GB2125578A

GB2125578A - Self monitoring system

Info

Publication number: GB2125578A
Application number: GB8229105A
Authority: GB
Inventors: Katsunori Oshiage; Akio Hosaka; Akito Yamamoto
Original assignee: Nissan Motor Co Ltd
Current assignee: Nissan Motor Co Ltd
Priority date: 1982-08-16
Filing date: 1982-10-12
Publication date: 1984-03-07

Abstract

A self-monitoring system for an automotive electronic control system such as an engine control system, an electronic anti-skid control system or electronic automatic transmission control system is adapted to check each segment of the electronic control system in order to detect faulty segments. To detect faulty segments, the self-monitor system checks inputs and outputs of the electronic control system. The checked data is stored in a memory which is not erased when the power supply is turned off. The self- monitoring system is associated with another automotive microcomputer which includes a display unit. The another automotive microcomputer is adapted to display the results of the checking operation of the self- monitoring system in response to a display request manually inputted from a manual unit to display identification of the fault segment and/or error condition thereof. The monitor can also be associated with a fault indicator, such as an LED, which is responsive to detection of error in any of the segments to turn on. <IMAGE>

Description

SPECIFICATION Electronic device with self-monitor for an automotive vehicle The present invention relates generally to an electronic device for an automotive vehicle, which device includes an electronic control device, various digital indicators, various vehicle condition sensors and so forth. More particularly, the invention relates to the electronic device with a self-monitoring capability for checking input and output conditions of respective electronic elements or segments.

Recently, it has become popular to employ a microcomputer in automotive vehicles to control vehicle operations such as engine control, anti-skid control, orto display various vehicle information such as warnings of abnormal conditions of vehicle devices. On the other hand, the automotive vehicle contains various devices such as the ignition system and the audio system which act as sources of noise which can possibly cause microcomputer failure.

Furthermore, due to rather hard vibrations applied to the vehicle, the microcomputer itself or sensors serving as input devices can produce erroneous signals.

In the case of engine control, failure of the microcomputer operation influences fuel economy, engine performance and/or drivability and soon. Furthermore, in the worst case, failure of the microcomputer may cause uncontrollable engine operation resulting not only in damaging of engine but also in serious danger to vehicle occupants.

In order to prevent the automotive electronic device from malfunctioning, it is, therefore, necessary to sequentially or continuously check each of the functions of the microcomputer to detectfailure or error therein.

Conventionally, there are various self-monitoring automotive electronic devices. For example, British Prepublication No.2,035,633, published on June 18, 1980 discloses a malfunction-preventing system fora microcomputer system which detects an abnormal condition in the program execution to produce an alarm or reset signal to automatically restart the computer. The malfunction-preventing system isapplicable to automotive engine control wherein the microcomputer is capable of returning to normal operation upon detecting a malfunction of a program for fuel parameter calculation, thereby keeping the automotive engine control in order.In addition, British Prepublication 2,046,964, published on November 19, 1980 and U.S, Patent No.4,339,801, issued on July 13, 1982, disclose an automatic control system for an automotive vehicle employing a microcomputer. In the control system, various check programs for checking each functional areas of the microcomputer and sensors for inputting control parameters have been provided to detect fault in any of these functionals areas.

Furthermore, an external check system for factory use has been disclosed in Japanese Patent Prepublication No. 56-141534 published on November5,1981. In this Japanese Patent Prepublication, there is disclosed an elecronic engine control system with a checking unit for sensors and actuators. The checking unit utilizes the microcomputer as a control unit and is releasably connected to the latter.The system comprises an engine assembly including an air intake, a throttle valve, an intake manifold, exhaust system and a combustion chamber, a sensor means determining an engine operating parameter and generating a sensorsignal indicative of the determined engine operating parameter, a control means processing the sensor signal and generating a control signal corresponding to the engine operating parameter represented by the sensor signal, an actuator responsive to said control signal to control the ratio of energized period and deenergized period depending on the duty cycle of said control signal, a check unit cooperative with the control means for generating a command which causes the control means to affect the checking operation, the check unit including a selector means for selecting an item to be checked, which selector means is manually operable to cause the control means to affect the checking operation for the selected item, and a display means incorporated in the check unit for displaying the result of the checking operation.

The present invention is to improve the convenience of checking of these previously developed automotive microcomputer monitor systems. One particularfeature of the present invention is that the self-monitoring system for the automotive electronic control system is associated with another microcomputer system with a display unit for displaying the results of the check operation.

Therefore, it is an object of the present invention to provide a self-monitoring system for an automotive electronic control system, associated with another microcomputer system including a display unit in orderto conveniently indicate faulty segments and errant conditions on the display.

In order to accomplish the above-mentioned and other objects, there is provided a self-monitoring system for an automotive electronic control system such as an engine control system, an electronic anti-skid control system of electronic automatic transmission control system, which self-monitoring system is adapted to check each segment of the electronic control system in order to detect faulty segments. To detect faulty segments, the self-monitoring system checks inputs and outputs ofthe electronic control system. The checked data is stored in a memory which is not erased when the power supply is turned off.The self-monitoring system is associated with another automotive microcomputerwhich includes a dispiay unit The other automotive microcomputer is adapted to display the results of the checking of the selfmonitoring system in response to a display request manually inputted from a manual unit to identifythe faulty segments and/or errant conditions. The self monitor is also associated with a fault indicator which is responsive to detection of error in any of the segments to turn on.

Fig. is a schematic block diagram of the first embodiment of the self-monitoring system according to the present invention; Figs. 2 to 4show respectively indicators to be applied in the self-monitoring system of Fig. 1; Fig. 5 is a schematic block diagram of the second embodiment of the self-monitoring system of the present invention; Figs. 6A and 6B are overall illustrations of an electronic engine control system associated with a vehicle information system including another microcomputer; Fig. 7 is a block diagram of the electronic control system of Fig. 6; Fig. 8 is a chart of memory addresses used to store results of check operation in the self-monitoring system of Fig. 7; Fig. 9 is a timing chart for the check result signals of the memoryaddresses of Fig. 8;; Fig. is a schematic circuit diagram of an engine coolant temperature sensor in the electronic engine control system of Fig. 6; Fig. 11 is a flowchart of a engine coolant temperature sensor check program to be executed in the electronic engine control system; Fig. 12 is a schematic block diagram of the vehicle information system of Fig. 6; Fig. 13 is a schematic block diagram of the third embodiment and self-monitoring system of the present invention; and Fig. 14 is a schematic block diagram of the fourth embodimentofthe seif-monitoring system of the present invention.

In the embodiment shown in Fig. 1, the electronic device generally comprises an engine control system 1000 and an associated vehicle information system 2500. The engine control system 1000 includes various sensors and detectors such as an engine speed sensor,an air flow meter, and various temperature sensors, for providing control parameters, a control unit and actuators forcontrolling various engine operations such as fuel metering, idle airflow, and spark ignition timing. The engine control system further includes a fault monitor for detecting faults in the control system. The fault monitor checks the operation of the control unit and the inputs from the sensors.The results of the check operation in the fault monitorare conducted to a non-volatile memory 1450 which is associated with the engine control system 1000. The check operation results are also fed to a display 1900 for control system fault indication through a data line 2022. On the other hand, the vehicle information system 2500 in the shown embodiment is adapted to compute travelling distance, travelling time, average vehicle speed and so on in order to display information related to the cu rrentvehicle trip. The vehicle information system 2500 is associated with an external input unit 2540 such as keyboard and a display 2520 for information display. The vehicle information system 2500 is further associated with a non-volatile memory 2530 for storing the computed results.

In the shown embodiment, the non-volatile memories may be Metal Nitride Oxide Silicon (MNOS), Erasable Programable ROM (EPROM) or CMOS. In addition, the display can comprise various elements for indicating orwarningwhen the system or sensors malfunctions. Figs. 2 to 4 show examples of the display 1900.

In Fig. 2, a light-emitting diode 1902 is used as an indicator in the display. The LED 1902 is connected to the fault monitor in the engine control system 1000 through the data line 2022 and via a resistor R1 and transistor Try. the transistor Tr1 is turned on in response to a fault signal which is produced by the fault monitorwhen the control unitora sensor malfunctions. By turning on transistorTr1, power Vcc is applied to the LED 1902 which emits an indication light. Fig. 3 shows another example in which an indicator lamp 1920, a relay switch 1910 and a transistorTr2 constitute the display 1900. As in the foregoing example, the transistor Tr2 is connected to the fault monitor in the engine control system 1000 via the data line 2022 and a resistor R3.The transistor is activated by the fault signal. This way, the relay switch 1910 is activated to apply powerVcsto the lamp 1920.

The other example is shown in Fig. 4, in which a buzzer 1930 is used for fault indication. The buzzer 1930 is activated in conjunction with the transistorTr3 which is responsive to the fault signal from the fault monitor.

Returning to Fig. 1,the engine control system 1000 and the vehicle information system 2500 are connected to each other via a data transmission line 2600.

The vehicle information system 2500 produces a read command when a read request is inputted to the input unit. The read command is fcd to the engine control system through the data trag1smission line 2600 to read the data out of the non-volatile memory 1450.

The read request is inputted to the input unit when the display 1900 indicates an error in the engine control system 1000.

The data from the non-volatile memory 1450 is transferred to the vehicle information system 2500 via the fault monitor in the engine control system 1000 and the data transmission line 2600. The vehicle information system 2500 distinguishes which sensor or element of the control unit in the engine control system is malfunctioning. Based on the detection of the faulty element or sensor, the vehicle information system 2500 feeds a fault display signal to the display 2520. Therefore, according to the identification by the fault display signal and depending on the fault display signal value, the display 2520 indicates the faulty sensor or element and the degreeoferrortherein.

It should be appreciated that the fault monitor outputs data in response to the read command and holds the check program results until the next read command is received. In addition, the fault monitor connected in this mannerto the vehicle information system according to the present invention is applicable not only for the foregoing engine control system but also for electronic control systems for automatic power transmission orforanti-skid control and so forth.

Referring to Fig. 5, there is shown a second embodiment in which a plurality of digital or electronic control systems 2700,2800... are connected to the vehicle information system 2500. As shown in Fig. 5, respective digital control systems 2700,2800... are connected to the vehicle information system 2500 via respective data transmission lines 2610,2620... and have non-volatile memories 2710,2810... In addition, the digital control systems 2700,2800... are respectively connected to a fault display or indication 1900 via data lines 2720,2820... and via an OR gate 940.

Similarlyto the foregoing first embodiment, each of the digital control systems 2700,2800... includes a fault monitorfor detecting faults in one of the elements orsegments thereof and producing a fault indication signal to be fed to the fault display 1900 via the OR gate 1940. The fault monitor also feeds check data to the non-volatile memory 2710, 2810.. .for storage. This way, the fault display 1900 indicates that some part of one of the digital control systems is malfunctioning. The input unit 2540 is adapted to input a request for display on the display 2520 of information about faults in the digital control system in the mannersimilarto the foregoing first embodiment.

Here, the electronic control system of the present invention will be illustrated in greater detail with reference to Figs. 6 and 7. In Fig. 6, there is illustrated the electronic engine control system, socalled Electronic Concentrated Control System (ECCS) for a 6-cylinder reciprocating engine known as Datsun L-type engine. In the shown control system, fuel injection, spark ignition timing, exhaust gas recirculation rate and engine idling speed are all controlled.

Fuel pressure is controlled by controlling fuel pump operation.

In Fig. 6, each of the engine cylinders 12 of an internal combustion engine 10 communicates with an air induction system generally referred to by reference numeral 20.The air induction system 20 comprises an air intake duct 22 with an aircleaner24forcleaning atmospheric air, an airflow meter 26 provided downstream of the air intake duct 22 to measure the amount of intake air flowing therethrough, a throttle chamber 28 in which is disposed a throttle valve 30 cooperatively coupled with an accelerator pedal (not shown) so as to adjust the flow of intake air, and an intake manifold 32. The air flow meter 26 comprises a flap member25 and a rheostat 27. the flap member 25 is pivotably supported in the air intake passage 20 so that its angular position varies according to the air flow rate.Specifically, the flap member 25 rotates clockwise in Fig. 6 as the airflow rate increases.The rheostat 27 opposes the flap member 25 and generates an analog signal with a voltage level proportional to the intake air flow rate. The rheostat 27 is connected to an electrical power source and its resistance value is variable in correspondence to variation of the angular position of the flap member 25 depending in turn on variation of the air flow rate.

A throttle angle sensor 31 is associated with the throttle valve 30. The throttle angle sensor 31 comprises a full throttle switch which is turned on the throttle valve is open beyond a given open angle and an idle switch which is turned on when the throttle valve is open less than a minimum value.

Fuel injection through the fuel injectors 34 is controlled by an electromagnetic actuator (not shown) incorporated in each fuel injector. The actuator is electrically operated by the fuel injection control system which determines fuel injection quantity, fuel injection timing and soon in correspondence to engine operating conditions determined on the basis of measured engine operation parameters such as engine load, engine speed and soon. It should be noted that, although the fuel injector 34 is disposed in the intake manifold 32 in the shown embodiment, it is possible to locate it in the combustion chamber 12 in a per se well known manner.

An idle air intake passage 44 is provided in the air induction system 20. One end 46 of the idle air intake passage 44 opens between the airflow meter 26 and the throttle valve 30 and the other end 48 opens downstream of the throttle valve 30, nearthe intake manifold 32. Thusthe idle air intake passage 44 bypasses the throttle valve 30 and connects the upstream side of the throttle valve 30 to the intake manifold 32. An idle air control valve, generally referred to by reference numeral 50, is provided in the idle air intake passage44.The idle aircontrol valve 50 generally comprises two chambers 52 and 54 sepa- rated by a diaphragm 56.The idle air control valve 50 includes a poppet valve 58 disposed within a port 57 in a mannerthat it is movable between two position, one opening the valve to establish the communication between the respective upstream and downstream portions 43 and 45 of the idle air intake passage 44 and the other closing the valve to block the communica tiontherebetween.Theidleairintake passage 44 is thus separated by the idle air control valve 50 into two portions 43 and 45 respectively located upstream and downstream of the port 57 of the idle air control valve.

The poppet valve 58 has a stem 60 which is secured to the diaphragm 56 so as to cooperatively move therewith. The diaphragm 56 is biased downwards in the drawing, so as to release the poppet valve 58 from a valve seat 62, by a helical compression coil spring 64 disposed within the chamber 52 of the valve means 50.

Thereby, the idle air control valve 50 is normally opened, and normally communicates the portions 43 and 45 of the idle air intake passage 44 to one another, via its valve port 57.

The chamber 54 of the idle control valve 50 is open to the atmosphere. On the other hand, the chamber 52 ofthe idle air control valveSO communicates through a vacuum passage 67 with a pressure regulating valve 68 serving as the control vacuum source. The pressure regulating valve 68 is separated generally into two chambers 66and70 bya diaphragm 72. The chamber 66 of the pressure regulating valve 68 also communicates with the downstream side of the throttle valve 30 through the vacuum passage 69 so as to reflect the level of the intake vacuum. The chamber70 is open to the atmosphere ion a persewell known manner.Tothe diaphragm 72 is secured a valve member 76 which opposes a valve seat 78 provided at the end of the passage 69. In the chambers 66 and 70 there are respectively disposed helical compression springs 71 and 73. The position at which the springs 71 and 73 are generally equal spring pressure is referred to as the neutral position ofthe diaphragm 72. Itwill be noted that the chamber 66 can also be connected with a exhaust-gas recirculation (EGR) rate control valve 116 which recirculates a fraction of the exhaust gas flowing through an exhaust gas passage and exhaust gas recirculation passage to the intake manifold 32.

The diaphragm 72 is moved upwards or downwards by the change of balance between the vacuum in the chamber 66 and the atmospheric pressure introduced into the chamber 70. By this movement of the diaphragm 72, the valve member 76 is moved towards and away from the valve seat78.

Anotherchamber80 is also defined in the control valve 68, which chamber 80 communicates with the chamber 66 through a passage 82. The passage 82 is connected with the chamber 52 of the idle air control valve 50 through a control vacuum passage 84. On the other and, the chamber 80 also communicates with the air intake passage 20 upstream of the throttle valve 30 through a passage 86 so as to be exposed to atmospheric air. The chamber 80 is partitioned by a diaphragm 88 on which a magnetic valve member 90 is secured. The magnetic valve member 90 opposes a valve seat 92 formed at the end of the passage 82.

Also, the magnetic valve member 90 opposes an electromagnetic actuator 94, the duty cycle of which is controlled by a control pulse signal generated by a controller 100. Depending on the amount of atmospheric air introduced into the passage 82 from the chamber80, which is determined by the duty cycle of the electromagnetic actuator 94 which in turn is determined by the duty cycle of the control pulse signal, the control vacuum for controlling the opening degree of the valve member 58 of the idle air control valve 50 is regulated and supplied via the control vacuum passage 67.

Spark ignition plugs 99 are inserted into respective engine cylinders 12 to effect spark ignition at a controlling timing. Each ignition plug 99 is connected to a distributor 98 which receives high voltage power from an ignition coil 96. The distributor 98 is controlled bya spark advancer which advances or retards the spark ignition timing depending on engine operating conditions.

An exhaust system for the engine exhaust gas comprises an exhaust manifold 100, an exhaust duct 102, an exhaust gas purifier 104,a muffler 106 and a exhaustvent 108. The exhaust manifold 100 opens toward the engine cylinders to draw engine exhaust gas therefrom. The exhaust duct 102 communicates with the exhaust manifold 100 and includes the exhaust gas purifier 104 and the muffler 106. In the shown embodiment, the exhaust gas purifier 104 comprises a purifier housing 110 and a three-way catalytic converter 112 disposed within the purifier housing 110. The three-way catalytic converter 112 oxidizes monoxide carbon CO and hydrocarbons HC and reduces oxides of nitrogen NOx.

An exhaust gas recirculation passage 114, which is referred hereinafter as the EGR passage is connected to the exhaust duct 102 upstream of the exhaust gas purifier 104. The EGR passage 114 communicates with the intake manifold 32 via an exhaust gas recirculation rate control valve 116 which is hereinafter referred as the EGR control valve. The EGR control valve 116 generally comprises a valve member 118 with a valve seat 120 which is provided at the end of the EGR passage 114 adjacent the intake manifold 32. The valve member 118 is incorporated with a vacuum actuator 122 and is cooperatively connected with a diaphragm 124 of the vacuum actuator 122 via a stem 126. The diaphragm 124 divides the interior of the vacuum actuator 122 into two chambers 128 and 130.

The chamber 128 communicates with the EGR pas sage ll4via a passage l32andthechamberl30 communicates with the regulating valve 68 via a control vacuum passage 134. A set spring 133 for biassing the diaphragm 124 is disposed within chamber 130. The control vacuum passage 134 is connected to a passage 136 connecting the vacuum chamber 66 with a chamber 138. One end of the passage 136 faces a valve member 140 secured on a diaphragm 142. A valve seat 143 is provided at the end of passage 136 to allow the valve member 140 to selectablyseal passage 136. The valve member 140 has a stem portion 144 inserted into an electromagnetic actuator 146.

The duty cycle of the electromagnetic actuator 146 is controlled to move the valve member 140 with respect to the valve seat 143 in response to a control signal generated by a controller to be described later.

According to the instantaneous position of the valve member 140, intake air is admitted to the passage 136 via the passage 86 at a controlled rate. The intake air admitted into the passage 136 is mixed with the intake vacuum admitted from intake passage 20 downstream of the throttle valve 30 via the vacuum induction passage 69 into the vacuum chamber 66, so as to produce the control vacuum. The control vacuum thus produced is conducted to the chamber 130 of the actuator 122 via the control vacuum passage 134 to control the operation of the EGR control valve 116. Thereby, the exhaust gas is admitted into the intake manifold art a controlled rate.

An air regulator 150 is provided near the throttle chamber28 for regulating the intake air flowing through the throttle chamber. Also, a carbon canister 152 is provided. The carbon canister 152 retains hydrocarbon vapor until the canister is purged by air via the purge line 154to the intake manifold when the engine is running. When the engine is idling, the purge control valve 156 is closed. Only a small amount of purge airflows into the intake manifold through the constant purge orifice As the engine speed increased, and the ported vacuum raises higher, the purge control valve 156 opens and the vapor is drawn into the intake manifold through both the fixed orifice and the constant purge orifice. The carbon canister 152 can trap hydrocarbons due to the chemical action of the charcoal therein.

As shown in Fig. 6, the controller 1001 generally comprises a microcomputerand controls a fuel injection system, a spark ignition system, an EGR system and engine idling speed. The controller 1001 is connected to an engine coolant temperature sensor 220. The engine coolant temperature sensor 220 is usually disposed within a coolant chamber 222 in an engine cylinder block224in orderto measure the engine coolanttemperature. The engine coolant temperature sensor 220 produces an engine coolant temperature signal Tw indicative of the measured engine coolant temperature.The engine coolant temperature signal Tw is an analog signal with a voltage value proportional to the determined engine coolant temperature and is converted into a digital signal by a shaping circuit 1100 to adapt it for use by the digital controller 1001.

Generally speaking, the engine coolant temperature sensor 220 comprises a thermistor fitted onto a thermostat housing 226 provided in the coolant circulation circuit.

A crank angle sensor 230 is also connected to the controller 200. The crank angle sensor 230 generally comprises a signal disc 232 secured to a crank shaft 234 for rotation therewith, and an electromagnetic pick-up 236. The crank angle sensor 230 produces a crank reference angle signal and a crank position angle signal. As is well known, the crank reference angle signal is produced when the engine piston reaches the top dead center and the crank position angle signal is produced pera given crank rotation angle, e.g., per 1 degree of crank rotation.

A transmission neutral switch 240 is connected to the controller 200. The transmission neutral switch 240 is secured to the transmission 242 to detect the neutral position thereof and produces a neutral signal when the transmission is in the neutral position.

Also, a vehicle speed sensor 250 is connected to the controller via a vehicle speed counter 204. The vehicle speed sensor 250 is located near a vehicle speed indicator 252 and produces a pulse signal as a vehicle speed signal having a frequency proportional to the vehicle speed.

In the exhaust duct 102, there is provided an exhaust gas temperature sensor 256 in the exhaust gas purifier housing 210. the exhaustgas temperature sensor 256 determines the exhaust gas temperature and produces an analog signal as an exhaust gas temperature signal, which has a voltage value proportional to the determined exhaust gas temperature. The exhaust gas temperature signal is supplied to the controller 200 via the multiplexer 205 and the analog-digital converter 206 in which the exhaust gas temperature signal is converted into a digital signal suitable for use by the microcomputer 207. The digital signal indicative of the exhaust gas temperature has a frequency corresponding to the voltage value of the exhaust gas temperature signal.On the other hand, an exhaust gas sensor 254 such as oxygen sensor, hereinafter simply referred as the 02 sensor 254. is provided in the exhaust duct 102 upstream of the opening of the EGR passage 114. The 02 sensor 254 determines the concentration of oxygen in the exhaust gas. The output of the 2 sensor goes high when the determined oxygen concentration is more than the ratio 1:1 in relation to the other exhaust gas components and goes lowwh'en the oxygen concentration is less than the ratio 1:1. The output of the 02 sensor is inputted to the microcomputer 207 via the multiplexer205andthe analog-digital converter 206 as a A-signal.

Further, the air flow meter 26 is connected with the controller 200. The reostad 27 of the air flow meter 26 outputs an analog signal having a signal value proportional to the determined intake airflow rate.

The throttle angle sensor 31 is also connected with the microcomputer 207 to feed the outputs of the full throttle switch and the idle switch.

As shown in block form in Fig. 6, the microcomputer 207 further connected with an air-conditioner switch 260, a starterswitch 262, an ignition switch 263 and a battery voltage sensor 264. The air-conditioner switch 260 turns on when the air-conditioner is in operative position. Also, the starter switch 262 is turned on when the starter is operating. The battery voltage sensor 264 determines the vehicle battery voltage and produces an analog signal having signal value proportional to the determined battery voltage. The battery voltage signal is fed to the microcomputer 207 via the multiplexer 205 and the analog-digital converter 206.

In the shown embodiment, the controller 200 controls the fuel injection amount and timing, the spark ignition timing, EGR rate and engine idling speed.

The O2sensorsignal from the 02 sensor 254 is used to control the fuel injection quantity under stable engine conditions as determined with reference to the engine speed from the engine speed counter 203, the throttle valve angle position detected by the throttle angle sensor31, the vehicle speed from the vehicle speed counter 204 and soon. Under stable engine conditions, the fuel injection quantity is feedback controlled on the basis of the 02 sensor signal so that the air/fuel ratio can be controlled to the stoichiometricvalue.Thismethodoffuelinjectioncontrol iscalled A-control. If the engine is running under unstable conditions, the fuel injection quantity is generally determined on the basis of engine speed and intake air flow rate, the latter of which can be replaced by intake vacuum pressure downstream of the throttle valve.

Under unstable engine conditions, the basic fuel injection quantity determined on the basis of engine speed and airflow rate is corrected according to other parameters such as air-conditioner switch position, transmission gear position, engine coolanttemperature and soon.

The spark ignition timing is generally controlled on the basis of engine speed, airflow rate, engine coolant temperature and soon, which effectto varying degrees the advance and retard of the spark advance.

The EGR control is effected on the basis of engine speed, engine coolant temperature, ignition switch position and battery voltage. Based on the engine speed and a basic fuel injection quantity determined according to engine speed and engine load, the recirculation rate of the exhaust gas is determined.

The duty cycle of the EGR control valve is thus controlled in accordance with the determined recirculation rate.

The idle engine speed is controlled predominantly on the basis of engine coolant temperature and engine load condition. Under relatively cold engine conditions, the engine speed is maintained at a predetermined value, determined with reference to the engine coolant temperature, resulting in fast idle operation. In the normal temperature range, the engine speed is feedback-controlled on the basis of the difference between the actual engine speed and a reference engine speed determined on the basis of engine temperature, engine load condition and other parameters.

As shown in Fig. 6A and 6B, the controller 1000 also includes a fault monitor 1002. In practice, the fault monitor 1002 is a program stored in a memory 1004 and executed in a central processing unit (CPU) 1006.

The controller 1000 is connectable with an external check unit 2000 via a check connector 2010. The check unit 2000 signals the controller 1000 to make the fault monitor operative in order to check a series of check items identified by inputs. The external check unit 2000 has been illustrated in Japanese Patent Prepublication No.56-141534 published November 5,1981.

Disclosure in this Prepublication is hereby incorporated by reference. The controller 1000 is also connected to the vehicle information system 2500 via a connector2510.

The fault monitor 1002 of the controller 1000 is connected to a fault indicator 1008 via line 180. The fault monitor 1002 produces a fault signal S( when an error occurs in any one of the check items. The fault indicator turns on in response to the fault signal Sf to indicate malfunction of the engine control system. The fault monitor 1002 is associated with the non-volatile memory 1450 as set forth previously. Upon execution of the check program, check data from a series of check items are stored in the non-volatile memory 1450.When the fault indicator 1008 is turned on, the input unit 2540 of the vehicle information system generates and output the read requestcommand to the engine control system in order to read the check data out of the non-volatile memory 1450. On the basis of the retrieved check data, the vehicle information system 2500 feeds the fault display signal to the display 2520 in order to identify the specific faulty segment and error condition on the display.

Fig. 7 shows the detail of the controller 1000 of Fig.

6. The crank angle sensor 230, the vehicle speed sensor 250. the throttle angle sensor 31, the airconditioner switch 260, the transmission neutral switch 240, the starter switch 262, the ignition switch 263, the airflow meter, 26, the engine coolant temperature sensor 220, the exhaust gas sensor 254.

the exhaust gas temperature sensor 256, the battery voltage sensor264 are all connected to an input interface 1200 of the digital controller 1000 via a signal shaping circuit 1100. The shaping circuit 1100 eliminates noise in the sensor signals, absorbs surge voltage and shapes respective sensorsignals. The interface 1200 includes a crank reference signal counter, an engine speed counter, a vehicle speed counter and analog-to-digital (AID) converter with a multiplexer.

The crank reference signal counter and the engine speed counter are both connected to the crank angle sensor 230 to receive therefrom the crank reference angle signal and the crank position angle signal respectively. The vehicle speed counter is adapted to count the pulses of the vehicle speed sensor signal to produce a digital value representative of the vehicle speed. The air flow meter 26, the engine coolant temperature sensor 220, the exhaust gas sensor 254, the exhaust gas temperature sensor 256, the battery voltage sensor 264 all produce analog signals and are connected to the analog-to-digital converter so that the corresponding analog signals can be converted to corresponding digital signals suitable for use in the digital controller 1000.

The interface 1200 further includes a clock gener atorforcontrolling interface operations on a time sharing basis, and a register for temporarily storing the inputted sensor signal values.

As usual, the digital controller 1000 includes a central processing unit (CPU) 1300, a memory unit 1400 including random access memory (RAM) 1430 and programmable read-only memory (PROM) 1420, and an output interface 1500. As shown in Fig. 7, the memory unit 1400 also includes non-volatile memory 1450, a holding memory 1440 and a maskable ROM 1410. the CPU 1300 is connected to a clock generator including a crystal oscillator 1310 forcontrolling CPU operation on an incremental time basis. The CPU 1300 is also connected to each segment of the memory unit 1400, the register of the interface 1200 and the output interface 1500 via bus line 1320. the CPU 1300 executes programs stored in the maskable ROM 1410 and the PROM 1420 with input data read out from the register in the interface 1200.The results of execution of the programs are transferred to the output interface 1500 through the bus line 1320 for output.

As set forth previously, the maskable ROM 1410 holds predetermined programs and initial program data. The PROM 1420 also stores programs and program data which are chosen initially depending upon the model of the vehicle, the type of engine. The RAM 1430 can renewably store data during execution of the programs and hold the results to be outputted.

The contents of the RAM 1430 are cleared when power is turned off via the ignition switch. Temporary data to be stored even while the power is off are stored in the holding memory 1440. As stated previously, the non-volatile memory 1450 also stores data for the fault monitor. The contents of the non-volatile memory 1450 are maintained even if the ignition switch is turned off.

The controller 1000 also includes an operation timer circuit 1350 forcontrolling arithmetic operation, execution of programs and initiates interrupts of the CPU. The operation timer 1350 includes a multiplyer 1351 for high-speed arithmetic operation, an interval timer for producing interrupt requests and a free-run counter which keeps track of the transition intervals between one engine control program and another in the CPU 1300 and the starting period of execution mode, so as to control the sequential execution of a plurality of control programs.

The output interface 1500 includes an output registerwhich temporarily stores the output data and a signal generator which produces control signals eitherwith duty cycles defining the results of execution of the control programs in the CPU 1300 or with on/off switching characteristics.

The signal generator of the output interface is connected to a drive circuit 1600. The drive circuit 1600 is a kind of amplifierfor amplifying the output signals from the output interface and supplying the control signals to the actuators, such as fuel injectors 34, the actuator 94 for the idling speed control valve, and the acutator 146 for EGR control valve. The drive circuit 1600 is also connected to the display or indicator 1900 for fault indication, the external check unit 2000 and the vehicle information system 2500. The drive circuit 1600 is connected to the external check unit 2000 via the connector 2010 and data transmission lines 2023, 2022 and 2026.On the other hand, the drive circuit 1600 is connected to the vehicle information system 2500 via the connector 2510 and the data transmission lines 2521, 2522and 2523.

A back-up circuit 1700 is connected to the shaping circuit 1100 to receive data therefrom. In practice, the back-up circuit 1700 is connected to data lines to receive the crank reference angle signal, the engine temperature signal, starter switch onloffsignal and the throttle valve close signal. In turn, the back-up circuit 1700 is connected to the data lines 1755, 1752 and 1751 via data lines 1713,1712,1711 and 1701 and a switching circuit 1750 which is, in turn, connected to the output interface 1500 via data lines 1515,1512 and 1511. On the other hand, the drive circuit 1600 is connected via the actuator line 2026 to back-up circuit 1700. The back-up circuit 1700 is responsive to the fault indication signal from the drive circuit 1600 to produce a switching signal.The switching circuit 1750 normally establishes communication between the data lines 1513,1512 and 1511 and the lines 1755,1752 and 1751 for normal engine control operation. The switchiing circuit 1750 is responsive to the switching signal from the back-up circuit 1700 via the data line 1701 to connect the data lines 1713,1712 and 1711 with the data lines 1755,1752 and 1751 to control the fuel pump 260, the sparkadvancer 262 and the fuel injectors 34, respectively A power circuit 1800 is connected to a vehicle battery 262 via a power switch acting as a main power source to distribute power Vcc to the input interface 1200, CPU 1300, memory 1400, the output interface 1500 and so forth. the power circuit 1800 is also connected to the back-up circuit 1700.The power circuit 1800 produces a signal indicative of the ignition switch on/off positions and reset and halt signals for resetting the controller and temporarily disabling the controller 1000 respectively. The ignition onloff signal from the power circuit is fed to the input interface 1200 via a line 1830. On the other hand, the reset signal and the halt signal are fed to the bus-line 1320 via lines 1840 and 1850. The power circuit 1800 also supplies powertothe input interface, the shaping circuit 1100, the drive circuit 1600 and the switching circuit 1750 via lines 1860and 1870.The powercircuit 1800 is also connected to anauxilliary powersourcewhich bypassesthe powerswitch to supplypowerto holding memory 1440 even with the main power switch is turned off.

In the engine control system, the PROM 1420 stores various control programs for controlling engine operation. In addition, the PROM 1420 stores the check program for the fault monitor as one of its background jobs. The check program is executed whenever the CPU 1300 is not busy with the engine control programs. Fig: 8 shows a format for storing result data during execution of the check program in the nonvolatile memory 1450. In the shown embodiment, each column of the non-volatile memory consists of 1 byte. Each column has sections 1451,1452 and 1453 which indicates respectively a faulty segment, in 2 bits, or MODE-I section indicating broken wiring in 3 bits, or MODE-II section indicating shorting in 3 bits.

The non-volatile memory 1450 has a plurality of addresses allocated in the above mannerand each corresponding to on of the check items. The check result data in the non-volatile memory 1450 are read out in response to a request from the input unit 2540 of the vehicle information system 2500 to provide indication or display data to the vehicle information systein. At the same time, if the fault is in some segment or segments, the fault signal is fed to the display or indicator 1900.

On the other hand, in orderto check each check item, particularly for accurately checking input and output signals of the engine control system 1000, it is necessary to eliminate influence due to noise created by various vehicle devices, such as the ignition system. Therefore, duration of the checking operation for each check item must be long enough to compensate for the influence of noise.

In the check program, the crank angle signals from the crank angle sensor 230, the engine coolant temperature signal from the engine coolant tempera turesensor220,theairflowmetersignal from the air flow meter26 and so forth are checked as input signals. On the other hand, the idle air control signal, the EGR control signal, the fuel injection control signal and so forth are checked as output signals. There are various ways to perform the checking of input and output signals. For example, the foregoing British Prepublication No.2046964 discloses a check program for completely checking the electronic controller.

As an example, the checking of the engine coolant temperature signal or the engine coolant temperature sensor will be described hereinbelow with reference to Fig. 9 to 11. As shown in Fig. 10, the engine coolant temperature sensor 220 comprises a thermistor in serted in the engine coolant passage 220 around the engine cylinder 224. As is well known, the resistance value of the thermistor 220 acting as the engine coolant temperature sensor is variable in accordance with the engine coolant temperature. Therefore, by application of a constant voltage Vs to the thermistor 220 via divider resistors R1, R2 and R3, the variation of the resistance value of the thermistor is reflected in the voltage at a terminal 221.When the engine coolant temperature sensor 220 or the sensor circuit shortcircuits, the output voltage at the terminal 221 becomes Ov. If the sensor or the sensor circuit breaks, a voltage VmaXwhich is derived from the constant voltage Vcc by the resistors R2 and R3 is applied at the terminal 221. Therefore, if the voltage at the terminal 221 is maintained at O, or Vrnaxfor a given period t3 after cranking, shorting or breaking of the engine coolant temperature sensor or the sensor circuit is detected. In addition, it is impossible for the engine coolant temperature to change abruptly, e.g. to vary from +80"C to -300C within a few seconds. Therefore, if such a significant change occurs in the sensor signal value, this can be easily recognized as an abnormal condition of the engine coolant temperature sensor or the sensor circuit. Furthermore, if the sensor signal value indicates an abnormal temperature range even after a relatively long warm-up period, it is possible that the sensor or the sensor circuit has shorted or broken.

In the execution of the engine coolant temperature sensor check program, the result of checking is inputted and stored in the non-volatile memory 1450 whenever the check program is executed. In the shown embodiment, the Memory bit-groups MODE-1 and MODE-2 are respectively adapted to store counts of shorting and breaking of the sensor or sensor circuit as described below. The stored counts in the areas of the non-volatile memoryforstoring MODE-1 and MODE-2 are incremented by one each time the abnormal signals are produced. The count in each of the bit-groups MODE-1 and MODE-2 is compared with a predetermined value. When the count in MODE-1 or MODE-2 reaches the predetermined value, the error condition group oftwo bits is incremented by one, as shown in Fig. 9.

The predetermined value to be compared with the count in MODE-1 and MODE-2 is determined depending on the characteristics and importance of the check item. In the case of the engine coolant temperature sensor, the sensor and sensorcircuit consist of rather static elements which are not likely to produce an engine coolant temperature signal with an abnormal value. In addition, the temperature of the engine coolant can not vary abruptly. Therefore, in the shown embodiment, when the count in MODE-1 or MODE-2 reaches 2, the error counter address is incremented by 1 and the count of MODE-7 or MODE-2 is cleared, as shown in Fig. 9.

Referring to Fig. 11, there is illustrated a check program for checking the engine coolant temperature sensorvalue. As set forth previously, the check programs are stored in PROM 1420 as background jobs for the controller. Therefore, the engine coolant temperature sensor check is carried out in a given order relative to the other check programs.

In BLOCK-1, immediate after starting execution, we check whether the engine is running. If the engine is running, the driving period tsincecranking is compared with a predetermined period t5 at BLOCK-2. If driving period t exceeds the predetermined period t5, then, the engine coolant temperature signalvalueT is checked at BLOCK-3. If the engine coolant temperature signal Tw is measured to be lowerthan -30 C, MODE-2 in the non-volatile memory 1450 is incremented by 1, at BLOCKS. Thereafter, at BLOCK-S, subroutine for error count is executed.In this subroutine, the count of MODE-1 in the non-volatile memory 1450 is read outand compared with a reference value, i.e. 2, at BLOCK-i 6. If the count of MODE-1 is equal to the reference value, the fault signal is fed to the indicator or display 1900 for fault indication, at BLOCK-17. Thereafter, the error count area is incremented by 1, at BLOCK-18 and the count in the MODE-1 is cleared at BLOCK-19. If the result at BLOCK-16 is NO, then the count of MODE-2 is compared at BLOCK-20 to a reference value, i.e. 2. If the count of MODE-2 is equal to 2, the fault signal is produced to turn the indicator 1900 on at BLOCK-21.

After this, as before, the error count area is incremented by 1 at BLOCK-22 and the count of the MODE-2 is cleared at BLOCK-23. After BLOCK-1 7 or BLOCK-23 or if the result at BLOCK-20 is NO, execution returns to main check program at BLOCK-6.

If any of decisions at BLOCK-1, BLOCK-2, or BLOCK-3 is NO, execution of the check program jumps to BLOCK-6. At BLOCK-6, the engine coolant temperature signal value TwNEW temporarily stored in the register 1214 of the interface 1200 is read out.

Therafter, the engine coolant temperature signal value TwOLD stored in the corresponding address in the RAM 1430 is read out and the time data dt (=tneW-told) is also read out from the RAM, at BLOCK-7. RAM 1430 is updated with the engine coolant temperature sensor signal value TwNEW Then, the value d - dTw (TwowTwswt - dt is calculated at BLOCK-8. the value of dTw(dt is compared to a reference value +K at BLOCK-9. If it is smaller than +K, dTw/dt is then compared to a reference value at BLOCK-10.If it is largerthan - K, the engine coolanttemperature signal value TwOLD in the RAM1430 is updated with the engine coolant temperature signal valueTwNEw in the register 1214, at BLOCK-11.

If the result is NO in BLOCK-9, MODE-7 is incremented by 1 at BLOCK-12. Therafter, the subroutine described above is executed at BLOCK-13. On theotherhand, if the resultin SLOCK-10 is NO, MODE-2 address is incremented by 1 at BLOCK-1 4.

Then, the foregoing subroutine is executed at BLOCK15.

After BLOCK-13 and BLOCK-15, execution of the check program proceeds to foregoing BLOCK-11.

Referring to Fig.12, details of the vehicle information system 2500 in the preferred embodiment of Fig.

6 are shown. In the shown embodiment, the vehicle information system 2500 is adapted to display trip distance, average speed, deviation of the vehicle speed ortrip distance from scheduled speed or distance for navigation, fuel consumption, trip distance per unit of fuel, which will hereafter be referred to as fuel economy indication, odometer indication, vehicle range with remaining fuel, engine revolution speed, and soon, on the display screen 2520. The display screen 2520 is also used to display a calcul for performing calculation and to display information concerning faulty segments of the engine control system. The vehicle information system also includes a radio controllerfor electronic tuning orpre-schedul- ing of radio programs and a vehicle clock with an alarm.

Therefore, the vehicle information system 2500 includes a clock 2561, a trip distance sensor 2562. a fuel consumption sensor 2563, an electronically controlled radio 2564 an alarm 2565, and a fuel gauge 2566 respectively connected to an input/output interface 2501. The input/output interface 2501 is also connected to the crank angle sensor 230 to receive the engine speed signals.

As in the foregoing engine control system, the vehicle information system includes a microcomputer 2502 comprising the inputloutput interface 2501, CPU 2503, RAM 2504, ROM 2505 and a non-volatile memory 2530. The interface 2501 is also connected to a keyboard 2540 serving as the input unit for controlling the display on the display screen 2520. The CPU 2503 is responsive to request signals from the keyboard 2051 to select the display mode on the display screen and selectably display the display items, such as the vehicle speed, the trip distance, the average speed, etc. The fuel consumption rate and remaining fuel supply can also be displayed. The measurement of the trip distance for indication of travel distance or fuel consumption rate is cleared everytime the data thereof is displayed.

The microcomputer 2502 is also connected to other systems such as the vehicle clock, vehicle radio tuner and soon, through a signal inputloutput interface 2506.

The input'output interface 2501 is further connected to the engine control system 2000 via data transmission lines 2621,2622 and 2623. When the display or indicator 1900 in the engine control system is turned on, the keyboard 2540 is enabled to input the read request command to the input/output interface 2501.

The read request command is transferred to the controller 1000 through the shaping circuit 1100 and the interface 1200 via the data transmission line 2621.

In the controller, CPU 1300 is responsive to the read request command to read out fault data from the non-volatile memory 1450 to transferthe fa ult data to the input/output interface of the vehicle information system 2500 via the output interface 1500 and the data transmission line 2623. In the vehicle information system 2500, the fault data inputted is processed to identify the faulty segment and/or error condition of the faulty segment for display on the display screen 2520.

The faulty segment and the errorcondition thereof is thereby identified on the display screen 2520 in the form of a combination of several figures which are respectively representative of segments and error conditions. Although figures are used to identify the faulty segment and errorcondition in the shown embodiment, this can be done with corresponding symbols or words.

Fig. 13 shows third embodiment of the automotive electronic device according to the present invention.

In the shown embodiment. the electronic device generally comprises an engine control system 3000 and a vehicle information system 4500 associated with each other. The engine control system 3000 includes various sensors and detectors such as an engine speed sensor, an airflow meter, and various temperature sensors, for providing control parameters, a control unit and actuatorsforcontrolling various engine operations such as fuel metering, idle airflow, spark ignition timing, as in the foregoing embodiments. On the other hand, the vehicle information system 4500 in the shown embodiment is adapted to compute travel distance, travel time, average vehicle speed and soon provide information in relation to the current vehicle trip.The vehicle information system 4500 is associated with an external input unit 4540, such as a keyboard, and a display 4520 for information display. The vehicle information system 4500 is also associated with a non-volatile memory4530 for storing computed results. The engine control system 3000 further includes a fault monitorfordetecting fault in the control system. The fault monitor checks the operation of a control unit in the control system and checks the inputs from the sensors as described previously. The result of the check operation by the fault monitorisfed to the non-volatile memory 4530 of the vehicle information system 4500. The check operation results are also fed to a display 4520 via a data line 4022 for control system fault indication.

As in the foregoing Fig. 1 the engine control system 3000 and the vehicle information system 4500 are connected to each other via a data transmission line 4600. The vehicle information system 4500 produces a read command when a read request is inputted to the input unit. The read command is fed to the engine control system to read the data from the non-volatile memory4530 and output it to the inputunitwhen the engine control system 3000 malfunctions.

The read data from the non-volatile memory 4530 is processed by the vehicle information system to identify the faulty sensors orelements in the engine control system. The vehicle information system 4500 sends a fault display signal indicative of the faulty element to the display 4520. In response to the fault display signal and depending on the fault display signal value, the display 4520 indicates the faulty sensor or element and the degree of error therein.

Referring to Fig. 14, there is shown the fourth embodiment in which a plurality of digital orelectro- nic control systems 4700,4800... are connected to the vehicle information system 4500. As shown in Fig. 5, respective digital control systems 4700,4800... are connected to the vehicle information system 4500via respective data transmission lines 4610,4620. ... and have non-volatile memories 4710,4810...

As in the foregoing first embodiment, each of the digital control systems4700,4800 ... includes a fault monitorfordetecting malfunction of the elements or segments thereof and producing a fault indication signal to be fed to the fault display 4520. The fault monitor also stores check data in the non-volatile memory 4530. This way, the fault display 4520 indicates which ofthe segments of the digital control systems are malfunctioning.The input unit 4540 is adapted to input a requestfordisplay of information about the faulty digital control system and errant segment in a mannersimilarto the foregoing first embodiment.

Claims

1. Aself-monitoring system for an automotive electronic control system comprising: an electronic control system forcontrolling automo tivevehicle device operation; a fault detecting means, incorporated in said electronic control system, for detecting fault in each segment of said electronic control system to produce a fault signal indicative both of the occurrence of a fault and of the faulty segment; memory means, responsive to said fault signal, to store fault data in addresses corresponding to respective check items; a fault indicatorfor displaying fault information in response to the fault signal; and a microcomputer associated with said electronic control system, said microcomputer including an input unit for manually inputting a display request for fault data in said memory means and a display unit for displaying fault information in response to said display request.

2. The self-monitoring system as set forth in claim 1, wherein said memory means is a non-volatile memory connected to said electronic control system to receive said fault data therefrom.

3. The self-monitoring system as set forth in claim 2, wherein said non-volatile memory is an memory external to said electronic control system for storing said fault data in response to said fault signal and for reading said fault data out in response to the display request from said microcomputer.

4. The self-monitoring system as set forth in claim 2, wherein said non-volatile memory is incorporated within said microcomputer for storing said fault data in response to said fault signal and for reading said fault data out in response to the display request from said microcomputer.

5. The self-monitoring system as set forth in claim 1,2 or 3, wherein said fault indicator is incorporated within said electronic control system.

6. The self-monitoring system as set forth in claim 4, wherein said fault indicator is included in said display unit of said microcomputer.

7. A self-monitoring system for a automotive electronic control system comprising: an electronic control system for controlling automotive vehicle device operation, which includes the first microcomputer and a sensorforinputting a control parameter to said microcomputer, said microcomputerexecuting a check program forchecking input signals from said sensor at a given timing to detect faults in said sensor and for checking the output of said microcomputerfordetecting faults in a segment of said microcomputer, said microcomputer producing a fault signal when an error in eitherofsaid input oroutputsignals is detected; memory means, responsive to said fault signal, for storing fault data in addresses corresponding to the checked items of said check program; ; a fault indicatorfor displaying fault information in responseto thefaultsignal; the second microcomputer associated to said electronic control system, said second microcomputer including an input unit for manually inputting a display requestforfaultdata in said memory means and a display unit for displaying fault data in response to said display request.

8. Aself-monitoring system for an automotive electronic control system substantially as hereinbefore set forth, with reference to, and/or as illustrated in Figures 1 to 13 of the accompanying drawings.