JPH02297637A - Control unit inspection device - Google Patents

Abstract

(57) [Summary] This bulletin contains application data before electronic filing, so abstract data is not recorded.

Description

[Detailed Description of the Invention] <Industrial Application Field> The present invention is used to check the suitability of the entire software when a part of the software (program and data) of a control unit for controlling in-vehicle electronic equipment is changed. The present invention relates to a control unit inspection device.

<Prior art> In an automobile engine control device (for example, an electronically controlled fuel injection device) or an autotransmission control device, a control unit with a built-in microcomputer converts input signals from various sensors and various data according to a program. It performs arithmetic processing based on this information and controls the output to various electronic devices (for example, fuel injection valves).

When software (programs and data) for a control unit of such a control device is created, it is necessary to check (debug) whether or not it operates according to control specifications.

In this case, it is common to use a checker to change the input signal according to the control specifications and check whether a corresponding output signal is output (see Utility Model Application No. 187347/1983).

(Refer to Utility Model Application Publication No. 135401/1983).

<Problems to be solved by the invention> However, in such conventional inspection devices,
When a part of the software is changed, it is possible to check the changed part using the above method, but there is a problem in that it is not possible to verify whether the part that has not been changed still operates as before.

In addition, when comparing two control units by applying input corresponding to a transient operating state, there is a problem in that even if the program operations are exactly the same, differences in the outputs of the control units occur due to differences in the sampling timings of each unit. There was also.

In view of these conventional problems, the present invention provides a control unit inspection device that can easily and accurately check the entire software after the change when a part of the software of a control unit for controlling in-vehicle electronic equipment is changed. The purpose is to provide.

Means for Solving the Problems> For this reason, the present invention provides a control unit for controlling in-vehicle electronic equipment with a sampling timing initialization means that initializes the sampling timing in response to an external sampling synchronization request signal. At the same time, an inspection machine that can be set with two control units, one before the software change and one after the software change, is given a sampling synchronization request signal at the same timing to these two control units, and then transient operation is performed. A control unit testing device is constructed by providing a simulated input applying device that provides a simulated input corresponding to the state, and a comparison and determination device that compares and determines the outputs from each control unit at this time.

<Operation> In the control unit inspection device described above, the control unit is provided with a sampling timing initialization means (program) that initializes the sampling timing in response to an external sampling synchronization request signal.
Be prepared with the following.

For inspection, two control units are set in the inspection machine: one before the software change and one after the change. The version before the change mentioned here is one that is equipped with software that has already been used and has a proven track record.

Then, the two control units are operated by simultaneously applying the same simulated input to each other by the simulated input applying device.

During this operation, the comparison and determination device compares and determines the outputs from each control unit.

Here, regarding the changed portion, since a specific difference determined by the specification of the change should occur in the output, it is checked whether the difference is appropriate. There should be no difference in the output for the parts that have not been changed, so check for no difference.

These allow you to check both changed and unchanged parts.

Also, when comparing two control units,
For inputs corresponding to transient operating conditions, differences in sampling timing will cause differences in control unit output even if the program operation is exactly the same.
When applying a simulated input, a sampling synchronization request signal is applied to the two control units at the same timing, and then a simulated input corresponding to a transient operating state is applied, and the outputs at this time are compared and determined. That is, the sampling timings of each control unit are simultaneously initialized to synchronize the sampling timings, and then the inspection in the transient operating state is performed.

<Example> An example of the present invention will be described below. In addition, the control unit of the electronically controlled fuel injection system for the engine outputs a valve opening drive pulse signal (hereinafter referred to as fuel injection pulse) to the electromagnetic fuel injection valve in synchronization with engine rotation, and adjusts the fuel injection amount according to the pulse width. A case will be described in which the acceleration response is improved by controlling the engine speed and outputting a valve-opening drive pulse signal (hereinafter referred to as an interrupt injection pulse) asynchronous to the engine rotation at the start of acceleration.

FIG. 1 shows an outline of the inspection apparatus, in which two control units IA and IB are set in an inspection machine (checker) 3 connected to a personal computer 2.

One control unit IA is the one before the software change and is referred to as a master unit that is equipped with software that has already been used and has a proven track record.

The other control unit IB is a unit under development after software changes, and is the subject of inspection.

Here, the control units LA and IB are provided with sampling timing initialization means in the sampling program shown in FIG. 2, regardless of whether or not the software is changed, that is, from the beginning of the software creation.

This sampling program will be explained.

Note that this program is executed every 61 hours.

In step 1 (denoted as Sl in the figure; the same applies hereinafter), the sampling timer T is calculated by ΔTi.

In step 2, it is determined whether a sampling synchronization request signal (O3) is input from the outside. Note that the control unit is previously provided with a dedicated terminal for receiving the sampling synchronization request signal.

If there is no sampling synchronization request signal, step 2
The process then proceeds to step 4, where it is determined whether the value of timer T is O or not. Then, only when T=0, the input signal is sampled (usually A/D converted) in step 5, and the timer T is set to the initial value To in the next step 6.

If there is a sampling synchronization request signal, step 2
After proceeding to step 3 and resetting the timer T to 0, the process proceeds to step 4 and subsequent steps to perform a sampling operation.

In other words, steps 1, 4, and 5.6 are configured to perform a sampling operation every 10 hours, but steps 2 and 3 are added to perform sampling in response to an external sampling synchronization request signal. This is to initialize the timing. Therefore, step 2.3 corresponds to sampling timing initialization means.

A signal generator 4 is connected to the input side of each control unit IA, IB, thereby providing a simulated input. The simulated human power is created by creating appropriate steady-state operation mode data and transient operation mode data, and giving these to the personal computer 2, which causes the signal generator 4 to output a corresponding signal based on the signal from the personal computer 2. . Specifically, mode data is:
Time-series data such as the reference signal REF for each reference crank angle and the unit signal PO3 for each unit crank angle output from the crank angle sensor in synchronization with engine rotation, intake air flow rate Q, water temperature Tw, throttle valve opening TVO, etc. It is.

Here, when providing transient operation mode data, for example, mode data in which the throttle valve opening degree TVO corresponding to acceleration increases with time, as shown in FIG. , I.B.
The sampling synchronization request signal (O3
)give.

Therefore, the signal generator 4 corresponds to a simulated input providing device.

A feedback signal is obtained from a part of the output of each control unit IA, IB (71) via each feedback model 5A, 5B, and this is applied to the input side of each control unit LA, IB.

This is used in place of the air-fuel ratio detection signal from the oxygen sensor, for example, and is calculated and given from data such as the fuel injection amount and intake air flow rate per engine rotation speed obtained by each control unit IA and IB.

Here, each control unit IA.

IB calculates the fuel injection pulse (pulse width) Ti to the fuel injection valve from the following formula for fuel injection control according to each program.

T i -T p -C0EF -LAMB
DA+T sHere, Tp is the basic pulse width, Tp=
-Q/N. is a constant, Q is the intake air flow rate, and N is the engine speed. In addition, the engine speed N is the reference signal REF.
Calculated from the period etc.

In addition, C0EP is the water temperature Tw, the throttle valve opening change amount Δ
Various correction coefficients based on TVO etc. LAMBDA is an air-fuel ratio feedback correction coefficient based on an air-fuel ratio detection signal, Ts
is the voltage correction amount.

Each control unit IA, IB outputs a fuel injection pulse Ti at a timing based on the reference signal REF from the crank angle sensor.

Regarding interrupt injection control during acceleration, the throttle valve opening TVO is sampled at predetermined time intervals, and acceleration is determined based on the amount of change ΔTVO in the throttle valve opening.
When acceleration is determined, an interrupt injection pulse Tint having a pulse width corresponding to ΔTVO is output (see FIG. 3).

Actual loads 6A, 6B such as fuel injection valves are attached to the output side of each control unit LA, IB.

This is necessary when evaluating the back electromotive force and considering its influence.

The fuel injection pulse Ti or interrupt injection pulse T int taken out directly from the output side of each control unit IA, IB or via the actual loads 6A, 6B is:
Both are input to the comparison/determination device 7, and the difference between them is compared and determined. Note that only the comparison and determination of the interrupt injection pulse Tint in the transient operation mode will be described below.

As shown in FIG.
A measurement unit 8A that measures the output state of t.

It has 8B.

Each measurement unit 8A, 8B has at least one of the following
(See Figure 3).

■Reference time (for example, reference signal R from the crank angle sensor)
The elapsed time from the time of occurrence of EF to the start of output of the interrupt injection pulse T int ■ Pulse width of the interrupt injection pulse Tint The measurement data from these measurement units 8A and 8B is input to the difference calculation circuit 9 in real time, and the The difference is calculated. Then, the difference is input to the comparison circuit 10,
It is compared with a predetermined comparison value.

When the difference>comparison value, the comparison circuit 10 outputs an output, which becomes a latch signal and is sent to the ring memory (loop memory) 12 in the large capacity memory 11.

The large capacity memory 11 includes each control unit IA, I
It is connected to B, and the program flow (data on the address bus and data bus) is input. and,
When a latch signal is input to the ring memory 12, the ring memory 12 temporarily stores the flow of the program before and after that time. In addition, in Ring Memo January 2, when new data is entered, the oldest data is discarded.

The data in the ring memory 12 is subjected to, for example, visualization (graphics) processing by the processing device 13, and sent to the personal computer 2, where it is displayed on its display in an appropriate manner.

In this way, the changed part of the software should cause a certain difference in the output state determined by the specification of the change,
Since there should be no difference in the output state for the part that has not been changed, compare that difference with a predetermined comparison value,
If the difference>comparison value, it is determined that there is an abnormality in the software, and thereby both changed parts and unchanged parts can be checked. Moreover, when an abnormality is determined, the flow of the program before and after that time can be temporarily stored, making it easier to discover and correct the abnormal part.

In addition, when comparing two control units IA and 1'B, simply inputting the change in throttle valve opening TVO corresponding to the transient operating state, as shown in Fig. 5, the sampling timing of each Due to the difference ΔS,
Even if the program operations are exactly the same, the acceleration determination timing is different and the ΔTVO at that time is different, resulting in a difference in the output timing and pulse width of the interrupt injection pulse Tint.

Therefore, in the present invention, when applying such a simulated input, a sampling synchronization request signal is applied to the two control units IA and IB at the same timing, as shown in FIG. After initializing the sampling timing using the internal program and completely synchronizing the sampling timing of both,
An input of a change in the throttle valve opening TVO is given, and as long as the two control units IA and IB are equivalent, the same output of the interrupt injection pulse Tint is guaranteed.

Therefore, by comparing and determining these outputs, accurate inspection becomes possible without being affected by sampling timing.

<Effects of the Invention> As explained above, according to the present invention, when a part of the software of the control unit is changed, when the same simulated input is given to the software with a proven track record before the change, By comparing and determining the output, both changed parts and unchanged parts can be easily and reliably checked (debugged), resulting in the effect of greatly improving reliability.

Also, when applying an input corresponding to a transient operating state,
A sampling synchronization request signal is given to the two control units at the same timing to synchronize the sampling timing, and then a simulated input corresponding to a transient operating state is given, and the output at this time is compared and determined. Highly accurate inspection is possible without being affected by deviations.

[Brief explanation of the drawing]

Fig. 1 is a schematic diagram of the entire inspection device showing an embodiment of the present invention, Fig. 2 is a flowchart of a sampling program provided in the control unit, and Fig. 3 is a timing chart showing simulated input and output at that time. , FIG. 4 is a detailed diagram of the comparison/judgment device in FIG. 1, and FIG. 5 is a timing chart showing simulated inputs and outputs when there is a difference in sampling timing. IA, IB...Control unit 2...Personal computer 3...Inspection i 4...
・Signal generator 6A, 6B...Actual load
7... Comparison/judgment device 8A, 8B... Measuring section
9... Difference calculation circuit 10... Comparison circuit 11.
...Large capacity memory 12...Ring memory patent V large Representative of Japan Electronics Co., Ltd. Patent attorney Fujio Sasashima Figure 2, Figure 3

Claims (1)

[Scope of Claims] A control unit inspection device for checking the operation of a control unit for controlling in-vehicle electronic equipment after a software change, wherein the control unit initializes sampling timing in response to an external sampling synchronization request signal. The inspection machine is equipped with sampling timing initialization means to change the software in advance, and the inspection machine can be set with two control units, one before the software change and one after the software change. A control unit characterized in that it is provided with a simulated input applying device that applies a simulated input corresponding to a transient operation state after applying a transition request signal, and a comparison and determination device that compares and determines outputs from each control unit at this time. Inspection equipment.