JP2013082388A - Vehicle electronic control device - Google Patents

Abstract

In an electronic control device for a vehicle, the number of times data is written to a nonvolatile memory after the vehicle is in an IG (ignition) off state is reduced.
A write process (S150) for writing data to be backed up into a rewritable nonvolatile memory is performed on condition that the vehicle is in an IG off state (S110: YES), and the write process ends. After that, in the electronic control device that performs the power shutoff process (S160) for stopping the supply of the power supply voltage to itself, when detecting that the vehicle is in the IG off state (S110: YES), Based on the seat belt signal indicating whether or not the driver is wearing the seat belt, it is determined whether or not the driver has an intention to get off (S140). Then, when the seat belt signal indicates “not worn” and it is determined that the driver has the intention to get off (S140: YES), the writing process (S150) is performed. .
[Selection] Figure 2

Description

  The present invention relates to a vehicular electronic control device that performs processing for writing data to be backed up in a nonvolatile memory and then stopping power supply to itself when the vehicle is in an ignition-off state.

  For example, as an electronic control device for controlling a vehicle engine, a non-volatile memory capable of electrically rewriting data is provided, and when a vehicle ignition switch is turned on, a power supply voltage is supplied from a battery to operate. When it is detected that the switch is turned off, backup target data such as learning data and failure diagnosis information (that is, data that needs to be saved) is written in the nonvolatile memory, and after the writing process is completed, the data is transferred to the device. There is known one that performs a power shut-off process to stop the supply of the power supply voltage (see, for example, Patent Document 1).

JP 2008-140373 A

  In recent years, some vehicle drivers stop the engine by performing an ignition-off operation even when the vehicle is stopped for a short time such as waiting for a signal to improve fuel economy and protect the environment (ie, manual idling stop). The number of people who perform operations is increasing.

  However, when such an operation is performed, in the conventional electronic control device, the number of times data is written to the nonvolatile memory (in practice, the number of times data is erased and rewritten) is increased. There is a possibility that the guaranteed number of times of writing to the memory will be exceeded.

  The ignition-off operation is an operation performed by the driver to turn the vehicle into an ignition-off state, for example, an operation for turning off the ignition switch by twisting a vehicle key inserted in the ignition key cylinder, For example, an operation of pressing a button of the engine start / stop push switch for a certain period of time. The ignition off state is a state in which the battery voltage is not supplied to the ignition system power line in the vehicle. Conversely, the ignition on state is a state in which the battery voltage is supplied to the ignition system power line in the vehicle. In this state, all the electrical components of the vehicle are operable.

  Therefore, an object of the present invention is to reduce the number of times data is written to a nonvolatile memory after the vehicle is in an ignition-off state in the vehicle electronic control device.

  The vehicle electronic control device according to the first aspect of the present invention operates when a vehicle power source voltage is supplied from the vehicle battery when the vehicle is in an ignition-on state by an ignition-on operation of the vehicle driver. The ignition-on operation is an operation performed by the driver to turn the vehicle into an ignition-on state.For example, an operation for turning on an ignition switch by twisting a key of the vehicle inserted in the ignition key cylinder, For example, an operation of pressing a button of an engine start / stop push switch.

  In addition, the vehicle electronic control device includes a nonvolatile memory capable of rewriting data, a state detecting means for detecting that the vehicle has been turned off by the driver's operation for turning off the ignition, and the vehicle being turned off. And writing means for performing a writing process for writing data to be backed up in the nonvolatile memory on condition that the state detection means detects that the state has been reached. Then, after the writing process by the writing unit is completed, the vehicle electronic control device performs a power-off process for stopping the supply of the power supply voltage to the device.

  Here, in particular, the electronic control device for a vehicle according to claim 1 is provided with an unwillingness determination means for determining whether or not the driver has a willingness to get off (get out of the vehicle). Further, the writing means is provided on the condition that the state detecting means detects that the vehicle is in the ignition-off state, and that the driver has determined that the driver is willing to get off the vehicle. In addition, a writing process is performed.

  For this reason, even if the vehicle is in an ignition-off state by the driver's ignition-off operation, the writing process is not performed unless the driver's intention to get off is determined by the getting-off intention determination means. .

  In other words, the vehicle electronic control device is configured so that even if the driver performs the ignition-off operation, if the driver does not determine that the driver is willing to get off the vehicle, the driver does not have to wait for a short time. In order to start the engine again, it is presumed that there is a possibility of performing an ignition-on operation, so that data is not written to the nonvolatile memory, and therefore the power-off process is not performed. Therefore, the number of times data is written to the nonvolatile memory after the vehicle is in the ignition off state can be reduced (reduced) as compared with the conventional device.

  Next, the vehicle electronic control device according to claim 2 is the vehicle electronic control device according to claim 1, wherein the vehicle detection controller detects that the vehicle is in the ignition off state, and then the vehicle electronic control device is operated by the dismounting intention determination device. When the continuation time during which it is not determined that the person has an intention to get off reaches a predetermined threshold value, the writing means is allowed to perform the writing process regardless of the determination result of the getting-off will determination means. It is like that. When the writing means finishes the writing process, a power shut-off process is performed, and the supply of the power supply voltage from the battery to the device is stopped.

  According to this configuration, the device is prevented from continuing to operate indefinitely after the vehicle is in the ignition off state. Therefore, it is possible to avoid battery exhaustion.

  By the way, the getting-off intention determining means determines whether or not the driver has the intention to get off, for example, based on a seat belt signal indicating whether or not the driver is wearing the seat belt. Can be configured.

  In this case, for example, the determination condition that the seat belt signal indicates “the seat belt is not worn (the driver does not wear the seat belt)” or the seat belt signal is “the seat belt worn (the driver It can be determined that the driver has a willingness to get off if the determination condition that the state indicating “wearing the seat belt” is changed to the state indicating “no seat belt” is satisfied. it can. In the following, such a determination condition based on the seat belt signal is referred to as a seat belt determination condition.

  The getting-off intention determining means is configured to determine whether or not the driver has an intention to get off based on, for example, a door opening / closing signal indicating whether or not the driver's seat door of the vehicle is closed. can do.

  In that case, for example, the determination condition that the door open / close signal indicates “door open (driver's door is open)” or the door open / close signal is “door closed (driver's door closed)”. Is a condition that changes from a state indicating "door open" to a state indicating "door open", or a state in which the door opening / closing signal changes from a state indicating "door closed" to a state indicating "door open" and further indicates "door closed" If the determination condition that it has changed to is satisfied, it can be determined that the driver has the intention to get off. Hereinafter, the determination condition based on such a door opening / closing signal is referred to as a door determination condition.

  Further, the get-off intention determination means determines whether or not the driver has an intention to get off, for example, based on a seating sensor signal indicating whether or not the driver is seated in the driver's seat of the vehicle. It can be constituted as follows.

  In this case, for example, the determination condition that the seating sensor signal indicates “not seated (the driver is not seated in the driver's seat)” or the seating sensor signal is “seat (the driver is seated in the driver's seat). If the determination condition that the state has changed from the state indicating “to be seated” to the state indicating “not seated” is satisfied, it can be determined that the driver is willing to get off. Hereinafter, such a determination condition based on the seating sensor signal is referred to as a seating determination condition.

  Further, the get-off intention determination means determines whether the driver has the intention to get off, for example, a radio signal transmitted from a portable device carried by the driver is a radio mounted on the vehicle. It can be configured to make a determination based on whether or not it is received by the communication device.

  In this case, for example, if the determination condition that the wireless signal from the portable device is received by the wireless communication device is changed to a state where the wireless signal cannot be received by the wireless communication device is satisfied, the driver It can be determined that the Hereinafter, the determination condition based on such a radio signal is referred to as a radio signal determination condition.

  The getting-off intention determining means determines whether or not the driver has an intention to get off, for example, based on a key insertion signal indicating whether or not a key is inserted into the ignition key cylinder of the vehicle. It can be constituted as follows.

  In this case, for example, the determination condition that the key insertion signal indicates “key non-insertion (no key is inserted)”, or the key insertion signal is “key insertion (key is inserted)”. If the determination condition that the state has changed to the state indicating “key not inserted” is satisfied, it can be determined that the driver is willing to get off. Hereinafter, such a determination condition based on the key insertion signal is referred to as a key determination condition.

Moreover, as a structure of alighting will determination means, each example mentioned above may be combined suitably, If it does in that way, the determination precision of alighting will can be improved.
For example, the get-off intention determining means may drive the vehicle if any two or more of the seat belt determination condition, the door determination condition, the seating determination condition, and the wireless signal determination condition are satisfied. It can be configured to determine that the person has an intention to get off. In addition, for example, the get-off will determination means may drive the vehicle if any two or more of the seat belt determination condition, the door determination condition, the seating determination condition, and the key determination condition are satisfied. It can be configured to determine that the person has an intention to get off.

It is a block diagram showing the structure of ECU (vehicle electronic control apparatus) of embodiment. It is a flowchart showing a shutdown control process. It is a time chart showing the effect | action of ECU.

  Hereinafter, an electronic control device for a vehicle according to an embodiment to which the present invention is applied will be described. The vehicle electronic control device of the present embodiment is, for example, an engine control device (hereinafter referred to as ECU) that controls the engine of the vehicle. In the following description, “IG” is an abbreviation for “ignition”.

  As shown in FIG. 1, the ECU 1 of the present embodiment is connected to a power supply line 7 connected to a positive terminal of a vehicle battery 3 via a power supply relay (hereinafter referred to as a main relay) 5. A battery voltage VB that is the voltage of the battery 3 is supplied from the power supply line 7. Hereinafter, the battery voltage VB input to the ECU 1 through the main relay 5 and the power supply line 7 is referred to as a battery voltage VBm.

  In the vehicle, when the driver turns on the IG switch 9 as a power switch, the battery voltage VB is supplied to the IG power line 11 via the IG switch 9 (that is, the vehicle is turned on). State). The voltage of the power supply line 11 is input to the ECU 1 as an IG signal indicating whether the IG switch 9 is on or off (it is also whether the vehicle is in the IG on state).

  The ECU 1 generates and outputs a constant power supply voltage Vm (for example, 5 V) from the battery voltage VBm as an operation power supply voltage input to the ECU 1 via the main relay 5 and the power supply line 7; , A microcomputer (microcomputer) 15 that executes various processes for controlling a control target (in this example, an engine), and a signal input from the outside of the ECU 1 is converted into a signal that can be input by the microcomputer 15. An input circuit 17 to be input to the microcomputer 15 and a main relay drive circuit 19 to turn on the main relay 5 are provided.

  The microcomputer 15 includes a CPU 21 that executes a program, a ROM 22 that stores a program executed by the CPU 21, a RAM 23 that stores calculation results by the CPU 21, an input / output interface (I / O) 24, and the like. For example, a flash memory 25 is provided. The microcomputer 15 operates with the power supply voltage Vm output from the power supply circuit 13.

  In the ECU 1, the IG signal, which is the voltage of the power supply line 11, is converted into an IG ON signal Si having a high level of 5V and a low level of 0V by the input circuit 17 and is input to the microcomputer 15.

  The main relay drive circuit 19 receives the IG ON signal Si from the input circuit 17 and the power holding signal Sh from the microcomputer 15. Then, if at least one of the IG ON signal Si and the power holding signal Sh is at an active level (high level in this example), the main relay drive circuit 19 energizes the coil of the main relay 5 to supply the main relay 5 Turn 5 on. Although not shown in the figure, the battery voltage VB is constantly supplied to the ECU 1 via a power supply line different from the power supply lines 7 and 11, and the main relay drive circuit 19 is always supplied. The battery voltage VB is used as a power source.

The ECU 1 performs the following power control.
First, when the IG switch 9 is turned on, the IG on signal Si becomes high level, and the main relay drive circuit 19 turns on the main relay 5. Then, the microcomputer 15 is activated upon receiving the power supply voltage Vm from the power supply circuit 13.

  When activated, the microcomputer 15 performs a power holding process for setting the power holding signal Sh to the main relay drive circuit 19 to a high level, so that the battery voltage VBm to the ECU 1 can be reduced even when the IG switch 9 is turned off. The supply (and hence the supply of the power supply voltage Vm to the microcomputer 15) is prevented from being stopped.

  Further, after being activated, the microcomputer 15 determines whether or not the IG switch 9 is on (whether or not the vehicle is in the IG on state) based on the level of the IG on signal Si. While it is determined to be on, processing for controlling the engine is performed. Further, when it is detected that the IG switch 9 is turned off (that is, the vehicle is in the IG off state), processing to be performed before the operation is stopped is executed, and then the power to the main relay drive circuit 19 is The holding signal Sh is set to a low level. In this embodiment, the processes to be performed before stopping the operation include at least an engine stop process described later and a writing process for writing data to be backed up in the flash memory 25.

  When the power holding signal Sh from the microcomputer 15 becomes low level, since the IG on signal Si is already at low level, the main relay 5 is turned off and the supply of the battery voltage VBm to the ECU 1 is stopped. Then, the microcomputer 15 stops operating, and this state is also a state where the ECU 1 stops operating.

  The ECU 1 is also supplied with a seat belt signal from a seat belt switch 31 that detects whether or not the seat belt of the driver's seat in the vehicle is in the mounted state, and the seat belt signal is input to the input circuit 17. Is input to the microcomputer 15. The seat belt signal is a signal indicating whether or not the driver is wearing a seat belt (specifically, a seat belt in the driver's seat). In this embodiment, when the driver is wearing the seat belt, the seat belt signal is at a high level, and when the driver is not wearing the seat belt (when not wearing), The seat belt signal goes low, but the signal level may be reversed.

  Next, the shutdown control process in the process executed by the microcomputer 15 (specifically, the process executed by the CPU 21) will be described with reference to the flowchart of FIG. Note that the shutdown control process of FIG. 2 is executed at regular time intervals of 4 ms or 8 ms, for example.

  As shown in FIG. 2, when starting the execution of the shutdown control process, the microcomputer 15 first determines in S110 whether or not the IG switch 9 is turned off based on the level of the IG ON signal Si, and the IG When it is determined that the switch 9 is not turned off (that is, when the IG on signal Si is at a high level and it is determined that the vehicle is in the IG on state), the shutdown control process is terminated as it is. In this case, various processes to be executed during the period in which the IG switch 9 is on, such as a control process for controlling the engine, are executed.

  On the other hand, when it is determined in S110 that the IG switch 9 is turned off (that is, when the IG on signal Si is at a low level and it is detected that the vehicle is in the IG off state). The process proceeds to S120.

  In S120, it is determined whether or not the post-engine stop processing in S130 described later has been completed. Specifically, after it is determined in S110 that the IG switch 9 has been turned off, it is determined whether or not the post-engine stop processing described later has already been executed. If it is determined in S120 that the post-engine stop process has not been completed, the process proceeds to S130, where the post-engine stop process is executed.

  Here, when the IG switch 9 is turned off and the vehicle is in the IG off state, the power supply from the IG power line 11 to the device (for example, an injector or an ignition device) for operating the engine is stopped. The engine stops. The post-engine stop processing in S130 is, for example, failure detection processing or learned value calculation processing that can only be performed after the engine is stopped. More specifically, as a failure detection process among the processes after the engine stop, for example, a path for recovering the evaporated gas (evaporative gas fuel generated in the fuel tank) from the engine fuel tank is blocked by an actuator. An evaporative gas leak detection process in which pressure is increased or decreased, pressure fluctuations in the path are detected by a sensor, and the airtightness (that is, the presence or absence of leak) of the path is inspected is conceivable. As the learning value calculation process in the post-engine stop process, for example, the electronic throttle is controlled to be fully closed, and the deviation between the actual position of the electronic throttle and the true fully closed position is A process for calculating a learning value used for correcting the control target position of the electronic throttle can be considered. Then, after executing such post-engine stop processing, the process proceeds to S140.

If it is determined in S120 that the post-engine stop processing has been completed, S130 is skipped and the process proceeds to S140.
In S140, it is determined based on the above-mentioned seat belt signal whether the driver has the intention to get off. For example, in S140, as the seat belt determination condition, it is determined whether or not the determination condition that the seat belt signal is in a state indicating “no seat belt” (“low level” in the present embodiment) is satisfied, If the belt signal indicates “no seat belt” (that is, if it is determined that the driver is not wearing the seat belt), it is determined that the driver has an intention to get off the vehicle. On the contrary, if the seat belt signal indicates “seat belt wearing” (in this embodiment, “high level”) (that is, if the driver determines that the seat belt is worn), the driver It is determined that has no intention to get off.

If it is determined in S140 that the driver has an intention to get off, the process proceeds to S150.
In S150, a writing process is performed in which backup target data, which is data to be stored even when the supply of the battery voltage VBm to the ECU 1 is stopped, is written to the flash memo 25. The data to be backed up written in the flash memory 25 is at least a learning value (learning data) and failure diagnosis information (information on the detected failure) obtained in the post-engine stop processing in S130. It may be a learning value or failure diagnosis information obtained by other processing executed during a period in which 9 is turned on.

  Then, when the writing process in S150 is completed, the process proceeds to the next S160, and a power cut-off process is performed so that the supply of the battery voltage VBm to the ECU 1 is stopped. In the present embodiment, as the power cut-off process, a process for setting the power holding signal Sh to the main relay drive circuit 19 to a low level is performed. Then, since the IG ON signal Si is already at the low level at that time, as described above, the main relay 5 is turned off, the supply of the battery voltage VBm to the ECU 1 is stopped, and the microcomputer 15 stops its operation. Will be.

If it is determined in S140 that the driver does not have an intention to get off, the process proceeds to S170.
In S170, the elapsed time since the determination that the IG switch 9 is turned off in S110 (that is, the fact that the vehicle is in the IG off state is detected in S110, and then in S140). It is a continuation time in which it is not determined that the driver is willing to get off, and it is determined whether or not the elapsed time after IG OFF is equal to or greater than a predetermined threshold (hereinafter also referred to as threshold time) Th. If the elapsed time after IG OFF is not equal to or greater than the threshold Th, the shutdown control process is terminated as it is.

  On the other hand, if it is determined in S170 that the elapsed time after IG-off has become equal to or greater than the threshold Th, the process proceeds to S150. For this reason, when the elapsed time after IG OFF reaches the threshold value Th, regardless of the determination result of S140 (that is, even if it is not determined that the driver has the intention to get off), in S150 Then, a writing process for writing the backup target data in the flash memory 25 is performed, and then a power shut-off process is performed in S160.

Next, the operation of the ECU 1 by executing the shutdown control process of FIG. 2 will be described using the time chart of FIG.
First, as shown in FIG. 3A, when the driver turns off the IG switch 9 and the vehicle is in the IG off state, the microcomputer 15 of the ECU 1 detects that (S110: YES) and described above. Processing after engine stop is performed (S130). This also applies to the cases shown in FIGS. 3B and 3C described later.

  Then, after the driver turns off the IG switch 9 and removes the seat belt before the above-described threshold time Th elapses, the seat belt signal indicates “seat belt not mounted” from the state where the seat belt signal indicates “seat belt mounted”. In the state shown, the microcomputer 15 of the ECU 1 determines that the driver has the intention to get off (S140: YES), and performs a writing process of writing the backup target data to the flash memo 25 (S150). When the writing process is completed, the power relay process is performed to turn off the main relay 5 (S160).

  As described above, when the microcomputer 15 of the ECU 1 determines that the IG switch 9 is turned off and the driver has the intention to get off based on the seat belt signal, the driver again within a short time. It is estimated that there is no possibility of turning on the IG switch 9 in order to start the engine, the writing process is performed, and then the power-off process is performed.

  Therefore, on the contrary, as shown in FIG. 3B, even if the driver turns off the IG switch 9, the seat belt signal remains “seat belt mounted” without removing the seat belt. If there is, the microcomputer 15 of the ECU 1 does not determine that the driver has the intention to get off (S140: NO), and does not perform the writing process and the power-off process. If the driver turns on the IG switch 9 again before the threshold time Th elapses after the IG switch 9 is turned off, the microcomputer 15 determines “NO” in S110 of FIG. After that, processing (such as control processing for controlling the engine) to be executed while the IG switch 9 is on is performed.

  Further, as shown in FIG. 3 (C), after the driver turns off the IG switch 9, the threshold time Th remains in a state where the seat belt signal indicates “seat belt wearing” without removing the seat belt. If it has elapsed, the microcomputer 15 of the ECU 1 determines “YES” in S170 of FIG. In this case, the microcomputer 15 performs the writing process in S150 of FIG. 2 without determining that the driver has the intention to get off (determined “YES” in S140). (S170: YES → S150), and after the completion of the writing process, a power shut-off process is performed to turn off the main relay 5 (S160).

For this reason, it is prevented that the ECU 1 continues to operate indefinitely after the vehicle is in the IG off state, and the battery can be prevented from running out.
As described above, the ECU 1 according to the present embodiment detects that the vehicle is in the IG off state and determines that the driver is willing to get off the write process ( (Processing for writing data into the flash memory 25).

  That is, even if the driver turns off the IG switch 9, if the driver does not determine that he / she wants to get off, the driver turns the IG switch 9 in order to start the engine again within a short time. Assuming that there is a possibility of turning on, the writing process is not performed and the power-off process is not performed.

Therefore, according to the ECU 1, the number of times data is written to the flash memory 25 after the vehicle is in the IG off state can be reduced (reduced).
Further, in the ECU 1 of the present embodiment, after detecting that the vehicle is in the IG off state, a duration time (elapsed time after the IG off) that is not determined that the driver has the intention to get off is the threshold Th. Since the writing process is performed and the power shut-off process is performed thereafter, it is possible to avoid battery exhaustion as described above.

  In the above embodiment, the operation for turning on the IG switch 9 corresponds to an example of an operation for turning on the ignition, and the operation for turning off the IG switch 9 corresponds to an example of an operation for turning off the ignition. Further, the microcomputer 15 corresponds to an example of each of a state detection unit, a writing unit, and a get-off intention determination unit. In particular, the microcomputer 15 that executes the process of S110 in FIG. 2 is an example of a state detection unit, the microcomputer 15 that executes the process of S150 of FIG. 2 is an example of a writing unit, and the process of S140 of FIG. The microcomputer 15 that executes is an example of an unwillingness determination means. 2 corresponds to an example of a power-off process, and the process of shifting from S170 to S150 in FIG. 2 corresponds to an example of a “permit writing process” process. .

Next, a modification of the above embodiment will be described.
[Modification 1]
In S140 of FIG. 2, it is determined whether or not a determination condition that the seat belt signal has changed from a state indicating “seat belt wearing” to a state indicating “seat belt non-wearing” is satisfied as the seat belt determination condition, If the determination condition is satisfied, it may be determined that the driver has an intention to get off.

[Modification 2]
A door opening / closing signal indicating whether the driver's seat door is closed or not, which is a signal from a door switch that is turned on / off in response to opening / closing of the driver's seat door of the vehicle, is input to the microcomputer 15 of the ECU 1. To. In S140 of FIG. 2, if it is determined that the door determination condition described above is satisfied based on the door opening / closing signal, it may be determined that the driver has an intention to get off.

[Modification 3]
A seating sensor signal, which is a signal from a seating sensor provided in the driver's seat of the vehicle and indicates whether the driver is seated in the driver's seat, is input to the microcomputer 15 of the ECU 1. Then, in S140 of FIG. 2, if it is determined that the above-described seating determination condition is satisfied based on the seating sensor signal, it may be determined that the driver has an intention to get off.

[Modification 4]
An electronic key (which is generally called a smart key or intelligent key) as a portable device carried by the driver and a wireless communication device mounted on the vehicle perform predetermined communication to unlock the door. In the case of a vehicle for which locking or engine start permission is performed, a reception state signal indicating whether or not a wireless signal transmitted from an electronic key suitable for the vehicle is received by the wireless communication device on the vehicle side, For example, the signal is input from the wireless communication device to the microcomputer 15 of the ECU 1. In S140 of FIG. 2, if it is determined that the above-described wireless signal determination condition is satisfied based on the reception state signal, it may be determined that the driver has an intention to get off. good.

[Modification 5]
A signal from a key insertion switch for detecting whether or not a key is inserted into the ignition key cylinder of the vehicle and indicating whether or not a key is inserted into the ignition key cylinder is a microcomputer 15 of the ECU 1. To be entered. Then, in S140 of FIG. 2, if it is determined that the above-described key determination condition is satisfied based on the key insertion signal, it may be determined that the driver has an intention to get off.

[Modification 6]
In S140 of FIG. 2, if any two or more of the above-described determination conditions are satisfied, it may be determined that the driver has an intention to get off. In that case, the number and combination of the determination conditions for determining whether or not the condition is satisfied can be determined as appropriate.

[Modification 7]
In the embodiment described above, the IG switch 9 is a switch that is turned on or off by twisting a vehicle key inserted in the ignition key cylinder of the vehicle driver's seat. The vehicle to be operated may be a vehicle that does not include the ignition key cylinder and the IG switch 9. For example, when the driver operates the button of the engine start / stop push switch, the ignition power source is turned on / off ( That is, it may be a push switch type vehicle in which the battery voltage VB is supplied / not supplied to the IG power line 11 and the starter is driven.

  In the case of the push switch type vehicle, the supply / non-supply of the battery voltage VB to the IG power supply line 11 is switched or the starter is controlled according to the combination of the operation of the push switch, the brake pedal, etc. by the driver. There is an electronic control device (hereinafter referred to as a push start ECU). For this reason, in the case of a push switch type vehicle, in FIG. 1, the IG power line 11 is turned on / off by the switch means in the push start ECU or the push start ECU instead of the IG switch 9. The battery voltage VB is supplied via the relay that is turned off, and other configurations and processes are the same as those in the above embodiment.

  As mentioned above, although one Embodiment of this invention was described, this invention is not limited to such Embodiment at all, Of course, in the range which does not deviate from the summary of this invention, it can implement in a various aspect. .

  For example, the driver's seat of the vehicle is photographed by a camera, and in S140 of FIG. 2, the driver's action is analyzed from the image data photographed by the camera, and it is determined whether or not the driver is willing to get off. You may judge.

Further, the nonvolatile memory capable of rewriting data is not limited to the flash memory 25 but may be, for example, an EEPROM.
Further, the control target of the ECU 1 is not limited to the engine, and may be anything that is controlled when the vehicle is in the IG on state, such as a transmission or an air conditioner.

DESCRIPTION OF SYMBOLS 1 ... ECU (electronic controller for vehicles), 3 ... Battery, 5 ... Main relay 7, 11 ... Power supply line, 9 ... IG (ignition) switch 13 ... Power supply circuit, DESCRIPTION OF SYMBOLS 15 ... Microcomputer, 17 ... Input circuit 19 ... Main relay drive circuit, 21 ... CPU21, 22 ... RAM22
23 ... RAM 23, 24 ... Input / output interface (I / O)
25 ... Flash memory, 31 ... Seat belt switch

Claims (7)

When the vehicle is in an ignition-on state due to the ignition-on operation of the vehicle driver, the power supply voltage for operation is supplied from the battery of the vehicle to operate,
Non-volatile memory that can rewrite data,
State detecting means for detecting that the vehicle is in an ignition-off state by the driver's ignition-off operation;
Writing means for performing a writing process of writing data to be backed up in the nonvolatile memory on the condition that the state detection means detects that the vehicle is in an ignition-off state,
In the vehicle electronic control device that performs a power shut-off process for stopping the supply of the power supply voltage after the writing process by the writing means is completed,
It is provided with an unwillingness determination means for determining whether or not the driver has an intention to get off,
The writing means detects that the vehicle is in an ignition-off state by the state detecting means, and has determined that the driver has the intention to get off by the getting-off intention determining means. Performing the writing process on the condition of
An electronic control device for a vehicle. The vehicle electronic control device according to claim 1,
After the state detecting means detects that the vehicle is in the ignition-off state, a continuation time during which the driver is not determined to have the intention to get off reaches a predetermined threshold. If so, regardless of the determination result of the get-off intention determination means, permit the writing means to perform the writing process,
An electronic control device for a vehicle. The electronic control device for a vehicle according to claim 1 or 2,
The alighting will determination means includes
Determining whether or not the driver is willing to get off based on a seat belt signal indicating whether or not the driver is wearing a seat belt;
An electronic control device for a vehicle. In the vehicle electronic control device according to any one of claims 1 to 3,
The alighting will determination means includes
Determining whether the driver is willing to get off based on a door opening / closing signal indicating whether the driver's seat door of the vehicle is closed;
An electronic control device for a vehicle. In the vehicle electronic control device according to any one of claims 1 to 4,
The alighting will determination means includes
Determining whether or not the driver is willing to get off based on a seating sensor signal indicating whether or not the driver is seated in the driver's seat of the vehicle;
An electronic control device for a vehicle. The vehicle electronic control device according to any one of claims 1 to 5,
The alighting will determination means includes
Based on whether or not a wireless signal transmitted from a portable device carried by the driver is received by a wireless communication device mounted on the vehicle, the driver has an intention to get off the vehicle. To determine whether or not
An electronic control device for a vehicle. The vehicle electronic control device according to any one of claims 1 to 5,
The alighting will determination means includes
Determining whether or not the driver is willing to get off based on a key insertion signal indicating whether or not a key is inserted into the ignition key cylinder of the vehicle;
An electronic control device for a vehicle.

Images