Search Results

The development of future automotive electronic systems requires new concepts in the software architecture, development methodology and information exchange. At Bosch an XML and MSR based technology is applied to achieve a consistent information handling throughout the entire software development process. This approach enables the tool independent exchange of information and documentation between the involved development partners. This paper presents the software architecture, the specification of software components in XML, the process steps, an example and an exchange scenario with an external development partner.

Car Periphery Supervision (CPS) systems comprise a family of automotive systems that are based on sensors installed around the vehicle to monitor its environment. The measurement and evaluation of sensor data enables the realization of several kinds of higher level applications such as parking assistance or blind spot detection. Although a lot of similarity can be identified among CPS applications, these systems are traditionally built separately. Usually, each single system is built with its own electronic control unit, and it is likely that the application software is bound to the controller's hardware. Current systems engineering therefore often leads to a large number of inflexible, dedicated systems in the automobile that together consume a large amount of power, weight, and installation space and produce high manufacturing and maintenance costs.

This paper describes the concept of the Diagnostic System Management DSM which introduces an improved object-oriented software architecture in order to meet the high performance and reliability requirements of automotive On-Board Diagnostic Systems (OBD). DSM handles standard tasks and offers services to integrate diagnostic and control functions. This architecture enables the flexible composition of system-independent, reusable function implementations. Hence a distributed software development and software sharing are supported. The module DSM consists of a Fault Code Memory, an Inhibit Handler, a Validator and a Function Scheduler. Special care has been taken to achieve robustness against EMI effects. Bosch will use DSM in the future powertrain control systems.

AUTOSAR (AUTomotive Open System ARchitecture) is a worldwide standard for automotive basic software in line with an architecture that eases exchange and transfer of application software components between platforms or companies. AUTOSAR provides the standardized architecture together with the specifications of the basics software along with the methodology for developing embedded control units for automotive applications. AUTOSAR matured over the last several years through intensive development, implementation and maintenance. Two main releases (R3.2 and R4.0) represent its current degree of maturity. AUTOSAR is driven by so called core partners: leading car manufacturers (BMW, Daimler, Ford, GM, PSA, Toyota, Volkswagen) together with the tier 1 suppliers Continental and Bosch. AUTOSAR in total has more than 150 companies (OEM, Tier X suppliers, SW and tool suppliers, and silicon suppliers) as members from all over the world.

Safety-critical embedded software has to satisfy stringent quality requirements. One such requirement, imposed by all contemporary safety standards, is that no critical run-time errors must occur. Runtime errors can be caused by undefined or unspecified behavior of the programming language; examples are buffer overflows or data races. They may cause erroneous or erratic behavior, induce system failures, and constitute security vulnerabilities. A sound static analyzer reports all such defects in the code, or proves their absence. Sound static program analysis is a verification technique recommended by ISO/FDIS 26262 for software unit verification and for the verification of software integration. In this article we propose an analysis methodology that has been implemented with the static analyzer Astrée. It supports quick turn-around times and gives highly precise whole-program results.

Current vehicle concepts necessitate the multiple measurement of several variables required by separate electronic systems in the motor vehicle. There is the need to make sensors bus capable by the incorporation of electronic components in new definition concepts, in other words to make them multiply usable. Such bus concepts are at the present time taking concrete shape. The step of introducing electronics - especially digital - to the measuring point may simultaneously be used to considerably improve utilization of the information content of sensor structures using means of indivdual, digital correction to a greater level than has until now been technically possible. There remains the demand for high stability and reproducibility of the sensor properties over time. These signal preprocessing and information condensation processes on the spot also satisfy the need to relieve the central control units.

The new aerial communication protocol “Controller Area Network” (CAN) efficiently supports distributed realtime control in automotive applications. In order to unload CPUs from high-speed message transfer, dedicated CAN hardware handles messages up to the communication object level. In multiplex wiring message rates are one to two orders of magnitude lower, allowing to implement the upper communication level more cost-effectively in software. This reduces CAN interface hardware to bitwise protocol handling only. It may be incorporated even into low-end microcontrollers without significantly increasing chip size. Thus the same CAN protocol supports the entire range of serial automotive communication, matching implementation costs to requirements at each performance level.

In recent times, the software portion and the complexity of software within automotive electronic control units have grown noticeably and continue to grow. In order to get a grip on the software complexity and the amount of customer-specific software variants, a modeling concept for a structured and easily extensible software architecture is needed. This concept should efficiently support the formation of variants and code reuse without increasing runtime and memory space overhead. In this paper, we present our approach to such a modeling concept: The object-oriented modeling concept OMOS and its application to signal conditioning of vehicle control systems.

This paper describes the first results from the AutoMoDe project (Automotive Model-based Development), where an integrated methodology for model-based development of automotive control software is being developed. The results presented include a number of problem-oriented graphical notations, based on a formally defined operational model, which are associated with system views for various degrees of abstraction. It is shown how the approach can be used for partitioning comprehensive system designs for subsequent implementation-related tasks. Recent experiences from a case study of an engine management system, specific issues related to reengineering, and the current status of CASE-tool support are also presented.

In this paper we present the design of a cryogenic platform for new space borne communication payloads. This platform is dedicated to service the operation of a communication payload in a cryogenic environment. In addition, an easy adaptation to any kind of available satellite buses must be reflected by the design of all interfaces. A first experimental demonstrator of this cryogenic platform with HTSC-components is foreseen to be operated on board the International Space Station (ISS) [1]. The paper will present such a new kind of cryogenic platform. The thermal requirements and boundary conditions for the platform development are summarized. A comparison of the typical thermal environment of a communication satellite with the environment of the ISS and is performed. Two different concepts for the design of a cryogenic platform will be presented. A redundancy concept for the provision of cooling power and the thermal control of the cryogenic platform is discussed.

Current exhaust gas emission regulations can only be well adhered to through optimal interplay of combustion engine and exhaust gas after-treatment systems. Combining a modern diesel engine with several exhaust gas after-treatment components (DPF, catalytic converters) leads to extremely complex drive systems, with very complex and technically demanding control systems. Current engine ECUs (Electronic Control Unit) have hundreds of functions with thousands of parameters that can be adapted to keep the exhaust gas emissions within the given limits. Each of these functions has to be calibrated and tested in accordance with the rest of the ECU software. To date this task has been performed mostly on engine test benches or in Hardware-in-the-Loop (HiL) setups. In this paper, a Software-in-the-Loop (SiL) approach, consisting of an engine model and an exhaust gas treatment (EGT) model, coupled with software from a real diesel engine ECU, will be described in detail.

In order to master the increasing complexity of electrical/electronic (E/E) systems in vehicles, E/E architecture design has become an established discipline. The task of the E/E architecture design is to come up with solutions to challenging and often contradictory requirements such as reduced cost and increased flexibility / scalability. One way to optimize the E/E architecture in terms of cost (electronics & wiring harness) is to integrate functions. This can be done by either combining functions from multiple ECUs into a single ECU or by introducing Domain Control Units. Domain Control Units provide the main software functionality for a vehicle domain, while relegating the basic functions of actuator control to connected intelligent actuators. Depending on the different market segments (low price, volume and premium) and the different vehicle domains, the actual usage of Domain Control Units can be quite different and sometimes questionable.

This paper describes the concept of the operating system ERCOS (Embedded Real-time Control Operating System). ERCOS has been specially designed to meet the functionality and performance requirements in the area of automotive applications. The ever increasing functional requirements for modern electronic control units are introducing considerable complexity in the area of software development. It is well known that real-time operating systems provide powerful means to handle complex functions under real-time constraints. Past experience, however, has shown that the efficiency and flexibility of operating systems was very often inadequate for automotive applications. To overcome these insufficiencies the operating system ERCOS has been designed with dedicated support for automotive requirements. This has been achieved by supplementing the run-time part of the operating system by powerful off-line tools.

Todays injection systems for diesel engines work with highly sophisticated mechanical governors. But only by electronic control of diesel injection systems will it be possible to comply with the emission regulations and to achieve better performance. In 1986 BOSCH started volume production of Electronic Diesel Control (EDC). This paper will concentrate on the electronic control unit (ECU) as it was designed for use in passenger cars. The production ECU and the planned next-step ECU are outlined, explaining hardware and software. An outlook of development goals of the future EDC control-units is given.

This paper shows that the functional integration of Electronic Throttle Control (ETC) into the engine control strategy allows improvements of emissions and fuel economy without making compromises in respect of driveability. A cost effective way for realizing ETC is the integration of the control electronics into the engine control unit (ECU). The paper describes the consequences of such an integration for the ECU hardware and software. Special attention is given to the ETC related safety aspects. Another chapter discusses different technologies for the throttle actuator drive. This is followed by a brief description of a suitable control strategy for a throttle actuator. Finally the paper gives also an overview about current status and development trends of accelerator pedal sensors necessary for ETC.

As automobiles become increasingly smarter, the need to understand within the automotive software the physical behavior of its parts is growing as well. The laws of physics governing such behavior are mostly formulated as differential equations, which today are usually created or obtained from various modeling tools. For solving them, the tools offer several solvers to satisfy the requirements of different problems. E.g. simple and fast explicit low order solvers for non-stiff problems and more complex implicit solvers for stiff problems. Though the modeling and code generation features as available in such tools are desirable for embedded automotive software, they cannot be used directly due to special restrictions with respect to hard realtime constraints. One such restriction is the organization of automotive software in components complying with the AUTOSAR standard which is not widely supported by the modeling tools.

Many software functions currently available in the engine control units have been developed for several years (decades in some cases), reengineered or adapted due to new requirements, what may add to their inherent complexity an unnecessary complication. This paper deals with the study and implementation of a software reengineering strategy for the embedded domain, which is in transfer from research department to product development, here applied to improve maintainability of flex fuel functions. The strategy uses the SCODE “Essential Analysis”, an approach for the embedded system domain. The method allows to reduce the system complexity to the unavoidable inherent problem complexity, by decomposing the system into smaller sub problems based on its essential physics. A case study was carried out to redesign a function of fuel adaptation. The analysis was performed with the support of a tool, which covers all the phases of the method.

In the automotive industry a growing number of mono-functional control units with increasing complexity on one hand and requirements for reduced power con-sumption and mounting space on the other hand are enforcing an architectural change of the car electronics. Computer platforms with a client/server architecture are candidates to reduce the number of control units drastically followed by a reduction of costs, space and better integration possibilities for enhanced func-tionalities as well as additional services. The problem which comes up now if those architectures are coming to the cars is to cope with software complexity and reliability issues under the aspect of continuously evolving hardware infrastructure. To understand the problems better, the Corporate Engineering within Robert Bosch GmbH has build a multifunctional look-and-feel demonstrator in a first step using a component-based software architecture on a standard PC-platform. Experiences are reported.

Time Triggered CAN (TTCAN) is an extension of the well-known CAN protocol, introducing to CAN networks time triggered communication and a system wide global network time with high precision. Time Triggered CAN has been accepted as international standard ISOCD11898-4. The time triggered communication is built upon the unchanged standard CAN protocol. This allows a software implementation of the time triggered function of TTCAN, based on existing CAN ICs. The high precision global time however requires a hardware implementation. A hardware implementation also offers additional functions like time mark interrupts, a stopwatch, and a synchronization to external events, all independent of software latency times. The TTCAN testchip (TTCAN_TC) is a standalone TTCAN controller and has been produced as a solution to the hen/egg problem of hardware availability versus tool support and research.

The demand for more security, economy, and comfort as well as for a reduced environmental impact increases the importance of electronic components for vehicles. The development of such systems is determined by the requirement of an improved functionality and co-requisite the demand for limited costs. In order to fulfil these demands and taking into consideration the increase of complexity and the melting together to a car wide web, Bosch is developing a structuring concept called CARTRONIC®. This concept is supposed to be open and neutral regarding automotive manufactures and suppliers. The analysis of vehicle control systems via this method is based on formal rules for structuring and modelling. The function-related aspect of CARTRONIC® was represented already at the SAE'98 World Congress. Furthermore the safety-related feature was introduced in more detail at the SAE'99 World Congress. The result of the analysis is an object structure of logical components with defined interfaces.