JPH06214770A - Controller - Google Patents

Abstract

PURPOSE:To analyze a development program by means of a simple procedure without the need for a special device. CONSTITUTION:A control program 1 mentioned by an execution system is constituted by function modules 4A, 4B, 4C, 4D and 4E, and a check module 3 checking the constitution/execution of the function modules 4A-4E. Areas 41 storing a self identification name and areas 43 operating a flag when the execution is terminated are provided for the respective function modules 4A-4E. Areas 31, 32 and 33 recognizing that the prescribed function modules 4A-4E exist by referring to the identification name of the respective function modules 4A-4E, and areas 34 and 35 recognizing the executed flag are provided for the check module 3. The existence of the necessary function modules 4A-4E and the execution of the respective function modules 4A-4E are recognized by the check module 3 in the control program 1.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a control device having a control program analysis function under development and self-analyzing the correctness of a control program.

[0002]

2. Description of the Related Art A new control program is developed by dividing the program into functional modules having a certain signal processing function and combining a plurality of debugged functional modules. In this case, the entire control program is checked by visually inspecting the identification label and link information of each function module described in the source code, but the number of function modules has dramatically increased due to the complexity of control in recent years. There is a limit to visual inspection.

[0003]

Therefore, for the purpose of automatically analyzing the control program under development, for example, Japanese Patent Laid-Open No. 63-317847 discloses an output command in the control program and a related command. It has been proposed to focus on the input command to determine the suitability of the program by logic analysis, but this requires a relatively complicated processing step and requires a special device other than the control device. There was a point.

The present invention focuses on the fact that many control programs are realized by combining a large number of debugged functional modules that are shared with other control programs, and does not require a special device and is simple. An object of the present invention is to provide a control device capable of analyzing a program according to a procedure.

[0005]

To explain the structure of the present invention, as shown in FIG. 1, a control program 1 written in an executable format is provided with a plurality of functional modules 4A and 4B each having a certain signal processing function. , 4C, 4D, 4E and a check module 3 for checking the configuration and execution of these functional modules 4A to 4E. Each of the functional modules 4A to 4E has an area 41 for storing its own identification name and its area. An area 43 for performing a flag operation at the time of execution has been provided, while an area for confirming that the predetermined functional modules 4A to 4E exist in the check module 3 by referring to the identification names of the functional modules 4A to 4E. Three
1, 32, 33 and an area 34 for confirming the executed flag,
And 35 are provided.

[0006]

In the above configuration, the check module 3 in the control program 1 allows the required functional module 4A.
4E and the execution of each of the functional modules 4A to 4E are confirmed, the suitability of the control program can be easily analyzed without requiring a special device other than the control device.

[0007]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An example in which the present invention is applied to engine control of an automobile will be described below. FIG. 1 (a) schematically shows an example of a vehicle engine control program 1 written in an executable form, showing the initial processing and check modules 2 and 3, and ignition, injection, idle, knock, Each functional module 4 required for engine control of input / output interruption
It is composed of A, 4B, 4C, 4D and 4E. The initial processing module 2 performs initial processing of variables in the control program.

Each functional module 4A-4E is shown in FIG.
As illustrated in (C), an area 41 for storing a code indicating the module name Mi, an area 42 for storing a processing program for realizing the function, and a module Mi corresponding to the module Mi when the execution of the processing program is completed. Area 4 for storing the program that resets the executed flag
3 and 3.

The details of the check module 3 are shown in FIG.
The module configuration check program 31
And a module configuration definition table 32 and a module configuration flag area 33 referenced by the check program 31, a module execution check program 34, and a module executed flag area 35 referenced by the check program 34. It also has a warning output program 36.

In the module configuration definition table 32, as shown in FIG. 2, the number i of function modules required to configure the control program, the function module names M1 to Mn and their addresses ADR1 to ADRn, and each function module M1. ~ Pair module name M11 related to Mn
~ Mnl are stored in advance. The pair module names M11 to Mnl are the functional module names M1 to M1.
n is stored. Then, they have a function of sharing data with each other and interlocking with each other to switch control characteristics.

As shown in FIGS. 3 and 4, the module configuration flag area 33 and the module executed flag area 35 are composed of bit areas of a number corresponding to the respective functional modules M1 to Mn.

The operation of the control program 1 having the above structure is performed as follows.

When the power is turned on, the main program shown in FIG. 5 is started, the initial processing module 2 is executed (step 101), variables used in the program,
The flag and I / O port area are initialized.

Subsequently, the check module 3 is activated (step 102) and the module configuration check program 31 is executed (step 103). If the result of the module configuration check is good, each functional module 4A
4E is activated to execute the processing program 42, and predetermined arithmetic control output is performed (step 105). Step 10
If the check result in step 4 is bad, the warning output module 36 is activated (step 106) and an alarm is issued.
Stop the subsequent program execution. The operation of each step will be described in detail below.

First, the details of the module configuration check program 31 executed in step 103 are shown in FIG.
In step 201, the contents of the module configuration definition table 32 are read. Next, at step 202, the module configuration flag area 33 and the module executed flag area 35.
The flag is set to the bit corresponding to the module name read in step 201.

In step 203, the memory is searched based on the contents of the definition table 32, and if the module name Mi is present at the predetermined address ADRi in the program,
The flag of the bit corresponding to the module name Mi in the flag area 33 is reset. This operation is executed for all the addresses ADRi defined in the definition table 32. Thus, in step 204, it is confirmed whether the flag that is still set in the flag area 33 remains, and if it remains, it is determined that the functional module corresponding to the flag is not incorporated in the control program 1. The module name Mi is delivered to the warning output program 36.

In this step 204, the module configuration flag area 33 is searched according to the definition table 32, and it is confirmed whether or not there is a necessary module. For example, first, the flag corresponding to the functional module M1 is confirmed, and then the flags corresponding to the functional modules defined as the pair modules M11 to M11 of the functional module M1 are confirmed. As a result, not only the presence of each functional module is confirmed, but also the presence of a pair module (another functional module) that exhibits a function in association with each functional module is confirmed. Then, while sequentially confirming the presence of each functional module, a warning is issued if the module is absent.

As shown in FIG. 7, the module execution check is performed by interruption at regular time intervals as shown in FIG. 7, and the module execution check program 34 is executed in step 301 to execute the pair programs Mi1 to Mil.
It is confirmed whether or not each functional module Mi to Mn including is executed, and if any of them is not executed, the process proceeds to the warning output program 36 (step 30).
2, 303).

This will be described in detail with reference to FIG. 8. The module name Mi and the pair module names Mi1 to Mil of the module configuration definition table 32 are read (step 401).
The flags of the bits corresponding to the module name Mi and the pair module names Mi1 to Mil in the module executed flag area 35 are confirmed (step 402). Then, while checking the flag area 35 in the order of the definition table 32, if there is a flag that remains set, the functional modules M1 to M1 corresponding to the flag are
Assuming that the executed flag reset program 43 (FIG. 1) in Mn has not been executed, the module name Mi is passed to the warning output program 36.

In the above embodiment, the executable control program does not have to be stored as one file in the read-only memory and may be divided into a plurality of files. Further, it may be properly loaded on the readable / writable memory from an external memory.

Although the above embodiment, particularly FIG. 1 has been described with five functional modules as an example, an engine control program is composed of hundreds of functional modules in an actual device.

[0022]

As described above, according to the analysis apparatus of the present invention, by incorporating the check module in a part of the control program of the execution format, a special apparatus is not required, and the functional module is not misconfigured or executed. It is possible to confirm the function module, and the program development can be performed efficiently and inexpensively.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of a control program in a control device.

FIG. 2 is a memory block diagram showing a configuration of a module configuration definition table.

FIG. 3 is a bit configuration diagram of a module configuration flag area.

FIG. 4 is a bit configuration diagram of a module executed flag area.

FIG. 5 is a flowchart of a main program.

FIG. 6 is a flowchart of a module configuration check program.

FIG. 7 is a flowchart of a module executed check program.

FIG. 8 is a detailed flowchart of a module executed check program.

[Explanation of symbols]

1 Control Program 3 Check Module 31 Module Configuration Check Program (Module Presence Confirmation Area) 32 Module Configuration Definition Table (Module Presence Confirmation Area) 33 Module Configuration Flag Area (Module Presence Confirmation Area) 34 Module Execution Check Program (Execution Flag Confirmation Area) ) 35 module executed flag area (executed flag confirmation area) 4A, 4B, 4C, 4D, 4E functional module 41 code storage area (identification name storage area) 43 executed flag reset program (flag operation area)

Claims (1)

[Claims] 1. A control program written in an executable format comprises a plurality of functional modules each having a certain processing function, and a check module for checking the configuration and execution of these functional modules. Has an area for storing its own identification name and an area for performing a flag operation when it has been executed. On the other hand, the check module must have a predetermined function module by referring to the identification name of each function module. And a region for confirming an executed flag.