Search Results

Safety-critical embedded software has to satisfy stringent quality requirements. One such requirement, imposed by all contemporary safety standards, is that no critical run-time errors must occur. Runtime errors can be caused by undefined or unspecified behavior of the programming language; examples are buffer overflows or data races. They may cause erroneous or erratic behavior, induce system failures, and constitute security vulnerabilities. A sound static analyzer reports all such defects in the code, or proves their absence. Sound static program analysis is a verification technique recommended by ISO/FDIS 26262 for software unit verification and for the verification of software integration. In this article we propose an analysis methodology that has been implemented with the static analyzer Astrée. It supports quick turn-around times and gives highly precise whole-program results.

Commercial vehicles must convey people and goods safely and reliable, irrespective of the weather and road conditions. The ABS safety braking systems are an essential prerequisite for fulfillment of this primary task. ABS has been used in European commercial vehicles since 1981. Today there are already fittet as standard in buses to some extend. The contribution to increasing road safety is causing the European lawmakers to make ABS statutory for commercial vehicles and to make it part of their compulsory equipment. Suitable anti-lock braking systems and closed loop configurations for commercial vehicles are demonstrated by theoretical observations and technical driving trials, their axlespecific and closed-loop control characteristics are highlighted.

The paper begins with an overview of the history of ABS for commercial vehicles followed by a brief description of the technology of the BOSCH ABS at the time it went into mass production in 1981. Subsequently it describes the field experiences with ABS including the experiences of drivers and operators. These experiences are reflected in the equipment which BOSCH offers today. Additional functions such as ASR (traction control) have been integrated. The paper provides an overview of the functions available today and their implementation. The paper concludes with a discussion on potential continued developments and an attempt to describe the systems which will be required by the mid 9os.

Current vehicle concepts necessitate the multiple measurement of several variables required by separate electronic systems in the motor vehicle. There is the need to make sensors bus capable by the incorporation of electronic components in new definition concepts, in other words to make them multiply usable. Such bus concepts are at the present time taking concrete shape. The step of introducing electronics - especially digital - to the measuring point may simultaneously be used to considerably improve utilization of the information content of sensor structures using means of indivdual, digital correction to a greater level than has until now been technically possible. There remains the demand for high stability and reproducibility of the sensor properties over time. These signal preprocessing and information condensation processes on the spot also satisfy the need to relieve the central control units.

With its origin in the process industry, the IEC 61508 „Functional safety of electrical/electronic/programmable electronic safety-related systems” is not fully applicable in the automotive industry, forcing the automotive industry to work on an automotive specific adaptation (ISO 26262 “Functional Safety – Road Vehicles”). This ISO 26262 describes an ideal development process that starts from scratch. In reality development activities are often split locally and in time. This can only be handled with a world wide standard as a basis of a common approach, wide enough to give enough freedom to adapt to diverse boundary conditions, but tight enough to hinder local interpretations to be that far, that a complete safety case becomes impossible. Therefore a strict world-wide standard which allows compatible interpretations is mandatory.

Due to its high number of free parameters, the new generation of gasoline engines with direct injection require an efficient calibration process to handle the system complexity and to avoid a dramatic increase in calibration costs. This paper presents a concept of specific toolboxes within a standardized and automated calibration environment, supporting the complexity of GDI engines and establishing standard procedures for distributed development. The basic idea is the combination of a new and more efficient online DoE approach with the automatic and adaptive identification of the region of interest in the high dimensional parameter space. This guarantees efficient experimental designs even for highly non-linear systems with often irregularly shaped valid regions. As the main advantage for the calibration engineer, the new approach requires almost no pre-investigations and no specific statistical knowledge.

Until now, the use of biometric systems has not been in the public eye. The high cost of sensors and processing has meant that biometrics was previously restricted to high security access, financial transaction and law enforcement applications. However, as a result of improvements in technology, biometric sensor price and reliability have achieved levels where biometrics is being seriously considered for automotive systems. This paper introduces the field of biometrics, the key terms and processes. Fingerprint Technology and Identification by Fingerprint are discussed, as are the use and applicability of biometrics in automotive applications, including Personal Profiling, Keyless Engine Start and vehicle access authorization. The key findings of investigations over the last years are discussed.

If a sensor shall be applied in motor vehicles, all the components of the sensor must fulfil special requirements. Particular attention must be paid to the installation of the sensitive element and to the adaptation to which the sensor is to be put. The objective of this paper is to illustrate these demands more closely using three different types of sensors as examples: a displacement sensor, a pressure sensor and an acceleration sensor.

Bosch's antilock braking system (ABS) is available for any type of vehicle design. It has been developed in cooperation with vehicle manufacturers and users. Safety and reliability were the eminent targets of this development. A new feature is a self-diagnostic system.

In the year of 2012 in India the total number of accidents with injuries is registered by Ministry of Road Transport and Highway with 490,383 out of which injured people are 509,667 and fatalities are 138,258 [1]. Nearly 17% of the fatalities are occupants of passenger cars which constitute the second highest contributor for fatal accidents in India [1]. In order to understand the root causes for car accidents in India, Bosch accident research carried out a study based on in-depth accidents collected in India. Apart from other accident contributing factors e.g. infrastructure the driver behaviour and his actions few milliseconds just prior to the crash is an extremely important and a key valuable data for the understanding of accident causation. Further on it supports also the development of modern automotive safety functions. Hence this research was undertaken to evaluate the benefit of the state-of-the art vehicle safety systems known as Antilock Braking System (ABS).

Motorized two wheelers, also known as powered two wheelers (PTW) are the most common mode of transportation in India. Around one in four deaths that occurred on the roads in India in 2012 involved a motorcyclist, according to Ministry of Road Transport and Highways. This constitutes the highest contributor for fatal accidents in India [1]. The European Transport Safety Council (ETSC) analysis shows the risk of a motorcyclist having a fatal accident is 20 times greater than for a car driver travelling the same route [2]. An investigation conducted by Bosch looked at the accident database of Road Accident Sampling System for India (RASSI). This investigation revealed interesting facts about the Indian motorcycle accident situation, such as root causes of powered two wheeler collisions and riders behaviour including their braking patterns during the pre-crash phase of the accident.

For about 20 years now, legislation for emission standards has become more and more strict. Main current standards are LEVII legislation for US- and EU4 for the European Market. Many emerging markets like e.g. China, India, Russia adopt EU regulations (directly or modified. Mid of 90's discussions began on restrictions and legislation for CO2 emissions. The European commission recently proposed concrete legislation standards for 2012 and 2020. These will have strong influence on the strategies of the Car Manufacturers. Single measures like start stop will be of general interest. But for reaching the fleet average combinations of measures in a single engine configuration will be necessary. Bosch system solutions for engine- and power-train management are available for the whole span of world car segments, ranging from value concepts optimized for emerging markets up to high feature solutions for most stringent requirements world wide.

This address presents the ongoing development of the commercial-vehicle braking system, over and beyond ABS/ASR, towards a brake by wire system (electronically controlled braking system ELB) with pressure-regulating circuit and additional functions. Following the discussion and selection of various concepts, we will present different versions with individual and combined components for the towing vehicle and for the trailer. The safety concept of a pneumatic back-up circuit will be dealt with, as well as the communication through data bus (CAN) both within the braking system itself and with other vehicle systems. The improvement possibilities inherent in ELB will be detailed, with the emphasis on increasing road and traffic safety, on reducing operating costs, and on future vehicle-guidance functions.

This article gives an overview of the CARTRONIC® based safety analysis (CSA) including an approach for the automatic determination of failure dependencies in automotive systems. CSA is a safety analysis in an early stage of product development. The goals are to identify safety critical components as soon as practicable in the product development process and to automate the analysis as far as possible. This implies that the system view is abstract, i.e. independent of a certain realization just regarding system functionality. In the CSA so called global failure effects will be systematically identified and assessed regarding severity of potential injuries. Global failure effects are especially important because they reveal failures within the system to the outside world (see also definition 3.1). Additionally the CSA keeps track of failure dependencies and supports the integration of safety measures in the system structure.

To meet future CO₂ emissions limits and satisfy the bounds set by exhaust gas legislation reducing the engine displacement while maintaining the power output ("Downsizing") becomes of more and more importance in the SI engine development process. The total number of cylinders per engine has to be reduced to keep the thermodynamic disadvantages of a small combustion chamber layout as small as possible. Doing so new challenges arise concerning the mechanical design, the design of the combustion system concept as well as strategies maintaining a satisfying transient torque behavior. To address these challenges a turbocharged 2-cylinder SI engine was designed for research purposes by Weber Motor GmbH and Robert Bosch GmbH. The design process was described in detail in last year's paper SAE 2012-01-0832. Since the engine design is very modular it allows for several different engine layouts which can be examined and evaluated.

The fuel spray behavior in the near nozzle region of a gasoline injector is challenging to predict due to existing pressure gradients and turbulences of the internal flow and in-nozzle cavitation. Therefore, statistical parameters for spray characterization through experiments must be considered. The characterization of spray velocity fields in the near-nozzle region is of particular importance as the velocity information is crucial in understanding the hydrodynamic processes which take place further downstream during fuel atomization and mixture formation. This knowledge is needed in order to optimize injector nozzles for future requirements. In this study, the results of three experimental approaches for determination of spray velocity in the near-nozzle region are presented. Two different injector nozzle types were measured through high-speed shadowgraph imaging, Laser Doppler Anemometry (LDA) and X-ray imaging.

The ongoing changes in the development of new power trains and the requirements due to driver assistance systems and autonomous driving could be the enabler for completely new brake system configurations. The shift in the brake load collective has to be included in the systems requirements for electric vehicles. Many alternative concepts for hydraulic brake systems, even for decentralized configurations, can be found in the literature. For a decentralized system with all state of the art safety functionalities included, four actuators are necessary. Therefore, the single brake module should be as cost-effective as possible. Previous papers introduced systems which are for example based on plunger-like concepts, which are very expensive and heavy due to the needed gearing and design. In this paper a comparison between a state of the art hydraulic brake system using an electromechanical brake booster, and a completely new decentralized hydraulic brake concept is presented.

For electric vehicles the ability for regenerative braking reduces the use of friction brakes. Particularly on the rear axle of vehicles with reduced dynamic requirements such as urban vehicles, this can offer a potential for downsizing or, in extreme cases, even the elimination of the friction brakes on the rear axle. Due to the fact that the rear axle service brakes also represent the typical parking brake location in SoA (State-of-Art) vehicles, a rigorous rethinking of the parking brake concept is necessary to incorporate safe vehicle standstill management for such novel brake system topology. This research study introduces a novel parking brake design that covers SoA but also legal requirements while retaining potentials associated with the elimination of the rear service brakes such as cost and packaging.

Future emission standards for heavy-duty vehicles like Euro 4, Euro 5, US '07 require advanced engine functionality. One contribution to achieve this target is the catalytic reduction of nitrogen oxides by injection of urea water solution to the exhaust gas. An overview on a urea dosing system, also called DENOXTRONIC, is given and a dosing strategy is described.

In this paper we present the design of a cryogenic platform for new space borne communication payloads. This platform is dedicated to service the operation of a communication payload in a cryogenic environment. In addition, an easy adaptation to any kind of available satellite buses must be reflected by the design of all interfaces. A first experimental demonstrator of this cryogenic platform with HTSC-components is foreseen to be operated on board the International Space Station (ISS) [1]. The paper will present such a new kind of cryogenic platform. The thermal requirements and boundary conditions for the platform development are summarized. A comparison of the typical thermal environment of a communication satellite with the environment of the ISS and is performed. Two different concepts for the design of a cryogenic platform will be presented. A redundancy concept for the provision of cooling power and the thermal control of the cryogenic platform is discussed.