APPARATUS FOR RECORDING THE OPERATING CONDITION OF A VEHICLE SAFTY DEVICE

Abstract: An acceleration sensor (5) detects an acceleration of a vehicle which is caused by a collision of the vehicle. A safety device (3b) protects an occupant in the vehicle from the collision of the vehicle. A trigger device triggers the safety device. The trigger device is activated in response to an output signal from the acceleration sensor. An operation of the trigger device is detected and a detection signal representative thereof is generated. A first judgment device judges whether or not the trigger device is activated on the basis of the detection signal. When the trigger device is judged to be activated, a second judgment device judges whether the activation of the trigger device is caused by a correct cause or a false cause on the basis of the output signal from the acceleration sensor. The judgment by the second judgment device is allowed only once and subsequent judgments by the second judgment device are inhibited. A result of the judgment by the second judgment device is recorded.

Description: This invention relates to an apparatus for recording the operating condition of a vehicle safety device such as a vehicle air bag device. It is known from US-A-4,346,913 to provide a false release registering circuit for collision protective devices in which a fuse serving as a storage register indicates whether a normal release or a false release has taken place. Specifically, when the fuse is unmelted, it represents that a normal release has taken place. When the fuse is blown, it represents that a false release has taken place. In this known circuit, the fuse or the storage register receives a recorded signal even after the activation of an air bag device. Accordingly, in cases where a wire harness connected to a firing device for the air bag device is short-circuited by a collision shock and the short circuit of the wire harness causes a condition similar to a false release after the activation of the air bag device, the fuse is blown due to this condition. Therefore, the information indicated by the fuse is unreliable, i.e. incorrect. US-A-4 086 562 discloses a recording apparatus for recording the operation condition of a vehicle safety device which comprises a protecting means in the form of an air cushion bag which does respond to a trigger signal in order to protect a vehicle passenger from a collision. In this known apparatus, the trigger signal is generated by two acceleration sensors in the form of switches which are closed at a predetermined value of the acceleration. The ON/OFF-signals provided by these sensor switches are further applied to respective transformers the output signals of which are checked to decide whether the operation of the air cushion bag was due to a malfunction or not. The corresponding result is stored by destroying a fuse. However, when the firing device of the air cushion bag is short-circuited the information stored in the fuse may be wrong. The reliability of this known apparatus, consequently, is not very high. It is the object of this invention to provide a reliable apparatus for recording the operating condition of a vehicle safety device. This object is solved by an apparatus comprising the advantageous features indicated in claim 1. In accordance with an embodiment of this invention, an apparatus for recording an operating condition of a vehicle safety device comprises means for triggering the safety device when supplied with an electric current equal to or greater than a reference electric current; means for detecting an acceleration of a vehicle which is caused by a collision of the vehicle, and outputting an electric signal depending on the detected vehicle acceleration; means for deciding whether or not the triggering means should be activated on the basis of the electric signal from the acceleration detecting means; switch means, turned on in response to an output signal from the deciding means, for supplying an electric current equal to or greater than the reference electric current to the triggering means to activate the triggering means; means for detecting voltages at respective two ends of the triggering means; means for detecting an activating condition of the triggering means on the basis of the detected voltages; activation storing means for storing the detected activating condition of the triggering means; collision storing means for, when the acceleration detecting means detects the collision acceleration, storing the detection of the collision acceleration by the acceleration detecting means; means for judging the triggering means to be activated by a correct cause in cases where, during a predetermined time starting from a moment of the detection of the collision acceleration by the acceleration detecting means, the activation storing means stores the activating condition of the triggering means and the collision storing means stores the detection of the collision acceleration by the acceleration detecting means, for judging the triggering means to be activated by a false cause in other cases, and for outputting a signal representing a result of the judgments; means responsive to the output signal from the judging means for recording that the triggering means is activated by a false cause; and means for limiting a number of times of the judgments by the judging means to one. A further embodiment of the recording apparatus comprises a squib for triggering the safety device when supplied with an electric current equal to or greater than a reference electric current; an acceleration sensor for detecting an acceleration of a vehicle which is caused by a collision of the vehicle, and outputting an electric signal depending on the detected vehicle acceleration; a fire decision circuit for deciding whether or not the squib should be fired on the basis of the electric signal from the acceleration sensor; a first switch, connected to the squib and turned on in response to a fire signal from the decision circuit, for supplying an electric current equal to or greater than the reference electric current to the squib to fire the squib; a first connection point and a second connection point connected to respective two ends of the squib and conducting voltages at the respective two ends of the squib; a second switch turned on and outputting a first signal when a voltage at the first connection point is equal to or higher than a first reference voltage; a third switch outputting a second signal when a voltage at the second connection point exceeds a second reference voltage; a fourth switch outputting a third signal depending on the electric output signal from the acceleration sensor; a microcomputer performing calculation processes on the basis of the first signal, the second signal, and the third signal; a memory receiving an output signal from the microcomputer; wherein the microcomputer comprises means for judging whether or not the squib is fired on the basis of the first signal and the second signal; means for, when the squib is judged to be fired, judging the fire of the squib to be performed by a false cause in cases where the acceleration sensor does not output an electric signal of a level equal to or higher than a predetermined level for a last predetermined time interval; means for recording information into the memory, the information representing that the fire of the squib is performed by the false cause; and means for limiting a number of times of the recording of the information into the memory to one. A still further embodiment of the recording apparatus comprises a squib for triggering the safety device when supplied with an electric current equal to or greater than a reference electric current; an acceleration sensor for detecting an acceleration of a vehicle which is caused by a collision of the vehicle, and outputting an electric signal depending on the detected vehicle acceleration; a fire decision circuit for deciding whether or not the squib should be fired on the basis of the electric signal from the acceleration sensor; a first switch, connected to the squib and turned on in response to a fire signal from the decision circuit, for supplying an electric current equal to or greater than the reference electric current to the squib to fire the squib; a first connection point and a second connection point connected to respective two ends of the squib and conducting voltages at the respective two ends of the squib; a second switch turned on and outputting a first signal when a voltage at the first connection point is equal to or lower than a first reference voltage; a third switch outputting a second signal when a voltage at the second connection point exceeds a second reference voltage; a fourth switch outputting a third signal in response to an electric output signal from the acceleration sensor which has a level equal to or greater than a predetermined level, the third signal having a predetermined short duration; a storage circuit set in response to the first signal and the second signal and outputting a fourth signal only once when being set, the fourth signal having a predetermined short duration; a fifth switch for judging whether the fire of the squib is performed by a correct cause or a false cause on the basis of the third signal and the fourth signal, and for outputting a false-fire-representing signal when the fire of the squib is performed by the false cause; and a memory for recording the false-fire-representing signal. The invention will be described in more detail with reference to the accompanying drawings, in which: Fig. 1 is a diagram of an apparatus according to a first embodiment; Fig. 2 is a table showing the relationship among the voltages at the points A and B, the signals A' and B' inputted into the microcomputer, and malfunction modes including types of malfunctions, a normal condition, and a fire of the squib in the apparatus of Fig. 1; Fig. 3 is a flowchart of a program operating the microcomputer of Fig. 1; Fig. 4 is a block diagram of an apparatus according to a second embodiment; Fig. 5 is a schematic diagram of the memory of Fig. 4; Fig. 6 is a timing chart showing the waveforms of the various signals in the apparatus of Fig. 4 which occur under conditions where the squib is fired by a correct cause; Fig. 7 is a timing chart showing the waveforms of the various signals in the apparatus of Fig. 4 which occur under conditions where the squib is fired by a false cause; and Fig. 8 is a timing chart showing the waveforms of the various signals in the apparatus of Fig. 4 which occur under conditions where the squib is fired by a correct cause and then a condition similar to a fire of the squib due to a false cause takes place. Like and corresponding elements are denoted by the same reference characters throughout the drawings. With reference to Fig. 1 showing an apparatus of a first embodiment, an automotive vehicle battery 1 serves as a dc power source. An ignition switch 2 is connected to the battery 1. The ignition switch 2 is actuated together with operation of an automotive engine key (not shown). A known squib 3 serves to fire an explosive 3a to inflate an air bag 3b. The air bag 3b serves to protect an occupant in an automotive vehicle from a collision or crash of the vehicle. The squib 3 includes an electric heating wire having a resistance of about several ohms. A mercury switch 4 serves to prevent a false operation and is closed even at a low acceleration. An acceleration sensor 5 detects acceleration of an automotive vehicle. When the vehicle is braked abruptly or when the vehicle encounters a crash, the acceleration sensor 5 outputs an acceleration signal to a point C or a wiring line C1. For example, the acceleration sensor 5 is of a known semiconductor type including a cantilever and a semiconductor strain gage extending on the cantilever. The mercury switch 4 and the acceleration sensor 5 are disposed within an electronic control unit box (not shown and referred to as an ECU hereinafter) containing electronic circuits. The ECU is placed in a suitable location within the vehicle such as a location under a vehicle seat. A fire decision circuit 6 determines whether or not the squib 3 should be fired on the basis of the output signal from the acceleration sensor 5. A transistor 7 is made conductive or turned on by a fire signal from the fire decision circuit 6. When the transistor 7 is turned on and the mercury switch 4 is closed, the squib 3 is supplied with an electric current adequate to inflate the air bag 3b. One end of a resistor 10 is connected to the ignition switch 2 via a reverse-current blocking diode 12. The other end of the resistor 10 is connected to one end B of the squib 3 to which the mercury switch 4 is connected. A resistor 14 is connected between the end B of the squib 3 and the ground. The other end A of the squib 3 is grounded via a resistor 16. One end of a resistor 18 is connected to a backup capacitor 26 via a transistor 20 and a reverse-current blocking diode 24. The other end of the resistor 18 is connected to the end A of the squib 3. A resistor 22 is connected in parallel with the diode 24. A series combination of voltage dividing resistors 28 and 30 determines a reference voltage for turning the transistor 20 on. The voltage dividing resistors 28 and 30 are connected to a comparator 32 which turns on the transistor 20 when the potential of the point B reaches a predetermined level VB. A series combination of resistors 34 and 36 determines a base voltage which enables the transistor 20 to be turned on. The anode of a reverse-current blocking diode 38 is connected to the battery 1 via the ignition switch 2. The cathode of the diode 38 is connected to a power supply line VM. A voltage regulator 40 connected to the power supply line VM derives a constant power supply voltage outputted to a constant power supply line VDD. The acceleration sensor 5 and the fire decision circuit 6 are powered by the constant voltage fed from the voltage regulator 40. A wiring line A1 extending from the end A of the squib 3 is connected to a series combination of resistors 44 and 46 via a diode 42. The base of a transistor 48 is connected to a junction between the resistors 44 and 46. The resistors 44 and 46 determine a base voltage which enables the transistor 48 to be turned on. The transistor 48 is turned on when the potential of the point A reaches a predetermined voltage which is higher than a zero potential but lower than a given level V2. When the transistor 48 is turned on, the transistor 48 outputs a low level signal "L" to a microcomputer 52 via a diode 50. A junction between the diode 50 and the microcomputer 52 is connected to the battery 1 via a resistor 70. A wiring line B1 extending from the end B of the squib 3 is connected to a comparator 56 via a resistor 54. A combination of voltage dividing resistors 58 and 60 connected to the power supply line VM determines a reference voltage applied to the comparator 56. The comparator 56 outputs a signal B′ to the microcomputer 52 via a diode 61. A junction between the diode 61 and the microcomputer 52 is connected to the battery 1 via a resistor 72. A junction C between the acceleration sensor 5 and the fire decision circuit 6 is connected to a comparator 64 via a resistor 62. A combination of voltage dividing resistors 66 and 68 connected to the constant power supply line VDD determines a reference voltage applied to the comparator 64. When the acceleration sensor 5 detects a given acceleration and supplies the point C with an electric signal having a voltage equal to or higher than a predetermined level, the comparator 64 outputs a signal C′ having a low level "L". Specifically, when the acceleration sensor 5 detects an acceleration caused by a crash or collision of the vehicle, the signal C′ goes "L". It should be noted that the character "L" denotes a low level. A junction between the comparator 64 and the microcomputer 52 is connected to the battery 1 via a resistor 74. The microcomputer 52 performs calculation processes on the basis of the output signals A′, B′, and C′ from the transistor 48, the comparator 56, and the comparator 64 in order to judge whether or not a malfunction occurs with the squib 3, the mercury switch 4, and the transistor 7. Upon the occurrence of such a malfunction, the microcomputer 52 stores a malfunction-representing signal into a memory 76 and turns on a transistor 82 via a resistor 80 to activate a warning lamp 84. For example, the memory 76 is composed of a non-volatile RAM. The microcomputer 52 also has a function of judging whether or not an activation of the air bag 3b is performed by a false cause. Upon the occurrence of such a false activation of the air bag 3b, the microcomputer 52 stores a false-fire-representing signal into a memory 78. For example, the memory 78 is composed of a non-volatile RAM. The microcomputer 52, and the memories 76 and 78 are connected to the battery 1 to be directly powered by the battery 1. In operation of the apparatus of this embodiment, when the ignition switch 2 is closed, the circuit for activating the squib 3a is moved into an operable state. In the case where the squib activating circuit remains in its operable state, when the mercury switch 4 is closed and the transistor 7 is turned on, the squib 3 is activated so that the explosive 3a is fired and the air bag 3b is inflated. Closing the ignition switch 2 allows the backup capacitor 26 to be quickly charged to a battery voltage. In the event that the supply of an electric current from the battery 1 is insufficient, the charged backup capacitor 26 can output an electric current adequate to activate the squib 3. As shown in Fig. 2, the voltages at the points A and B depend on conditions of the squib 3, the mercury switch 4, and the transistor 7. The transistor 48 and the comparator 56 converts the voltages at the points A and B into the corresponding binary signals A′ and B′ which represent the conditions of the devices 3, 4, and 7. In cases where at least one of the squib 3, the mercury switch 4, and the transistor 7 malfunctions, breaks, or short-circuits after the ignition switch 2 is closed, the microcomputer 52 detects such a malfunction from the output signals A′ and B′ of the transistor 48 and the comparator 56 and turns on the transistor 82 to activate the warning lamp 84. The microcomputer 52 includes a combination of an I/O port, a CPU, a ROM, and a RAM. The microcomputer 52 operates in accordance with a program stored in the ROM. Fig. 3 is a flowchart of this program. As shown in Fig. 3, when the ignition switch 2 is closed, the program starts at a step 100 and then advances to a step 200 which executes initialization. Specifically, the step 200 initializes and clears the flag F and the memories 76 and 78 to "0". It should be noted that the character "0" denotes a logic "0". After the step 200, the program advances to a step 300. The step 300 inputs the signals A′, B′, and C′. A step 400 following the step 300 judges whether or not the signal A′ is "H" and the signal B′ is "L", that is, whether or not the squib 3 is activated (fired) as understood from Fig. 2. It should be noted that the characters "H" and "L" denoted high and low levels respectively. When the signal A′ is "H" and the signal B′ is "L", that is, when the squib 3 is activated, the program advances from the step 400 to a step 1300. Otherwise the program advances from the step 400 to a step 500. The step 500 judges whether or not a malfunction-representing signal is already stored in the memory 76. When a malfunction-representing signal is already stored in the memory 76, that is, when a malfunction previously occurs, the program advances from the step 500 to a step 800 which turns on the transistor 82 to activate the warning lamp 84. A step 900 following the step 800 stores a malfunction-representing signal into the memory 76. After the step 900, the program returns to the step 300 via a step 1000 which waits for a predetermined time, for example, 1 ms. When any malfunction-representing signal is not stored in the memory 76, that is, when any malfunction has not occurred, the program advances from the step 500 to a step 600. The step 600 judges whether or not the signal A′ is "L" and the signal B′ is "H", that is, whether or not all of the squib 3, the mercury switch 4, and the transistor 7 are normal as understood from Fig. 2. When at least one of the squib 3, the mercury switch 4, and the transistor 7 is wrong, the program advances from the step 600 to a step 700. When all of the squib 3, the mercury switch 4, and the transistor 7 are normal, the program advances from the step 600 to a step 1100. The step 700 determines whether or not the preceding step 600 continues to judge at least one of the devices 3, 4, and 7 to be wrong in three consecutive cycles of execution of the program. When the step 600 judges at least one of the devices 3, 4, and 7 to be wrong for the first time or in two consecutive cycles of execution of the program, the program returns from the step 700 to the step 300 via the step 1000. When the step 600 judges at least one of the devices 3, 4, and 7 to be wrong in three consecutive cycles of execution of the program, the program advances from the step 700 to the step 800 which turns on the transistor 82 to activate the warning lamp 84. As described previously, the step 900 following the step 800 stores a malfunction-representing signal into the memory 76. After the step 900, the program returns to the step 300 via the step 1000. The step 1100 determines whether or not the preceding step 600 continues to judge all of the devices 3, 4, and 7 to be normal in three consecutive cycles of execution of the program. When the step 600 judges all of the devices 3, 4, and 7 to be normal for the first time or in two consecutive cycles of execution of the program, the program returns from the step 1100 to the step 300 via the step 1000. When the step 600 judges all of the devices 3, 4, and 7 to be normal in three consecutive cycles of execution of the program, the program advances from the step 1100 to a step 1200 which turns off the transistor 82 to deactivate the warning lamp 84. After the step 1200, the program returns to the step 300 via the step 1000. The step 1300 determines whether or not the preceding step 400 continues to judge the signals A′ and B′ to be "H" and "L" respectively in three consecutive cycles of execution of the program. When the step 400 judges the signals A′ and B′ to be "H" and "L" respectively for the first time or in two consecutive cycles of execution of the program, the program returns from the step 1300 to the step 300 via the step 1000. When the step 400 continues to judge the signals A′ and B′ to be "H" and "L" respectively in three consecutive cycles of execution of the program, the program advances from the step 1300 to a step 1400. The step 1400 judges whether or not the flag F is "1". It should be noted that the character "1" denotes a logic "1". When the flag F is "1", the program returns from the step 1400 to the step 300. When the flag F is not "1", the program advances from the step 1400 to a step 1500. The step 1500 determines whether or not the signal C′ went "L" during last 10 ms, that is, whether or not the acceleration sensor 5 detected a crash or collision acceleration during last 10 ms. In the case where the signal C′ went "L" within last 10 ms, that is, in the case where the acceleration sensor 5 detected a crash or collision acceleration during last 10 ms, the microcomputer 52 judges the present activation (fire) of the squib 3 to be responsive to a correct cause and the program returns from the step 1500 to the step 300 via a step 1700 which sets the flag F to "1". Accordingly, the flag F equal to "1" represents that the present activation (fire) of the squib 3 is correct. In the case where the signal C′ did not go "L" within last 10 ms, that is, in the case where the acceleration sensor 5 did not detect any crash or collision acceleration during last 10 ms, the microcomputer 52 judges the present activation of the squib 3 to be responsive to a wrong or false cause and the program advances from the step 1500 to a step 1600. The step 1600 stores a false-fire-representing signal or a "1" signal into the memory 78. After the step 1600, the program returns to the step 300 via the step 1700. The steps 1400 and 1700 related to the flag F enable the judgment step 1500 to be executed once. The operation of the apparatus of this embodiment will be further described hereinafter with reference to Figs. 1 and 2. In the following description, the characters V1, V2, V3, V4, V5, V6, and VB denote voltages values having a relationship as "0<V1<V2<V3<V4<V5<V6<VB". In cases where the squib 3, the mercury switch 4, the transistor 7, and the other devices are normal, the voltages at the points A and B are equal to the values V3 and V4 respectively. Specifically, the voltages at the points A and B are equal to the values V3 and V4 respectively under conditions where the mercury switch 4 is open, the transistor 7 is nonconductive or off, the transistor 48 is conductive or on, the transistor 20 is nonconductive or off, and the voltage VB of the battery 1 is applied to the squib 3 via the diode 12 and the resistor 10. When the voltages at the points A and B are equal to the values V3 and V4 respectively, the voltage V3 at the point A turns on the transistor 48. It should be noted that the resistors 44 and 46 are chosen to turn on the transistor 48 when the voltage at the point A reaches a given level between 0 and the value V2. As described previously, the value V2 is smaller than the value V3. When the transistor 48 is turned on, the output signal A′ from the transistor 48 goes "L". The voltage V4 at the point B is compared by the comparator 56 with the reference voltage determined by the resistors 58 and 60, causing the output signal B′ from the comparator 56 to be "H". It should be noted that the resistors 58 and 60 are chosen to cause the output signal from the comparator 56 to be "L" when the voltage at the point B reaches a given level between the values V5 and VB. As described previously, the value V5 is greater than the value V4 but smaller than the value VB. In cases where the squib 3 breaks, the voltages at the points A and B become equal to 0 and the value V5 respectively. Specifically, the voltage at the point B equals the value V5 under conditions where the battery voltage VB is applied to the series combination of the resistors 10 and 14. In these cases, the break of the squib 3 turns off the transistor 48 so that the signal A′ goes "H". In addition, the voltage V5 at the point B causes the output signal B′ from the comparator 56 to be "H". In response to the "H" signals A′ and B′, the microcomputer 52 stores a malfunction-representing signal into the memory 76 and turns on the transistor 82 to activate the warning lamp 84. In cases where the mercury switch 4 short-circuits, as shown in Fig. 2, the voltages at the points A and B become equal to the values V6 and VB respectively. When the voltage at the point B is close to the value VB, and for example when the voltage at the point B is equal to or higher than the value V6, the comparator 32 outputs an "L" signal which turns on the transistor 20. It should be noted that the resistors 28 and 30 are chosen to cause the output signal from the comparator 32 to be "L" when the voltage at the point B is equal to or higher than the value V6. When the transistor 20 is turned on, an electric current is supplied to the resistor 18 from the battery 1 so that the voltage at the point A becomes equal to the value V6. As a result, the output signal A′ from the transistor 48 goes "L". The voltage VB at the point B causes the output signal B′ from the comparator 56 to be "L". In response to the "L" signals A′ and B′, the microcomputer 52 stores a malfunction-representing signal into the memory 76 and turns on the transistor 82 to activate the warning lamp 84. In cases where the transistor 7 is made erroneously conductive or turned on by some malfunction, the voltages at the points A and B become equal to 0 and the value V1 respectively so that both of the signals A′ and B′ go "H". In response to the "H" signals A′ and B′, the microcomputer 52 stores a malfunction-representing signal into the memory 76 and turns on the transistor 82 to activate the warning lamp 84. In cases where the squib 3 is fired or activated in response to a crash or collision of the vehicle, the voltages at the points A and B become equal to 0 and the value VB respectively. In these cases, although the transistor 20 is turned on, the mercury switch 4 is closed and the transistor 7 is turned on by the signal from the decision circuit 6. Therefore, an electric current flows through the squib 3 and fires or activates the squib 3. In these cases, the signals A′ and B′ become "H" and "L" respectively so that the microcomputer 52 neither stores a malfunction-representing signal into the memory 76 nor turns on the transistor 82. In addition, the signal C′ is made "L" in response to the crash or collision of the vehicle so that the step 1600 of Fig. 3 is jumped and thus the microcomputer 52 does not store a false-fire-representing signal into the memory 78. In cases where the squib 3 is fired or activated by an erroneous cause such as a malfunction of the mercury switch 4 or a malfunction of the transistor 7, a crash or collision acceleration is absent so that the signal C′ remains "H". Therefore, the step 1600 of Fig. 3 is executed and thus the microcomputer 52 stores a false-fire-representing signal into the memory 78. In cases where the squib 3 breaks and the mercury switch 4 short-circuits, the voltage at the point B becomes equal to the value VB in response to the short circuit of the mercury switch 4. When the voltage at the point B equals the value VB, the output signal B′ from the comparator 56 goes "L" and the comparator 32 outputs an "L" signal which turns on the transistor 20. As a result of the turning on of the transistor 20, an electric current flows from the battery 1 into the point A via the diode 38 and the resistor 18 and thus the voltage at the point A becomes equal to the value V2. When the voltage at the point A equals the value V2, the output signal A′ from the transistor 48 goes "L". In response to the "L" signals A′ and B′, the microcomputer 52 stores a malfunction-representing signal into the memory 76 and turns on the transistor 82 to activate the warning lamp 84. In cases where the squib 3 breaks and the transistor 7 is erroneously turned on, the voltages at the points A and B become equal to 0 and the value V5 respectively so that both of the signals A′ and B′ go "H". In response to the "H" signals A′ and B′, the microcomputer 52 stores a malfunction-representing signal into the memory 76 and turns on the transistor 82 to activate the warning lamp 84. This embodiment has the following advantages. As understood from the previous description, in the case where the squib 3 is fired, the step 1500 determines whether or not the fire of the squib 3 is triggered by such a correct cause as a collision impact. When the fire of the squib 3 is triggered by a false cause, the step 1600 stores a false-fire-representing signal into the memory 78. Since the combination of the steps 1400 and 1700 enables the steps 1500 and 1600 to be executed at most once, the information stored in the memory 78 remains unchanged after the execution of the steps 1500 and 1600. Therefore, the information stored in the memory 78 is reliable. In addition, a malfunction of the squib 3, the mercury switch 4, or the transistor 7 is detected and the malfunction-representing signal is stored into the memory 76. Furthermore, in the event that the battery 1 does not supply a sufficient electric current to the squib 3 when the squib 3 is required to be fired, the backup capacitor 26 supplies an electric current adequate to fire the squib 3. In this case, most of the electric current generated from the backup capacitor 26 is used to fire the squib 3. Therefore, the capacitance of the backup capacitor 26 can be relatively small. It should be noted that this embodiment may be modified in various ways as described hereinafter. In a first modification of this embodiment, the mercury switch 4 and the semiconductor-type acceleration sensor 5 are replaced by a plurality of mechanical-type acceleration sensors. In a second modification of this embodiment, when the step 1500 detects that the fire of the squib 3 is triggered by a correct cause, an added step stores a correct-fire-representing signal into the memory 76 or another memory. In a third modification of this embodiment, the microcomputer 52 and the memories 76 and 78 are powered by the constant voltage outputted from the voltage regulator 40. DESCRIPTION OF THE SECOND PREFERRED EMBODIMENT With reference to Fig. 4 showing an apparatus of a second embodiment of this invention, a transistor 100 is turned on and off in response to an output signal from a fire decision circuit 6. The output signal from the fire decision circuit 6 is transmitted to the transistor 100 via an inverter 101. An ignition switch 2, the transistor 100, a mercury switch 4, a squib 3, and a transistor 7 are connected in series with a battery 1. A high potential detector 102 detects a voltage at one end B of the squib 3. Specifically, the high potential detector 102 outputs a "1" signal when the voltage at the point B is equal to or higher than a reference voltage. Otherwise the high potential detector 102 outputs a "0" signal. A low potential detector 104 detects a voltage at the other end A of the squib 3. Specifically, the low potential detector 104 outputs a "1" signal when the voltage at the point A is equal to or lower than another reference voltage. Otherwise the low potential detector 104 outputs a "0" signal. Output signals B′ and A′ from the potential detectors 102 and 104 are transmitted to input terminals of an AND circuit 110 via noise filters 106 and 108 respectively. When both of the signals A′ and B′ are "1", the AND circuit 110 outputs a "1" signal representing a fire of the squib 3. A set terminal of a flip-flop circuit 112 is connected to the output terminal of the AND circuit 110. The flip-flop circuit 112 is set by a rising edge of a "1" signal from the AND circuit 110. When the ignition switch 2 is closed, the flip-flop circuit 112 is reset by a signal outputted from a reset circuit 114. An output signal Q from the flip-flop circuit 112 is applied to a differentiating circuit 116 which serves as a timer. The differentiating circuit 116 outputs a pulse when the signal Q changes from "0" to "1". For example, the differentiating circuit 116 is composed of a one-shot multivibrator. A first input terminal of an AND circuit 118 receives an output signal D from the differentiating circuit 116. An output signal E′ from a monostable multivibrator 120 is inverted and is then applied to a second input terminal of the AND circuit 118. An output signal E from an acceleration sensor 5 is fed to the fire decision circuit 6 and the monostable multivibrator 120. A memory 122 is subjected to an output signal F from the AND circuit 118. As will be made clear hereinafter, when the squib 3 is fired by a false cause, the AND circuit 118 outputs a "1" signal which is stored into the memory 122 as a false-fire-representing signal. As shown in Fig. 5, the memory 122 includes a fuse 124 and a transistor 126 which are connected in series with a backup power supply 128. The transistor 126 is connected to the AND circuit 118 (see Fig. 4). When the output signal F from the AND circuit 118 becomes "1", the transistor 126 is turned on so that an electric current flows through the fuse 124 and makes the fuse 124 blown. The operation of the apparatus of this embodiment will be described hereinafter. Fig. 6 is a timing chart related to conditions where the squib 3 is fired by such a correct cause as a collision impact. Under these conditions, the mercury switch 4 is closed and the acceleration sensor 5 outputs a collision or crash acceleration signal or a "1" signal E to the fire decision circuit 6 and the monostable multivibrator 120. The fire decision circuit 6 turns on the transistor 7 in response to the collision acceleration signal E so that the squib 3 is supplied with an activation current from the battery 1. The activation current energizes (fires) the squib 3, inflating a related air bag. When the activation current flows through the squib 3, the high potential detector 102 and the low potential detector 104 detect a high voltage and a low voltage respectively and output "1" signals B′ and A′ to the AND circuit 110 via the noise filters 106 and 108. In response to the "1" signals B′ and A′, the AND circuit 110 outputs a "1" signal C to the flip-flop circuit 112 and sets the flip-flop circuit 112 so that the output signal Q from the flip-flop circuit 112 changes from "0" to "1". The differentiating circuit 116 outputs a "1" pulse D of a predetermined duration in response to the change of the signal Q from "0" to "1". The "1" pulse D is applied to the AND circuit 118. The monostable multivibrator 120 outputs a "1" signal E′ in response to the collision acceleration signal E. The duration of the "1" pulse E′ is longer than the duration of the "1" pulse E. The "1" signal E′ is inverted and is then applied to the AND circuit 118. Since the duration of the "1" pulse D resides within the duration of the "1" signal E′, the output signal F from the AND circuit 118 remains "0" so that the transistor 126 continues to be off. Therefore, the fuse 124 remains unmelted. Fig. 7 is a timing chart related to conditions where the squib 3 is fired by such a false cause as a short circuit between wiring points H and I or between wiring points J and K (see Fig. 4). It is now assumed that the squib 3 is fired by a short circuit which causes a considerable current to flow through the squib 3. Under these conditions, the output signal E from the acceleration sensor 5 remains "0" and thus the output signal E′ from the monostable multivibrator 120 remains "0" also. The "0" signal E′ is inverted and is then applied to the AND circuit 118. Since the current flows through the squib 3, both of the output signals B′ and A′ from the high potential detector 102 and the low potential detector 104 become "1" as in the case of Fig. 6. Therefore, the signal D outputted from the differentiating circuit 116 to the AND circuit 118 becomes "1" as in the case of Fig. 6. As a result, the AND circuit 118 outputs a "1" signal F to the memory 122, turning on the transistor 126 and making the fuse 124 blown. In this way, a false fire of the squib 3 is recorded into the memory 122. Specifically, the blown fuse 124 indicates the false fire of the squib 3. Fig. 8 is a timing chart related to conditions where the squib 3 is fired by a correct cause and then a situation similar to a false fire of the squib 3 occurs due to a short circuit or the like. Under these conditions, during a first period where the squib is fired by a correct cause, the signal F outputted from the AND circuit 118 to the memory 122 remains "0" as in the case of Fig. 6. During a subsequent period, when a situation similar to a false fire of the squib 3 occurs due to a short circuit or the like, both of the output signals B′ and A′ from the high potential detector 102 and the low potential detector 104 become "1" so that the signal C outputted from the AND circuit 110 to the flip-flop circuit 112 also becomes "1". Since the output signal Q from the flip-flop circuit 112 remains "1" after the flip-flop circuit 112 is set in response to the correct fire of the squib 3, the output signal Q from the flip-flop circuit 112 remains unchanged independent of the change of the signal C which responds to the situation similar to the false fire of the squib 3. As a result, the differentiating circuit 116 does not output a "1" signal D to the AND circuit 118 in response to the situation similar to the false fire of the squib 3 so that the signal F outputted from the AND circuit 118 to the memory 122 remains "0" independent of the situation similar to the false fire of the squib 3. Therefore, the transistor 126 remains off and the fuse 124 continues to be unmelted independent of the situation similar to the false fire of the squib 3. The second embodiment of this invention has the following advantage. As understood from the previous description, after the memory 122 stores a signal representing whether a fire of the squib 3 is caused by a correct cause or a false cause, signal writing into the memory 122 is inhibited. Therefore, in cases where the squib 3 is fired by a correct cause and then a situation similar to a false fire of the squib 3 occurs due to a short circuit or the like, the memory 122 is prevented from storing a false-fire-representing signal so that the information indicated by the memory 122 is reliable.

Claims: A recording apparatus for recording the operating condition of a vehicle safety device, wherein said safety device comprises: [a1] protecting means (3, 3a, 3b) which protects a passenger of said vehicle from a collision; [a2] a trigger device (7) which activates said protecting means (3, 3a, 3b) ; and [a3] collision detecting means (5, 6) which detects a collision of said vehicle and activates said trigger device (7) in response to an acceleration value caused by a collision of said vehicle; and wherein said recording apparatus comprises: [b1] detecting means (58, 56; 102-108) which detects an operation of said protecting means (3, 3a, 3b) and generates a detection signal (A', B'; C) representative thereof; [b2] first judgment means (step 400; 110) which judges whether or not said protecting means (3, 3a, 3b) is activated on the basis of said detection signal; [b3] second judgment means (step 1500; 118) which judges - when said protecting means (3, 3a, 3b) is judged to be activated - whether the activation of said protecting means (3, 3a, 3b) is caused correctly or due to a malfunction on the basis of an output signal from said collision detecting means (5, 6) which indicates whether or not said collision detecting means (5, 6) detects a collision; [b4] storing means (78; 122) which stores a result of the judgment of said second judgment means; and [b5] prohibiting means (steps 1400, 1700, flag F; 112) which prohibits any further operation to store a new result of the judgment of said second judgment means (step 1500; 118) after a first judgment thereof. Recording apparatus according to claim 1, characterized in that said collision detecting means (5, 6) comprises an acceleration sensor (5) . Recording apparatus according to claim 2, characterized in that said collision detecting means (5, 6) comprises an activating means having a switch (7) which receives an activating signal from a deciding means (6) when an output signal (C1; E) of said acceleration sensor (5) is equal to or greater than a reference value. Recording apparatus according to one of claims 1 through 3, characterized in that said detecting means comprises voltage detecting means (58, 56; 102, 104) for detecting two respective voltages at two ends (A, B) of said trigger device (3) . Recording apparatus according to claim 4, characterized by [a] a switch (48) which outputs a first signal (A') when a voltage at the one end (A) of said trigger device (3) is equal to or higher than a first reference voltage, [b] a further switch (56) which outputs a second signal (B') when a voltage at the other end (B) of said trigger device (3) exceeds a second reference voltage, [c] and a still further switch (64) which outputs a third signal (C') depending on the output signal (C1; E) of said acceleration sensor (5) . Recording apparatus according to claim 4, characterized by [a] a switch (104) which outputs a first signal (A') when a voltage at the one end (A) of said trigger device (3) is equal to or lower than a first reference voltage, [b] a further switch (102) which outputs a second signal (B') when a voltage at the other end (B) of said trigger device (3) exceeds a second reference voltage, [c] a still further switch (120) which outputs a third signal (E') in response to the output signal (E) of said acceleration sensor (5) the level of which is equal to or greater than a predetermined value, said third signal (E') having a predetermined short duration, [d] and a storage circuit (112, 116) being set by said first signal (A') and said second signal (B') and thereby outputting a fourth signal (D) having a predetermined short duration. Recording apparatus according to one of claims 1 through 6, characterized in that said judgment means comprises a microcomputer (52) . Recording apparatus according to one of claims 1 through 7, characterized in that said trigger device comprises a squib (3) .

Inventors: KONDO, AKIRA, MASEGI, MITSUHIKO 1-3, AZA NAKATA, NAITOU, MOTOHARU
Applicants: NIPPONDENSO CO., LTD.
Application year: 1989
Main classification: B60R21
IPC codes: B60R21, G07C5