| 摘要 |
<p>PROBLEM TO BE SOLVED: To achieve safety and availability when abnormality is generated in a control function by a control device.SOLUTION: In an ECU 1 loaded on a vehicle for performing the torque control and idle stop control (AS control) of an engine, processors 31 and 32 respectively include: an AS control function 51 and a torque control function 54 as functions to be achieved by a program; control monitor functions 55 and 52 each of which monitors the control function of the processor different from its own processor, and performs fail-safe; and inspection functions 56 and 53 each of which inspects its own control monitor function, and outputs inspection result information indicating the inspection result to a monitor IC 7. When it is determined that abnormality is generated in the control function by the control monitor function 52 on the basis of inspection result information output by the inspection function 53 of the processor 32, the monitor IC 7 inhibits control by the processor 31, and when it is determined that abnormality is generated in the control function by the control monitor function 55 on the basis of the inspection result information output by the inspection function 56 of the processor 31, the monitor IC 7 inhibits control by the processor 32.</p> |
