Communication control system and method for supervising a failure
원문보기
IPC분류정보
국가/구분
United States(US) Patent
등록
국제특허분류(IPC7판)
G06F-011/00
G11C-029/00
출원번호
UP-0436463
(2003-05-13)
등록번호
US-7610521
(2009-11-10)
우선권정보
JP-2002-138287(2002-05-14)
발명자
/ 주소
Kuramochi, Yuichi
Manaka, Toshio
Saito, Hiroyuki
Yoshida, Tatsuya
출원인 / 주소
Hitachi, Ltd.
대리인 / 주소
Crowell & Moring LLP
인용정보
피인용 횟수 :
1인용 특허 :
3
초록▼
A communication control system has a plurality of control units that are connected via a communication bus to provide bidirectional communication. A control unit detects a failure when it occurs. Upon failure detection, the control unit generates a failure detection signal which operates a communica
A communication control system has a plurality of control units that are connected via a communication bus to provide bidirectional communication. A control unit detects a failure when it occurs. Upon failure detection, the control unit generates a failure detection signal which operates a communication signal cutoff means to cut off the communication signal transmission from the control unit. In accordance with the communication signal reception state in a control unit other than the control unit in which the failure is detected, the former control unit identifies a failure occurrence in the latter faulty control unit.
대표청구항▼
What is claimed is: 1. A communication control system used for distributed control, comprising a plurality of control units which are connected via a communication bus to provide bidirectional communication, wherein each of said control units includes a main CPU, a power supply IC configured to det
What is claimed is: 1. A communication control system used for distributed control, comprising a plurality of control units which are connected via a communication bus to provide bidirectional communication, wherein each of said control units includes a main CPU, a power supply IC configured to detect a constant-voltage failure in a power supply providing a constant voltage output and a constant-voltage failure output signal, which is generated when failure is detected in the power supply, and a failure detection means for detecting a failure in the main CPU when failure occurs and for generating a failure detection signal, and a communication signal cutoff means which operates according to said failure detection signal generated by said failure detection means or the constant-voltage failure output signal from the power supply IC, and cuts off the transmission of a communication signal from the control unit detecting the failure in the main CPU or in the power supply. 2. The communication control system according to claim 1, wherein the failure detection means comprises a supervisory IC for supervising the operation of the main CPU. 3. The communication control system according to claim 1, said communication control system is based on a CPU used for a CAN controller and a CAN driver used for a communication interface. 4. The communication control system according to claim 1, said communication control system is organized so that a failure occurrence of at least one of said controls units can be identified by any another control unit, which no failure is detected, in accordance with the communication signal reception state in said another control unit. 5. The communication control system according to claim 1, said communication control system is organized so that a failure occurrence of at least one of said control units can be identified by any another control unit, in which no failure is detected, in accordance with the communication signal reception state in said another control unit, wherein each of said control units is equipped with a warning means; said another control unit, which has identified said failure occurrence, causes the warning means of itself to operate when the failure occurred in any of said control units. 6. The communication control system according to claim 1, said communication control system is organized so that a failure occurrence of at least one of said control units can be identified by any other control unit in which no failure is detected, in accordance with the communication signal reception state in said another control unit, wherein said any other control unit which has identified said failure occurrence causes the operation of an actuator operated by said another control unit to stop when the failure occurred in any of said control units. 7. The communication control system according to claim 1, wherein said communication signal cutoff means cuts off the transmission of a communication signal from the control unit, in which a failure is detected, by disconnecting the communication line. 8. The communication control system according to claim 1, wherein said communication signal cutoff means cuts off the transmission of a communication signal from the control unit, in which a failure is detected, by disconnecting the transmission line of a communication section within said control unit. 9. The communication control system according to claim 1, wherein said communication signal cutoff means cuts off the transmission of a communication signal from the control unit, in which a failure is detected, by shutting off the power supply to a communication interface of said control unit. 10. The communication control system according to claim 1, wherein said communication signal cutoff means cuts off the transmission of a communication signal from the control unit, in which a failure is detected, by placing in a sleep mode the communication interface of said control unit. 11. A method for supervising a failure in a communication control system used for distributed control, comprising a plurality of control units which are connected via a communication bus to provide bidirectional communication, comprising: detecting one of a main CPU failure in one of the control units by a failure detection means and generating a failure detection signal and a power supply IC failure in said one of the control units by detecting with a power supply IC, a constant-voltage failure in a power supply providing a constant-voltage output and then generating a constant-voltage failure output signal; and cutting off, upon failure detection in the main CPU or in the power supply via the failure detection signal or the constant-voltage failure output signal, the transmission of a communication signal from the control unit in which the failure is detected. 12. The method according to claim 11, further comprising identifying a failure occurrence in said control unit by any other control unit in which no failure occurs from the communication signal reception state in said any other control unit. 13. The method according to claim 11, further comprising: identifying a failure occurrence in said control unit by any other control unit in which no failure occurs, in accordance with the communication signal reception state in said control unit; and operating a warning means of said another control unit which has identified said failure occurrence when the failure occurred in any of said control units. 14. The method according to claim 11, further comprising: identifying a failure occurrence in said control unit by another control unit in which no failure occurs in accordance with the communication signal reception state in said any other control unit; and stopping an actuator controlled by said another control unit which has identified said failure occurrence when the failure occurred in any of said control units. 15. The method according to claim 11, further comprising: identifying a failure occurrence in said control unit by any other control unit in which no failure occurs in accordance with the communication signal reception state in said any other control unit; and cutting off the transmission of a communication signal upon failure detection by disconnecting the communication line. 16. The method according to claim 11, further comprising: identifying a failure occurrence in said control unit by any other control unit in which no failure occurs in accordance with the communication signal reception state in said any other control unit; and cutting off, upon failure detection, the communication signal transmission by disconnecting the transmission line of a communication section in said control unit in which a failure is detected. 17. The method according to claim 11, further comprising: identifying a failure occurrence in said control unit by any other control unit in which no failure occurs from the communication signal reception state in said any other control unit; shutting off, upon failure detection, the power supply to a communication interface section in said control unit in which a failure is detected; and cutting off the communication signal transmission from the control unit in which a failure is detected. 18. The method according to claim 11, further comprising: identifying a failure occurrence in said control unit by any other control unit in which no failure occurs from the communication signal reception state in said any other control unit; and cutting off the transmission of a communication signal from the control unit in which a failure is detected by placing in a sleep mode the communication interface of said control unit. 19. A communication control system, comprising a plurality of control units which are connected via a communication bus to provide bidirectional communication, wherein each of said control units includes a main CPU, a power supply IC for said main CPU, a first failure detection means for detecting a failure in said main CPU when failure occurs and for generating a failure detection signal, said power supply IC detecting a constant-voltage failure in a power supply and generates a constant-voltage failure output signal, and a communication signal cutoff means which operates according to the failure detection signal generated by said first failure detection means or said constant-voltage failure output signal from the power supply IC to cut off the transmission of a communication signal from said main CPU having the failure, and wherein said first failure detection means, power supply IC, and said communication signal cutoff means are constructed independent from the main CPU. 20. The communication control system according to claim 19, wherein said communication signal cutoff means is constructed to provide an output from an AND circuit that receives said failure detection signal and said constant-voltage failure output signal.
연구과제 타임라인
LOADING...
LOADING...
LOADING...
LOADING...
LOADING...
이 특허에 인용된 특허 (3)
Kamimura, Hiroshi; Ito, Tetsuo, Distributed control system.
※ AI-Helper는 부적절한 답변을 할 수 있습니다.