Search Results

Automotive engineering processes are dynamic, iterative and driven by changes. Reasons for changes on development artifacts are manifold, but the result is a new evolution step which may influence all, some, or just a single development artifact. Consequently, research on impact analysis put forth approaches to assess the adverse effects of changes. However, understanding and implementing functional changes and its consequences in the safety domain is often aggravated by dependencies between different types of development artifacts, scattered in various (tool) formats. Safety properties may change depending on the type of a modification. Thereby, connected analyses like fault trees, Failure Modes and Effects Analysis (FMEA), and safety concepts cannot be reused easily if the artifacts on which they are based on are affected by changes. In this paper we suggest a new difference analysis approach which allows a (semi-)automated comparison of safety work products based on models.

This paper introduces a new approach based on a statistical investigation and finite element analysis (FEA) methodology to predict the crankshaft torsional stiffness and stress concentration factors (SCF) due to torsion and bending which can be used as inputs for simplified crankshaft multibody models and durability calculations. In this way the reduction of the development time and effort of passenger car crankshafts in the pre-layout phase is intended with a least possible accuracy sacrifice. With the designated methodology a better approximation to reality is reached for crank torsional stiffness and SCF due to torsion and bending compared with the empirical approaches, since the prediction does not depend on the component tests with limited numbers of specimen, as in empirical equations, but on various FE calculations.

Two single-cylinder diesel engines were optimised for advanced combustion performance by means of practical and cumulative hardware enhancements that are likely to be used to meet Euro 5 and 6 emissions limits and beyond. These enhancements included high fuel injection pressures, high EGR levels and charge cooling, increased swirl, and a fixed combustion phasing, providing low engine-out emissions of NOx and PM with engine efficiencies equivalent to today's diesel engines. These combustion conditions approach those of Homogeneous Charge Compression Ignition (HCCI), especially at the lower part-load operating points. Four fuels exhibiting a range of ignition quality, volatility, and aromatics contents were used to evaluate the performance of these hardware enhancements on engine-out emissions, performance, and noise levels.

A broad range of diesel, kerosene, and gasoline-like fuels has been tested in a single-cylinder diesel engine optimized for advanced combustion performance. These fuels were selected in order to better understand the effects of ignition quality, volatility, and molecular composition on engine-out emissions, performance, and noise levels. Low-level biofuel blends, both biodiesel (FAME) and ethanol, were included in the fuel set in order to test for short-term advantages or disadvantages. The diesel engine optimized in Part 1 of this study included cumulative engine hardware enhancements that are likely to be used to meet Euro 6 emissions limits and beyond, in part by operating under conditions of Homogeneous Charge Compression Ignition (HCCI), at least over some portions of the speed and load map.

The overall perception of a vehicle's quality is significantly influenced by its interior noise characteristics. Therefore, it is important to strike a balance between “pleasant” and “dynamic” sound that fits the customer requirements with respect to vehicle brand and class [1]. Typically, a significant share of the interior vehicle noise is transferred through structure-borne paths. Hence, the powertrain mounting system plays an important role in designing the interior noise. This paper describes an application of the method of vehicle interior noise simulation (VINS) to achieve a characteristic interior sound. This approach is based on separate measurements (or calculations) of excitations and transfer functions and subsequent calculation of the interior noise in the time domain.

Electronic Control Units of safety critical systems require constant monitoring of the hardware to be able to bring the system to a safe state if any hardware defects or malfunctions are detected. This monitoring includes memory checking, peripheral checking as well as checking the main processor core. However, checking the processor core is difficult because it cannot be guaranteed that the error will be properly detected if the monitor function is running on a processing system which is malfunctioning. To circumvent this issue, several previously presented monitoring concepts (e.g. SAE#2006-01-0840) employ a second external microprocessor to communicate with the main processor to check its integrity. The addition of a second microcontroller and the associated support circuitry that is required adds to the overall costs of the ECU, increases the size and creates significant system complexity.

With increasing levels of driving automation, the perception provided by automotive environment sensors becomes highly safety relevant. A correct assessment of the sensors’ perception reliability is therefore crucial for ensuring the safety of the automated driving functionalities. There are currently no standardized procedures or guidelines for demonstrating the perception reliability of the sensors. Engineers therefore face the challenge of setting up test procedures and plan test drive efforts. Null Hypothesis Significance Testing has been employed previously to answer this question. In this contribution, we present an alternative method based on Bayesian parameter inference, which is easy to implement and whose interpretation is more intuitive for engineers without a profound statistical education. We show how to account for different environmental conditions with an influence on sensor performance and for statistical dependence among perception errors.

GTL (Gas-To-Liquid) fuel is well known to improve tailpipe emissions when fuelling a conventional diesel vehicle, that is, one optimized to conventional fuel. This investigation assesses the additional potential for GTL fuel in a GTL-dedicated vehicle. This potential for GTL fuel was quantified in an EU 4 6-cylinder serial production engine. In the first stage, a comparison of engine performance was made of GTL fuel against conventional diesel, using identical engine calibrations. Next, adaptations enabled the full potential of GTL fuel within a dedicated calibration to be assessed. For this stage, two optimization goals were investigated: - Minimization of NOx emissions and - Minimization of fuel consumption. For each optimization the boundary condition was that emissions should be within the EU5 level. An additional constraint on the latter strategy required noise levels to remain within the baseline reference.

The steady increase of engine power and the demand of lightweight design along with enhanced reliability require an optimized dimensioning process, especially in cylinder head valve bridge, which is progressively prone to cracking. The problems leading to valve bridge cracking are high temperatures and temperature gradients on one hand and high mechanical restraining on the other hand. The accurate temperature estimation at the valve bridge center has significant outcomes for valve bridge thickness and width optimization. This paper presents a 1D heat transfer model, which is constructed through the cross section of the valve bridge center by the use of well known quasi-stationary heat convection and conduction equations and reduced from 3D to 1D via regression and empirical weighting coefficients. Several diesel engine cylinder heads with different application types and materials are used for model setup and verification.

This paper proposes end-to-end protection mechanisms to be added to a generic FlexRay network in order to achieve fault detection and integrity levels sufficient for a SIL3 fail safe communication system. The mechanisms are derived from the random hardware failure modes to be considered for communication controllers according to IEC 61508. Mechanisms provided by the FlexRay protocol are pointed out. Additional features necessary to fulfil the requirements are discussed. It is shown how to calculate the failure rate probabilities of the CRC used as a safety code with respect to EN 50159.

One main goal of the automotive industry is to reduce the aerodynamic drag of passenger vehicles. Therefore, a deeper understanding of the flow field is necessary. Time-resolved data of the flow field is required to get an insight into the complex unsteady flow phenomena around passenger vehicles. This data helps to understand the temporal development of wake structures and enables the analysis of the formation of vortical structures. Numerical simulations are an efficient method to analyze the time-resolved data of the unsteady flow field. The analysis of the steady and unsteady numerical data is only relevant for aerodynamic developments in the wind tunnel, if the predicted temporal evolving structures of a passenger vehicle’s simulated flow field correspond to the structures of the flow field in the wind tunnel. In this study, time-resolved measurements of the empty wind tunnel and a notchback passenger vehicle in the wind tunnel are conducted.

The increased pressure for power, space, and cost reduction in automotive applications together with the availability of high performance, automotive qualified multicore microcontrollers has lead to the ability to engineer Domain Controller ECUs that can host several separate applications in parallel. The standard automotive constraints however still apply, such as use of AUTOSAR operating system, support for legacy code, hosting OEM supplied code and the ability to determine warranty issues and responsibilities between a group of Tier 1 and Tier 2 vendors who all provide Intellectual Property to the final production ECU. Requirements for safety relevant applications add even more complexity, which in most current approaches demand a reconfiguration of all basic software layers and a major effort to redesign parts of the application code to enable co-existence on the same hardware platform. This paper outlines the conflicting requirements of hosting multiple applications.

Electronic Control Units of safety critical systems require constant monitoring of the hardware to be able to bring the system to a safe state if any hardware defects or malfunctions are detected. This monitoring includes memory checking, peripheral checking as well as checking the main processor core. However, checking the processor core is difficult because it cannot be guaranteed that the error will be properly detected if the monitor function is running on a processing system which is malfunctioning. To circumvent this issue, several previously presented monitoring concepts (e.g. SAE#2006-01-0840) employ a second external microprocessor to communicate with the main processor to check its integrity. This paper will present a concept which maps the functions of the external monitoring unit into an internal second processing core which are frequently available on modern, 32bit, monolithic, dual-core microcontrollers.

The German funded project ARAMiS included work on several demonstrators one of which was a multicore approach on large scale software integration (LSSI) for the automotive domain. Here BMW and Audi intentionally implemented two different integration platforms to gain both experience and real life data on a Hypervisor based concept on one side as well as using only native AUTOSAR-based methods on the other side for later comparison. The idea was to obtain figures on the added overhead both for multicore as well as safety, based on practical work and close-to-production implementations. During implementation and evaluation on one hand there were a lot of valuable lessons learned about multicore in conjunction with safety. On the other hand valuable information was gathered to make it finally possible to set up a cost model for estimation of potential overhead generated by different integration approaches for safety related software functions.

Advanced safety features and new services in connected cars depend on the security of the underlying vehicle functions. Due to the interconnection with the outside world and as a result of being an embedded system a modern vehicle is exposed to both, malicious activities as faced by traditional IT world systems as well as physical attacks. This introduces the need for utilizing hardware-assisted security measures to prevent both kinds of attacks. In this paper we present a survey of the different classes of hardware security devices and depict their different functional range and application. We demonstrate the feasibility of our approach by conducting a case study on an exemplary implementation of a function-on-demand use case. In particular, our example outlines how to apply the different hardware security approaches in practice to address real-world security topics. We conclude with an assessment of today’s hardware security devices.

Over the last decades, the use of computers has become an integral part of the engine development process. Computer-based tools are increasingly used in the design process, and especially the layout of the various subsystems is conducted by means of simulation models. Computer-aided engineering plays a central role e.g. in the design of the combustion process as well as with regards to work performed in the area of engine mechanics, where CFD, FEM, and MBS are applied. As a parallel trend, it can be observed that various engine performance characteristics such as e.g. the specific power output and the power-to-weight ratio have undergone an enormous increase, a trend which to some extent counteracts the increase in safety against malfunction and failure. As yet, due to the constant need for further optimization, mechanical testing and verification processes have not become redundant, and it is assumed that they will remain indispensable for the foreseeable future.

With the introduction of the ISO26262 automotive safety standard there is a burden of proof to show that the processing elements in embedded microcontroller hardware are capable of supporting a certain diagnostic coverage level, depending on the required Automotive Safety Integrity Level (ASIL). The current mechanisms used to provide actual metrics of the Built-in Self Tests (BIST) and Lock Step comparators use Register Transfer Level (RTL) simulations of the internal processing elements which force faults into individual nodes of the design and collect diagnostic coverage results. Although this mechanism is robust, it can only be performed by semiconductor suppliers and is costly. This paper describes a new solution whereby the microcontroller is synthesized into a large Field Programmable Gate Array (FPGA) with a test controller on the outside.

Based on the TurboDISI engine presented earlier [1], [2], a new Spray Guided Turbo (SGT) concept with enhanced engine performance was developed. The turbocharged engine was modified towards utilizing a spray-guided combustion system with a central piezo injector location. Higher specific power and torque levels were achieved by applying specific design and cooling solutions. The engine was developed utilizing a state-of-the-art newly developed charge motion design (CMD) process in combination with single cylinder investigations. The engine control unit has a modular basis and is realized using rapid prototyping hardware. Additional fuel consumption potentials can be achieved with high load EGR, use of alternative fuels and a hybrid powertrain. The CO2 targets of the EU (120 g/km by 2012 in the NEDC) can be obtained with a mid-size vehicle applying the technologies presented within this paper.

The increasing complexity of automotive functions which are necessary for improved driving assistance systems and automated driving require a change of common vehicle architectures. This includes new concepts for E/E architectures such as a domain-oriented vehicle network based on powerful Domain Control Units (DCUs). These highly integrated controllers consolidate several applications on different safety levels on the same ECU. Hence, the functions depend on a strictly separated and isolated implementation to guarantee a correct behavior. This requires middleware layers which guarantee task isolation and Quality of Service (QoS) communication have to provide several new features, depending on the domain the corresponding control unit is used for. In a first step we identify requirements for a middleware in automotive DCUs. Our goal is to reuse legacy AUTOSAR based code in a multicore domain controller.