Control device and control method
A control device includes a first circuitry that executes a process for communicating with another device, and a second circuitry that executes a reset of the first circuitry. The first circuitry executes an initial diagnosis which is a self-diagnosis immediately after activation of the first circuitry, and outputs a predetermined signal to the second circuitry when the first circuitry is determined to be normal in the initial diagnosis. The second circuitry prohibits a communication output caused by an operation of the first circuitry to the other device in at least a time period from a start of the reset of the first circuitry to a timing at which the predetermined signal is output from the first circuitry for the first time after the start of the reset. The second circuitry permits the communication output when confirming that the predetermined signal is output.
1 . A control device comprising:
a first circuitry configured to execute a process for communicating with at least another device; and
a second circuitry configured to transmit a reset signal to the first circuitry to execute a reset of the first circuitry when a predetermined reset condition relating to the first circuitry is satisfied, wherein
the first circuitry is further configured to
stop and then activate based on the rest signal,
execute an initial diagnosis, which is a self-diagnosis immediately after activation of the first circuitry, the initial diagnosis including determining whether an operation of the first circuitry is normal, and
output a predetermined signal indicating a normal operation of the first circuitry to the second circuitry when the operation of the first circuitry is determined to be normal in the initial diagnosis, and
the second circuitry is further configured to
prohibit a communication output caused by the operation of the first circuitry to the other device during at least a time period from transmission of the reset signal to the first circuitry to receipt of the predetermined signal from the first circuitry, and
permit the communication output based on the receipt of the predetermined signal.
2 . The control device according to claim 1 , wherein:
the first circuitry is further configured to
execute periodically an operation diagnosis, which is a self-diagnosis during an operation of the first circuitry, when the operation of the first circuitry is determined to be normal in the initial diagnosis, and
output an abnormality notification signal to the second circuitry when the operation of the first circuitry is determined to be abnormal in the operation diagnosis, and
the second circuitry is further configured to
determine whether the abnormality notification signal has been received from the first circuitry after permitting the communication output, and
determine that the reset condition is satisfied when the abnormality notification signal is determined to have been received.
3 . The control device according to claim 1 , wherein:
the first circuitry is further configured not to output the predetermined signal when the operation of the first circuitry is determined to be abnormal in the initial diagnosis, and
the second circuitry is further configured to transmit the reset signal to the first circuitry to reset the first circuitry when the second circuitry has not received the predetermined signal from the first circuitry until a specified time elapses since the activation of the first circuitry.
4 . A method for prohibiting a communication output in a control device including a first circuitry and a second circuitry, the method comprising:
transmitting a reset signal from the second circuitry to the first circuitry to execute a reset of the first circuitry when a predetermined reset condition relating to the first circuitry is satisfied,
stopping and then activating the first circuitry based on the reset signal,
executing, by the first circuitry, an initial diagnosis of the first circuitry which is a self-diagnosis immediately after activation of the first circuitry, the initial diagnosis including determining whether an operation of the first circuitry is normal,
outputting, from the first circuitry to the second circuitry, a predetermined signal (WD) indicating a normal operation of the first circuitry to the second circuitry when the operation of the first circuitry is determined to be normal in the initial diagnosis,
prohibiting, by the second circuitry, the communication output caused by the operation of the first circuitry to another device during at least a time period from transmission of the reset signal to the first circuitry to receipt of the predetermined signal from the first circuitry, and
permitting, by the second circuitry, the communication output based on the receipt of the predetermined.