CN101655257A - Electronic equipment - Google Patents

Abstract

The invention provides electronic equipment provided with a plurality of components. The electronic equipment comprises a first component, a second component and a fault secure circuit, wherein the fault of the first component is directly correlated with the risk in security of the electronic equipment. Even when the second component has a fault, the fault of the second component does not have a side effect on the security of the electronic equipment, but can make the electronic equipment lose a main function. The fault secure circuit is used for stopping the operation of the second component.

Description

Electronic equipment

technical field

The present invention relates to electronic equipment equipped with: a component whose failure can be directly coupled to a risk with respect to the safety aspect of the electronic equipment; and another component, even when the latter mentioned component is faulty, although The failure does not negatively affect the safety of the electronic device, but failure of the component also renders the electronic device incapable of its primary function.

Background technique

FIG. 12 is a block diagram for illustrating a conventional product 100 having a fail-safe function. The product 100 shown in FIG. 12 is equipped with a component 110 including a timing unit 120 , a sequencer 130 and a storage unit 140 . The components 110 provided in the product 100 have fail-safe functions. Arbitrary time is set to the storage unit 140 . While the time measuring unit 120 performs a count up operation, when a predetermined time set to the storage unit 140 elapses, the time measuring unit 120 stops the sequencer 130 . Lifetime end safety can be improved in the above-described manner (for example, refer to Patent Publication 1).

Patent Publication Document 1: JP-A-7-049151

In the product 100 shown in FIG. 12, when an arbitrarily set predetermined time elapses, the operation of the component 110 is stopped in order to improve safety at the end of life. It should be understood that, generally, when a product is equipped with many kinds and various modes of components, the levels of failure due to degradation, which can exert a negative influence on the risk in terms of safety of the product, differ from each other depending on the component. In other words, there are components whose failure does not exert any adverse effect on the main operation and safety of the product even when these components are malfunctioning; however, there are components whose failure, if they are malfunctioning, may exert a large negative impact on the operation and safety of the product. Furthermore, even when a component is faulty, although a negative influence may not be exerted on the safety of the component, a negative influence may be exerted on the operation of the product.

Contents of the invention

It is an object of the present invention to provide an electronic device which further improves the safety of the electronic device at the end of its life.

The present invention intends to provide such an electronic device, characterized in that the electronic device has a plurality of components, the electronic device comprising: a first component, the failure of which is directly associated with a risk related to the safety of the electronic device; a second component, through which a second component, even when the second component fails, the failure of the second component causes the electronic device to lose its primary function, although the failure of the second component does not exert a negative impact on the safety of the electronic device; and a fail-safe circuit, Used to stop the operation of the second component.

In the electronic device as described above, the fail-safe circuit is provided within the second component.

The present invention will provide such an electronic device, characterized in that the electronic device has a plurality of components, the electronic device comprising: a first component, the failure of which is directly associated with a risk to the safety of the electronic device; a second component, through which Two components, even when the second component fails, although the failure of the second component will not exert a negative impact on the safety of the product, the failure of the second component will also cause the product to lose its main function; The second component provides electrical power; and a fail-safe circuit that operates in a manner that, while the fail-safe circuit monitors the condition of the first component, when the fail-safe circuit detects a problem with the first component, the fail-safe circuit controls the the power circuit to stop supplying electrical power to the second component.

The present invention intends to provide such an electronic device, characterized in that the electronic device has a plurality of components, the electronic device comprising: a first component, the failure of which is directly associated with a risk related to the safety of the electronic device; a second component, through which Two components, even when the second component fails, although the failure of the second component will not exert a negative impact on the safety of the electronic device, the failure of the second component will also cause the electronic device to lose its main function; the clock control circuit, with for controlling the clock signal provided to the second component; and a fail-safe circuit that operates in a manner that, while the fail-safe circuit monitors the condition of the first component, when the fail-safe circuit detects a problem with the first component , the fail-safe circuit controls the clock control circuit to stop supplying the clock signal to the second component.

The present invention will provide such an electronic device, characterized in that the electronic device has a plurality of components, the electronic device comprising: a first component, the failure of which is directly associated with a risk to the safety of the electronic device; a second component, through which Two components, even when the second component fails, although the failure of the second component will not exert a negative impact on the safety of the electronic equipment, the failure of the second component will also cause the electronic equipment to lose its main function; reset the control circuit, with for resetting the second component; and a fail-safe circuit that operates in the following manner: while the fail-safe circuit monitors the condition of the first component, when the fail-safe circuit detects a problem with the first component, the fail-safe circuit The circuit controls the reset control circuit to maintain the second component in its reset state.

The present invention intends to provide such an electronic device, characterized in that the electronic device has a plurality of components, the electronic device comprising: a first component, the failure of which is directly associated with a risk related to the safety of the electronic device; a second component, through which Two components, even when the second component fails, although the failure of the second component will not exert a negative impact on the safety of the electronic device, the failure of the second component will cause the electronic device to lose its main function; the data line control circuit, a data line for controlling the second component; and a fail-safe circuit that operates in a manner that, while the fail-safe circuit monitors the condition of the first component, when the fail-safe circuit detects a problem with the first component, The fail-safe circuit controls the data line control circuit to bring the data line of the second component into an uncontrolled state.

The present invention will provide such an electronic device, characterized in that the electronic device has a plurality of components, the electronic device comprising: a first component, the failure of which is directly associated with a risk to the safety of the electronic device; a second component, through which Two components, even when the second component fails, although the failure of the second component will not exert a negative impact on the safety of the electronic equipment, the failure of the second component will cause the electronic equipment to lose its main function; the control line control circuit, a control line for controlling the second component; and a fail-safe circuit that operates in a manner that, while the fail-safe circuit monitors the condition of the first component, when the fail-safe circuit detects a problem with the first component, The fail-safe circuit controls the control line control circuit to bring the control line of the second component into an uncontrolled state.

The present invention will provide such an electronic device, characterized in that the electronic device has a plurality of components, the electronic device comprising: a first component, the failure of which is directly associated with a risk to the safety of the electronic device; a second component, through which Two components, even when the second component fails, although the failure of the second component does not exert a negative impact on the safety of the electronic device, the failure of the second component also causes the electronic device to lose its main function; the address line control circuit, an address line for controlling the second component; and a fail-safe circuit that operates in a manner that, while the fail-safe circuit monitors the condition of the first component, when the fail-safe circuit detects a problem with the first component, The fail-safe circuit controls the address line control circuit to bring the address lines of the second component into an uncontrolled state.

In the electronic device described above, when the fail-safe circuit detects the condition of the first component in response to a signal sent from the external device, and detects a problem with the first component, the fail-safe circuit stops the operation of the second component.

In the above-described electronic equipment, after the fail-safe circuit has detected a problem with the first component, when the fail-safe circuit receives an instruction signal for stopping the operation of the second component sent from an external device, the fail-safe circuit stops the second component. Operation of two components.

In the electronic device described above, the instruction signal sent from the external device is a signal transmitted therefrom via the network.

In the electronic device described above, the fail-safe circuit stops the operation of the second component when a predetermined time has elapsed from the time indicated by the time information on purchase of the electronic device, or initial operation of the electronic device.

In the electronic device described above, when the fail-safe circuit receives an instruction signal for stopping the operation of the second component transmitted from the external device after a predetermined time has elapsed, the fail-safe circuit stops the operation of the second component.

In the electronic equipment described above, the external device is a recharging device of the electronic equipment.

According to the electronic equipment related to the present invention, its safety at the end of its life can be further improved. In other words, the end of product life can be reached in a safe manner.

Description of drawings

FIG. 1 is a block diagram illustrating a product having a fail-safe function according to a first embodiment of the present invention.

FIG. 2 is a block diagram illustrating a product having a fail-safe function according to a second embodiment of the present invention.

FIG. 3 is a block diagram illustrating a product having a fail-safe function according to a third embodiment of the present invention.

FIG. 4 is a block diagram illustrating a product having a fail-safe function according to a fourth embodiment of the present invention.

FIG. 5 is a block diagram illustrating a product having a fail-safe function according to a fifth embodiment of the present invention.

FIG. 6 is a block diagram illustrating a product having a fail-safe function according to a sixth embodiment of the present invention.

FIG. 7 is a block diagram illustrating a product having a fail-safe function according to a seventh embodiment of the present invention.

FIG. 8 is a block diagram illustrating a product having a fail-safe function according to an eighth embodiment of the present invention.

FIG. 9 is a block diagram illustrating a product having a fail-safe function according to a ninth embodiment of the present invention.

FIG. 10 is a block diagram illustrating a product having a fail-safe function according to a tenth embodiment of the present invention.

Fig. 11 is a block diagram illustrating a product having a fail-safe function according to an eleventh embodiment of the present invention.

FIG. 12 is a block diagram illustrating a product having a fail-safe function according to a conventional art.

Detailed ways

Embodiments of the present invention will now be described with reference to the accompanying drawings.

(first embodiment)

FIG. 1 is a block diagram illustrating a product having a fail-safe function according to a first embodiment of the present invention. The product 200 shown in FIG. 1 is equipped with a component 210 having a functional operating circuit 211 , a component 220 having a functional operating circuit 221 , and a fail-safe circuit 230 .

Component 210 corresponds to a component whose failure can be directly combined with a safety-related risk to product 200 . The component 220 is a component whose failure causes the product 200 to lose its main function even when the component 220 has a failure, although the failure does not exert a negative influence on the safety of the product 200 . The functional operation circuit 211 corresponds to a circuit required to perform the function of the product 200 realized by the component 210 . The functional operation circuit 221 corresponds to a circuit required to perform the functions of the product 200 realized by the components 220 . The fail-safe circuit 230 corresponds to a circuit that stops the operation of the functional operation circuit 221 .

In the first embodiment, since the fail-safe circuit 230 is installed outside the components 210 and 220 , the fail-safe circuit 230 can be installed anywhere in the product 200 .

(second embodiment)

FIG. 2 is a block diagram illustrating a product having a fail-safe function according to a second embodiment of the present invention. The product 300 shown in FIG. 2 is equipped with a component 310 having a functional operating circuit 311 , and another component 320 having a functional operating circuit 321 and a fail-safe circuit 330 .

Component 310 corresponds to a component whose failure can be directly combined with a safety-related risk to product 300 . The component 320 is a component whose failure causes the product 300 to lose its main function even when the component 320 has a failure, although the failure does not exert a negative influence on the safety of the product 300 . The functional operation circuit 311 corresponds to a circuit required to perform the functions of the product 300 realized by the components 310 . The functional operation circuit 321 corresponds to a circuit required to perform the functions of the product 300 realized by the components 320 . The fail-safe circuit 330 corresponds to a circuit that stops the operation of the functional operation circuit 321 .

In the second embodiment, even when a component 320 is faulty, a component 320 whose failure may cause the product 300 to lose its main function includes the fail-safe circuit 330 although it may not exert a negative influence on the safety of the product 300 . As a result, when a problem can be identified in component 320 , via fail-safe circuit 330 , component 320 can be intentionally brought into a fault state. Therefore, when the component 320 is brought into a fault state, the product 300 can be controlled not to operate, so that the safety when the life of the product 300 ends can be increased.

(third embodiment)

FIG. 3 is a block diagram illustrating a product having a fail-safe function according to a third embodiment of the present invention. The product 400 shown in FIG. 3 is equipped with a component 410 having a functional operating circuit 411 , and a component 420 having a functional operating circuit 421 and a fail-safe circuit 430 . The functional operation circuit 421 includes a power supply circuit 422 .

Component 410 corresponds to a component whose failure can be directly linked to a safety-related risk with respect to product 400 . The component 420 is a component whose failure causes the product 400 to lose its main function even when the component 420 has a failure, although the failure does not exert a negative influence on the safety of the product 400 . The functional operation circuit 411 corresponds to a circuit required to perform the function of the product 400 realized by the component 410 . The functional operation circuit 421 corresponds to a circuit required to perform the function of the product 400 realized by the component 420 . The power supply circuit 422 corresponds to a circuit that controls electric power supply of the functional operation circuit 421 , that is, a circuit required for the functional operation circuit 421 to operate under normal conditions. The fail-safe circuit 430 corresponds to a circuit that, while the fail-safe circuit 430 continuously monitors the condition of the functional operation circuit 411, when the fail-safe circuit 430 detects a problem with the functional operation circuit 411 due to degradation or the like, the fail-safe circuit 430 controls the power supply circuit 422 included in the functional operation circuit 421 so as to stop supply of electric power to the functional operation circuit 421 . It should also be noted that the fail-safe circuit 430 could alternatively be mounted outside of the assembly 420 .

In the third embodiment, while the fail-safe circuit 430 continuously monitors the condition of the functional operation circuit 411 contained in the component 410 whose failure can be directly combined with the safety aspect of the product 400, when the fail-safe circuit 430 detects that the functional operation In the event of a problem with the circuit 411 , the fail-safe circuit 430 stops the operation of the functional operation circuit 421 . If the operation of the functional operation circuit 421 is stopped, the component 420 does not operate, but if the component 420 does not operate, the component 410 does not operate either. Thus, it is possible to avoid the mentioned event that the product 400 continues to operate while the failure of a component 410 whose failure may be directly coupled with a safety-related risk to the product 400 persists, causing the component 410 to enter a degraded failure. As previously mentioned, safety at the end of the life of the product 400 may be increased.

(fourth embodiment)

FIG. 4 is a block diagram illustrating a product having a fail-safe function according to a fourth embodiment of the present invention. The product 500 shown in FIG. 4 is equipped with a component 510 having a functional operating circuit 511 , and a component 520 having a functional operating circuit 521 and a fail-safe circuit 530 . The functional operation circuit 521 includes a clock control circuit 522 .

Component 510 corresponds to a component whose failure can be directly linked to a safety-related risk with respect to product 500 . The component 520 is a component whose failure causes the product 500 to lose its main function even when the component 520 fails, although the failure does not exert a negative influence on the safety of the product 500 . The functional operation circuit 511 corresponds to a circuit required to perform the function of the product 500 realized by the component 510 . The functional operation circuit 521 corresponds to a circuit required to perform the functions of the product 500 realized by the components 520 . The clock control circuit 522 corresponds to a circuit that controls supply of a clock signal to the functional operation circuit 521 , that is, a circuit required for the functional operation circuit 521 to operate under normal conditions. The fail-safe circuit 530 corresponds to a circuit that, while the fail-safe circuit 530 continuously monitors the condition of the functional operation circuit 511, when the fail-safe circuit 530 detects a problem with the functional operation circuit 511 due to degradation or the like, the fail-safe circuit 530 controls the clock control circuit 522 included in the functional operation circuit 521 so as to stop supplying the clock signal to the functional operation circuit 521 . It should also be noted that the fail-safe circuit 530 could alternatively be mounted outside of the assembly 520 .

In the fourth embodiment, while the fail-safe circuit 530 continuously monitors the condition of the functional operation circuit 511 contained in the component 510 whose failure can be directly combined with the safety aspect of the product 500, when the fail-safe circuit 530 detects that the functional operation In the event of a problem with circuit 511 , fail-safe circuit 530 stops providing a clock signal to functional operation circuit 521 . If the supply of the clock signal to the functional operation circuit 521 is stopped, the component 520 does not operate, however, if the component 520 does not operate, the component 510 does not operate either. Thus, it is possible to avoid the mentioned event that the product 500 continues to operate while the failure of a component 510 whose failure may be directly coupled with a safety-related risk to the product 500 persists, causing the component 510 to enter a degraded failure. As previously mentioned, safety at the end of the life of the product 500 may be increased.

(fifth embodiment)

FIG. 5 is a block diagram illustrating a product having a fail-safe function according to a fifth embodiment of the present invention. The product 600 shown in FIG. 5 is equipped with a component 610 having a functional operating circuit 611 , and a component 620 having a functional operating circuit 621 and a fail-safe circuit 630 . The functional operation circuit 621 includes a reset control circuit 622 .

Component 610 corresponds to a component whose failure may be directly coupled with a safety-related risk to product 600 . The component 620 is such a component that even when the component 620 fails, the failure of the component 610 causes the product 600 to lose its main function although the failure does not exert a negative influence on the safety of the product 600 . The functional operation circuit 611 corresponds to a circuit required to perform the function of the product 600 realized by the component 610 . The functional operation circuit 621 corresponds to a circuit required to perform the function of the product 600 realized by the component 620 . The reset control circuit 622 corresponds to a circuit that resets the functional operation circuit 621 , that is, a circuit required for the functional operation circuit 621 to operate under normal conditions. The fail-safe circuit 630 corresponds to a circuit that, while the fail-safe circuit 630 continuously monitors the condition of the functional operation circuit 611, when the fail-safe circuit 630 detects a problem with the functional operation circuit 611 due to degradation or the like, the fail-safe circuit 630 controls the reset control circuit 622 included in the functional operation circuit 621 so as to maintain a state in which the functional operation circuit 621 has been continuously reset. It should also be noted that the fail-safe circuit 630 could alternatively be mounted outside of the assembly 620 .

In the fifth embodiment, while the fail-safe circuit 630 continuously monitors the condition of the functional operation circuit 611 contained in the component 610 whose failure can be directly combined with the safety aspect of the product 600, when the fail-safe circuit 630 detects that the functional operation In the event of a problem with circuit 611, fail-safe circuit 630 maintains functional operation circuit 621 in a reset state. If functional operating circuit 621 is continuously held in reset, then component 620 does not operate; however, if component 620 does not operate, then component 610 does not operate either. Thus, it is possible to avoid the mentioned event of continuing to operate the product 600 , such that the component 610 enters a degraded failure, while the failure of a component 610 whose failure may be directly coupled with a safety-related risk to the product 600 persists. As previously mentioned, safety at the end of the life of the product 600 may be increased.

(sixth embodiment)

FIG. 6 is a block diagram illustrating a product having a fail-safe function according to a sixth embodiment of the present invention. The product 700 shown in FIG. 6 is equipped with a component 710 having a functional operating circuit 711 , and a component 720 having a functional operating circuit 721 and a fail-safe circuit 730 . The function operation circuit 721 includes a data line control circuit 722 .

Component 710 corresponds to a component whose failure may be directly coupled with a safety-related risk to product 700 . The component 720 is a component whose failure causes the product 700 to lose its main function even when the component 720 has a failure, although the failure does not exert a negative influence on the safety of the product 700 . The functional operation circuit 711 corresponds to a circuit required to perform the function of the product 700 realized by the component 710 . The functional operation circuit 721 corresponds to a circuit required to perform the functions of the product 700 realized by the components 720 . The data line control circuit 722 corresponds to a circuit that controls the data line of the functional operation circuit 721, that is, a circuit required for the functional operation circuit 721 to operate under normal conditions. The fail-safe circuit 730 corresponds to a circuit that, while the fail-safe circuit 730 continuously monitors the condition of the functional operation circuit 711, when the fail-safe circuit 730 detects a problem with the functional operation circuit 711 due to degradation or the like, the fail-safe circuit 730 controls the data line control circuit 722 included in the function operation circuit 721 so as to bring the data line of the function operation circuit 721 into an uncontrolled state. It should also be noted that the fail-safe circuit 730 could alternatively be mounted outside of the assembly 720 .

In the sixth embodiment, while the fail-safe circuit 730 continuously monitors the condition of the functional operation circuit 711 contained in the component 710 whose failure can be directly combined with the safety aspect of the product 700, when the fail-safe circuit 730 detects that the functional operation In the event of a problem with circuit 711, fail-safe circuit 730 puts the data line of functional operation circuit 721 into an uncontrolled state. If the data line of functional operation circuit 721 goes into an uncontrolled state, component 720 does not operate, however, if component 720 does not operate, then component 710 does not operate either. Thus, it is possible to avoid the mentioned event that the product 700 continues to operate, so that the component 710 enters a degraded failure, while the failure of a component 710 whose failure may be directly coupled with a safety-related risk to the product 700 persists. As previously mentioned, safety at the end of the life of the product 700 may be increased.

(seventh embodiment)

FIG. 7 is a block diagram illustrating a product having a fail-safe function according to a seventh embodiment of the present invention. The product 800 shown in FIG. 7 is equipped with a component 810 having a functional operating circuit 811 , and a component 820 having a functional operating circuit 821 and a fail-safe circuit 830 . The function operation circuit 821 includes a control line control circuit 822 .

Component 810 corresponds to a component whose failure may be directly coupled with a safety-related risk to product 800 . The component 820 is a component whose failure causes the product 800 to lose its main function even when the component 820 fails, although the failure does not exert a negative influence on the safety of the product 800 . The functional operation circuit 811 corresponds to a circuit required to perform the functions of the product 800 realized by the components 810 . The functional operation circuit 821 corresponds to a circuit required to perform the functions of the product 800 realized by the components 820 . The control line control circuit 822 corresponds to a circuit that controls the control line of the function operation circuit 821 , that is, a circuit required for the function operation circuit 821 to operate under normal conditions. The fail-safe circuit 830 corresponds to a circuit that, while the fail-safe circuit 830 continuously monitors the condition of the functional operation circuit 811, when the fail-safe circuit 830 detects a problem with the functional operation circuit 811 due to degradation or the like, the fail-safe circuit 830 controls the control line control circuit 822 included in the function operation circuit 821 so as to bring the control line of the function operation circuit 821 into an uncontrolled state. It should also be noted that the fail-safe circuit 830 could alternatively be mounted outside of the assembly 820 .

In the seventh embodiment, while the fail-safe circuit 830 continuously monitors the condition of the functional operation circuit 811 contained in the component 810 whose failure can be directly combined with the safety aspect of the product 800, when the fail-safe circuit 830 detects that the functional operation In the event of a problem with circuit 811, fail-safe circuit 830 puts the control line of functional operation circuit 821 into an uncontrolled state. If fail-safe circuit 830 brings the control line of functional operation circuit 821 into an uncontrolled state, then component 820 does not operate, but if component 820 does not operate, then component 810 does not operate either. Thus, it is possible to avoid the mentioned event of continuing to operate the product 800 , such that the component 810 enters a degraded failure, while the failure of a component 810 whose failure may be directly coupled with a safety-related risk to the product 800 persists. As previously described, safety at the end of the product 800's life can be increased.

(eighth embodiment)

FIG. 8 is a block diagram illustrating a product having a fail-safe function according to an eighth embodiment of the present invention. The product 900 shown in FIG. 8 is equipped with a component 910 having a functional operating circuit 911 , and a component 920 having a functional operating circuit 921 and a fail-safe circuit 930 . The function operation circuit 921 includes an address line control circuit 922 .

Component 910 corresponds to a component whose failure may be directly linked to a safety-related risk with respect to product 900 . The component 920 is a component whose failure causes the product 900 to lose its main function even when the component 920 fails, although the failure does not exert a negative influence on the safety of the product 900 . The functional operation circuit 911 corresponds to a circuit required to perform the function of the product 900 realized by the component 910 . The functional operation circuit 921 corresponds to a circuit required to perform the function of the product 900 realized by the component 920 . The address line control circuit 922 corresponds to a circuit that controls the address lines of the function operation circuit 921, that is, a circuit required for the function operation circuit 921 to operate under normal conditions. The fail-safe circuit 930 corresponds to a circuit that, while the fail-safe circuit 930 continuously monitors the condition of the functional operation circuit 911, when the fail-safe circuit 930 detects a problem with the functional operation circuit 911 due to degradation or the like, the fail-safe circuit 930 controls the address line control circuit 922 included in the function operation circuit 921 so as to bring the address lines of the function operation circuit 921 into an uncontrolled state. It should also be noted that the fail-safe circuit 930 could alternatively be mounted outside of the assembly 920 .

In the eighth embodiment, while the fail-safe circuit 930 continuously monitors the condition of the functional operation circuit 911 contained in the component 910 whose failure can be directly combined with the safety aspect of the product 900, when the fail-safe circuit 930 detects that the functional operation In the event of a problem with circuit 911, fail-safe circuit 930 puts the control line of functional operation circuit 921 into an uncontrolled state. If fail-safe circuit 930 brings the address line of functional operation circuit 921 into an uncontrolled state, then component 920 does not operate, but if component 920 does not operate, then component 910 does not operate either. Thus, it is possible to avoid the mentioned event of continuing to operate the product 900 , such that the component 910 enters a degraded failure, while the failure of a component 910 , whose failure may be directly coupled with a safety-related risk to the product 900 , persists. As previously mentioned, safety at the end of the life of the product 900 may be increased.

(ninth embodiment)

FIG. 9 is a block diagram illustrating a product having a fail-safe function according to a ninth embodiment of the present invention. The product 1000 shown in FIG. 9 is equipped with a component 1010 having a functional operating circuit 1011 , and a component 1020 having a functional operating circuit 1021 and a fail-safe circuit 1030 .

Component 1010 corresponds to a component whose failure can be directly combined with a safety-related risk to product 1000 . The component 1020 is a component whose failure causes the product 1000 to lose its main function even when the component 1020 fails, although the failure does not exert a negative influence on the safety of the product 1000 . The functional operation circuit 1011 corresponds to a circuit required to perform the functions of the product 1000 realized by the components 1010 . The functional operation circuit 1021 corresponds to a circuit required to perform the functions of the product 1000 realized by the components 1020 . The fail-safe circuit 1030 corresponds to a circuit that, while the fail-safe circuit 1030 detects the condition of the functional operation circuit 1011 in response to an operation input from an external unit via a network such as the Internet, when the fail-safe circuit 1030 detects that the When a problem with the functional operation circuit 1011 is caused, the fail-safe circuit 1030 stops the operation of the functional operation circuit 1021 . It should also be understood that after the fail-safe circuit 1030 has detected a problem with the functional operation circuit 1011, when the fail-safe circuit 1030 receives an instruction signal for stopping the operation of the functional operation circuit 1021 via the network, alternatively, the fail-safe circuit 1030 stops the operation of the functional operation circuit 1021 in response to the instruction signal. It should also be noted that fail-safe circuitry 1030 could alternatively be mounted external to assembly 1020 .

In the ninth embodiment, the fail-safe circuit 1030 is included in the component 1020. Even when the component 1020 has a fault, although the fault of the component 1020 does not exert a negative influence on the safety of the product 1000, the fault of the component 1020 also makes the product 1000 loses its primary function. As a result, when the fail-safe circuit 1030 identifies a problem in the component 1010 , the fail-safe circuit 1030 can stop the operation of the functional operation circuit 1021 . Thus, it is possible to avoid the mentioned event that the product 1000 continues to operate while the failure of a component 1010 whose failure may be directly coupled with a safety-related risk to the product 1000 persists, causing the component 1010 to enter a degenerative failure. As previously mentioned, when the life of the product 1000 ends, safety can be increased.

(tenth embodiment)

FIG. 10 is a block diagram illustrating a product having a fail-safe function according to a tenth embodiment of the present invention. The product 1100 shown in FIG. 10 is equipped with a component 1110 having a functional operating circuit 1111 , a component 1120 having a functional operating circuit 1121 and a fail-safe circuit 1130 .

Component 1110 corresponds to a component whose failure may be directly coupled with a safety-related risk to product 1100 . The component 1120 is a component whose failure causes the product 1100 to lose its main function even when the component 1120 fails, although the failure does not exert a negative influence on the safety of the product 1100 . The functional operation circuit 1111 corresponds to a circuit required to perform functions of the product 1100 realized by the components 1120 . The functional operation circuit 1121 corresponds to a circuit required to perform the function of the product 1100 realized by the component 1120 . The fail-safe circuit 1130 includes a memory 1131 in which date/time information such as purchase date/time, initial operation date/time, etc. is stored. The fail-safe circuit 1130 corresponds to a circuit that stops the operation of the functional operation circuit 1121 when a predetermined period of time has elapsed from the date and time indicated by the date/time information stored in the memory 1131 . Alternatively, after a predetermined period of time has elapsed from the date and time indicated by the date/time information, when the fail-safe circuit 1130 receives an instruction signal for stopping the operation of the functional operation circuit 1121 via the network, the fail-safe circuit 1130 may stop the operation of the functional operation circuit 1121 in response to the received instruction signal. It should also be noted that fail-safe circuitry 1130 may alternatively be mounted external to assembly 1120 .

In the tenth embodiment, when a predetermined period of time has elapsed after purchasing the product 1100 or operating the product 1100 as an initial operation, the operation of the functional operation circuit 1121 of the component 1120 is stopped by the fail-safe circuit 1130 . Even when the above-mentioned component 1120 fails, the failure of the component 1120 causes the product 1100 to lose its main function, although the failure of the component 1120 does not exert a negative influence on the safety of the product 1100 . Generally, with respect to the failure rate after a predetermined time elapses, design has been made such that the failure rate of the component 1110 is lower than the failure rate of the component 1120 . Therefore, it is possible to avoid the event mentioned below: that is, the component 1100 operates continuously for a long period of time beyond a predetermined time, so that the component 1110 enters a degraded failure. As previously described, safety at the end of the life of the product 1100 can be increased.

(eleventh embodiment)

Fig. 11 is a block diagram illustrating a product having a fail-safe function according to an eleventh embodiment of the present invention. The product 1200 shown in FIG. 11 is equipped with a component 1210 having a functional operating circuit 1211 , a component 1220 having a functional operating circuit 1221 and a fail-safe circuit 1230 . In this eleventh embodiment, date/time information such as purchase information, or initial operation date and time, etc. have been stored in a memory (not shown) built in a recharging device (not shown) , wherein the recharging device is employed to charge the product 1200.

Component 1210 corresponds to a component whose failure may be directly coupled with a safety-related risk to product 1200 . The component 1220 is a component whose failure causes the product 1200 to lose its main function even when the component 1220 fails, although the failure does not exert a negative influence on the safety of the product 1200 . The functional operation circuit 1211 corresponds to a circuit required to perform the function of the product 1200 realized by the components 1220 . The functional operation circuit 1221 corresponds to a circuit required to perform the function of the product 1200 realized by the component 1220 . The fail-safe circuit 1230 corresponds to a circuit that stops the operation of the functional operation circuit 1221 when a predetermined period of time has elapsed from the date and time indicated by the date/time information stored in the memory of the externally provided recharging device. Alternatively, after a predetermined period of time has elapsed from the date and time indicated by the date/time information, when the fail-safe circuit 1230 receives an instruction signal for stopping the operation of the functional operation circuit 1221 via the network, the fail-safe circuit 1230 may stop the operation of the function operating circuit 1221 in response to the received command signal. It should also be noted that fail-safe circuitry 1230 may alternatively be mounted external to assembly 1220 .

In the eleventh embodiment, when a predetermined period of time has elapsed after purchasing the product 1200 or operating the product 1200 as an initial operation, the operation of the functional operation circuit 1221 of the component 1220 is stopped by the fail-safe circuit 1230 . Even when the above-mentioned component 1220 is faulty, the fault of the component 1220 causes the product 1200 to lose its main function, although the fault of the component 1220 does not exert a negative influence on the safety of the product 1200 . Generally, with respect to the failure rate after a predetermined time elapses, design has been made such that the failure rate of the component 1210 is lower than the failure rate of the component 1220 . Therefore, it is possible to avoid the event mentioned below: that is, the component 1200 operates continuously for a long period of time beyond a predetermined time, so that the component 1210 enters a degraded failure. As previously mentioned, safety at the end of the product 1200's life can be increased.

The electronic equipment concerning the present invention can be useful as an electronic equipment equipped with: a component whose failure can be directly combined with a risk concerning the safety aspect of the electronic equipment; and another component, even when the latter-mentioned component In the event of a failure, although the failure does not exert a negative influence on the safety of the electronic device, the failure of the component also renders the electronic device incapable of its main function, while further improving its safety when the life of the electronic device ends.

Claims (14)

1. electronic equipment comprises:

First assembly, its fault directly combines with risk about the secure context of described electronic equipment;

Second assembly, by this second assembly, even when described second assembly has fault, though the fault of described second assembly can not apply negative effect to the security of described electronic equipment, the fault of described second assembly also makes described electronic equipment lose its major function; And

Fault secure circuit is used to stop the operation of described second assembly.

2. electronic equipment as claimed in claim 1, wherein

In described second assembly, provide described fault secure circuit.

3. electronic equipment comprises:

First assembly, its fault directly combines with risk about the secure context of described electronic equipment;

Second assembly, by this second assembly, even when described second assembly has fault, though the fault of described second assembly can not apply negative effect to the security of described electronic equipment, the fault of described second assembly also makes described electronic equipment lose its major function;

Power circuit, being used for control provides electrical power to described second assembly; And

Fault secure circuit, this fault secure circuit is operated as follows: when described fault secure circuit monitors the situation of described first assembly, when described fault secure circuit detects the problem of described first assembly, described fault secure circuit is controlled described power circuit, provides electrical power so that stop to described second assembly.

4. electronic equipment comprises:

First assembly, its fault directly combines with risk about the secure context of described electronic equipment;

Second assembly, by this second assembly, even when described second assembly has fault, though the fault of described second assembly can not apply negative effect to the security of described electronic equipment, the fault of described second assembly also makes described electronic equipment lose its major function;

Clock control circuit is used to control the clock signal that provides to described second assembly; And

Fault secure circuit, this fault secure circuit is operated as follows: when described fault secure circuit monitors the situation of described first assembly, when described fault secure circuit detects the problem of described first assembly, described fault secure circuit is controlled described clock control circuit, provides clock signal so that stop to described second assembly.

5. electronic equipment comprises:

First assembly, its fault directly combines with risk about the secure context of described electronic equipment;

Second assembly, by this second assembly, even when described second assembly has fault, though the fault of described second assembly can not apply negative effect to the security of described electronic equipment, the fault of described second assembly also makes described electronic equipment lose its major function;

Reset control circuit, described second assembly is used to reset; And

Fault secure circuit, this fault secure circuit is operated as follows: when described fault secure circuit monitors the situation of described first assembly, when described fault secure circuit detects the problem of described first assembly, described fault secure circuit is controlled described reset control circuit, so that described second assembly is remained under its reset mode.

6. electronic equipment comprises:

First assembly, its fault directly combines with risk about the secure context of described electronic equipment;

Second assembly, by this second assembly, even when described second assembly has fault, though the fault of described second assembly can not apply negative effect to the security of described electronic equipment, the fault of described second assembly also makes described electronic equipment lose its major function;

Data line control circuit is used to control the data wire of described second assembly; And

Fault secure circuit, this fault secure circuit is operated as follows: when described fault secure circuit monitors the situation of described first assembly, when described fault secure circuit detects the problem of described first assembly, described fault secure circuit is controlled described data line control circuit, so that make the data wire of described second assembly enter uncontrolled state.

7. electronic equipment comprises:

First assembly, its fault directly combines with risk about the secure context of described electronic equipment;

Second assembly, by this second assembly, even when described second assembly has fault, though the fault of described second assembly can not apply negative effect to the security of described electronic equipment, the fault of described second assembly also makes described electronic equipment lose its major function;

The control line control circuit is used to control the control line of described second assembly; And

Fault secure circuit, this fault secure circuit is operated as follows: when described fault secure circuit monitors the situation of described first assembly, when described fault secure circuit detects the problem of described first assembly, described fault secure circuit is controlled described control line control circuit, so that make the control line of described second assembly enter uncontrolled state.

8. electronic equipment comprises:

First assembly, its fault directly combines with risk about the secure context of described electronic equipment;

Second assembly, by this second assembly, even when described second assembly has fault, though the fault of described second assembly can not apply negative effect to the security of described electronic equipment, the fault of described second assembly also makes described electronic equipment lose its major function;

The address wire control circuit is used to control the address wire of described second assembly; And

Fault secure circuit, this fault secure circuit is operated as follows: when described fault secure circuit monitors the situation of described first assembly, when described fault secure circuit detects the problem of described first assembly, described fault secure circuit is controlled described address wire control circuit, so that make the address wire of described second assembly enter uncontrolled state.

9. electronic equipment as claimed in claim 1, wherein:

When described fault secure circuit detected the situation of described first assembly and detects the problem of described first assembly in response to the signal that sends from external equipment, described fault secure circuit stopped the operation of described second assembly.

10. electronic equipment as claimed in claim 9, wherein:

After described fault secure circuit has detected the problem of described first assembly, when fault secure circuit receives when stopping the command signal of operation of described second assembly from described external equipment being used to of sending, described fault secure circuit stops the operation of described second assembly.

11. electronic equipment as claimed in claim 9, wherein:

The signal that sends from described external equipment is via the signal of network from its transmission.

12. electronic equipment as claimed in claim 1, wherein:

When from about the indicated effluxion of the temporal information of the initial operation of the purchase of described electronic equipment or described electronic equipment during the scheduled time, described fault secure circuit stops the operation of described second assembly.

13. electronic equipment as claimed in claim 12, wherein:

After having passed through the described scheduled time, when described fault secure circuit receives when stopping the command signal of operation of described second assembly from external equipment being used to of sending, described fault secure circuit stops the operation of described second assembly.

14. electronic equipment as claimed in claim 13, wherein, described external equipment is the recharging device of described electronic equipment.

Images