JPH1027009A - Device for taking countermeasure against run-out of controller - Google Patents

Abstract

PROBLEM TO BE SOLVED: To eliminate the run-out state of one microcomputer among a plurality of microcomputers when the microcomputer runs out by automatically finding the run-out of the microcomputer. SOLUTION: Microcomputers 5 and 7 mutually detect the run-out state of the other microcomputers 7 and 5 by transmitting and receiving run-out monitor signals to and from the other microcomputers 7 and 5. When one microcomputer 7 or 5 runs out, from the sound microcomputer 5 or 7 transmits a reset signal as the signal for initializing the run out side microcomputer 7 or 5.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a control system in which a plurality of microcomputers cooperate in a control operation among control devices such as an air conditioner, a solar light receiving device, various home appliances, and communication devices. The present invention relates to a runaway countermeasure device of a control device for monitoring whether or not each microcomputer has a runaway state.

[0002]

2. Description of the Related Art Electrically connected devices to be controlled by a control device such as an air conditioner, a solar light receiving device, various home appliances, and communication devices, and exchange information between microcomputers built in each device to be controlled. Some systems have been systematized so as to perform the entire control operation while performing the same.

For example, in an air conditioner, both an outdoor unit and an indoor unit have microcomputers. The microcomputer of the outdoor unit and the microcomputer of the indoor unit mutually exchange information such as the target temperature, the current temperature, the compressor operation, the fan rotation, etc., and cooperate to bring the indoor temperature and the like closer to the target value. Perform control operation.

[0004] Such control devices that perform control operations in cooperation with each microcomputer in a plurality of control target devices have been developed and used in various fields in addition to air conditioners.

[0005]

In the above-described control device in which a plurality of microcomputers cooperate with each other to perform a control operation, if one microcomputer runs away for some reason, information exchange becomes impossible. In some cases, total control may be lost.

Conventionally, when one microcomputer runs out of control for some reason and the control device becomes inoperable, there is no means for recognizing it or a method for automatically returning the control device. The fact was that there was no way.

SUMMARY OF THE INVENTION An object of the present invention is to automatically detect a runaway state of a microcomputer and quickly eliminate the runaway state, thereby enabling a control device to be quickly normalized when a runaway occurs. It is to provide a device.

[0008]

According to a first aspect of the present invention, there is provided a control device in which a plurality of microcomputers are connected to each other to perform a control operation in cooperation with each other. A signal is transmitted / received to detect the runaway state of the microcomputer, and when a runaway state occurs, a signal for initializing the runaway microcomputer is transmitted from the healthy microcomputer to the runaway microcomputer. It is characterized by the following.

According to the present invention, each microcomputer serves as a sender for transmitting a runaway monitoring signal to an adjacent microcomputer and a receiver for receiving a runaway monitoring signal from an adjacent microcomputer. When each microcomputer receives the runaway monitoring signal from the adjacent microcomputer, it determines the state of the runaway monitoring signal, and determines whether the microcomputer on the transmission side of the runaway monitoring signal is in a runaway state or in a normal state. Is detected. Here, when it is detected that the vehicle is not in the runaway state, the transmission of the runaway monitoring signal is repeated (maintained).
While the transmission of the runaway monitoring signal is repeated, a signal for initializing the runaway microcomputer to the next runaway microcomputer in the runaway state is transmitted.
When the microcomputer on the runaway side receives a signal for initializing itself, the microcomputer on the runaway side
The microcomputer immediately returns to the initial state to eliminate the runaway state, and starts transmitting the runaway monitoring signal to the next microcomputer again.

According to a second aspect of the present invention, there is provided a control device for connecting a plurality of microcomputers and performing a control operation in cooperation with each other. It is characterized in that a runaway state of the microcomputer is detected, and when a runaway state occurs, a reset signal for resetting the runaway microcomputer is transmitted from the healthy microcomputer to the runaway microcomputer.

According to the present invention, the overall operation is the same as that of the first aspect of the present invention, but a reset signal is used as a signal for initializing the runaway microcomputer. . When one healthy microcomputer detects a runaway state of an adjacent microcomputer, the healthy microcomputer sends a reset signal to the runaway microcomputer. Thereby, the runaway microcomputer quickly returns to the initial state and eliminates the runaway state.

According to a third aspect of the present invention, there is provided a control device which connects a plurality of microcomputers and performs a control operation in cooperation with each other. When a runaway state occurs, a power control signal for once turning off the power of the runaway microcomputer and then turning on the power again is transmitted from the healthy microcomputer to the runaway microcomputer when the runaway state occurs. It is characterized by having done.

According to the present invention, the overall operation is the same as that of the first aspect of the present invention, except that a power control signal is used as a signal for initializing the runaway microcomputer. I have. When one healthy microcomputer detects a runaway state of an adjacent microcomputer, the healthy microcomputer transmits a power control signal to the runaway microcomputer. As a result, the runaway-side microcomputer once shuts off the power, turns on the power again with a predetermined action, returns to the initial state, and quickly eliminates the runaway state.

According to a fourth aspect of the present invention, there is provided a control device in which a plurality of microcomputers are connected, and the microcomputers perform a control operation in cooperation with each other. Runaway monitoring signals are sent and received between matching microcomputers,
The microcomputer detects the runaway state of the other microcomputer, and transmits a signal to initialize the runaway microcomputer from the healthy microcomputer to the runaway microcomputer when the runaway state occurs. And

According to the present invention, the microcomputers are connected in a loop, and serve as senders for transmitting runaway monitoring signals in a one-to-one relationship. Becomes a receiver to receive the runaway monitoring signal transmitted in relation to the above.
When each microcomputer receives the runaway monitoring signal from the microcomputers on both sides, each microcomputer individually determines the state of each runaway monitoring signal, and the microcomputer on the transmission side of the runaway monitoring signal on both sides is in the runaway state or normal. Is detected individually. Here, if it is detected that there is no runaway state, the transmission of the runaway monitoring signal is repeated (continued). If it is detected that at least one of the microcomputers is in a runaway state, the runaway monitoring signal is sent. While repeating the signal transmission, a signal for initializing the runaway microcomputer to the runaway microcomputer in the runaway state is transmitted. When the runaway microcomputer receives a signal for initializing itself, the microcomputer quickly returns to the initial state and eliminates the runaway state, as in the case of the first aspect of the present invention.

According to a fifth aspect of the present invention, in a control device for connecting a plurality of microcomputers and performing control operations in cooperation with each microcomputer, the plurality of microcomputers are connected in a loop, and The microcomputer sends a runaway monitoring signal to the microcomputer located next to each other in one direction, each one detects the runaway state of the microcomputer next to it in the other direction, and when the runaway state occurs, the microcomputer on the healthy side runs away. A signal for initializing the runaway microcomputer is transmitted to the microcomputer.

According to the present invention, the microcomputers are connected in a loop, and transmit a runaway monitoring signal to the microcomputers on the right side of each other, for example, in one direction, so-called runaway monitoring signal. In a loop. Then, each microcomputer receives the runaway monitoring signal transmitted by the microcomputer on the left side and determines the state of the runaway monitoring signal, and the microcomputer on the left side is in a runaway state or in a normal state. Or to detect. Here, if it is detected that the microcomputer on the left side is not in a runaway state, the transmission of the runaway monitoring signal to the microcomputer on the right side is repeated (continued). When it is detected, the transmission of the runaway monitoring signal is repeated, and a signal for initializing is transmitted to the microcomputer on the left side which is the transmission side of the runaway monitoring signal. When the runaway microcomputer receives a signal for initializing itself, the microcomputer quickly returns to the initial state, cancels the runaway state, and outputs the runaway monitoring signal, as in the first aspect of the invention. Start sending.

According to a sixth aspect of the present invention, in the above-mentioned invention, the microcomputer is adapted so that a voltage of a runaway monitor signal, a reset signal, or a power supply control signal as a signal at the time of communication is adapted to its own operating voltage. A voltage adjustment circuit for adjusting is provided.

According to the present invention, the runaway monitoring signal transmitted from one microcomputer to the next microcomputer once passes through the voltage adjustment circuit and has a voltage suitable for the voltage used by the next microcomputer. After being adjusted to a signal, it is input to the next microcomputer. Thus, even if the operating voltages (power supply voltages) of the microcomputers are different, the microcomputer can reliably determine the state of the runaway monitoring signal. The same applies to the transmission of the reset signal and the power control signal.

[0020]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Preferred embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is an explanatory diagram for explaining the configuration of the first embodiment of the present invention.

In the present embodiment, for example, in a control device such as an air conditioner, a solar light receiving device, various home appliances, or a communication device, the microcomputers of a plurality of control target devices cooperate and control. Applied to control devices that perform operations.

In this embodiment, for simplicity of description, a case where two control target devices 5 and 7 are electrically connected as a control device will be described. The control target device 5 performs, for example, a certain kind of mechanical operation, and is driven in accordance with a calculation command of the internal microcomputer 1. The control target device 7 also performs, for example, some kind of mechanical operation, and is driven in accordance with a calculation command of the internal microcomputer 3.

The microcomputers 1 and 3 are connected to each other by a communication line, and cooperate with each other while exchanging information relating to the control operation, and operate the operation of the control target devices 5 and 7 on the own side and the other side. It recognizes the situation and determines the operation of its own control target device 5 or 7, or requests the operation of the other control target device 5 or 7.

On the other hand, each of the microcomputers 1 and 3
A runaway monitoring signal (watchdog signal) is generated at a predetermined timing by CPU operations that are driven in accordance with an internal program (not shown). The runaway monitoring signal is transmitted from output port a to input port b of each of microcomputers 1 and 3 via a signal line.

As shown in FIG. 2, the runaway monitoring signal is a signal in which signal logics H and L are repeated at a predetermined frequency (for example, 1 KHz). Is a signal logic H state of one pulse or a signal logic L state.

Each of the microcomputers 1 and 3 transmits a one-pulse signal logic H state or a signal logic L state in response to each other output, for example, while alternately changing, as a runaway monitoring signal. Also receive each other. For example,
One microcomputer 1 receives a runaway monitoring signal,
It is as if the other microcomputer 3 responds to the logical signal L when the signal logical H of one pulse is transmitted.
However, of course, the signal logic H may be responded to the transmission of the signal logic H.

When one runaway monitoring signal is output, a timer for determining a runaway signal is set in the transmitting microcomputer 1 or 3. The set time T1 second of the runaway signal determination timer is several% longer than the time T2 seconds in which the signal logic H or L of one pulse is continued. When there is one response to the runaway monitoring signal within the set time T1 second of the runaway signal determination timer, it is determined that the transmitting microcomputers 1 and 3 are normal.

The reception microcomputers 1, 3 detect the signal logic H or L of the runaway monitor signal for T2 seconds within the set time T1 second of the runaway determination timer because the signal logic H or L of the runaway monitor signal is used. This is because the detection of L includes a margin time and also eliminates the influence of chattering and noise that may be included in the signal logic H or L of the runaway monitoring signal.

On the other hand, the microcomputers 1, 3
Are the operations of the CPUs that are driven by each other according to an internal program (not shown). At a predetermined timing (when a runaway state occurs), the runaway microcomputer 1 or 3
Generate a signal that initializes. A signal for initializing the runaway microcomputer 1 or 3 is transmitted from the output port c to the input port d of the other microcomputer 1 or 3 via a signal line.

Various signals can be considered as the signal for initializing the runaway microcomputer 1 or 3, and examples thereof include a reset signal and a power control signal. The reset signal is, for example, the state of the signal logic H of one pulse, or the reset signal 2 in a predetermined signal pattern.
It is a value signal. The power control signal is also, for example, a one-pulse signal logic H state or a binary signal in a predetermined signal pattern. The first signal instructs the power-off microcomputer 1 or 3 to turn off the power. The power ON may be commanded by the second signal.

The reset signal or the power supply control signal indicates that the healthy microcomputer 1 or 3 is abnormal in the runaway monitoring signal (it is inverted twice or more within the set time T1 seconds of the timer,
Or no change) is transmitted from the healthy microcomputer 1 or 3 to the runaway microcomputer 1 or 3.

The runaway microcomputer 1 or 3 which has received the reset signal returns to the initial state promptly and eliminates the runaway state. The runaway-side microcomputer 1 or 3 that has received the power control signal, once shuts off the power by a predetermined action, turns on the power again, and returns to the initial state. If the power control signal is a signal for simply commanding the power OFF-ON, the runaway microcomputer 1
Alternatively, after the power is turned off, the power can be turned on again by an operation of an internal logic circuit or the like.

On the other hand, the microcomputers 1, 3
Is a voltage adjustment circuit that adjusts the voltage of a runaway monitoring signal transmitted from the other microcomputer 1 or 3 and a reset signal or a power supply control signal as a signal for initializing so as to be suitable for its own operation voltage (power supply voltage). 9 or 11 is provided. The voltage adjusting circuits 9 and 11 cope with the case where the voltage of the signal is stepped down by using a divided resistor or the like, and the case where the voltage of the signal is stepped up by using an operational amplifier or the like. The installation of the voltage adjustment circuits 9 and 11
It does not matter whether the microcomputer 1 or 3 is inside or outside, and does not ask the transmitting side or the receiving side.

For example, the microcomputer 1 has an operating voltage of 3V, and the microcomputer 3 has an operating voltage of 5V.
In this case, the voltage adjustment circuit 9 boosts the voltage of the runaway monitoring signal and the reset signal or the power control signal transmitted from the microcomputer 1 from 3 V to 5 V, and transfers the signal to the microcomputer 3. Further, the voltage adjustment circuit 11 adjusts the voltage of the runaway monitoring signal and the reset signal or the power control signal transmitted from the microcomputer 3 to 5V.
To 3 V and transferred to the microcomputer 1. In this manner, the signal voltage values between the microcomputers 1 and 3 are matched, so that the degree of freedom in combining control target devices as a control device is improved.

Next, the operation of this embodiment will be described.

FIG. 3 is a flowchart for explaining the operation of this embodiment. Here, the case where the microcomputer 1 detects the runaway state of the microcomputer 3 will be described as an example.

First, at step S1, the microcomputer 1 performs an initial process to set the flag FG = 0. In step S2, the signal logic of the runaway monitoring signal transmitted from the output port a of the microcomputer 1 to the partner microcomputer 3 is inverted from H to L or from L to H, and the runaway determination timer is ON
To

In step S3, the signal logic of the runaway monitoring signal input to the input port b of the microcomputer 1, that is, the signal logic of the runaway monitoring signal from the microcomputer 3 in response to the current runaway monitoring signal of the microcomputer 1, is In response to the inversion of the signal logic of the runaway monitoring signal of the computer 1 this time, it is determined whether or not L has changed from H to H or has changed from H to L.

If it is determined in step S3 that the signal logic of the runaway monitoring signal input to the input port b has changed, the process proceeds to step S4, where it is determined whether the flag FG = 1 or not. If it is determined that the signal logic of the runaway monitoring signal input to the input port b does not change, the process proceeds to step S6, and it is determined whether the set time T1 seconds of the runaway determination timer has elapsed. Then, step S6
If it is determined that the set time T1 second of the runaway determination timer has not elapsed, the process returns to step S3. If it is determined that the set time T1 second of the runaway determination timer has elapsed, the process proceeds to step S7. Proceed to.

On the other hand, in step S4, the flag FG
If it is determined that = 1, the process proceeds to step S5, where the flag FG is set to 1, and the process proceeds to step S6.
However, if it is determined in step S4 that the flag FG = 1, the set time T1 of the runaway determination timer is determined.
Within two seconds, through the processing of step S3 twice, it is detected that the signal logic of the runaway monitoring signal from the microcomputer 3 has changed twice. Accordingly, it is determined that the runaway monitoring signal from the microcomputer 3 responding to the current runaway monitoring signal of the microcomputer 1 is abnormal, that is, the microcomputer 1 is in a runaway state, and the process proceeds to step S10, where a reset signal is transmitted to the microcomputer 3. I do. Then, the process further proceeds to step S9, sets the flag to 0, and returns to step S2.

That is, in step S3, the flag FG changes the signal logic of the runaway monitoring signal from the microcomputer 3 for the first time in response to the inversion of the signal logic of the current runaway monitoring signal of the microcomputer 1. If it is determined that it has been performed, it is set to 1 in the process of step S5.

Accordingly, before it is determined in step 6 that the set time T1 second of the runaway determination timer has elapsed, it is determined in step S3 that the input of the runaway monitoring signal from the microcomputer 3 has changed. If it is determined in step S4 that the flag FG = 1, the signal logic of the runaway monitoring signal from the microcomputer 3 has changed twice within the set time T1 second of the runaway determination timer. Then, it is determined that the runaway monitoring signal from the microcomputer 3 is abnormal, that is, it is in a runaway state, and the process proceeds to step S10.

On the other hand, after it is determined in step S6 that the set time T1 second of the runaway determination timer has elapsed, in step S7, the runaway determination timer is turned off, and the routine proceeds to step S8.

At step S8, the flag FG = 1 again
Is determined. Here, when it is determined that the flag FG = 1, it is determined that the state of the runaway monitoring signal from the microcomputer 3 is normal and the microcomputer 3 is not in the runaway state, and the process proceeds to step S9, and the flag is set. After setting FG = 0, the process returns to step S2.

That is, the fact that the flag FG = 1 continues after it is determined in step S6 that the set time T1 second of the runaway determination timer has elapsed means that the microcomputer 3 only outputs once from the microcomputer 3 in step S3. This means that it has been determined that the signal logic of the runaway monitoring signal has changed. Therefore, it is determined that the state of the runaway monitoring signal from the microcomputer 3 is normal and the microcomputer 3 is not in the runaway state.

However, in step S8, the flag F
If it is determined that G is not 1, it means that the signal logic of the runaway monitoring signal from the microcomputer 3 has never changed before the set time T1 second of the runaway determination timer elapses. . Therefore, it is determined that the runaway monitoring signal from the microcomputer 3 is abnormal, that is, it is in a runaway state, and the process proceeds to step S10, where a reset signal is transmitted to the microcomputer 3. After sending,
Proceed to step S9, set flag FG = 0, and set step FG
Return to 2.

According to the present embodiment, the microcomputers 1 and 3 transmit and receive a runaway monitoring signal to detect the presence / absence of a runaway state of the other microcomputers 1 and 3, and the other party is in a runaway state. Sometimes, a reset signal or a power control signal is transmitted as a signal for setting the runaway microcomputer 1 or 3 to an initial state, so that a runaway state generated during the control operation is automatically detected. It can be resolved quickly. Therefore, it is possible to improve the reliability of the automatic control operation without requiring a monitoring person at all times as a control device.

Also, since a watchdog signal which repeats signal logics H and L is adopted as the runaway monitor signal, the transmission / reception of the runaway monitor signal is speeded up, the runaway state detection is simplified, and the system configuration is simplified. be able to.

FIG. 4 is an explanatory diagram for explaining the configuration of the second embodiment of the present invention.

In this embodiment, for example, in a control device such as an air conditioner, a solar light receiving device, various home appliances, or a communication device, the microcomputers of a plurality of control target devices cooperate and control. Applied to control devices that perform operations.

In this embodiment, a case will be described in which three control target devices 21, 23, and 25 are electrically connected as a control device. Control target devices 21, 23, 25
Are each performing a certain kind of mechanical operation, for example.
It is driven according to an operation command of the internal microcomputers 27, 29, 31.

The microcomputers 27, 29,
Reference numerals 31 are connected to each other by a communication line, and cooperate with each other while exchanging information related to the control operation, etc., and recognize the operation status and the like of the control target devices 21, 23, 25 on the own side and the other side, and The operation of the control target device 21 or 23 or 25 is determined, and the control target device 21 or 23
Or, 25 operations are requested.

The microcomputers 27, 29,
31, one microcomputer, for example, 27
It is also possible to give a specific processing command to another microcomputer, for example, 29 or 31, in response to a command from the remote controller.

On the other hand, each microcomputer 27, 2
Reference numerals 9 and 31 generate the runaway monitoring signal (watchdog signal) and the reset signal described in the first embodiment. Two signal lines 33 for transmitting and receiving a runaway monitoring signal and two signal lines 35 for transmitting a reset signal are connected between the microcomputers 27, 29, and 31 adjacent to each other. They are connected in a loop.

Each microcomputer 27, 29, 31
Are the microcomputers 27, 29,
The runaway monitoring signals are transmitted and received between the microcomputers 31, and the states of the runaway monitoring signals at the time of receiving each other are determined, and the microcomputers 27, 29, and 31 on both sides detect the runaway state.

The process of transmitting / receiving the runaway monitoring signal and the process of detecting the presence / absence of a runaway state are the same as those in the first embodiment.
Perform independently between 7, 29, and 31. In other words, the timing of transmission / reception of the runaway monitoring signal and the timing of the process of detecting the presence / absence of the runaway state do not always coincide with each other in the microcomputers 27, 29, 31.

The microcomputers 27 and 2
9, 31 are adjacent microcomputers 27, 29, 3
When the runaway state 1 is detected, a reset signal is transmitted to the microcomputer 27 or 29 or 31 on the runaway side.

The microcomputers 27, 29,
Each of the circuits 31 includes a voltage adjusting circuit 37 as described in the first embodiment.

The operation in the present embodiment is basically the same as that in the first embodiment, and a detailed description will be omitted.

According to the present embodiment, the microcomputers 27, 29 and 31 are connected in a loop by a signal line 33 for transmitting and receiving a runaway monitoring signal and a signal line 35 for transmitting a reset signal. So, as a runaway prevention device,
The configuration can be simplified.

Further, since microcomputers on both sides detect the presence or absence of a runaway state of one microcomputer, the reliability can be further improved in detecting the presence or absence of a runaway state.

FIG. 5 is an explanatory diagram for explaining the configuration of the third embodiment.

In this embodiment, for example, in a control device such as an air conditioner, a solar light receiving device, various home appliances, or a communication device, the microcomputers of a plurality of control target devices cooperate and control. Applied to control devices that perform operations.

In this embodiment, a case will be described in which three control target devices 41, 43, and 45 are electrically connected as a control device. Control target devices 41, 43, 45
Are each performing a certain kind of mechanical operation, for example.
It is driven according to an operation command of the internal microcomputers 47, 49, 51. The microcomputer 4
7, 49, and 51 are connected to each other by signal lines, and perform control operations in cooperation with each other while exchanging information and the like as described in the second embodiment.

On the other hand, in the case of the present embodiment, each of the microcomputers 47, 49, and 51 includes one signal line 53 for a runaway monitoring signal and one signal line 5 for a reset signal.
5 are connected in a loop. Each of the microcomputers 47, 49, and 51 generates a runaway monitoring signal as described in the first embodiment. 49 and 51.

Each microcomputer 47, 49, 51
, The transmission timing of the runaway monitor signal is different, that is, the runaway monitor signal is sequentially transmitted from the left microcomputer to the right microcomputer, so-called a runaway monitor signal is looped in a loop.

Each microcomputer 47, 49, 51
Sets the runaway determination timer, and within the set time,
The microcomputer 47 or 49 or 51 on the left side
It is determined whether or not the microcomputer 47, 49, or 51 on the left is in a runaway state by determining whether or not a runaway monitoring signal is transmitted from the microcomputer. The set time of the runaway determination timer is determined by the time after the other two microcomputers on the left determine the runaway monitor signal, generate a new runaway monitor signal, and sequentially transmit to the own microcomputer. This is a time obtained by adding some extra time to the time, and is a preset time.

When the runaway state is detected after the set time of the runaway determination timer has elapsed, a reset signal is transmitted to the runaway microcomputer 47, 49, or 51 on the left side.

Each of the microcomputers 47, 49,
Each of the circuits 51 includes a voltage adjusting circuit 57 as described in the first embodiment.

Next, the operation of this embodiment will be described.

First, the case where no runaway state occurs in the loop will be described. For example, if the microcomputer 47 first sends a runaway monitoring signal to the microcomputer 49 on the right, the microcomputer 47 sets a runaway determination timer and waits for the microcomputer 51 to send a runaway monitoring signal. .

On the other hand, the microcomputer 49 detects that the microcomputer 47 on the left side is not in a runaway state by receiving the runaway monitoring signal, and transmits a runaway monitoring signal to the microcomputer 51 on the right side. And
Set the timer for runaway judgment and
Wait for the runaway monitoring signal from 7 to be transmitted.

Also, the microcomputer 51 detects that the microcomputer 49 on the left is not in a runaway state by receiving the runaway monitor signal, and transmits a runaway monitor signal to the microcomputer 47 on the right. Then, a runaway determination timer is set, and the microcomputer 49 waits for a runaway monitoring signal to be transmitted.

When the microcomputer 47 receives a runaway monitoring signal from the microcomputer 51 on the left within the set time of the timer for determining runaway, the microcomputer 47 detects that the microcomputer 51 on the left is normal. A runaway monitoring signal is transmitted to the microcomputer 49 on the right. Then, a runaway determination timer is set.

As described above, each microcomputer 4
7, 49 and 51 sequentially repeat a cycle of receiving the runaway monitoring signal from the microcomputer on the left side, detecting the presence or absence of a runaway state by the runaway monitoring signal at the time of reception, and transmitting the runaway monitoring signal.

Next, a case where the microcomputer 49 is in a runaway state will be described. Microcomputer 4
Even if 7 transmits a runaway monitoring signal to the microcomputer 49 on the right side, the microcomputer 49 is in a runaway state and cannot detect the runaway state of the microcomputer 47 on the left side. In addition, a runaway monitoring signal cannot be transmitted to the microcomputer 51 on the right.

In this case, the microcomputer 51 determines that the runaway monitoring signal has not been transmitted from the microcomputer 49 on the left after the set time of the runaway determination timer has elapsed and within the set time. Detect that it is in the state. Then, a reset signal is transmitted to the microcomputer 49 on the left side, and the microcomputer 49 on the left side waits for a runaway monitoring signal to be transmitted.

As described above, when the microcomputer 49 on the left is reset and recovers to a normal state, and the microcomputer 49 on the left sends a runaway monitoring signal again, the runaway state is set in the loop as described above. Move on to the operation when no error occurs.

According to the present embodiment, the microcomputers 47, 49 and 51 are connected in a loop by one signal line 53 for runaway monitoring signal and one signal line 55 for reset signal. Since the runaway monitoring signal is sequentially sent to a microcomputer located in the next direction in one direction to make a round, the number of signal lines to be used is reduced as a runaway countermeasure device, which is further configured as compared with the second embodiment. Can be simplified.

[0081]

According to the first aspect of the present invention, a runaway monitoring signal is transmitted and received between a plurality of microcomputers,
A runaway state is detected, and when a runaway state occurs, a signal to initialize the microcomputer is sent from the healthy microcomputer to the runaway microcomputer, so the microcomputer's runaway state is automatically detected and quickly resolved. Thus, quick normalization of the control device can be achieved.

According to the second aspect of the present invention, since the reset signal is used as a signal for initializing the runaway microcomputer, the above effect can be obtained with a simple configuration.

According to the third aspect of the present invention, the power control signal for turning off and then turning on the power is used as the signal for resetting the runaway microcomputer to the initial state.
The above-mentioned effect can be reliably obtained by setting the runaway microcomputer to the initial state.

According to the fourth aspect of the present invention, a runaway monitor signal is transmitted between adjacent microcomputers connected in a loop to detect the presence or absence of a runaway state. Since the microcomputer sends a signal for initializing to the runaway microcomputer, the above effect can be obtained with a simple configuration of the entire apparatus.

According to the fifth aspect of the present invention, a runaway monitor signal is sequentially transmitted to microcomputers connected in a loop and located adjacent to each other in one direction to detect the presence or absence of a runaway state and to generate a runaway state. At this time, since a signal for initializing is transmitted from the healthy microcomputer to the runaway microcomputer, the number of signal lines used can be reduced, and the above effect can be obtained with a simpler configuration.

According to the sixth aspect of the present invention, since the voltage adjusting circuit is provided in the above-mentioned invention, even if the operating voltages of the microcomputers are different, the communication can be reliably performed in the microcomputers. It does not hinder the determination of the state of the runaway monitoring signal.

[Brief description of the drawings]

FIG. 1 is an explanatory diagram illustrating a configuration of a first exemplary embodiment of the present invention.

FIG. 2 is an explanatory diagram illustrating a relationship between a runaway monitoring signal and a set time of a runaway determination timer in the first embodiment.

FIG. 3 is a flowchart illustrating the operation of the first embodiment.

FIG. 4 is an explanatory diagram illustrating a configuration of a second exemplary embodiment of the present invention.

FIG. 5 is an explanatory diagram illustrating a configuration of a third embodiment of the present invention.

[Explanation of symbols]

5, 7, 21, 23, 25, 41, 43, 45 Device to be controlled 1, 3, 27, 29, 31, 47, 49, 51 Microcomputer 9, 11, 37, 57 Voltage adjustment circuit 33, 35, 53 , 55 signal line

Claims (6)

[Claims] 1. A method for connecting a plurality of microcomputers,
In a control device in which each microcomputer performs a control operation in cooperation with each other, a runaway monitoring signal is transmitted and received between each of the microcomputers to detect whether or not the microcomputer is in a runaway state. A runaway countermeasure device for a control device, wherein a signal for initializing the runaway microcomputer is transmitted from the computer to the runaway microcomputer. 2. Connecting a plurality of microcomputers,
In a control device in which each microcomputer performs a control operation in cooperation with each other, a runaway monitoring signal is transmitted and received between each of the microcomputers to detect whether or not the microcomputer is in a runaway state. A runaway countermeasure device for a control device, wherein a reset signal for resetting the runaway microcomputer is transmitted from the computer to the runaway microcomputer. 3. Connecting a plurality of microcomputers,
In a control device that performs control operations in cooperation with each microcomputer, a runaway monitoring signal is transmitted and received between each of the microcomputers, and the presence or absence of a runaway state of the other microcomputer is detected. A runaway countermeasure device for a control device, wherein a power supply control signal for turning off and then turning on the power of the runaway microcomputer is transmitted from the healthy microcomputer to the runaway microcomputer. 4. Connecting a plurality of microcomputers,
In a control device in which each microcomputer cooperates to perform a control operation, the plurality of microcomputers are connected in a loop, and the runaway monitoring signals are transmitted and received between the adjacent microcomputers, and the microcomputers on the other side are connected to each other. Detecting the presence or absence of a runaway state of the controller, and transmitting a signal for initializing the runaway microcomputer from the healthy microcomputer to the runaway microcomputer when the runaway state occurs. Countermeasure device. 5. Connecting a plurality of microcomputers,
In a control device that performs control operations in cooperation with each microcomputer, the plurality of microcomputers are connected in a loop, and each of the microcomputers transmits a runaway monitoring signal to a microcomputer located adjacent to each other in one direction. Each of them detects whether there is a runaway state of the next microcomputer in the other direction, and when a runaway state occurs, transmits a signal to initialize the runaway microcomputer from the healthy microcomputer to the runaway microcomputer. A runaway control device for a control device, characterized in that: 6. The microcomputer according to claim 1, further comprising a voltage adjusting circuit that adjusts a voltage of a signal at the time of communication so as to be suitable for its own operating voltage.
Runaway control device for a control device according to any one of the above.