Patent ID: 9688302
Date: 2017-06-27
CPC Classifications: B62D

Claim:
1. An in-vehicle electronic control apparatus comprising: an actuator configured to generate a drive force to be given to an operation mechanism of an in-vehicle apparatus; an actuator control unit configured to drive-control the actuator; a main functional part having a first function that is a function relating to the drive-control of the actuator; an alternative functional part having a second function that is an alternative function of the first function; a main function diagnosis part configured to diagnose a normality or a failure of the main functional part, and an alternative function diagnosis part configured to diagnose the normality or the failure of the alternative functional part, wherein when the main function diagnosis part diagnoses that the main functional part is normal, the actuator control unit performs a first control process by use of a first output value from the main functional part to drive-control the actuator, wherein when the main function diagnosis part diagnoses that the main functional part has the failure and the alternative function diagnosis part diagnoses that the alternative functional part is normal, the actuator control unit performs a second control process by use of a second output value from the alternative functional part to drive-control the actuator, wherein when the main function diagnosis part diagnoses that the main functional part has the failure and the alternative function diagnosis part diagnoses that the alternative functional part has the failure, the actuator control unit outputs a failure detection signal to stop the first control process or the second control process that is being performed, wherein the main function diagnosis part is configured to capable of diagnosing the main functional part in an operation guaranteed range wider than an operation guaranteed range of the main functional part, wherein the main function diagnosis part determines whether or not the physical value is a value in a failure detection range based on a failure detection threshold value that is a threshold value for determining whether or not the physical value used in a failure diagnosis target is a value within the predetermined failure detection range and based on the physical value, diagnoses that the diagnosis target has the failure when it is determined that the value falls within the failure detection range, and diagnoses that the diagnosis target is normal when it is determined that the value is outside the failure detection range, wherein the main function diagnosis part determines whether or not the physical value is an abnormal value based on an abnormality determination threshold value that is a threshold value for determining whether or not the physical value is the abnormal value and based on the physical value, the abnormality determination threshold value falling within a failure detection margin that is in a predetermined numerical value range between a predetermined normal value range for the physical value and the failure detection threshold value for suppressing an error in detection of the failure, wherein the in-vehicle electronic control apparatus further comprises an abnormal behavior reducing part configured to reduce an abnormal behavior of the operation mechanism generated by the abnormal value when it is determined that the physical value is the abnormal value based on a determination result of the main function diagnosis part, wherein the abnormal behavior reducing part corrects an output value of the failure diagnosis target to reduce the abnormal behavior, wherein the actuator control unit includes a processor, at least one of the first function and the second function is a phase characteristic function that is a function having a phase advance characteristic or a phase delay characteristic in which a sampling frequency is determined by an operation clock signal of the processor, the physical value includes the operation clock signal, and the abnormal behavior reducing part corrects an output value of a functional part that has the phase characteristic function used in the actuator control unit to reduce the abnormal behavior, when it is determined that a frequency of the operation clock signal is an abnormal value, and wherein the failure detection threshold value corresponding to the frequency of the operation clock signal includes a failure detection lower limit threshold value that is a threshold value on a side where the frequency is decreased, the abnormality determination threshold value corresponding to the frequency of the operation clock signal includes an abnormality determination lower limit threshold value that is a threshold value on the side where the frequency is decreased, the main function diagnosis part determines whether or not the frequency is a value in the failure detection range based on the frequency and the failure detection lower limit threshold value with respect to the functional part that has the phase characteristic function of a phase advance characteristic, the main function diagnosis part determines whether or not the physical value is an abnormal value based on the frequency and the abnormality determination lower limit threshold value with respect to the functional part that has the phase characteristic function of the phase advance characteristic, and the abnormality behavior reducing part performs a correction of reducing an output value of the functional part that has the phase characteristic function of the phase advance characteristic used in the actuator control unit by a predetermined value with respect to the functional part that has the phase characteristic function of the phase advance characteristic, when it is determined that the frequency of the operation clock signal is an abnormal value that exceeds the abnormality determination lower limit threshold value on the side where the frequency is decreased.