ECU
Electronic Control Units run everything from engines to windows. Learn ECU hardware (microcontroller, power supply, input conditioning, drivers, communication), the harsh 12 V automotive environment (load dump, reverse polarity, EMC, temperature), watchdogs, and the shift to domain and zonal controllers.
A modern car contains 70–150 ECUs. Each is a small embedded computer: it reads sensors, runs control software, drives actuators and talks to other ECUs over networks.
Automotive electronics must survive −40 to +125 °C, vibration, moisture, electrical transients and 15+ years of service — while being cheap and safe.
An analogy
ECUs are like the organs of the car's nervous system: each handles its own job (engine, brakes, doors) but constantly exchanges messages with the others.
Inside an ECU
Power supply (regulators, protection), microcontroller (flash, RAM, timers, ADC, CAN/LIN/Ethernet controllers), input conditioning (filters, dividers, clamps), output drivers (high/low-side switches, H-bridges, injector drivers), transceivers and connectors in a sealed housing.
The automotive electrical environment
12 V nominal but 6 V during cold crank and up to ~40 V (clamped) during load dump; reverse polarity from jump starts; ISO 7637/16750 transients; EMC emissions and immunity (CISPR 25); temperature and humidity. Protection: TVS diodes, reverse-polarity MOSFETs, filters, conformal coating.
Reliability and safety features
Watchdogs reset stuck software; lock-step cores detect CPU faults; memory ECC; brown-out detection; limp-home modes; non-volatile storage of fault codes. AEC-Q100/Q200 qualified components are used.
Architecture evolution
Distributed ECUs → domain controllers (powertrain, chassis, body, ADAS, infotainment) → zonal controllers wired by location plus central high-performance compute. This cuts wiring (a car harness can weigh 40–60 kg) and enables software-defined vehicles with OTA updates.
Formulas
- Voltage divider:
V_out = V_in · R₂ / (R₁ + R₂) - ADC resolution:
LSB = V_ref / 2ⁿ - Measured input resolution:
Δ V_in = LSB × (R₁ + R₂)/R₂ - ECU current budget:
I_total = Σ I_active + I_quiescent (sleep ≤ ~100 µA per ECU)
Worked example: Battery voltage measurement
Given: Max battery voltage to measure 16 V; ADC 12-bit, 5 V reference; Divider R₁ = 22 kΩ, R₂ = 10 kΩ
Find: ADC input at 16 V and resolution.
- V_out = 16 × 10/32 = 5.0 V ✓ (full scale)
- LSB = 5/4096 = 1.22 mV
- Battery resolution = 1.22 × 3.2 = 3.9 mV
Answer: 5.0 V at 16 V; ≈ 3.9 mV per count
Worked example: Quiescent current budget
Given: 60 ECUs × 80 µA sleep current; 70 Ah battery, must still crank after 30 days
Find: Charge drained in 30 days.
- I = 60 × 80 µA = 4.8 mA
- 30 days = 720 h → 3.5 Ah (≈ 5 % of 70 Ah)
Answer: ≈ 3.5 Ah — acceptable; a single ECU failing to sleep (e.g. 100 mA) would drain 72 Ah!
Common mistakes
- Wrong: Divider with very high resistance for low current. — Right: Too high impedance hurts ADC accuracy — add a buffer or sample capacitor.
- Wrong: Ignoring sleep current. — Right: One ECU that won't sleep flattens the battery in days.
Applications
- Powertrain & chassis: Engine, transmission, brake and steering ECUs.
- Body & comfort: Body control modules, seats, doors, lighting.
- Central compute: Domain/zonal controllers and ADAS computers.
Key takeaways
- MCU + power + I/O conditioning + drivers + networks.
- Harsh environment: transients, temperature, EMC.
- Dividers and ADC: LSB = V_ref/2ⁿ.
- Architectures moving to domain/zonal + central compute.
Going further
- System basis chips: Integrate regulators, transceivers and watchdog for ECUs.
- Lock-step cores: Two cores executing identically detect random hardware faults (ASIL D).
- 48 V systems: Mild-hybrid networks with separate protection and isolation needs.