Search Results

This paper presents an overview of the evolution & revolution of automotive E/E architectures and how we at Bosch, envision the technology in the future. It provides information on the bottlenecks for current E/E architectures and drivers for their evolution. Functionalities such as automated driving, connectivity and cyber-security have gained increasing importance over the past few years. The importance of these functionalities will continue to grow as these cutting-edge technologies mature and market acceptance increases. Implementation of these functionalities in mainstream vehicles will demand a paradigm shift in E/E architectures with respect to in-vehicle communication networks, power networks, connectivity, safety and security. This paper expounds on these points at a system level.

Since introduction of safety belts in the 70s and airbags in the early 80s, these passive safety technologies have become standard in many markets. Remarkable improvement in passive safety, efforts to alter driver behaviour and infrastructural programmes have led to substantial reductions of fatalities in many regions, although the absolute number of highway fatalities increased e.g. in the USA in 2002 to the highest level since 1990. Electronic Stability Control (ESC) as an active safety technology assists the driver to keep the vehicle on the intended track and thereby actively prevents accidents. In 1995 Bosch was the first supplier to introduce ESC for the Mercedes-Benz S-Class, where it is marketed as ESP® - Electronic Stability Program. Since then, Bosch has produced more than 30 million systems worldwide. Many studies have now confirmed that ESC can prevent a vehicle from skidding or rolling over in nearly all driving situations.

The conventional measurements to describe the photometric quality of headlamps usually only comprise the luminous flux and the illuminance (resp. the luminous intensity) in several measuring points given by Type Approval Legislation. Practically, these photometric measurements do not describe the visual impression of a headlamp light distribution sufficiently, neither in lab nor in real street geometry. With the clear outer lens headlamps introduced recently, filament images are projected directly onto the screens or streets, thus giving new impulses to research. Starting from the established photometric practice, other types of measurements and physiological fundamentals will be discussed. The basic tools to make physical measurement and physiological impression comparable, e.g. in terms of homogeneity, are shown.

In order to master the increasing complexity of electrical/electronic (E/E) systems in vehicles, E/E architecture design has become an established discipline. The task of the E/E architecture design is to come up with solutions to challenging and often contradictory requirements such as reduced cost and increased flexibility / scalability. One way to optimize the E/E architecture in terms of cost (electronics & wiring harness) is to integrate functions. This can be done by either combining functions from multiple ECUs into a single ECU or by introducing Domain Control Units. Domain Control Units provide the main software functionality for a vehicle domain, while relegating the basic functions of actuator control to connected intelligent actuators. Depending on the different market segments (low price, volume and premium) and the different vehicle domains, the actual usage of Domain Control Units can be quite different and sometimes questionable.

A major trend in modern vehicle control is the increase of complexity and interaction of formerly autonomous systems. In order to manage the resulting network of more and more integrated (sub)systems Bosch has developed an open architecture called CARTRONIC for structuring the entire vehicle control system. Structuring the system in functionally independent components improves modular software development and allows the integration of new elements such as integrated starter/generator and the implementation of advanced control concepts as drive train management. This approach leads to an open structure on a high level for the design of advanced vehicle control systems. The paper describes the integration of the spark-ignition (SI) engine management system (EMS) into a CARTRONIC conform vehicle coordination requiring a new standard interface between the vehicle coordination and the EMS level.

Connecting microcontrollers, sensors and actuators by several communication systems is state of the art within the electronic architectures of modern vehicles. The communication among these components is widely based on the event triggered communication on the Controller-Area-Network (CAN) protocol. The arbitrating mechanism of this protocol ensures that all messages are transferred according to the priority of their identifiers and that the message with the highest priority will not be disturbed. In the future some mission critical subnetworks within the upcoming generations of vehicle systems, e.g. x-by-wire systems (xbws), will additionally require deterministic behavior in communication during service. Even at maximum bus load, the transmission of all safety related messages must be guaranteed. Moreover it must be possible to determine the point of time when the message will be transmitted with high precision.

Time Triggered CAN (TTCAN) is an extension of the well-known CAN protocol, introducing to CAN networks time triggered communication and a system wide global network time with high precision. Time Triggered CAN has been accepted as international standard ISOCD11898-4. The time triggered communication is built upon the unchanged standard CAN protocol. This allows a software implementation of the time triggered function of TTCAN, based on existing CAN ICs. The high precision global time however requires a hardware implementation. A hardware implementation also offers additional functions like time mark interrupts, a stopwatch, and a synchronization to external events, all independent of software latency times. The TTCAN testchip (TTCAN_TC) is a standalone TTCAN controller and has been produced as a solution to the hen/egg problem of hardware availability versus tool support and research.

Many software functions currently available in the engine control units have been developed for several years (decades in some cases), reengineered or adapted due to new requirements, what may add to their inherent complexity an unnecessary complication. This paper deals with the study and implementation of a software reengineering strategy for the embedded domain, which is in transfer from research department to product development, here applied to improve maintainability of flex fuel functions. The strategy uses the SCODE “Essential Analysis”, an approach for the embedded system domain. The method allows to reduce the system complexity to the unavoidable inherent problem complexity, by decomposing the system into smaller sub problems based on its essential physics. A case study was carried out to redesign a function of fuel adaptation. The analysis was performed with the support of a tool, which covers all the phases of the method.

On the way to automated driving, the installation rate of surround sensing systems will rapidly increase in the upcoming years. The respective technical progress in the areas of driver assistance and active safety leads to a numerous and valuable information and signals to be used prior to, during and even after an accident. Car makers and suppliers can make use of this new situation and develop integrated safety functions to further reduce the number of injured and even deaths in car accidents. Nevertheless, the base occupant safety remains the core of this integrated safety system in order to ensure at least a state-of-the-art protection even in vehicles including partial, high or full automation. Current networked safety systems comprehend a point-to-point connection between single components of active and safety systems. The optimal integration requires a much deeper and holistic approach.

The release of ISO 26262 is only about three months after the 2011 World Congress. However, there are still some contentious aspects that can introduce challenges or cause a disproportionate effort. In this paper, we will show how to avoid these problems. ISO 26262 provides a detailed method for classifying the Automotive Safely Integrity Level (ASIL) of in-vehicle electronic systems. However, the ASIL value for a specific function/product can vary significantly across the industry. Applying a lower level than the industry norm can cause substantial liability problems. Applying a higher level can initiate an “arms race” with competitors. This is particularly true if there are no vehicle-related reasons for choosing the higher level or if it doesn't make the product any safer. To encourage international harmonization, this paper will define ASIL classifications for the main automotive components. Most functions/products are currently being developed using parts of existing products.

The car industry has reached a point where electronic systems, which were so far essentially autonomous, begin to grow together to a Car-Wide Web. The main driving force is the demand for more safety, security, and comfort implemented economically. Already various parties are working on control networks. In the long run, vehicle motion and dynamic systems, safety, security, comfort as well as mobile multimedia systems will integrate and reach out for the vision of accident-free, comfortable, and well-informed driving. As a foundation for a Car-Wide Web, Bosch is developing an open architecture called CARTRONIC. The essence of CARTRONIC is to define structuring rules, modeling rules and patterns for total, integrated control of vehicles. The rules and patterns allow the mapping of high-level functions onto several physical implementations, for instance one logical description of functional connections could be created for cars with different equipment packages.

This paper is based on the experiences with Adaptive Cruise Control (ACC) systems at BOSCH. Necessary components (especially range sensor, curve sensors, actuators and display) are described, roughly specified, and their respective strength and weaknesses are addressed. The system overview contains the basic structure, the main control strategy and the concept for driver-ACC interaction. Afterwards the principal as well as the current technical limits of ACC systems are discussed. The consequences on traffic flow, safety and driver behavior are emphasized. As an outlook, development trends for extended functionality are given for the next generation of driver assistance systems.

This paper describes the first results from the AutoMoDe project (Automotive Model-based Development), where an integrated methodology for model-based development of automotive control software is being developed. The results presented include a number of problem-oriented graphical notations, based on a formally defined operational model, which are associated with system views for various degrees of abstraction. It is shown how the approach can be used for partitioning comprehensive system designs for subsequent implementation-related tasks. Recent experiences from a case study of an engine management system, specific issues related to reengineering, and the current status of CASE-tool support are also presented.

In spite of improvements in passive safety and efforts to alter driver behavior, the absolute number of highway fatalities in 2002 increased to the highest level since 1990 in the US. ESP is an active safety technology that assists the driver to keep the vehicle on the intended path and thereby helps to prevent accidents. ESP is especially effective in keeping the vehicle on the road and mitigating rollover accidents which account for over 1/3 of all fatalities in single vehicle accidents. In 1995 Bosch was the first supplier to introduce electronic stability control (ESC) for the Mercedes-Benz S-Class sedan. Since then, Bosch has produced more than 10 million systems worldwide which are marketed as ESP - Electronic Stability Program. In this report Bosch will present ESP contributions to active safety and the required adaptations to support four wheel driven vehicles and to mitigate rollover situations.

Mathematical modelling has proved to be a valuable tool for understanding the performance of diesel injection systems. There are several programs for the simulation of conventional injection equipment, but up to now it has been very expensive to simulate new concepts of injection equipment. Therefore a general program system for simulation of transient hydraulic processes - especially in diesel injection systems - has been developped. By this system, any new injection equipment can be simulated user-friendly and without needing to write new programs. The differential equations are solved by mathematical methods, which promise stability in all conditions and offer short calculation times. Since 1983 the program system has been applied to a lot of non-conventional and conventional injection systems and has proved its reliability.

The particulate emissions can be reduced by increasing injection pressure. The NOx-emission can be lowered to the required amount with a retarded injection-begin. These measures raise fuel consumption by approximately 8-10 %. To avoid blue smoke from the cold engine, it is advantageous that the fuel injection is advanced during the warm-up period. These statements apply for injection systems with unit injectors as well as for pump-line-nozzle-systems. In this paper, the pump-line-nozzle-system will be described. With this system, injection pressures of 1200 to 1400 bar at the injection nozzle are reached. The injection-begin can be changed with a control-sleeve in-line pump. The injection-begin and fuel quantity can be flexibly and accurately adjusted by means of an electronic governor.

Despite the tough environmental conditions facing electronic systems in commercial vehicles, electronics is gaining ground also in these applications. In the drive sector it improves the operation of the main and auxiliary drives, upgrades fuel efficiency and reduces emission pollutant levels. It enhances safety by preventing wheel spinning in braking and acceleration. Electronic displays reduce the number of single indications otherwise needed, thus making for more clarity in information for the driver and facilitating the driver's task. Self-diagnosing and integrated emergency operation (“limp home”) capabilities are to ensure availability, a factor of special importance in commercial vehicles. A data interface standardized as widely as possible would allow add-on systems to be coupled easily and flexibly.

A closure system for automotive security and driver comfort has been developed. The system combines a passive entry system and an electronic door latch system. The passive entry system utilises a single chip transponder for vehicle immobilisation, passive entry and remote control functionality. The form factor free transponder enables the integration into a key fob or a smart card. The system can be activated by either pulling the door handle or by using a push button transponder. Due to the inductive coupling between the transponder and the vehicle mounted antennas, the vehicle door or trunk opens on successful verification as if there were no locks. Additionally, inside the vehicle, the transponder can be used as a far range immobiliser. The electronic door latch system utilises electronically controlled latches.

To satisfy the increasing demand for automotive safety a warning system (WARN) to support drivers has been developed. The basic idea is to transmit safety-related information from one vehicle to surrounding vehicles by direct wireless communication. To ensure user-acceptance of the system different strategies have been developed in order to provide only relevant information to a specific driver. The strategies rely on a comparison of the received alert messages with the current driving situation. Simulations show a significant safety-improvement due to the system if at least 10 percent of all vehicles are equipped with the system.

Due to an earlier analysis of the interrelation between collisions and advanced driver reaction a significant number of accidents could be avoided through timely threat recognition and appropriate maneuvers for collision avoidance. This may be achieved either by suitable warning to the driver or by automatic support to longitudinal or lateral control of the vehicle. A precondition for the registration of the dangerous situation is the incorporation of appropriate sensors. This leads to an surround sensor vision system accompanied by a matched human machine interface. Many vehicles readily offer ultrasonic reversing aids as add-on systems. Furthermore, long-range radar systems for adaptive cruise control are now coming on the market. New sensor technologies, such as short-range radar and video, which are currently under development, open up a plurality of novel functions thus enhancing driving safety and comfort.