Search Results

The development of future automotive electronic systems requires new concepts in the software architecture, development methodology and information exchange. At Bosch an XML and MSR based technology is applied to achieve a consistent information handling throughout the entire software development process. This approach enables the tool independent exchange of information and documentation between the involved development partners. This paper presents the software architecture, the specification of software components in XML, the process steps, an example and an exchange scenario with an external development partner.

Car Periphery Supervision (CPS) systems comprise a family of automotive systems that are based on sensors installed around the vehicle to monitor its environment. The measurement and evaluation of sensor data enables the realization of several kinds of higher level applications such as parking assistance or blind spot detection. Although a lot of similarity can be identified among CPS applications, these systems are traditionally built separately. Usually, each single system is built with its own electronic control unit, and it is likely that the application software is bound to the controller's hardware. Current systems engineering therefore often leads to a large number of inflexible, dedicated systems in the automobile that together consume a large amount of power, weight, and installation space and produce high manufacturing and maintenance costs.

This paper describes the concept of the Diagnostic System Management DSM which introduces an improved object-oriented software architecture in order to meet the high performance and reliability requirements of automotive On-Board Diagnostic Systems (OBD). DSM handles standard tasks and offers services to integrate diagnostic and control functions. This architecture enables the flexible composition of system-independent, reusable function implementations. Hence a distributed software development and software sharing are supported. The module DSM consists of a Fault Code Memory, an Inhibit Handler, a Validator and a Function Scheduler. Special care has been taken to achieve robustness against EMI effects. Bosch will use DSM in the future powertrain control systems.

Tapping of one or more torques (ranges 10 Nm and 60 Nm) on the steering column for the purpose of servo control must satisfy high accuracy requirements on the one hand and high safety requirements on the other hand. A suggestion for developing a low-cost solution to this problem is described below: Strain gages optimally satisfy both these requirements: However, for cost reasons, these are not applied directly to the steering column but to a prefabricated, flat steel rod which is laser welded to the torque rod of the steering column. The measuring direction of the strain gages is under 45° to the steering column axis. The strain gages are either vacuum metallized onto the support rod as a thin film or laminated in a particularly low-cost way by means of a foil-type intermediate carrier.

In recognition of safety considerations, modern fuel tanks are frequently extremely irregular in shape. This places limits on the application of conventional potentiometric sensors. Required are more universal sensors without mechanically-moving parts. These sensors should also be characterized by especially good resolution and precision in the residual-quantity range, that is, the zero point precision should be of a high order. One type of metal rod can be bent into any of a variety of shapes to provide an effective means of monitoring the fuel level. In this metal rod, the propagation characteristics of a certain type of sound wave, known as bending waves, display major variations according to the level of the surrounding medium: The waves spread more rapidly through the exposed section of the rod than through the area which remains submerged. Thus the rod's characteristic oscillation frequency varies as a function of immersion depth.

AUTOSAR (AUTomotive Open System ARchitecture) is a worldwide standard for automotive basic software in line with an architecture that eases exchange and transfer of application software components between platforms or companies. AUTOSAR provides the standardized architecture together with the specifications of the basics software along with the methodology for developing embedded control units for automotive applications. AUTOSAR matured over the last several years through intensive development, implementation and maintenance. Two main releases (R3.2 and R4.0) represent its current degree of maturity. AUTOSAR is driven by so called core partners: leading car manufacturers (BMW, Daimler, Ford, GM, PSA, Toyota, Volkswagen) together with the tier 1 suppliers Continental and Bosch. AUTOSAR in total has more than 150 companies (OEM, Tier X suppliers, SW and tool suppliers, and silicon suppliers) as members from all over the world.

This paper presents advanced planar ZrO2 oxygen sensors being developed at Robert Bosch using a modified tetragonal partially stabilized zirconia (TZP) with high ionic conductivity, high phase stability and high thermo-mechanical strength. Green tape technology combined with highly automated thickfilm techniques allows robust and cost effective manufacturing of those novel sensing elements. Standardization of assembling parts reduces the complexity of the assembly line even in the case of different sensing principles. The sensor family meets the new requirements of modern ULEV strategies like fast light off below 10 s and linear control capability as well as high quality assurance standards. High volume production will start in 1997 for European customers.

The worldwide stricter emission legislation and growing demands for lower fuel consumption require for significant efforts to improve combustion efficiency while satisfying the emission quality demands. Homogeneous Charge Compression Ignition (HCCI) on gasoline engines provides a particularly promising and, at the same time, challenging approach, especially regarding the combustion mode switch between spark-ignited (SI) and gasoline HCCI mode and vice-versa. Naturally aspirated (n.a.) HCCI shows considerable potential, but the operation range is air breathing limited due to hot residuals required for auto-ignition and to slow down reaction kinetics. Therefore it is limited to part-load operation. Considering the future gasoline engine market with growing potentials identified on downsized gasoline engines, it is imperative to investigate the synergies and challenges of boosted HCCI.

The selective catalytic reduction (SCR) based on urea-water-solution is an effective technique to reduce nitrogen oxides (NOx) emitted from diesel engines. A 3D numerical computer model of the injection of urea-water-solution and their interaction with the exhaust gas flow and exhaust tubing is developed to evaluate different configurations during the development process of such a DeNOx-system. The model accounts for all relevant processes appearing from the injection point to the entrance of the SCR-catalyst: momentum interaction between gas phase and droplets evaporation and thermolysis of droplets hydrolysis of isocyanic acid in gas phase heat transfer between wall and droplets spray/wall-interaction two-component wall film including interaction with gas phase and exhaust tube The single modeling steps are verified with visualizations, patternator measurements, phase-doppler-anemometer results and temperature measurements.

Safety-critical embedded software has to satisfy stringent quality requirements. One such requirement, imposed by all contemporary safety standards, is that no critical run-time errors must occur. Runtime errors can be caused by undefined or unspecified behavior of the programming language; examples are buffer overflows or data races. They may cause erroneous or erratic behavior, induce system failures, and constitute security vulnerabilities. A sound static analyzer reports all such defects in the code, or proves their absence. Sound static program analysis is a verification technique recommended by ISO/FDIS 26262 for software unit verification and for the verification of software integration. In this article we propose an analysis methodology that has been implemented with the static analyzer Astrée. It supports quick turn-around times and gives highly precise whole-program results.

The new aerial communication protocol “Controller Area Network” (CAN) efficiently supports distributed realtime control in automotive applications. In order to unload CPUs from high-speed message transfer, dedicated CAN hardware handles messages up to the communication object level. In multiplex wiring message rates are one to two orders of magnitude lower, allowing to implement the upper communication level more cost-effectively in software. This reduces CAN interface hardware to bitwise protocol handling only. It may be incorporated even into low-end microcontrollers without significantly increasing chip size. Thus the same CAN protocol supports the entire range of serial automotive communication, matching implementation costs to requirements at each performance level.

With its origin in the process industry, the IEC 61508 „Functional safety of electrical/electronic/programmable electronic safety-related systems” is not fully applicable in the automotive industry, forcing the automotive industry to work on an automotive specific adaptation (ISO 26262 “Functional Safety – Road Vehicles”). This ISO 26262 describes an ideal development process that starts from scratch. In reality development activities are often split locally and in time. This can only be handled with a world wide standard as a basis of a common approach, wide enough to give enough freedom to adapt to diverse boundary conditions, but tight enough to hinder local interpretations to be that far, that a complete safety case becomes impossible. Therefore a strict world-wide standard which allows compatible interpretations is mandatory.

In recent times, the software portion and the complexity of software within automotive electronic control units have grown noticeably and continue to grow. In order to get a grip on the software complexity and the amount of customer-specific software variants, a modeling concept for a structured and easily extensible software architecture is needed. This concept should efficiently support the formation of variants and code reuse without increasing runtime and memory space overhead. In this paper, we present our approach to such a modeling concept: The object-oriented modeling concept OMOS and its application to signal conditioning of vehicle control systems.

This paper describes the first results from the AutoMoDe project (Automotive Model-based Development), where an integrated methodology for model-based development of automotive control software is being developed. The results presented include a number of problem-oriented graphical notations, based on a formally defined operational model, which are associated with system views for various degrees of abstraction. It is shown how the approach can be used for partitioning comprehensive system designs for subsequent implementation-related tasks. Recent experiences from a case study of an engine management system, specific issues related to reengineering, and the current status of CASE-tool support are also presented.

Until now, the use of biometric systems has not been in the public eye. The high cost of sensors and processing has meant that biometrics was previously restricted to high security access, financial transaction and law enforcement applications. However, as a result of improvements in technology, biometric sensor price and reliability have achieved levels where biometrics is being seriously considered for automotive systems. This paper introduces the field of biometrics, the key terms and processes. Fingerprint Technology and Identification by Fingerprint are discussed, as are the use and applicability of biometrics in automotive applications, including Personal Profiling, Keyless Engine Start and vehicle access authorization. The key findings of investigations over the last years are discussed.

Bosch Automotive Semiconductor Unit investigated destroyed semiconductor devices (ASIC) from electronic control unit complaints, which failed due to electrical overstress. It turned out that failure fingerprints could only be reproduced by semiconductor operation far beyond spec limits. One main failure mechanism is caused by hot plugging and bad or late ground connection. In today’s cars some applications are still active for minutes after ignition switch off. So, currents of several amps are delivered and in a typical production or garage environment, hot plugging cannot be avoided completely. Bosch suggests introducing extended ground pins to get an enforced switch on/off sequence during plugging. This poka yoke protection principle is successfully used in other industries for a long time and should now come into cars.

The continuing increase in the performance of restraint systems has led to a drastic increase in the number of actuator devices. The individual wiring of the igniters becomes more and more problematic through the accompanied large number of plug connections and cables. Along with demands for weight and volume reduction, there are requirements for EMI and short circuit protection to eliminate erroneous deployment and misuse. As a solution, a new multi-protocol dual wire bus system is described that has the capability to supply energy and address multiple peripheral output stages to simultaneously fire any combination of actuators.

Future emission standards for heavy-duty vehicles like Euro 4, Euro 5, US '07 require advanced engine functionality. One contribution to achieve this target is the catalytic reduction of nitrogen oxides by injection of urea water solution to the exhaust gas. An overview on a urea dosing system, also called DENOXTRONIC, is given and a dosing strategy is described.

In this paper we present the design of a cryogenic platform for new space borne communication payloads. This platform is dedicated to service the operation of a communication payload in a cryogenic environment. In addition, an easy adaptation to any kind of available satellite buses must be reflected by the design of all interfaces. A first experimental demonstrator of this cryogenic platform with HTSC-components is foreseen to be operated on board the International Space Station (ISS) [1]. The paper will present such a new kind of cryogenic platform. The thermal requirements and boundary conditions for the platform development are summarized. A comparison of the typical thermal environment of a communication satellite with the environment of the ISS and is performed. Two different concepts for the design of a cryogenic platform will be presented. A redundancy concept for the provision of cooling power and the thermal control of the cryogenic platform is discussed.

Current exhaust gas emission regulations can only be well adhered to through optimal interplay of combustion engine and exhaust gas after-treatment systems. Combining a modern diesel engine with several exhaust gas after-treatment components (DPF, catalytic converters) leads to extremely complex drive systems, with very complex and technically demanding control systems. Current engine ECUs (Electronic Control Unit) have hundreds of functions with thousands of parameters that can be adapted to keep the exhaust gas emissions within the given limits. Each of these functions has to be calibrated and tested in accordance with the rest of the ECU software. To date this task has been performed mostly on engine test benches or in Hardware-in-the-Loop (HiL) setups. In this paper, a Software-in-the-Loop (SiL) approach, consisting of an engine model and an exhaust gas treatment (EGT) model, coupled with software from a real diesel engine ECU, will be described in detail.