Control system
View Patent ↗To offer a control system that is not only equipped with a high fail-safe function but also capable of avoiding erroneous failure detection. The CPU 110 outputs a drive signal DC for driving the load L according to the input signals from sensors S 1 and S 2 by means of the load drive element 120 . The monitor IC 150 detects abnormal condition of equipment and outputs the first reset signal RES 1 for resetting the CPU 110 and also outputs the second reset signal RES 2 when the first reset signal RES 1 has been outputted for a specified number of times. The compulsory turn-off circuit 160 stops the output to the load L according to the second reset signal RES 2 outputted from the monitor IC 150.
1. A control unit built in a casing of a vehicle automatic transmission, said control unit comprising:
a CPU which outputs a drive signal according to signals from at least one sensor for sensing vehicle operating parameters;
a load drive element which supplies a drive current to a load according to the drive signal;
a temperature sensor which detects a temperature of the control unit;
a monitor circuit which is connected to receive a periodic signal that is output from the CPU whenever the temperature detected by the temperature sensor is below a specified value and the CPU is in normal operation; and
a compulsory turn-off circuit which is connected between a control input terminal of the load drive element and ground potential; wherein,
the monitor circuit outputs a first reset signal to a reset terminal of the CPU when the CPU fails to output the periodic signal;
the monitor circuit outputs a second reset signal to the compulsory turn-off circuit when the number of the outputs of the first reset signal has reached a specified number;
upon receipt of the second reset signal, the compulsory turn-off circuit turns off the load drive element and stops the supply of drive current to the load, even if the CPU thereafter outputs said periodic signal; and
the number of the outputs of the first reset signals is cleared to zero when a key of a vehicle is turned on.
2. A control system according to claim 1 , wherein
the compulsory turn-off means interrupts the drive signal supplied to the load drive element.
3. A control system according to claim 1 , wherein
the specified number of times which is a condition of outputting the second reset signal is preselectable.
4. A control system according to claim 1 , wherein
the monitor circuit outputs the second reset signal when the first reset signal has been output for the specified number of times within a specified length of time.
5. A control system according to claim 1 , wherein
the monitor circuit sets a failure flag when the second reset signal is output.
6. A control unit built in a casing of a vehicle automatic transmission, said control unit comprising:
a CPU which outputs a drive signal according to signals from at least one sensor for sensing vehicle operating parameters;
a load drive element which supplies a drive current to a load according to the drive signal;
a temperature sensor which detects a temperature of the control unit;
a monitor circuit which is connected to receive a periodic signal that is output from the CPU whenever the temperature detected by the temperature sensor is below a specified value and the CPU is in normal operation; and
a compulsory turn-off circuit which is connected in series with said load drive element for interrupting the supply of drive current from said load drive element and said load; wherein,
the monitor circuit outputs a first reset signal to a reset terminal of the CPU when the CPU fails to output the periodic signal;
the monitor circuit outputs a second reset signal to the compulsory turn-off circuit when the number of the outputs of the first reset signal has reached a specified number;
upon receipt of the second reset signal, the compulsory turn-off circuit interrupts the supply of drive current to the load, even if the CPU thereafter outputs said periodic signal; and
the number of the outputs of the first reset signal cleared to zero when a key of a vehicle is turned on.
7. A control system according to claim 6 , wherein
the specified number of times which is a condition of outputting the second reset signal is preselectable.
8. A control system according to claim 6 , wherein
the monitor circuit output the second reset signal when the first reset signal has been output for the specified number of times within a specified length of time.
9. A control system according to claim 6 , wherein
the monitor circuit sets a failure flag on when the second reset signal is output.