Vehicle control device

1. A vehicle control device that controls operation of a vehicle, the vehicle control device comprising:

first and second computing units that execute control computation for controlling the operation of the vehicle;

a memory diagnosis unit that diagnoses a shared storage area shared by the first and second computing units;

an auxiliary storage unit that stores a copy of data stored in an area to be diagnosed, the area being diagnosed by the memory diagnosis unit; and

an access destination setting unit that sets an access destination address in such a manner that while the memory diagnosis unit diagnoses the area to be diagnosed, the first and second computing units execute the control computation by using the copy stored in the auxiliary storage unit as an alternative to the data stored in the area to be diagnosed, wherein

the vehicle control device further includes an auxiliary storage device that is a storage device different from the shared storage device, and that has an auxiliary storage area, and

the auxiliary storage device is configured as a storage device having a reliability higher than a reliability of the shared storage device by being configured as an exclusive storage device in which while one of the computing units writes data, an access from the other computing unit is excluded.

2. The vehicle control device according to claim 1 , wherein

the memory diagnosis unit is configured as a memory diagnosis program that is provided with a processing function of diagnosing the shared storage area,

the first computing unit diagnoses the shared storage area by executing the memory diagnosis unit,

the vehicle control device further includes a notification unit for, when the first computing unit starts executing the memory diagnosis unit, notifying the access destination setting unit that the shared storage area is being diagnosed, and

when the access destination setting unit is notified by the notification unit that the shared storage area is being diagnosed, the access destination setting unit sets the access destination address in such a manner that the second computing unit accesses the auxiliary storage unit as an alternative to the area to be diagnosed.

3. The vehicle control device according to claim 2 , wherein

when the first computing unit completes the execution of the memory diagnosis unit, the notification unit notifies the access destination setting unit that the diagnosis for the shared storage area has been completed, and

when the access destination setting unit is notified by the notification unit that the diagnosis for the shared storage area has been completed, the access destination setting unit sets the access destination address in such a manner that the second computing unit accesses the area to be diagnosed, which is the area of shared storage that completed the diagnosis, as an alternative to the auxiliary storage unit.

4. The vehicle control device according to claim 1 , wherein

the vehicle control device includes a memory unit accessed by the first and second computing units, and

both of the shared storage area and the auxiliary storage unit are configured as storage areas included in the memory unit.

5. The vehicle control device according to claim 1 , wherein

the vehicle control device includes a shared storage device having the shared storage area,

the auxiliary storage unit is configured as the auxiliary storage area for storing the copy.

6. The vehicle control device according to claim 5 , wherein

the auxiliary storage device is configured by a storage device having a reliability higher than a reliability of the shared storage device.

7. The vehicle control device according to claim 1 , wherein

the shared storage area stores diagnosis count data that specifies the number of the areas to be diagnosed that are collectively diagnosed by the memory diagnosis unit,

the auxiliary storage unit has a storage capacity that is capable of storing the copies of the areas to be diagnosed, the number of which is larger than or equal to the number of the areas to be diagnosed specified by the diagnosis count data,

the memory diagnosis unit collectively diagnoses the areas to be diagnosed, the number of which is specified by the diagnosis count data, and

the access destination address setting unit sets the access destination address in such a manner that during a period after the memory diagnosis unit starts diagnosing the shared storage area until the memory diagnosis unit completes diagnosing the areas to be diagnosed, the number of which is specified by the diagnosis count data, the first and second computing units execute the control computation by using multiple copies of the access destination address, which is also stored simultaneously in the auxiliary storage unit as an alternative to the data stored in the area to be diagnosed.

8. The vehicle control device according to claim 1 , wherein

the shared storage area stores saving destination address data that describes an address at which the copy is stored in the auxiliary storage unit, and

the first and second computing units obtain the copy from the address in the auxiliary storage unit, the address being described by the saving destination address data.

9. The vehicle control device according to claim 8 , wherein

the auxiliary storage unit stores saving source address data that describes an address at which the area to be diagnosed is stored in the shared storage area, and

after the diagnosis for the shared storage area has been completed, the first computing unit obtains data stored at the address in the auxiliary storage unit, the address being described by the saving destination address data, and writes back the obtained data at the address described by the saving source address data.

10. The vehicle control device according to claim 1 , wherein

the memory diagnosis unit is configured as a memory diagnosis program that is provided with a processing function of diagnosing the shared area, and

the first and second computing units perform the diagnosis by executing the memory diagnosis unit in areas, to which the first and second computing units themselves write data respectively, in the shared storage area.

11. The vehicle control device according to claim 1 , wherein

the memory diagnosis unit is configured as a memory diagnosis program that is provided with a processing function of diagnosing the shared storage area, and

the first and second computing units perform the diagnosis by executing the memory diagnosis unit.