Patent attributes
When first and second ignition switches are turned from on to off, a first or second CPU determines whether an abnormality has occurred in an electronically controlled brake system. When the first or second CPU determines that an abnormality has occurred, the first and second CPUs immediately turn off first and second main relays, respectively. When both the first and second CPUs determine that operation is normal and an occupant detection switch is off, the first and second CPUs keep the first and second main relays on for a predetermined period of time as a self-maintaining process during normal operation. In this self-maintaining process during normal operation, the period during which the first and second main relays are kept on is changed according to the voltage of a vehicle battery.