 5, the timing chart of FIG. 9 lacks the processing of steps S8 to S12 and does not wake up. For this reason, the processing after step S13 is different. That is, if it is determined in step S13 that the ignition switch (IGSW) 9 is turned on by the driver (step S13, Yes), the process proceeds to step S14, and the ignition switch (IGSW) 9 is turned on. The control circuit 6 turns on the main relay 8. The potential of the wiring IGP rises, and the main CPU (microcomputer) 2 is turned on (started up). In step S15, it is determined that the abnormality flag is not on (step S15, No), and the process proceeds to step S16.

  In step S16, 5 hours of the WakeUP set time is added to 12H (hr) of the measurement time of the low-speed clock timer (WakeUP timer) 3a to calculate an added value 17hr (= 12 + 5). In step S17, it is determined whether or not the added value 17hr is equal to 12H (hr) of the measurement time of the SOAK time measurement circuit (SOAK timer, second timer) 4a. Since it is determined that they are not equal (No in step S17), it is determined that the failure diagnosis result of the low-speed clock timer 3a is abnormal. In step S18, an abnormality is detected in the instrument panel of the vehicle to warn the driver of the abnormality. Display information to inform you. Also, an abnormal flag is set. The flow (chart) of the failure diagnosis method is terminated.

  FIG. 10 shows a timing chart when the failure diagnosis method is carried out and the low-speed clock timer 3a is abnormal (part 4: error that does not wake up: 100 hours or more). The timing chart of FIG. 10 differs from the timing chart of FIG. 9 in the processes before and after step S16. That is, before it is determined in step S13 that the ignition switch (IGSW) 9 is turned on (step S13, Yes), the measurement time of the low-speed clock timer (WakeUP timer) 3a and the measurement of the SOAK time measurement circuit (SOAK timer) 4a The time has reached the maximum time count-up guard value 100H (hr).

  In step S16, 5 hours of the WakeUP set time is added to 100H (hr) of the measurement time of the low-speed clock timer (WakeUP timer) 3a to calculate an added value 105hr (= 100 + 5). In step S17, it is determined whether or not the added value 105hr is equal to 100H (hr) of the measurement time of the SOAK time measurement circuit (SOAK timer, second timer) 4a. Since it is determined that they are not equal (No in step S17), it is determined that the failure diagnosis result of the low-speed clock timer 3a is abnormal. In step S18, an abnormality is detected in the instrument panel of the vehicle to warn the driver of the abnormality. Display information to inform you. Also, an abnormal flag is set. The flow (chart) of the failure diagnosis method is terminated.

  Although the guard value is lowered by the set time by the method shown in FIG. 5, FIG. 6, etc., the guard value may be lowered by the time when the main CPU 2 is activated by recognizing that the WakeUp timer 3a or the SOAK timer 4a is the set time. . By doing so, the guard value can be lowered using the measured value of the WakeUp timer 3a or the SOAK timer 4a, so that the accuracy of the guard value can be improved. The time at which the Main CPU 2 is activated equal to the set time can include the time during which the WakeUp timer 3a and the SOAK timer 4a continue to measure until the main CPU 2 is activated and the current measurement time is read.

1 FIECU (electronic control unit)
2 Main CPU (Main CPU, microcomputer)
2a Memory 3 Sub CPU (SubCPU)
3a Low-speed clock timer (WakeUP timer, first timer)
3b High-speed clock timer (for failure detection)
3c memory 4 custom IC
4a SOAK time measuring circuit (SOAK timer, second timer)
4b Memory 5 First power circuit 6 Main relay (MRLY) control circuit 7 Second power circuit 8 Main relay (MAIN RLY)
9 Ignition switch (IGSW)

Claims (3)

A first timer for measuring a time during which the ignition switch of the vehicle is off, and a case where the first timer measures a time equal to a set time while the ignition switch is off, or when the ignition switch is turned on from off In addition, in an electronic control device provided with a starting microcomputer,
A second timer for measuring a time during which the ignition switch is off;
The first timer, when measuring a time equal to the set time, resets the measured time, continues to measure the time after the reset,
When the ignition switch is turned on, if the difference in time measured by the first timer and the second timer is different from the set time, or the set time is added to the time measured by the first timer If the measured time is different from the time measured by the second timer, or the time obtained by subtracting the set time from the time measured by the second timer is different from the time measured by the first timer. An electronic control device characterized in that When the first timer measures a time equal to the set time,
2. The electronic control device according to claim 1, wherein the maximum measurement time of the first timer is shortened by a time equal to the set time.   When the first timer measures a time equal to the set time, the time measured by the first timer and the second timer is compared with the time measured by the first timer and the second timer. The electronic control device according to claim 1, wherein the electronic control device is determined to be abnormal when the values differ for a predetermined time or more.

Images