JP5617826B2 - Vehicle control device - Google Patents

Description

  The present invention relates to a vehicle control device that is mounted on a vehicle and diagnoses a failure in a route (ignition route) with an ignition switch.

  Conventionally, there is a vehicle control device described in Patent Document 1 as an example of a vehicle control device that diagnoses a failure in an ignition (hereinafter also referred to as IG) route.

  The vehicle control device includes a microcomputer and the like. The microcomputer receives an IG signal from an IG signal line and a power supply voltage from a power supply. The microcomputer diagnoses a failure of the IG switch by comparing the IG signal input to itself with an IG signal acquired from another control device. The other control device outputs an IG signal based on the IG information detected by itself.

  The microcomputer diagnoses that the IG path is broken when the state where the IG signal acquired from another control device is off for a predetermined time despite the IG signal input to itself being on. Similarly, when the IG signal acquired from another control device continues for a predetermined time even though the IG signal input to the microcomputer is off, the microcomputer has a failure in the IG path. Diagnose.

JP 2006-117131 A

  However, the above-described vehicle control device performs a failure diagnosis of the IG path using the IG signal acquired from another control device. Therefore, the other control device needs to output an IG signal based on the IG information detected by itself.

  However, a normal control apparatus rarely outputs an IG signal based on IG information detected by itself. In other words, a normal control device often does not have a function of outputting an IG signal based on IG information detected by itself.

  Therefore, in order to diagnose a failure in the IG path in the vehicle control device, a function for outputting an IG signal (ON or OFF signal) to another control device based on the IG information detected by itself is added. There is a need to. In other words, in order to diagnose a failure of the IG switch in the vehicle control device, it is necessary to change other control devices.

  The present invention has been made in view of the above problems, and an object of the present invention is to provide a vehicle control device capable of diagnosing a failure in an IG route without changing other control devices.

In order to achieve the above object, the invention described in claim 1
The main line that can be connected to the battery via the IG switch and the branch line connected to the main line are connected to the communication line together with other control devices that transmit different communication frames depending on whether the IG switch is on or off. A control device for a vehicle that is connected to a branch line in an IG line including, and that can operate by being supplied with power asynchronously with an IG switch;
An input means for inputting an IG signal indicating an ON state or an OFF state of the IG switch via the IG line;
Determining means for determining the on state and off state of the IG switch based on the IG signal input to the input means;
Control means for switching the control content according to the ON state and the OFF state of the IG switch which is the determination result of the determination means;
Communication means for receiving a communication frame transmitted from another control device via a communication line;
When power is supplied and the device is in an operable state, it is diagnosed whether at least one of the branch line and the input unit has an off failure based on the determination result by the determination unit and the communication frame received by the communication unit. Fault diagnosis means,
The failure diagnosis means receives a communication frame (hereinafter also referred to as an on-time communication frame) transmitted only when the determination means determines that the IG switch is off and the communication means is on. If you have, it is intended to diagnosed as off-failure,
When the failure diagnosis means diagnoses an off-failure, the control means switches to the control contents when the ignition switch is in the on state regardless of the determination result of the determination means. If the communication means cannot receive a communication frame that is transmitted only when the ignition switch is in the on state when the control is switched to the control content when the ignition switch is in the on state. Regardless of the result, it is characterized by switching to the control content when the ignition switch is in the OFF state .

  In this way, the vehicle control device determines the ON state and OFF state of the IG switch based on the IG signal (determination means), and the control content according to the ON state and OFF state of the IG switch that is the determination result (Control means). Therefore, the control unit of the vehicle control device cannot perform normal control when at least one of the branch line connected to the vehicle control unit and the input unit of the vehicle control unit (that is, the IG path) is turned off.

  Therefore, the vehicle control device includes failure diagnosis means for diagnosing whether or not the IG path has an off failure when power is supplied and the vehicle control device is in an operable state. The failure diagnosing means diagnoses that the IG path is in an off failure when the determining means determines that the IG switch is in the OFF state and the communication means receives the ON-time communication frame.

  By the way, normally, the control content of the control device mounted on the vehicle differs depending on whether the IG switch is on or off. Therefore, in the control device mounted on the vehicle, it is not special to transmit different communication frames depending on whether the IG switch is on or off. Some communication frames transmitted by the control device mounted on the vehicle are transmitted only when the IG switch is on. That is, the other control device does not specifically transmit the on-time communication frame for off-fault diagnosis in the in-vehicle control device.

The vehicle control device diagnoses whether or not the IG path is off-failed based on the ON-time communication frame and the determination result by the determination means (the determination result determined by itself based on the IG signal). Is. Therefore, the vehicle control device can diagnose whether or not the IG path is off-failed without changing other control devices. Further, as described above, the control unit cannot perform normal control when the IG path has an off failure. Therefore, as described in claim 1, when the failure diagnosis means diagnoses an off-failure, the control contents when the IG switch is in the on state are switched regardless of the determination result of the determination means. By doing in this way, control when the IG switch is in the on state can be performed even if the IG path is in an off failure. In other words, even if the IG path is off and the determination means cannot determine that the IG switch is in the on state, if the IG switch is in the on state, control can be performed when the IG switch is in the on state. it can. Further, according to the first aspect of the present invention, when the controller is diagnosed as an off-fault by the failure diagnosing unit and is switched to the control content when the IG switch is in the on state, the communication unit IG switch When the communication frame transmitted only in the ON state cannot be received, the control content when the IG switch is in the OFF state is switched regardless of the determination result of the determination unit. By doing in this way, even when the IG switch is switched from the on state to the off state, even when the control content when the IG switch is in the on state is switched in the state where the IG path is off, This is preferable because the control when the IG switch is in the OFF state can be performed. That is, even when the determination unit cannot correctly determine the state of the IG switch, if the IG switch is switched from the on state to the off state, control can be performed when the IG switch is in the off state.

In order to achieve the above object, the invention described in claim 2
It is connected to the communication line together with other control devices that transmit different communication frames depending on whether the ignition switch is on or off, and a main line that can be connected to the battery via the ignition switch and a branch line connected to the main line. A control device for a vehicle that is connected to a branch line in an ignition line including the vehicle and that can operate by being supplied with power asynchronously with an ignition switch;
An input means for inputting an ignition signal indicating an on-state or an off-state of the ignition switch via the ignition line;
Determination means for determining an on state and an off state of the ignition switch based on the ignition signal input to the input means;
Control means for switching the control content according to the ON state and the OFF state of the ignition switch which is the determination result of the determination means;
Communication means for receiving a communication frame transmitted from another control device via a communication line;
When power is supplied and the device is in an operable state, it is diagnosed whether at least one of the branch line and the input unit has an off failure based on the determination result by the determination unit and the communication frame received by the communication unit. Fault diagnosis means,
The failure diagnosis means determines that at least one of the branch line and the input means when the determination means determines that the ignition switch is off and the communication means receives a communication frame transmitted only when the ignition switch is on. One of them diagnoses that there is an off-fault,
When the control means is diagnosed as an off-failure by the failure diagnosis means, the control means switches to the control content when the ignition switch is in the on state regardless of the determination result of the determination means.
The control means is a communication frame that is transmitted even when the ignition switch is off by the communication means when the failure diagnosis means diagnoses an off-fault and the control means switches to the control content when the ignition switch is on. When the communication frame transmitted only when the ignition switch is on cannot be received, the control content when the ignition switch is off is switched regardless of the determination result of the determination means. To do .

By doing so, the vehicle control device can diagnose whether or not the IG path has an off-failure without changing the other control devices, as in the first aspect. Further, similarly to the first aspect, the vehicular control device can perform control when the IG switch is in the on state even if the IG path is in an off failure. Furthermore, by doing in this way, even if it is a case where it is a case where it switches to the control content in the state in which an IG switch is an ON state in the state where the IG path has an OFF failure, the IG switch switches from an ON state to an OFF state. Then, it is possible to perform control when the IG switch is in the off state. That is, even when the determination unit cannot correctly determine the state of the IG switch, if the IG switch is switched from the on state to the off state, control can be performed when the IG switch is in the off state. Furthermore, by doing in this way, when it becomes impossible to receive an ON-time communication frame due to a disconnection of the communication line, it is possible to suppress switching to the control content when the IG switch is in the OFF state. In addition, the other control device does not specifically transmit the off-time communication frame for the off-fault diagnosis in the in-vehicle control device.

According to a third aspect of the present invention, the failure diagnosing means receives the communication frame transmitted only when the determining means determines that the IG switch is off and the communication means is on. in addition to the fact, if it receives the on-time communication frame a predetermined number of times or more at the communication section, it may be so that you diagnosed as off-failure.

By doing in this way, it is determined that the IG switch is in the OFF state by the determination means, and the diagnosis accuracy is higher than when diagnosing that there is an OFF failure by receiving the ON-time communication frame once. Can be improved.

According to a fourth aspect of the present invention, the failure diagnosing means receives the communication frame transmitted only when the determining means determines that the IG switch is off and the communication means is on. in addition to the fact, if it continues to receive a communication frame for a predetermined time or more at the communication section, it may be so that you diagnosed as off-failure.

By doing in this way, it is determined that the IG switch is in the OFF state by the determination means, and the diagnosis accuracy is higher than when diagnosing that there is an OFF failure by receiving the ON-time communication frame once. Can be improved.

In order to achieve the above object, the invention described in claim 5
It is connected to the communication line together with other control devices that transmit different communication frames depending on whether the ignition switch is on or off, and a main line that can be connected to the battery via the ignition switch and a branch line connected to the main line. A control device for a vehicle that is connected to a branch line in an ignition line including the vehicle and that can operate by being supplied with power asynchronously with an ignition switch;
An input means for inputting an ignition signal indicating an on-state or an off-state of the ignition switch via the ignition line;
Determination means for determining an on state and an off state of the ignition switch based on the ignition signal input to the input means;
Control means for switching the control content according to the ON state and the OFF state of the ignition switch which is the determination result of the determination means;
Communication means for receiving a communication frame transmitted from another control device via a communication line;
When power is supplied and the device is in an operable state, it is diagnosed whether at least one of the branch line and the input unit has an off failure based on the determination result by the determination unit and the communication frame received by the communication unit. Fault diagnosis means,
The failure diagnosis means determines that at least one of the branch line and the input means when the determination means determines that the ignition switch is off and the communication means receives a communication frame transmitted only when the ignition switch is on. One of them diagnoses that there is an off-fault,
The failure diagnosing means determines that the ignition switch is in an OFF state by the determining means, and receives a communication frame transmitted only when the ignition switch is in the ON state by the communication means. When a communication frame is received a predetermined number of times or more , it is diagnosed that an off failure has occurred .

By doing so, the vehicle control device can diagnose whether or not the IG path has an off-failure without changing the other control devices, as in the first aspect. Furthermore, by doing in this way, it is determined that the IG switch is in the OFF state by the determination means, and by receiving the ON-time communication frame once, than when diagnosing an OFF failure, Diagnosis accuracy can be improved.

As described above, the control means cannot perform normal control when the IG path is turned off. Therefore, as shown in claim 6, when it is diagnosed and OFF failure in the failure diagnosing means, regardless of the determination result of the determination means, even if the switch so that the control contents when the IG switch is turned on Good.

By doing in this way, even when the IG path has an off failure, it is possible to perform control when the IG switch is in the on state, which is preferable. In other words, even if the IG path is off and the determination means cannot determine that the IG switch is in the on state, if the IG switch is in the on state, control can be performed when the IG switch is in the on state. It is preferable because it is possible.

According to a seventh aspect of the present invention, the failure diagnosing means receives the communication frame transmitted only when the ignition switch is determined to be off by the communication means and the determination means determines that the ignition switch is off. In addition to the above, when a communication frame transmitted only when the ignition switch transmitted from a plurality of other control devices is on is received by the communication means, it is possible to diagnose that there is an off failure. Good.

By doing in this way, it is determined that the IG switch is in the OFF state by the determination unit, and the communication unit has received the ON-time communication frame transmitted from one control device, so that the OFF failure occurs. Diagnosis accuracy can be improved as compared with the case of diagnosing the presence.

When this claim 7 is implemented in combination with the above-mentioned claim 3 or the like, if each of the on-time communication frames transmitted from each control device is received a predetermined number of times or more, a diagnosis of an off failure is made. become. By doing in this way, a diagnostic precision can be improved rather than the case where it implements each separately .

In the case where the present invention is implemented in combination with claim 7 and claim 4 described above, if each of the on-time communication frames transmitted from the respective control devices is continuously received for a predetermined time or more, it is diagnosed that an off-failure has occurred. It will be. By doing in this way, a diagnostic precision can be improved rather than the case where it implements each separately.

In order to achieve the above object, the invention described in claim 8 provides:
The main line that can be connected to the battery via the IG switch and the branch line connected to the main line are connected to the communication line together with other control devices that transmit different communication frames depending on whether the IG switch is on or off. A control device for a vehicle that is connected to a branch line in an IG line including, and that can operate by being supplied with power asynchronously with an IG switch;
An input means for inputting an IG signal indicating an ON state or an OFF state of the IG switch via the IG line;
A determination unit that determines an on state and an off state of the IG switch based on the IG signal input to the input unit;
Control means for switching the control content according to the ON state and the OFF state of the IG switch which is the determination result of the determination means;
Communication means for receiving a communication frame transmitted from another control device via a communication line;
When power is supplied and the device is in an operable state, it is diagnosed whether at least one of the branch line and the input unit is on-failed based on the determination result by the determination unit and the communication frame received by the communication unit. Fault diagnosis means,
The failure diagnosis means determines that the determination means determines that the IG switch is on, and the communication means cannot receive a communication frame transmitted only when the IG switch is on. One of them diagnoses that there is an on failure ,
When the on-failure is diagnosed by the failure diagnosis means, the control means switches to the control contents when the ignition switch is in the OFF state regardless of the determination result of the determination means. When the communication means that is transmitted only when the ignition switch is on is received by the communication means when the control is switched to the control content when the ignition switch is in the off state. regardless, it characterized switching Rukoto the control contents when the ignition switch is turned on.

  In this way, the vehicle control device determines the ON state and OFF state of the IG switch based on the IG signal (determination means), and the control content according to the ON state and OFF state of the IG switch that is the determination result (Control means). Therefore, the control unit of the vehicle control device cannot perform normal control when at least one of the branch line connected to the vehicle control unit and the input unit of the vehicle control unit (that is, the IG path) is turned on.

  Therefore, the vehicle control device includes failure diagnosis means for diagnosing whether or not the IG path is in an on-failure state when power is supplied and in an operable state. The failure diagnosing means diagnoses that the IG path is on-failed when the determining means determines that the IG switch is on and the communication means cannot receive the on-time communication frame.

  Note that, as described above, the other control device does not specifically transmit the on-time communication frame for the on-fault diagnosis in the in-vehicle control device.

The vehicle control device diagnoses whether or not the IG path is on-failed based on the ON-time communication frame and the determination result by the determination means (the determination result determined by itself based on the IG signal). Is. Therefore, the vehicle control device can diagnose whether or not the IG path is on-failed without changing other control devices. Moreover, by doing in this way, control when the IG switch is in the OFF state can be performed even if the IG path is on-failed. In other words, even when the IG path is in an on-failure state and the determination means cannot determine that the IG switch is in the off state, when the IG switch is in the off state, control can be performed when the IG switch is in the off state. it can. Further, by doing so, the IG switch is switched from the off state to the on state even when the IG path is in the on-failure state and the control content is switched to when the IG switch is in the off state. Then, the control when the IG switch is in the on state can be performed. That is, even when the determination unit cannot correctly determine the state of the IG switch, when the IG switch is switched from the off state to the on state, control can be performed when the IG switch is in the on state.

In order to achieve the above object, the invention according to claim 9
It is connected to the communication line together with other control devices that transmit different communication frames depending on whether the ignition switch is on or off, and a main line that can be connected to the battery via the ignition switch and a branch line connected to the main line. A control device for a vehicle that is connected to a branch line in an ignition line including the vehicle and that can operate by being supplied with power asynchronously with an ignition switch;
An input means for inputting an ignition signal indicating an on-state or an off-state of the ignition switch via the ignition line;
Determination means for determining an on state and an off state of the ignition switch based on the ignition signal input to the input means;
Control means for switching the control content according to the ON state and the OFF state of the ignition switch which is the determination result of the determination means;
Communication means for receiving a communication frame transmitted from another control device via a communication line;
When power is supplied and the device is in an operable state, it is diagnosed whether at least one of the branch line and the input unit is on-failed based on the determination result by the determination unit and the communication frame received by the communication unit. Fault diagnosis means,
The failure diagnosis means determines that the ignition switch is in the ON state by the determination means, and the communication means cannot receive the communication frame transmitted only when the ignition switch is in the ON state. When a communication frame transmitted even when the ignition switch is off is received, it is diagnosed that at least one of the branch line and the input means is on-failed.

By doing so, the vehicle control device can diagnose whether or not the IG path is on-failed without changing other control devices, as in the eighth aspect. Furthermore, by doing in this way, when it becomes impossible to receive an ON-time communication frame due to a disconnection of the communication line, it can be suppressed to determine that an ON failure has occurred.

In order to achieve the above object, the invention described in claim 10
It is connected to the communication line together with other control devices that transmit different communication frames depending on whether the ignition switch is on or off, and a main line that can be connected to the battery via the ignition switch and a branch line connected to the main line. A control device for a vehicle that is connected to a branch line in an ignition line including the vehicle and that can operate by being supplied with power asynchronously with an ignition switch;
An input means for inputting an ignition signal indicating an on-state or an off-state of the ignition switch via the ignition line;
Determination means for determining an on state and an off state of the ignition switch based on the ignition signal input to the input means;
Control means for switching the control content according to the ON state and the OFF state of the ignition switch which is the determination result of the determination means;
Communication means for receiving a communication frame transmitted from another control device via a communication line;
When power is supplied and the device is in an operable state, it is diagnosed whether at least one of the branch line and the input unit is on-failed based on the determination result by the determination unit and the communication frame received by the communication unit. Fault diagnosis means,
The failure diagnosing means determines that the ignition switch is in the on state by the judging means, and the communication means cannot receive a communication frame transmitted only when the ignition switch is in the on state. When a communication frame transmitted even when the ignition switch transmitted from the control device is off is received by the communication unit, it is diagnosed that at least one of the branch line and the input unit is on-failed .

By doing so, the vehicle control device can diagnose whether or not the IG path is on-failed without changing other control devices, as in the eighth aspect. Further, by doing so, it is determined by the determination means that the IG switch is in the ON state, and the communication means receives the off-time communication frame transmitted from one control device. Diagnosis accuracy can be improved as compared with the case of diagnosing that it is being performed.

According to another aspect of the present invention, the failure diagnosing means receives the communication frame transmitted only when the IG switch is in the ON state, and the communication means determines that the IG switch is in the ON state. In addition to being unable to do so, it may be diagnosed that an on failure has occurred when the communication means has received a communication frame transmitted more than a predetermined number of times even when the IG switch is off.

By doing in this way, it is determined that the IG switch is in the ON state by the determination means, and the diagnosis accuracy is higher than when diagnosing that the IG switch is ON failure by receiving the OFF communication frame once. It can Rukoto to improve. In the case of carrying out a combination of claim 11 and claim 10 described above, if each of the off-time communication frames transmitted from each control device is received a predetermined number of times or more, it is diagnosed that an on failure has occurred. Become. By doing in this way, a diagnostic precision can be improved rather than the case where it implements each separately.

According to a twelfth aspect of the present invention, the failure diagnosing means receives the communication frame transmitted only when the IG switch is in the ON state and the communication means determines that the IG switch is in the ON state. In addition to being unable to do so, if the communication means continues to receive a communication frame transmitted for a predetermined time or more even when the ignition switch is in an OFF state , it may be diagnosed that an ON failure has occurred.

By doing in this way, it is determined that the IG switch is in the ON state by the determination means, and the diagnosis accuracy is higher than when diagnosing that the IG switch is ON failure by receiving the OFF communication frame once. Can be improved. When this claim 12 is implemented in combination with the above-described claim 10, if each of the off-time communication frames transmitted from the respective control devices is continuously received for a predetermined time or more, it is diagnosed that an on-failure has occurred. It will be. By doing in this way, a diagnostic precision can be improved rather than the case where it implements each separately.

In order to achieve the above object, the invention according to claim 13 is
It is connected to the communication line together with other control devices that transmit different communication frames depending on whether the ignition switch is on or off, and a main line that can be connected to the battery via the ignition switch and a branch line connected to the main line. A control device for a vehicle that is connected to a branch line in an ignition line including the vehicle and that can operate by being supplied with power asynchronously with an ignition switch;
An input means for inputting an ignition signal indicating an on-state or an off-state of the ignition switch via the ignition line;
Determination means for determining an on state and an off state of the ignition switch based on the ignition signal input to the input means;
Control means for switching the control content according to the ON state and the OFF state of the ignition switch which is the determination result of the determination means;
Communication means for receiving a communication frame transmitted from another control device via a communication line;
When power is supplied and the device is in an operable state, it is diagnosed whether at least one of the branch line and the input unit is on-failed based on the determination result by the determination unit and the communication frame received by the communication unit. Fault diagnosis means,
The failure diagnosis means determines that the ignition switch is in the ON state by the determination means, and the communication means cannot receive the communication frame transmitted only when the ignition switch is in the ON state. When a communication frame transmitted only when the ignition switch is on cannot be received for a predetermined time or more, it is diagnosed that at least one of the branch line and the input means is on-failed .

By doing so, the vehicle control device can diagnose whether or not the IG path is on-failed without changing other control devices, as in the eighth aspect. Furthermore, in this way, when it is determined by the determination means that the IG switch is in the ON state and the communication frame at the time of ON cannot be received, rather than diagnosing that there is an immediate on failure. Incorrect determination can be suppressed.

As described above, the control means can perform normal control when the IG path is on-failed.
I will not. Therefore, as shown in claim 14, the control means, when it is diagnosed and ON failure in the failure diagnosing means, regardless of the result of the determination by the determining means, Ru switch to control contents when the ignition switch is in the OFF state You may do it.

By doing in this way, even when the IG path is on-failed, it is possible to perform control when the IG switch is in the off state, which is preferable. In other words, even when the IG path is in an on-failure state and the determination means cannot determine that the IG switch is in the off state, when the IG switch is in the off state, control can be performed when the IG switch is in the off state. It is preferable because it is possible.

According to a fifteenth aspect of the present invention, when the controller is diagnosed as an on-failure by the failure diagnosing unit and is switched to the control content when the ignition switch is in the off state, the communication unit ignites the ignition switch. when receiving a communication frame to be transmitted only when in the on state, regardless of the determination result of the determination means, may be switched so that the content of control when the ignition switch is turned on.

By doing in this way, even when the IG switch is switched from the off state to the on state, even when the IG path is switched to the control content when the IG switch is in the off state with the on failure, This is preferable because control when the IG switch is in the ON state can be performed. That is, even in a situation where the determination unit cannot correctly determine the state of the IG switch, it is preferable that the IG switch is switched from the off state to the on state because control can be performed when the IG switch is in the on state.

It is a block diagram which shows schematic structure of the vehicle-mounted system in 1st Embodiment. It is a circuit diagram which shows schematic structure of the input circuit of each ECU in 1st Embodiment. It is a flowchart which shows processing operation (off-fault diagnosis) of ECU in 1st Embodiment. It is a time chart in processing operation of ECU in a 1st embodiment. It is a flowchart which shows the processing operation (ON failure diagnosis) of ECU in 2nd Embodiment.

(First embodiment)
Hereinafter, embodiments of the present invention will be described with reference to the drawings. The vehicle control device of the present invention is applied to at least one of a first ECU (Electronic Control Unit) 51 to a fourth ECU 54 in the in-vehicle system 100 shown in FIG. For example, the first ECU 51 can be adopted as the vehicle control device of the present invention, and the second ECU 52 to the fourth ECU 54 can be adopted as the other control devices. Other control devices (for example, the second ECU 52 to the fourth ECU 54) may have the same function (means) as the vehicle control device (for example, the first ECU 51) of the present invention. In the present embodiment, as an example, the in-vehicle system 100 including four of the first ECU 51 to the fourth ECU 54 is employed, but the present invention is not limited to this. The object can be achieved if the vehicle control device described in the claims and other control devices are included.

  The first ECU 51 to the fourth ECU 54 also have portions that are common in configuration and function. Therefore, in the following description, when the parts common to the first ECU 51 to the fourth ECU 54 are described, the first ECU 51 to the fourth ECU 54 may be simply abbreviated as ECU. That is, in the following description, a place simply described as ECU can be replaced with the first ECU 51 to the fourth ECU 54. Further, “ECU that is a vehicle control device” in the following description refers to “vehicle control device” described in the claims, and is at least one of the first ECU 51 to the fourth ECU 54. It is shown. In addition, the other ECU indicates “another control device” described in the claims.

  As shown in FIG. 1, the in-vehicle system 100 mainly includes an IG line (trunk line 10, branch lines 11 to 14), an IG switch 20, a power line 30, a communication line 40, an ECU, a battery 60, and the like.

  The IG line can be connected to the battery 60 via the IG switch 20, and includes a trunk line 10 and branch lines 11 to 14 branched from the trunk line 10. The branch line 11 is connected to the first ECU 51. Therefore, the first ECU 51 is connected to the IG switch 20 via the branch line 11 and the trunk line 10. The branch line 12 is connected to the second ECU 52. Therefore, the second ECU 52 is connected to the IG switch 20 via the branch line 12 and the trunk line 10. The branch line 13 is connected to the third ECU 53. Therefore, the third ECU 53 is connected to the IG switch 20 via the branch line 13 and the trunk line 10. The branch line 14 is connected to the fourth ECU 54. Therefore, the fourth ECU 54 is connected to the IG switch 20 via the branch line 14 and the trunk line 10.

  An IG signal (a signal indicating whether the IG switch 20 is in an on state or an off state) flows through the IG line as the IG switch 20 is turned on and off. That is, when the IG switch 20 is on, an IG signal indicating that the IG switch 20 is on flows through the IG line. On the other hand, when the IG switch 20 is off, an IG signal indicating that the IG switch 20 is off flows through the IG line.

  Note that. It is also possible to supply power to each of the first ECU 51 to the fourth ECU 54 via the IG line (10, 11 to 14). However, here, the IG lines (10, 11 to 14) are used as signal lines through which IG signals flow. Further, in the following description and drawings, the fact that the IG switch 20 is in the on state is simply referred to as IG switch on, and the fact that the IG switch 20 is in the off state is also simply referred to as IG switch off.

  The power supply line 30 is directly connected to the battery 60 without going through the IG switch 20. Each of the ECUs can be supplied with power from the battery 60 via the power line 30. More specifically, each of the ECUs is directly connected to the battery 60 via the power supply line 30 without using not only the IG switch 20 but also other main relays.

  Thus, each of the ECUs (at least an ECU that is a vehicle control device) can be supplied with power from a power supply system different from the IG line. As described above, each of the ECUs (at least an ECU that is a vehicle control device) can supply power via the IG line (10, 11 to 14) (from the power supply system via the IG switch 20). Even if it is, it is sufficient if power can be supplied from a power system different from the IG line.

  The communication line 40 is connected to each of the ECUs. Communication frames output from each of the ECUs flow through the communication line 40. That is, each of the ECUs can perform communication (data communication, data transfer) with each other by outputting a communication frame to the communication line 40 (communication means). Note that this communication frame includes, for example, an ID (identifier) indicating the type (type) of data, specific data (information), and the like.

  In the present embodiment, as an example, an example in which the first ECU 51 to the fourth ECU 54 are connected to an in-vehicle LAN (Local Area Network) system according to a CAN (Controller Area Network, CAN is a registered trademark) protocol is adopted. Therefore, the communication line 40 in this embodiment shows a CAN bus.

  However, the present invention is not limited to this. For example, the ECU may be connected to an in-vehicle LAN conforming to a FlexRay (registered trademark) protocol or a LIN (Local Interconnect Network) protocol. That is, the communication line 40 can employ, for example, a FlexRay bus, a LIN bus, or the like.

  The ECU is mainly composed of a microcomputer including a CPU, an oscillator, a storage device (for example, a RAM (DRAM, SRAM, etc.) or a ROM (EPROM, EEPROM, etc.)), an I / O, and a bus line that connects these configurations. ing. As shown in FIG. 2, the microcomputer in the ECU is connected to the outside of the ECU through an input circuit. FIG. 2 shows a simplified interface between the inside of the ECU and the outside of the ECU. The input circuit in FIG. 2 is an example.

  As the ECU, for example, an engine control ECU, an AT (automatic transmission) control ECU, a meter ECU, a door control ECU, or the like is employed. In this embodiment, as an example, an engine control ECU is applied to the first ECU 51, an AT control ECU is applied to the second ECU 52, a meter ECU is applied to the third ECU 53, and a door control ECU is applied to the fourth ECU 54.

  The engine control ECU controls the engine. The AT control ECU controls the automatic transmission. The meter ECU performs display control of the meter. The door control ECU performs vehicle door locking / unlocking control and the like. Since these ECUs are well-known techniques, a detailed description thereof will be omitted. Note that the door control ECU (fourth ECU 54) is configured to receive a signal output from the door opening / closing switch 70 (a signal indicating the opening / closing state of the vehicle door, which is a door opening signal or a door closing signal). .

  The ECU configured as described above executes various controls by performing various arithmetic processes while utilizing the temporary storage function of the RAM, by the CPU executing programs stored in the ROM. For example, an ECU (at least an ECU that is a vehicle control device) communicates by outputting a communication frame to the communication line 40 as described above (communication means) or an IG input via the IG line. Based on the signal, the state of the IG switch 20 (whether the IG switch is on or IG switch is off) is determined (recognized). The ECU switches the control content according to the state of the IG switch 20 determined by itself (control means). The ECU switches the communication frame to be output to the communication line 40 by switching the control content according to the state of the IG switch 20 determined by the ECU itself (communication means).

  Usually, the control content of the ECU mounted on the vehicle differs depending on whether the IG switch is on or the IG switch is off. Therefore, in the ECU mounted on the vehicle, it is not special to transmit different communication frames depending on whether the IG switch is on or the IG switch is off.

  The communication frame received by the ECU from another ECU (an ECU other than itself) includes a communication frame (on-time communication frame) transmitted only when the IG switch 20 is on (on-state), and the IG switch 20 There is also a communication frame (off-time communication frame) that is transmitted even when it is off (in an off state). That is, the on-time communication frame is not specifically transmitted for the off-fault diagnosis performed by the ECU (at least one of the first ECU 51 to the fourth ECU 54) that is the in-vehicle control device. This off-fault diagnosis will be described later.

  This on-time communication frame includes data related to control performed by the ECU only when the IG switch 20 is on. An example is a communication frame that includes data indicating the required torque. For example, the AT control ECU (second ECU 52) transmits a communication frame including data indicating the required torque to the engine control ECU (first ECU 51) only when the IG switch is on.

  On the other hand, the off-time communication frame includes data necessary for the ECU even when the IG switch 20 is off. As an example, a communication frame including data indicating whether sleep is permitted or not, a communication frame including data indicating the door open / close state, and a communication frame including data indicating a display instruction of the range position to the meter A communication frame including data indicating a display instruction to the vehicle speed meter.

  A communication frame including data indicating sleep permission / non-permission is transmitted from the ECU to another ECU. For example, even when the IG switch is off, the door control ECU (fourth ECU 54) transmits a communication frame including data indicating the open / closed state of the door to the engine control ECU (first ECU 51). The AT control ECU (second ECU 52) also transmits a communication frame including data indicating a display instruction to the meter of the range position to the meter ECU (third ECU 53) even when the IG switch is off. Further, the AT control ECU (second ECU 52) transmits a communication frame including data indicating a display instruction of the vehicle speed to the meter to the meter ECU (third ECU 53) even when the IG switch is off.

  Of course, the ID of the communication frame at the time of ON is different from the ID of the communication frame at the time of OFF. Therefore, when receiving the communication frame, the ECU confirms the ID in this communication frame (that is, without confirming the data in the communication frame), and determines whether the communication frame is an on-time communication frame or an off-time communication frame. Can be recognized (determined).

  Also, the ECU that is the vehicle control device uses this on-time communication frame, off-time communication frame, and the like to detect an off-fault in the branch lines 11 to 14 that connect the trunk line 10 and itself or in its own internal circuit. Diagnose (determine, identify). That is, it is diagnosed whether or not an off-failure has occurred in the branch lines 11 to 14 connecting the trunk line 10 and itself or in its own internal circuit. Therefore, the ECU that is the vehicle control device can be restated as a failure diagnosis device or a vehicle control device having a failure diagnosis function. The off failure diagnosis method will be described in detail later.

  This off-failure is, for example, a state in which the branch lines 11 to 14 are disconnected, or a state in which the path of the IG signal in the ECU internal circuit (the path from the IG terminal such as the input circuit to the microcomputer, for example, the resistance of the input circuit) (Open), a state in which the path of the IG signal in the internal circuit of the ECU is in contact with the ground (contacts the ground potential portion (ground short), for example, is fixed off). In other words, the off-failure indicates a state where at least one of these states has occurred. Note that the branch lines 11 to 14 and the path of the IG signal in the internal circuit of the ECU (path from the IG terminal such as the input circuit (input means) to the microcomputer) can also be referred to as an IG path.

  As will be described later in the second embodiment, the ECU uses the on-time communication frame, the off-time communication frame, and the like, and the branch lines 11 to 14 that connect the trunk line 10 to itself and the internal circuit of the ECU. It is also possible to diagnose (determine and identify) an on-failure at. That is, it is diagnosed whether or not an on-failure has occurred in the branch lines 11 to 14 connecting the trunk line 10 and itself or in its own internal circuit. For example, the ON failure is a state in which the branch lines 11 to 14 are disconnected and then contacted with the power supply (contacted with a power supply potential portion, for example, on-fixed) (power supply short-circuit). The state (contact with the power supply potential, for example, on-fixed) is in a state of contact (power supply short circuit). In other words, the on-failure indicates a state where at least one of these states occurs.

  As described above, the ECU that is the vehicle control device diagnoses an off failure or an on failure using the on-time communication frame, the off-time communication frame, or the like. However, as described above, the on-time communication frame and the off-time communication frame are necessary for control (processing) other than the diagnosis of the off failure and the on failure performed by the ECU that is the vehicle control device. In other words, the ECU that is the vehicle control device uses the on-time communication frame and the off-time communication frame that are transmitted even when the off-fault or on-fault diagnosis is not performed to diagnose the off-fault or on-fault. Is what you do. Therefore, the ECU (other control device) is not specially designed to transmit an on-time communication frame or an off-time communication frame in order to diagnose an off failure or an on failure.

  The ECU also has a sleep mode (sleep function). That is, the ECU shifts to the sleep mode when the vehicle is not in the sleep mode and the vehicle is in a predetermined state (for example, a parking state). More specifically, when receiving a communication frame including data indicating sleep permission from another ECU, the ECU shifts to a sleep mode.

  The sleep mode is a state in which power consumption in the ECU is smaller than that in the normal operation mode. As the sleep mode, for example, there are a standby mode in which an oscillator provided in the ECU is stopped, a slow clock mode in which the oscillator operates at a low frequency different from the normal operation, and the like. Further, when the ECU is in the sleep mode, upon receiving a predetermined wakeup signal (that is, a communication frame including the wakeup signal), the ECU cancels the sleep mode and returns to the normal operation mode (wakeup, activation). Note that the sleep mode and the wake-up from the sleep mode in the ECU are well-known techniques, and thus detailed description thereof is omitted.

  Some electronic control devices mounted on a vehicle are activated by being supplied with power from a battery when an IG switch is turned on in a sleep mode. On the other hand, there is an electronic control device that is activated by a signal (communication frame) received via a communication line in the sleep mode. The ECU in this embodiment is the latter.

  For example, the first ECU 51 to the third ECU 53 wake up when receiving a wake-up signal from the fourth ECU 54 via the communication line 40 when the first ECU 51 to the third ECU 53 are in the leap mode. The fourth ECU 54 wakes up when it receives the door opening signal output from the door opening / closing switch 70 when it is in the leap mode, and transmits the wakeup signal via the communication line 40. That is, the ECU (at least an ECU that is a vehicle control device) can wake up from the sleep mode asynchronously with the IG switch 20. In other words, the ECU (at least an ECU that is a vehicle control device) is operable by being supplied with power asynchronously with the IG switch 20.

  As described so far, the ECU in this embodiment (at least an ECU that is a vehicle control device) is activated by being supplied with power asynchronously with respect to the IG switch 20, and is in the state of the IG switch 20 determined by itself. In response, the control content and the communication frame output to the communication line 40 are switched.

  By the way, when an off failure or an on failure occurs, the ECU determines that the state of the IG switch 20 is different from the actual state. Therefore, in such a case, the ECU performs control different from the control performed when the actual IG switch 20 is in the state, or transmits a communication frame that is different from the communication frame transmitted when the actual IG switch 20 is in the state. It will be. That is, the ECU is not preferable because it cannot perform normal control or outputs an incorrect communication frame to the communication line 40.

  For example, when the branch line 11 is disconnected, the first ECU 51 determines that the IG switch 20 is off even though the IG switch 20 is on. Then, the first ECU 51 performs control when the IG switch 20 is off, or transmits a communication frame when the IG switch 20 is off. The ECU according to the present invention (ECU as the vehicle control device of the present invention) diagnoses an off-fault or an on-fault when in an operable state in order to suppress such problems (second embodiment). (Failure diagnosis means).

  Here, the off-fault diagnosis processing by the ECU will be described with reference to FIGS. The “switch state detected by the ECU” in FIG. 4 indicates the state of the IG switch 20 determined by the ECU (ECU as the vehicle control device of the present invention) based on the IG signal. When the “switch state detected by the ECU” is ON, it indicates that the ECU determines that the IG switch is ON based on the IG signal. On the other hand, when the “switch state detected by the ECU” is OFF, it indicates that the ECU determines that the IG switch is OFF based on the IG signal.

  The “ECU power supply” in FIG. 4 indicates whether or not the ECU (ECU as the vehicle control device of the present invention) is activated. When the “ECU power” is on, it indicates that the ECU is activated. On the other hand, when the “ECU power” is off, it indicates that the ECU is sleeping.

  Further, “communication line (reception frame)” in FIG. 4 indicates a communication frame received by the ECU (ECU as the vehicle control device of the present invention). A communication frame hatched by dots indicates an off-time communication frame. On the other hand, a hatched communication frame by an oblique line indicates an on-time communication frame. That is, FIG. 4 shows that the IG switch 20 is switched from OFF to ON at the timing t2.

  Further, “OFF failure counter” in FIG. 4 indicates a count value of a failure counter described later. Further, the “off failure determination result” in FIG. 4 indicates whether the ECU (ECU as the vehicle control device of the present invention) has diagnosed the off failure.

  The ECU (ECU as the vehicle control device of the present invention) executes the process shown in the flowchart of FIG. 3 at every predetermined time (for example, 5 ms) during startup. That is, as shown by the timing t1 in FIG. 4, when activated by communication, the process shown in the flowchart in FIG. 3 is started, and the process shown in the flowchart in FIG. 3 is executed at predetermined time intervals during activation. The ECU is activated by communication (a wake-up signal included in the communication frame) as shown in “ECU power supply” in FIG. 4 (timing t1).

  In step S10 of FIG. 3, the ECU determines whether or not the IG switch 20 is on (determination means). At this time, the ECU determines the state of the IG switch 20 (whether it is on or off) based on the IG signal input via the IG line connected to itself. For example, the first ECU 51 determines the state of the IG switch 20 based on the IG signal input via the trunk line 10 and the branch line 11. When it is determined that the IG switch 20 is in the on state, the process proceeds to step S16, and when it is determined that the IG switch 20 is in the off state (that is, not in the on state), the process proceeds to step S11. In the example of FIG. 4, the ECU determines that the IG switch 20 is off (that is, not on) after timing t1, as shown in the “switch state detected by the ECU”.

  In step S16 of FIG. 3, the ECU sets the failure counter to 0 (that is, clears). In step S17, the ECU diagnoses (determines and specifies) normality. That is, when the ECU determines that the IG switch 20 is on based on the IG signal input via the IG line connected to itself, the branch lines 11 to 14 connecting the trunk line 10 and itself. Or, it diagnoses that there is no off-fault in its own internal circuit.

  In step S11 of FIG. 3, the ECU determines whether or not a communication frame from another ECU other than itself has been received in order to diagnose an off-failure. For example, the first ECU 51 determines whether or not a communication frame has been received from any one of the second ECU 52 to the fourth ECU 54, which are other ECUs, in order to diagnose an off-failure. If it is determined that a communication frame has been received (communication means), the process proceeds to step S12. If it is determined that a communication frame has not been received, the process shown in the flowchart of FIG. 3 ends (in other words, the process returns to step S10). ).

  As shown in the “communication line” in FIG. 4, the ECU is activated, but when the IG switch 20 is in an OFF state (between timing t1 and t2), the ECU other than itself When off, a communication frame is received. On the other hand, as shown in the “communication line” in FIG. 4, when the ECU is activated and the IG switch 20 is turned on (after timing t2), an on-time communication frame is sent from another ECU other than itself. Will be received. At this time, the ECU may receive the off-time communication frame together with the on-time communication frame.

  Therefore, in step S12 in FIG. 3, the ECU determines whether or not the received communication frame is an on-time communication frame. That is, the ECU confirms the ID of the received communication frame and determines whether or not this communication frame is an on-time communication frame. For example, the first ECU 51 determines whether or not the received communication frame is an on-time communication frame.

  If it is determined that the received communication frame is an on-time communication frame, the process proceeds to step S13. At this time, although the ECU itself recognizes that the IG switch is off based on the IG signal, it has received the on-time communication frame from other ECUs. In other words, there is a contradiction. Therefore, when the ECU determines that the received communication frame is an on-time communication frame, the ECU regards that there is a possibility of an off failure and proceeds to step S13.

  For example, when the first ECU 51 recognizes that the IG switch is turned off and receives an on-time communication frame from any one of the second ECU 52 to the fourth ECU 54 that are other ECUs, the trunk 10 and the first ECU 51 There is a possibility of an off-failure in the branch line 11 that connects the two and the internal circuit of the first ECU 51.

  As shown by the two-dot chain line in “IG switch state detected by ECU” in FIG. 4, the ECU in which the off-failure has occurred detects that the IG switch is on based on the IG signal even at the timing t2. It will not be possible. However, as shown in the “communication line” of FIG. 4, even when the ECU has an off-failure, the on-time communication frame is received from the timing t3.

  On the other hand, if it is determined that the received communication frame is not an on-time communication frame, the processing shown in the flowchart of FIG. 3 ends. At this time, the ECU recognizes that the IG switch is turned off based on the IG signal, and has not received the ON-time communication frame from any other ECU. In other words, there is no contradiction. Therefore, when the ECU determines that the received communication frame is not an ON-time communication frame, the ECU regards that an OFF failure has not occurred, and ends the process shown in the flowchart of FIG. 3 (in other words, returns to step S10).

  In step S13 in FIG. 3, the ECU counts up (plus 1) the failure counter. The failure counter is a counter for diagnosing an off failure. That is, the ECU counts the number of times of receiving an on-time communication frame from another ECU other than itself, although the ECU recognizes that the IG switch is off based on the IG signal. For example, when the first ECU 51 recognizes that the IG switch is off based on the IG signal, the first ECU 51 receives an on-time communication frame from any one of the second ECU 52 to the fourth ECU 54, which are other ECUs. , Count up its own fault counter. That is, as shown in the “OFF failure counter” in FIG. 4, the ECU counts the count value every time it receives the ON-time communication frame from the timing t3 in a state where the IG switch is recognized based on the IG signal. Increase (plus 1).

  In step S14 of FIG. 3, the ECU determines whether or not the counter value of the failure counter (failure counter value) has reached a predetermined value. If it is determined that the failure counter value has reached the predetermined value, the process proceeds to step S15. If it is determined that the failure counter value has not reached the predetermined value, the process shown in the flowchart of FIG. Return to S10).

  In step S15 of FIG. 3, the ECU diagnoses (determines and specifies) an off-fault in the branch lines 11 to 14 connecting the trunk line 10 and itself and in its own internal circuit (failure diagnosing means). That is, when it is determined that the failure counter value has reached a predetermined value, the ECU determines that there is an off failure in the branch lines 11 to 14 that connect the trunk line 10 and itself or in its own internal circuit. For example, the first ECU 51 diagnoses an off-fault in the branch line 11 connecting the trunk line 10 and itself or in its own internal circuit. In other words, the ECU determines that the “off failure determination” in FIG. 4 has reached the timing (timing t4) when the count value started from the timing t3 in the “off failure counter” in FIG. 4 has reached a predetermined value (here, 5 times as an example). As shown in “Result”, it is determined that there is an off-fault.

  As described so far, the ECU (ECU which is a vehicle control device) in the present embodiment is provided in the in-vehicle system 100 and the state of the IG switch 20 determined based on the IG signal (determined by itself). An off-failure diagnosis is performed based on communication frames (an on-time communication frame and an off-time communication frame) output by an ECU other than the ECU itself. Further, the on-time communication frame and the off-time communication frame are not specifically output for diagnosis of the off-fault. That is, the other ECUs are not specially designed to transmit an on-time communication frame or an off-time communication frame in order to diagnose an off-failure.

  Therefore, the ECU (ECU which is a vehicle control device) in the present embodiment performs off-fault diagnosis without changing the configuration (circuit configuration, component addition, processing operation, etc.) of the ECU other than itself. Can do. That is, the ECU can diagnose the off-failure even if the ECU other than itself does not have a configuration that outputs a special signal (for example, an IG signal) for diagnosing the off-failure. .

  In other words, the ECU (ECU which is a vehicle control device) in this embodiment does not have a configuration in which another ECU adds an IG signal to the communication frame (adds information to the communication frame). N / A), off-fault diagnosis can be performed. Furthermore, there is no need to change the circuit or add parts, such as making the signal dual.

  The on-time communication frame and the off-time communication frame are communicated between the ECUs through the same communication line 40 as the communication frame including the wake-up signal. And ECU (ECU which is a vehicle control apparatus) in this embodiment starts with a wake-up signal. Therefore, ECU (ECU which is a vehicle control apparatus) in this embodiment has a communication part (IG terminal, an input circuit, etc.) for performing communication via the communication line 40 without fail. Therefore, it is not necessary to provide a communication unit (for example, an input unit for inputting a detection result of a sensor or the like) in order to diagnose an off-failure.

  As described above, when it is determined that the IG switch 20 is in the OFF state and the ON-time communication frame is received more than a predetermined number of times, the ON-OFF communication frame is identified by diagnosing that there is an OFF failure. By receiving the signal twice, the diagnostic accuracy can be improved (misdiagnosis can be suppressed) as compared with the case of diagnosing that there is an off-failure.

  In the present embodiment, an example in which an off failure is determined when the failure counter value reaches a predetermined value (a predetermined number of times) is employed. However, the present invention is not limited to this. For example, when the YES determination in step S12 continues for a predetermined time (when reception continues for a predetermined time or more), it may be determined that the failure is off. In other words, the ECU (ECU that is a vehicle control device) continues to receive the on-time communication frame from another ECU other than itself even though the ECU recognizes that the IG switch is off based on the IG signal. May be diagnosed as an off-failure when it continues for a predetermined time (Modification 1-1).

  As described above, the diagnosis accuracy can be improved by determining the off-failure when the IG switch is recognized based on the IG signal and received continuously for a predetermined time. (A false diagnosis can be suppressed). That is, it is determined that the IG switch is in the OFF state and the ON-time communication frame is received once, so that the diagnosis accuracy can be improved as compared with the case of diagnosing that there is an OFF failure.

  The present invention is not limited to these. Although the ECU (ECU which is a vehicle control device) recognizes that the IG switch is turned off based on the IG signal, the ECU diagnoses an off-failure when receiving an on-time communication frame from another ECU. You may make it do (Modification 1-2). That is, the ECU may diagnose an off-failure once it receives an on-time communication frame from another ECU even though it recognizes that the IG switch is off based on the IG signal. By doing in this way, time until it diagnoses with an off fault can be shortened.

  In addition, when the ECU (ECU which is a vehicle control device) recognizes that the IG switch is turned off based on the IG signal, the ECU receives an on-time communication frame from a plurality of other ECUs in the other ECU. Alternatively, it may be determined that the failure is off (Modification 1-3). By doing in this way, diagnostic accuracy can be improved. That is, by receiving the on-time communication frame transmitted from one other ECU, the diagnosis accuracy can be improved as compared with the case of diagnosing that there is an off-fault. Therefore, erroneous diagnosis can be suppressed by a communication frame from another failed ECU.

  By the way, as in the prior art, an IG signal transmitted specially for diagnosing an off-fault is used, and when an IG signal is output from a plurality of ECUs, the load on the communication line 40 for diagnosing the off-fault May increase. However, as described above, the on-time communication frame and the off-time communication frame for determining the off-failure are not specifically output for the diagnosis of the off-failure. Therefore, it is possible to suppress an increase in the load on the communication line 40 for diagnosis of an off-failure.

  In vehicles, the number of ECUs connected to the communication line 40 (here, simply referring to an in-vehicle control device) is increasing year by year. Therefore, when the load on the communication line 40 increases, it is necessary to take measures such as increasing the communication line 40 to a duplex system, which leads to an increase in cost. However, in the present invention, an increase in the load on the communication line 40 can be suppressed, so that an increase in cost can also be suppressed.

  The modification 1-3 and the modification 1-1 may be implemented in combination. In this case, when the ECU (ECU that is a vehicle control device) recognizes that the IG switch is off based on the IG signal, the ECU determines each of the on-time communication frames transmitted from the other ECUs. If it continues to be received for more than a certain time, it is diagnosed that there is an off failure. By doing in this way, a diagnostic precision can be improved rather than the case where it implements each separately.

  Moreover, you may make it implement combining the above-mentioned embodiment and the modification 1-3. In this case, when the ECU (ECU that is a vehicle control device) recognizes that the IG switch is off based on the IG signal, the ECU determines each of the on-time communication frames transmitted from the other ECUs. If it is received more than the number of times, it is diagnosed that there is an off-failure. By doing in this way, a diagnostic precision can be improved rather than the case where it implements each separately.

  As described above, the ECU (ECU which is a vehicle control device) cannot perform normal control when the IG route is turned off. Therefore, the ECU (ECU which is a vehicle control device) may determine (estimate) the state of the IG switch 20 based on a communication frame from another ECU after diagnosing an off-failure. And according to this determination (estimation) result, you may make it switch a control content and the communication frame output to the communication line 40. FIG.

  For example, when an ECU (an ECU that is a vehicle control device) diagnoses an off-failure, regardless of the state (determination result) of the IG switch 20 determined based on the IG signal, the IG switch 20 is in an on state. You may make it switch to the control content (control means) (modification 1-4).

  By doing in this way, since ECU (ECU which is a vehicle control apparatus) can perform control in case the IG switch 20 is an ON state, even if the IG path | route has a failure failure, it is preferable. In other words, even when the IG path is in an off-state failure and it cannot be determined that the IG switch 20 is in the on state, when the IG switch 20 is in the on state, control when the IG switch 20 is in the on state can be performed. Therefore, it is preferable.

  In addition, the ECU (ECU which is a vehicle control device) can receive an on-time communication frame when diagnosing an off-failure and switching to the control content when the IG switch is on. When the IG switch 20 disappears, the control content when the IG switch 20 is in the OFF state (control means) may be switched regardless of the state (determination result) of the IG switch 20 determined based on the IG signal (Modification) 1-5).

  By doing in this way, even if ECU (ECU which is a vehicle control apparatus) is the state where the IG path | route has turned off and it has switched to the control content in case the IG switch 20 is in an ON state, When the IG switch 20 is switched from the on state to the off state, it is preferable because the control when the IG switch 20 is in the off state can be performed. That is, even when the state of the IG switch 20 cannot be correctly determined based on the IG signal, when the IG switch 20 is switched from the on state to the off state, control when the IG switch 20 is in the off state can be performed. It is preferable because it is possible.

  An ECU (an ECU that is a vehicle control device) diagnoses an off-failure, receives an off-time communication frame when it is switched to the control content when the IG switch is on, and When the communication frame cannot be received, regardless of the state (determination result) of the IG switch 20 determined based on the IG signal, the control content when the IG switch 20 is in the off state is switched (control means). (Modification 1-6).

  Also by doing in this way, the ECU (ECU which is the vehicle control device) switches to the control content when the IG switch 20 is in the on state in the state where the IG path is in the off failure state. Also, it is preferable that the IG switch 20 is switched from the on state to the off state because control can be performed when the IG switch 20 is in the off state. That is, even when the state of the IG switch 20 cannot be correctly determined based on the IG signal, when the IG switch 20 is switched from the on state to the off state, control when the IG switch 20 is in the off state can be performed. It is preferable because it is possible. Furthermore, by doing in this way, when it becomes impossible to receive an ON-time communication frame due to disconnection of the communication line 40, it is possible to suppress switching to the control content when the IG switch 20 is in the OFF state. .

  As mentioned above, although preferable embodiment of this invention was described, this invention is not restrict | limited to the embodiment mentioned above at all, and various deformation | transformation are possible in the range which does not deviate from the meaning of this invention.

(Second Embodiment)
In the above-described embodiment, the example in which the ECU diagnoses the off-failure is adopted, but the present invention is not limited to this. The ECU in the present invention can also diagnose an on-failure.

  Here, the second embodiment will be described with reference to FIG. That is, the diagnosis of the on-failure by the ECU (ECU which is a vehicle control device) will be described. Note that the configurations of the ECU and the in-vehicle system 100 are the same as those in the above-described embodiment, and thus description thereof is omitted.

  The ECU (ECU which is a vehicle control device) executes the process shown in the flowchart of FIG. 5 at every predetermined time (for example, 5 ms) during startup.

  In step S20 in FIG. 5, the ECU determines whether or not the IG switch 20 is off (determination means). At this time, the ECU determines the state of the IG switch 20 (whether it is on or off) based on the IG signal input via the IG line connected to itself. For example, the first ECU 51 determines the state of the IG switch 20 (whether it is on or off) based on the IG signal input via the trunk line 10 and the branch line 11. When it is determined that the IG switch 20 is off, the process proceeds to step S28, and when it is determined that the IG switch 20 is on (that is, not off), the process proceeds to step S21.

  In step S28, the ECU sets a failure counter to 0 (ie, clears). In step S29, the ECU diagnoses that it is normal (no off failure has occurred). Then, the process shown in the flowchart of FIG. 5 ends (in other words, the process returns to step S20). That is, when the ECU determines that the IG switch 20 is off based on the IG signal input through the IG line connected to the ECU, the branch lines 11 to 14 connecting the trunk line 10 and itself. Or, it is determined that there is no ON failure in its own internal circuit.

  In step S21 in FIG. 5, the ECU determines whether or not a communication frame from another ECU has been received in order to diagnose an on-failure. For example, the first ECU 51 determines whether or not a communication frame has been received from any one of the second ECU 52 to the fourth ECU 54, which are other ECUs, in order to diagnose an on-failure. If it is determined that a communication frame has been received, the process proceeds to step S22. If it is determined that a communication frame has not been received, the process shown in the flowchart of FIG. 5 ends (in other words, the process returns to step S20).

  In step S22 of FIG. 5, the ECU determines whether or not the received communication frame is a communication frame (ON-time communication frame) transmitted only when the IG switch is on. That is, the ECU confirms the ID of the received communication frame and determines whether or not this communication frame is an on-time communication frame. For example, the first ECU 51 determines whether or not the received communication frame is an on-time communication frame.

  If it is determined that the received communication frame is an on-time communication frame, the process proceeds to step S23. At this time, the ECU recognizes that the IG switch is turned on based on the IG signal, and has received the on-time communication frame from other ECUs. In other words, there is no contradiction.

  In step S23, the ECU sets a failure counter to 0 (ie, clears). In step S24, the ECU determines that the vehicle is normal (no on failure has occurred). That is, when the ECU recognizes that the IG switch is on based on the IG signal and determines that the received communication frame is an on-time communication frame, the ECU assumes that no on-failure has occurred, and 5 is terminated (in other words, the process returns to step S20).

  On the other hand, if it is determined that the received communication frame is not an on-time communication frame, the process proceeds to step S25. At this time, although the ECU itself recognizes that the IG switch is on based on the IG signal, it does not receive the on-time communication frame from other ECUs. In other words, there is a contradiction. For example, when the first ECU 51 recognizes that the IG switch is on but has not received an on-time communication frame from any one of the second ECU 52 to the fourth ECU 54, which are other ECUs, There is a possibility of an ON failure in the branch line 11 connecting the 1ECU 51 or in the internal circuit of the first ECU 51. Therefore, if the ECU determines that the received communication frame is not an on-time communication frame, the ECU determines that there is a possibility of an on-failure and proceeds to step S25. At this time, the ECU has not received the on-time communication frame, but has received the off-time communication frame.

  In step S25 of FIG. 5, the ECU counts up (plus 1) the failure counter. The failure counter is a counter for diagnosing an off failure. In other words, although the ECU itself recognizes that the IG switch is turned on based on the IG signal, the number of times of receiving only the off-time communication frame is not received from other ECUs. To count. For example, the first ECU 51 receives an on-time communication frame from any one of the second ECU 52 to the fourth ECU 54, which are other ECUs, even though the first ECU 51 recognizes that the IG switch is turned on based on the IG signal. If only the off-time communication frame is received, its own fault counter is counted up.

  In step S26 of FIG. 5, the ECU determines whether or not the counter value of the failure counter (failure counter value) has reached a predetermined value. If it is determined that the failure counter value has reached the predetermined value, the process proceeds to step S27. If it is determined that the failure counter value has not reached the predetermined value, the processing shown in the flowchart of FIG. Return to S20).

  In step S27 of FIG. 5, the ECU diagnoses an on-failure in the branch lines 11 to 14 that connect the trunk line 10 and itself or in its own internal circuit. That is, when it is determined that the failure counter value has reached a predetermined value, the ECU determines that there is an on failure in the branch lines 11 to 14 that connect the trunk line 10 and itself or in its own internal circuit. For example, the first ECU 51 diagnoses an ON failure in the branch line 11 connecting the trunk line 10 and itself or in its own internal circuit.

  As described so far, the ECU (ECU which is a vehicle control device) in the present embodiment is provided in the in-vehicle system 100 and the state of the IG switch 20 determined based on the IG signal (determined by itself). On-failure diagnosis is performed based on communication frames (an on-time communication frame and an off-time communication frame) output by other ECUs. Further, the on-time communication frame and the off-time communication frame are not specifically output for diagnosis of an on-failure. That is, the other ECUs are not specifically designed to transmit an on-time communication frame or an off-time communication frame in order to diagnose an on-failure.

  Therefore, the ECU (ECU which is a vehicle control device) in the present embodiment can diagnose an on-failure without changing the configuration (circuit configuration, component addition, processing operation, etc.) of other ECUs. That is, the ECU (ECU which is a vehicle control device) in this embodiment does not have a configuration in which other ECUs output a special signal (for example, an IG signal) for diagnosis of an on-failure. On-failure diagnosis can be performed.

  In other words, the ECU (ECU which is a vehicle control device) in this embodiment does not have a configuration in which another ECU adds an IG signal to the communication frame (adds information to the communication frame). No), it is possible to diagnose on failure. Furthermore, there is no need to change the circuit or add parts, such as making the signal dual.

  The on-time communication frame and the off-time communication frame are communicated between the ECUs through the same communication line 40 as the communication frame including the wake-up signal. And ECU (ECU which is a vehicle control apparatus) in this embodiment starts with a wake-up signal. Therefore, ECU (ECU which is a vehicle control apparatus) in this embodiment has a communication part (IG terminal, an input circuit, etc.) for performing communication via the communication line 40 without fail. Therefore, it is not necessary to provide a communication unit (for example, an input unit for inputting a detection result of a sensor or the like) in order to perform an on-failure diagnosis.

  Further, when it is determined that the IG switch 20 is in the on state and the communication frame at the on time cannot be received, and the communication frame at the off time is received more than a predetermined number of times, it is diagnosed that the on failure has occurred. Thus, by receiving the off-time communication frame once, the diagnostic accuracy can be improved (misdiagnosis can be suppressed) as compared with the case of diagnosing that there is an on-failure.

  In the present embodiment, an example in which an on failure is determined when the failure counter value reaches a predetermined value (predetermined number of times) is employed. However, the present invention is not limited to this. For example, when the YES determination in step S22 continues for a predetermined time, it may be determined that there is an on-failure (Modification 2-1). In other words, the ECU (ECU which is a vehicle control device) recognizes that the IG switch is turned on based on the IG signal, but has not received the on-time communication frame from other ECUs and is turned off. It may be determined that an on-failure occurs when a time during which only the hourly communication frame is received continues for a predetermined time (when reception continues for a predetermined time or longer).

  By doing in this way, it is determined that the IG switch 20 is in the on state, and in addition to being unable to receive the on-time communication frame, the off-fault is caused by receiving the off-time communication frame once. The diagnostic accuracy can be improved as compared with the case of diagnosing.

  Further, when the ECU (ECU which is a vehicle control device) recognizes that the IG switch is turned on based on the IG signal, the ECU does not receive the on-time communication frame from the other ECU, and the other ECU When an off-time communication frame is received from a plurality of ECUs in (1), it may be determined that there is an on-failure (Modification 2-2).

  By doing so, it is determined that the IG switch 20 is in the on state and the on-time communication frame cannot be received, and in addition, the off-time communication frame transmitted from one other ECU is used as the communication means. Therefore, the diagnostic accuracy can be improved as compared with the case of diagnosing that there is an on-failure. Further, erroneous diagnosis can be suppressed by a communication frame from another failed ECU.

  By the way, as in the prior art, an IG signal transmitted specially for diagnosing an on-failure is used, and when an IG signal is output from a plurality of ECUs, the load on the communication line 40 for diagnosing the on-failure May increase. However, as described above, the on-time communication frame and the off-time communication frame for determining the on-failure are not specifically output for the diagnosis of the on-failure. Therefore, it is possible to suppress an increase in the load on the communication line 40 for the diagnosis of an on-failure.

  In vehicles, the number of ECUs connected to the communication line 40 (here, simply referring to an in-vehicle control device) is increasing year by year. Therefore, when the load on the communication line 40 increases, it is necessary to take measures such as increasing the communication line 40 to a duplex system, which leads to an increase in cost. However, in the present invention, an increase in the load on the communication line 40 can be suppressed, so that an increase in cost can also be suppressed.

  In addition, you may make it implement combining the above-mentioned 2nd Embodiment and the modification 2-2. In this case, in addition to being unable to receive the on-time communication frame when the ECU (ECU that is the vehicle control device) recognizes that the IG switch is turned on based on the IG signal, a plurality of other ECUs When each of the off-time communication frames transmitted from is received a predetermined number of times or more, it is diagnosed that there is an on failure. By doing in this way, a diagnostic precision can be improved rather than the case where it implements each separately.

  Moreover, you may make it implement combining this modification 2-1 and the modification 2-2. In this case, in addition to being unable to receive the on-time communication frame when the ECU (ECU that is the vehicle control device) recognizes that the IG switch is turned on based on the IG signal, a plurality of other ECUs If each of the off-time communication frames transmitted from is continuously received for a predetermined time or more, it is diagnosed that there is an on failure. By doing in this way, a diagnostic precision can be improved rather than the case where it implements each separately.

  In addition, the ECU (ECU which is a vehicle control device) recognizes that the IG switch is turned on based on the IG signal by itself, but when it cannot receive the on-time communication frame from another ECU, An on-failure may be determined (Modification 2-3). By doing in this way, time until it determines with an on failure can be shortened.

  In addition, the ECU (ECU which is a vehicle control device) recognizes that the IG switch is turned on based on the IG signal and fails to turn on when it cannot receive the on-time communication frame for a predetermined time or more. (Modification 2-4).

  In this way, the determination means determines that the IG switch is in the ON state, and if the ON-time communication frame cannot be received, it is erroneously determined rather than diagnosing that there is an immediate failure. Can be suppressed.

  As described above, the ECU (ECU, which is a vehicle control device) cannot perform normal control when the IG path is turned off. Therefore, the ECU (ECU which is a vehicle control device) may determine (estimate) the state of the IG switch 20 based on a communication frame from another ECU after diagnosing an on-failure. And according to this determination (estimation) result, you may make it switch a control content and the communication frame output to the communication line 40. FIG.

  For example, an ECU (an ECU that is a vehicle control device) diagnoses an on-failure, and the IG switch is in an off state regardless of the state (determination result) of the IG switch 20 determined based on the IG signal. You may make it switch to control content (modification 2-5).

  By doing in this way, even when the IG path has an on failure, it is possible to perform control when the IG switch 20 is in the off state, which is preferable. In other words, even when the IG path is in an on-failure state and it cannot be determined that the IG switch 20 is in the off state, when the IG switch 20 is in the off state, control can be performed when the IG switch 20 is in the off state. Therefore, it is preferable.

  In addition, the ECU (ECU which is a vehicle control device) diagnoses an on-failure and switches to the control content when the IG switch 20 is in the off state. Regardless of the state (determination result) of the IG switch 20 determined based on the above, the control content when the IG switch 20 is in the on state may be switched (Modification 2-6).

  By doing in this way, even if it is a case where it is a case where it is a case where it switches to the control content in case the IG switch 20 is an OFF state in the state where the IG path | route has an on failure, the IG switch 20 switches from an OFF state to an ON state. It is preferable because control when the IG switch 20 is in the ON state can be performed. That is, even in a situation where the state of the IG switch 20 cannot be correctly determined, it is preferable that the IG switch 20 is switched from the off state to the on state because control can be performed when the IG switch 20 is in the on state.

  10 trunk line (IG line), 11-14 branch line (IG line), 20 ignition switch, 30 power supply line, 40 communication line, 51 1ECU, 52 2ECU, 53 3ECU, 54 4ECU, 60 battery, 70 door Open / close switch, 100 in-vehicle system

Claims (15)

A main line that is connected to the communication line together with another control device that transmits different communication frames depending on whether the ignition switch is on or off, and a branch that can be connected to a battery via the ignition switch and a branch connected to the main line A control device for a vehicle that is connected to the branch line in an ignition line including a wire and is operable by being supplied with power asynchronously with the ignition switch,
An input means for inputting an ignition signal indicating an ON state or an OFF state of the ignition switch via the ignition line;
Determination means for determining an on state and an off state of the ignition switch based on an ignition signal input to the input means;
Control means for switching the control content according to the ON state and the OFF state of the ignition switch which is the determination result of the determination means;
Communication means for receiving a communication frame transmitted from another control device via the communication line;
Whether or not at least one of the branch line and the input unit has an off-failure based on a determination result by the determination unit and a communication frame received by the communication unit when power is supplied and in an operable state Fault diagnosis means for diagnosing
When the determination unit determines that the ignition switch is off and the communication unit receives a communication frame transmitted only when the ignition switch is on, the failure diagnosis unit Diagnosing that at least one of the line and the input means is off-fault ,
When the failure diagnosing means diagnoses an off-failure, the control means switches to the control content when the ignition switch is in an on state regardless of the determination result of the determining means. The communication frame transmitted only when the ignition switch is on can be received by the communication means when the switch is switched to the control content when the ignition switch is on. If missing, the determination unit determination result regardless, the ignition switch is a vehicle control device according to claim switch Rukoto the control contents when it is turned off. A main line that is connected to the communication line together with another control device that transmits different communication frames depending on whether the ignition switch is on or off, and a branch that can be connected to a battery via the ignition switch and a branch connected to the main line A control device for a vehicle that is connected to the branch line in an ignition line including a wire and is operable by being supplied with power asynchronously with the ignition switch,
An input means for inputting an ignition signal indicating an ON state or an OFF state of the ignition switch via the ignition line;
Determination means for determining an on state and an off state of the ignition switch based on an ignition signal input to the input means;
Control means for switching the control content according to the ON state and the OFF state of the ignition switch which is the determination result of the determination means;
Communication means for receiving a communication frame transmitted from another control device via the communication line;
Whether or not at least one of the branch line and the input unit has an off-failure based on a determination result by the determination unit and a communication frame received by the communication unit when power is supplied and in an operable state Fault diagnosis means for diagnosing
When the determination unit determines that the ignition switch is off and the communication unit receives a communication frame transmitted only when the ignition switch is on, the failure diagnosis unit Diagnosing that at least one of the line and the input means is off-fault,
When the control means is diagnosed as an off-failure by the failure diagnosis means, the control means switches to the control content when the ignition switch is in an on state regardless of the determination result of the determination means .
The control means is diagnosed as an off-failure by the failure diagnosis means, and when the ignition switch is switched to the control content when the ignition switch is in the on-state, the communication means is also in the off-state of the ignition switch. When the communication frame transmitted is received and the communication frame transmitted only when the ignition switch is on cannot be received, regardless of the determination result of the determination means, the ignition switch is in the off state car dual controller you and switches to the control content. In addition to the fact that the failure diagnosis means determines that the ignition switch is in an OFF state by the determination means and receives a communication frame transmitted only when the ignition switch is in an ON state by the communication means. , when receiving the communication frame a predetermined number of times or more by the communication means, vehicle control apparatus according to claim 1 or 2, characterized that you diagnosed as off-failure. In addition to the fact that the failure diagnosis means determines that the ignition switch is in an OFF state by the determination means and receives a communication frame transmitted only when the ignition switch is in an ON state by the communication means. , if continued to receive the communication frame a predetermined time at the communication means, vehicle control apparatus according to claim 1 or 2, characterized that you diagnosed as off-failure. A main line that is connected to the communication line together with another control device that transmits different communication frames depending on whether the ignition switch is on or off, and a branch that can be connected to a battery via the ignition switch and a branch connected to the main line A control device for a vehicle that is connected to the branch line in an ignition line including a wire and is operable by being supplied with power asynchronously with the ignition switch,
An input means for inputting an ignition signal indicating an ON state or an OFF state of the ignition switch via the ignition line;
Determination means for determining an on state and an off state of the ignition switch based on an ignition signal input to the input means;
Control means for switching the control content according to the ON state and the OFF state of the ignition switch which is the determination result of the determination means;
Communication means for receiving a communication frame transmitted from another control device via the communication line;
Whether or not at least one of the branch line and the input unit has an off-failure based on a determination result by the determination unit and a communication frame received by the communication unit when power is supplied and in an operable state Fault diagnosis means for diagnosing
When the determination unit determines that the ignition switch is off and the communication unit receives a communication frame transmitted only when the ignition switch is on, the failure diagnosis unit Diagnosing that at least one of the line and the input means is off-fault,
In addition to the fact that the failure diagnosis means determines that the ignition switch is in an OFF state by the determination means and receives a communication frame transmitted only when the ignition switch is in an ON state by the communication means. A vehicle control device characterized by diagnosing an off failure when the communication means receives the communication frame a predetermined number of times or more . Wherein, when it is diagnosed and OFF failure by the failure diagnosis means, wherein regardless of the determination result of the determining means, wherein, wherein the switching Rukoto the control contents when the ignition switch is turned on Item 6. The vehicle control device according to Item 5 . In addition to the fact that the failure diagnosis means determines that the ignition switch is in an OFF state by the determination means and receives a communication frame transmitted only when the ignition switch is in an ON state by the communication means. And diagnosing an off-failure when the communication means receives a communication frame transmitted only when the ignition switch is on from a plurality of other control devices. Item 7. The vehicle control device according to any one of Items 1 to 6 . A main line that is connected to the communication line together with another control device that transmits different communication frames depending on whether the ignition switch is on or off, and a branch that can be connected to a battery via the ignition switch and a branch connected to the main line A control device for a vehicle that is connected to the branch line in an ignition line including a wire and is operable by being supplied with power asynchronously with the ignition switch,
An input means for inputting an ignition signal indicating an ON state or an OFF state of the ignition switch via the ignition line;
Determination means for determining an on state and an off state of the ignition switch based on an ignition signal input to the input means;
Control means for switching the control content according to the ON state and the OFF state of the ignition switch which is the determination result of the determination means;
Communication means for receiving a communication frame transmitted from another control device via the communication line;
Whether or not at least one of the branch line and the input unit is on-failed based on a determination result by the determination unit and a communication frame received by the communication unit when power is supplied and in an operable state Fault diagnosis means for diagnosing
When the determination unit determines that the ignition switch is in an ON state and the communication unit cannot receive a communication frame transmitted only when the ignition switch is in an ON state, the failure diagnosis unit Diagnosing that at least one of the line and the input means is on-failed ,
When the failure diagnosing means diagnoses an on-failure, the control means switches to the control content when the ignition switch is in an off state regardless of the determination result of the determining means, and the failure diagnosis The communication means that is transmitted only when the ignition switch is on is received by the communication means when the control is switched to the control content when the ignition switch is off. If the irrespective of the result of the determination by the determining means, vehicle control apparatus according to claim switch Rukoto the control contents when the ignition switch is turned on. A main line that is connected to the communication line together with another control device that transmits different communication frames depending on whether the ignition switch is on or off, and a branch that can be connected to a battery via the ignition switch and a branch connected to the main line A control device for a vehicle that is connected to the branch line in an ignition line including a wire and is operable by being supplied with power asynchronously with the ignition switch,
An input means for inputting an ignition signal indicating an ON state or an OFF state of the ignition switch via the ignition line;
Determination means for determining an on state and an off state of the ignition switch based on an ignition signal input to the input means;
Control means for switching the control content according to the ON state and the OFF state of the ignition switch which is the determination result of the determination means;
Communication means for receiving a communication frame transmitted from another control device via the communication line;
Whether or not at least one of the branch line and the input unit is on-failed based on a determination result by the determination unit and a communication frame received by the communication unit when power is supplied and in an operable state Fault diagnosis means for diagnosing
In addition to the failure diagnosing means being unable to receive a communication frame transmitted only when the ignition switch is turned on by the communication means when the judgment means determines that the ignition switch is turned on. , when receiving a communication frame is also transmitted in the off state of the ignition switch by the communication means, to said that you diagnosed with at least one of which oN failure of the branch line and the input means that car dual-purpose controller. A main line that is connected to the communication line together with another control device that transmits different communication frames depending on whether the ignition switch is on or off, and a branch that can be connected to a battery via the ignition switch and a branch connected to the main line A control device for a vehicle that is connected to the branch line in an ignition line including a wire and is operable by being supplied with power asynchronously with the ignition switch,
An input means for inputting an ignition signal indicating an ON state or an OFF state of the ignition switch via the ignition line;
Determination means for determining an on state and an off state of the ignition switch based on an ignition signal input to the input means;
Control means for switching the control content according to the ON state and the OFF state of the ignition switch which is the determination result of the determination means;
Communication means for receiving a communication frame transmitted from another control device via the communication line;
Whether or not at least one of the branch line and the input unit is on-failed based on a determination result by the determination unit and a communication frame received by the communication unit when power is supplied and in an operable state Fault diagnosis means for diagnosing
In addition to the failure diagnosing means being unable to receive a communication frame transmitted only when the ignition switch is turned on by the communication means when the judgment means determines that the ignition switch is turned on. When the communication means receives a communication frame transmitted even when the ignition switch is off, transmitted from a plurality of other control devices, at least one of the branch line and the input means has an on failure. car dual-use control device shall be the features that you diagnosis and there. In addition to the failure diagnosing means being unable to receive a communication frame transmitted only when the ignition switch is turned on by the communication means when the judgment means determines that the ignition switch is turned on. , when said communication frames is also transmitted during the off state of the ignition switch received more than a predetermined number of times by said communication means, according to claim 9 or 1 0, characterized in that diagnosed as oN failure Vehicle control device. In addition to the failure diagnosing means being unable to receive a communication frame transmitted only when the ignition switch is turned on by the communication means when the judgment means determines that the ignition switch is turned on. , wherein when the at the communication section communication frame is also transmitted in the off state of the ignition switch continues to receive more than a predetermined time, according to claim 9 or 10, characterized in that diagnosed as oN failure Vehicle control device. A main line that is connected to the communication line together with another control device that transmits different communication frames depending on whether the ignition switch is on or off, and a branch that can be connected to a battery via the ignition switch and a branch connected to the main line A control device for a vehicle that is connected to the branch line in an ignition line including a wire and is operable by being supplied with power asynchronously with the ignition switch,
An input means for inputting an ignition signal indicating an ON state or an OFF state of the ignition switch via the ignition line;
Determination means for determining an on state and an off state of the ignition switch based on an ignition signal input to the input means;
Control means for switching the control content according to the ON state and the OFF state of the ignition switch which is the determination result of the determination means;
Communication means for receiving a communication frame transmitted from another control device via the communication line;
Whether or not at least one of the branch line and the input unit is on-failed based on a determination result by the determination unit and a communication frame received by the communication unit when power is supplied and in an operable state Fault diagnosis means for diagnosing
In addition to the failure diagnosing means being unable to receive a communication frame transmitted only when the ignition switch is turned on by the communication means when the judgment means determines that the ignition switch is turned on. The communication means diagnoses that at least one of the branch line and the input means is on-failed when a communication frame transmitted only when the ignition switch is on cannot be received for a predetermined time or more. the car dual controller you. Wherein, when it is diagnosed and ON failure in the failure diagnosis means, wherein regardless of the determination result of the determining means, wherein said ignition switch and said switching Rukoto the control contents when it is turned off Item 14. The vehicle control device according to any one of Items 9 to 13 . The control means is diagnosed as an on-failure by the failure diagnosis means and is switched to the control content when the ignition switch is in an off state, and only when the ignition switch is on in the communication means. when receiving a communication frame to be transmitted, said regardless of the determination result of the determination unit, a vehicle control device according to claim 14, wherein the switching Rukoto the control contents when the ignition switch is turned on .

Images