When any of the data from the B-CAN circuit cannot be received within a specified time, or an unusual combination of the data is recognized, the MICUs move to the software fail-safe mode. The data that cannot be received is forced to a pre-programmed value.