Patent ID: 7831678

Claim:
An electronic control apparatus comprising: a first microcomputer having a first electrically rewritable non-volatile memory storing first control software; and a second microcomputer having a second electrically rewritable non-volatile memory storing second control software; of said first and second microcomputers, at least said first microcomputer being always powered by an external power supply device, said first microcomputer controlling a control object by executing said first control software in a normal mode, said second microcomputer controlling a control object by executing said second control software in said normal mode, said first microcomputer being configured to shift to a rewrite mode upon receiving a mode switch command from an external device to execute a first rewrite processing software in order to rewrite said first control software to third control software transmitted from said external device, said second microcomputer being configured to shift to said rewrite mode upon receiving said mode switch command from said external device to execute a second rewrite processing software in order to rewrite said second control software to fourth control software transmitted from said external device, said electronic control apparatus being configured such that said second control software is rewritten first before said first control software is rewritten when said mode switch command is transmitted to both said first and second microcomputers from said external device, said first rewrite processing software including a program causing said first microcomputer to implement a time-out function which makes a determination whether or not information necessary to rewrite said first control software has been transmitted from said external device within a predetermined time from a time of shift of said first microcomputer to said rewrite mode, and causes said first microcomputer to return from said rewrite mode to said normal mode to execute said first control software if result of said decision is negative, wherein, said first microcomputer is configured not to directly shift to said rewrite mode, but shifts to a standby state to wait for shift to said rewrite mode without executing said first control software when said first microcomputer has received said mode switch command, and configured to shift from said standby state to said rewrite mode upon receiving a mode shift permission command from said external device.