ELECTRONIC CONTROL APPARATUS AND METHOD
An electronic control apparatus comprises a microcomputer that incorporates a diagnosis circuit for a hardware resource and a processor. The processor of the electronic control apparatus is configured to, when the diagnosis circuit determines that the hardware resource has failed, substitute a function provided by the failed hardware resource with a function provided by another hardware resource.
1 .- 15 . (canceled)
16 . An electronic control apparatus comprising a microcomputer that incorporates a diagnosis circuit configured to determine whether a fault has occurred in a hardware resource for each group that provides the same function, and a processor,
the processor being configured to, when the diagnosis circuit determines that the hardware resource has failed, execute a diagnosis function of software to identify a failed portion of the hardware resource in a corresponding group and substitute a function provided by the failed portion with a function provided by another hardware resource.
17 . The electronic control apparatus according to claim 16 , wherein the processor is configured to, when the hardware resource, determined as having failed by the diagnosis circuit, is unused, prohibit substituting a function provided by the hardware resource with a function provided by another hardware resource.
18 . The electronic control apparatus according to claim 16 , wherein the processor is configured to, when the hardware resource comprises at least three timers, compare times measured by the at least three timers to identify a failed one of the three timers.
19 . The electronic control apparatus according to claim 16 , wherein the processor is configured to, when the hardware resource comprises a plurality of I/O circuits, compare an instruction value of each of the I/O circuits with a corresponding output value to identify a failed one of the I/O circuits.
20 . The electronic control apparatus according to claim 16 , wherein the processor is configured to, when the hardware resource comprises a nonvolatile memory, compare a value derived from data stored in a predetermined region of the nonvolatile memory with a reference value of the data stored in the predetermined region of the nonvolatile memory to identify the failed, predetermined region.
21 . The electronic control apparatus according to claim 16 , wherein the processor is configured to, when the hardware resource comprises a volatile memory, compare data written to a predetermined address of the volatile memory with data read from the predetermined address of the volatile memory to identify a failed address of the volatile memory.
22 . The electronic control apparatus according to claim 16 , wherein the processor is configured to, when the hardware resource comprises a timer, substitute a signal output from the timer with a signal output from an I/O circuit.
23 . The electronic control apparatus according to claim 16 , wherein the processor is configured to, when the hardware resource comprises a nonvolatile memory, offset an address to a failed, predetermined region to a substitute address to a reserved region that is allocated in the nonvolatile memory.
24 . The electronic control apparatus according to claim 16 , wherein the processor is configured to, when the hardware resource comprises a multicore processor, substitute a failed core with another core.
25 . An electronic control method comprising the step of utilizing a microcomputer incorporating a diagnosis circuit configured to determine whether a fault has occurred in a hardware resource for each group that provides the same function to, when the diagnosis circuit determines that the hardware resource has failed, execute a diagnosis function of software to identify a failed portion of the hardware resource in a corresponding group and substitute a function provided by the failed portion with a function provided by another hardware resource.
26 . The electronic control method according to claim 25 , wherein when the hardware resource, determined as having failed by the diagnosis circuit, is unused, the microcomputer prohibits substituting a function provided by the hardware resource with a function provided by another hardware resource.