Search Results

Advanced safety features and new services in connected cars depend on the security of the underlying vehicle functions. Due to the interconnection with the outside world and as a result of being an embedded system a modern vehicle is exposed to both, malicious activities as faced by traditional IT world systems as well as physical attacks. This introduces the need for utilizing hardware-assisted security measures to prevent both kinds of attacks. In this paper we present a survey of the different classes of hardware security devices and depict their different functional range and application. We demonstrate the feasibility of our approach by conducting a case study on an exemplary implementation of a function-on-demand use case. In particular, our example outlines how to apply the different hardware security approaches in practice to address real-world security topics. We conclude with an assessment of today’s hardware security devices.

The increasing complexity of automotive functions which are necessary for improved driving assistance systems and automated driving require a change of common vehicle architectures. This includes new concepts for E/E architectures such as a domain-oriented vehicle network based on powerful Domain Control Units (DCUs). These highly integrated controllers consolidate several applications on different safety levels on the same ECU. Hence, the functions depend on a strictly separated and isolated implementation to guarantee a correct behavior. This requires middleware layers which guarantee task isolation and Quality of Service (QoS) communication have to provide several new features, depending on the domain the corresponding control unit is used for. In a first step we identify requirements for a middleware in automotive DCUs. Our goal is to reuse legacy AUTOSAR based code in a multicore domain controller.

Longitudinal models are used to evaluate different vehicle-engine concepts with respect to driving behavior and emissions. The engine is generally map-based. An explicit calculation of both fluid dynamics inside the engine air path and cylinder combustion is not considered due to long computing times. Particularly for dynamic certification cycles (WLTC, US06 etc.), dynamic engine effects severely influence the quality of results. Hence, an evaluation of transient engine behavior with map-based engine models is restricted to a certain extent. The coupling of detailed 1D-engine models is an alternative, which rapidly increases the model computation time to approximately 300 times higher than that of real time. In many technical areas, the Fourier transformation (FT) method is applied, which makes it possible to represent superimposed oscillations by their sinusoidal harmonic oscillations of different orders.

Today, body vibration energy of passenger cars gets dissipated by linear working shock absorbers. A new approach substitutes the damper of a passenger car by a cardanic gimbaled flywheel mass. The constructive design leads to a rotary damper in which the vertical movement of the wheel carrier leads to revolution of the rotational axis of the flywheel. In this arrangement, the occurring precession moments are used to control damping moments and to store vibrational energy. Different damper characteristics are achieved by different induced precession. From almost zero torque output to high torque output, this damper has a huge spread. Next to the basic principal, in this paper an integration in the chassis, including a constructive proposal is shown. A conflict with high torque and high angular velocity leads to a special design. Moreover concepts to deal with all vehicle situations like yawing, rolling and pitching are shown.

Strategies for weight reduction have driven the noise treatment advanced developments with a great success considering the already mastered weight decreases observed in the last years in the automotive industry. This is typically the case for all soft trims parts. In the early 2010's a typical european B-segment car soft trims weights indeed 30 to 40% less than in the early 2000's years. The main driver behind such a gap has been to combine insulation and absorption properties on a single part while increasing the number of layers. This product-process evolution was conducted using a significant improvement in the simulation capacities. In that sense, several studies presenting very good correlation results between Transmission Loss measurements and finite elements simulations on dashboard or floor insulators were presented. One may consider that those kinds of parts have already achieved a considerable improvement in performance.

The increased pressure for power, space, and cost reduction in automotive applications together with the availability of high performance, automotive qualified multicore microcontrollers has lead to the ability to engineer Domain Controller ECUs that can host several separate applications in parallel. The standard automotive constraints however still apply, such as use of AUTOSAR operating system, support for legacy code, hosting OEM supplied code and the ability to determine warranty issues and responsibilities between a group of Tier 1 and Tier 2 vendors who all provide Intellectual Property to the final production ECU. Requirements for safety relevant applications add even more complexity, which in most current approaches demand a reconfiguration of all basic software layers and a major effort to redesign parts of the application code to enable co-existence on the same hardware platform. This paper outlines the conflicting requirements of hosting multiple applications.

New power train concepts in the automobile industry will decisively change the familiar car acoustics. Secondary acoustic noise sources will be unmasked and dominate the driver's sound experience. The most important secondary noise source is the air conditioning (AC) system. Before a favorable AC sound can actively be designed, it is necessary to identify the acoustic noise sources and find means to influence them. This paper focuses on the AC outlet module which is, apart from the control unit, the only part visible to the customer. Typical acoustic spectra of flowed-through outlets show a characteristic tonality at about 3000 Hz. The knowledge of its aeroacoustic source mechanisms, the inherent implications for the customer and corrective measures especially in automobile surroundings has been limited so far. To analyze this phenomenon in detail, a simplified model outlet that shows the basic aeroacoustic behavior of a series production outlet was constructed and investigated.

With the introduction of the ISO26262 automotive safety standard there is a burden of proof to show that the processing elements in embedded microcontroller hardware are capable of supporting a certain diagnostic coverage level, depending on the required Automotive Safety Integrity Level (ASIL). The current mechanisms used to provide actual metrics of the Built-in Self Tests (BIST) and Lock Step comparators use Register Transfer Level (RTL) simulations of the internal processing elements which force faults into individual nodes of the design and collect diagnostic coverage results. Although this mechanism is robust, it can only be performed by semiconductor suppliers and is costly. This paper describes a new solution whereby the microcontroller is synthesized into a large Field Programmable Gate Array (FPGA) with a test controller on the outside.

GTL (Gas-To-Liquid) fuel is well known to improve tailpipe emissions when fuelling a conventional diesel vehicle, that is, one optimized to conventional fuel. This investigation assesses the additional potential for GTL fuel in a GTL-dedicated vehicle. This potential for GTL fuel was quantified in an EU 4 6-cylinder serial production engine. In the first stage, a comparison of engine performance was made of GTL fuel against conventional diesel, using identical engine calibrations. Next, adaptations enabled the full potential of GTL fuel within a dedicated calibration to be assessed. For this stage, two optimization goals were investigated: - Minimization of NOx emissions and - Minimization of fuel consumption. For each optimization the boundary condition was that emissions should be within the EU5 level. An additional constraint on the latter strategy required noise levels to remain within the baseline reference.

Helmholtz-resonators are discussed in technical acoustics normally in conjunction with attenuation of sound, not with amplification or even production of sound. On the other hand everybody knows the sound produced by a bottle, when someone blows over the orifice. During the investigation of the sound produced in body gaps it was found that the underlying flow physics are closely related to the Helmholtz-resonator. But different from the typical Helmholtz-resonator generated noise – as for example the blown bottle or, from the automotive world, the sun roof buffeting – there is no fluid resonance involved in the process. For body gaps the random pressure fluctuation of the turbulent boundary layer is sufficient to excite the acoustic resonance in the cavity. The sound generation is characterized by a continuous rise in sound pressure level with increasing velocity, the rise is proportional to U with varying exponents.

Scaling laws - for example the variation of sound pressure with wind speed - are a key to the physical understanding of aeroacoustic phenomena. Aeroacoustics in Automotive applications differs from other fields of aeroacoustics: It is limited to low Mach numbers, the flow field is dominated by separated flows and the radiation into the far field is typically not of primary interest. On the other hand there are of course many common problems and findings shared with other fields in aeroacoustics. Therefore it is important to identify common areas with other, probably more advanced directions in aeroacoustics. But this has to be done without forgetting the practical demands of automotive application. Main sources for interior wind noise in vehicles are leakage noise, cavity noise and the noise generated by separated flows at the outer surface. All three of these noise sources will be investigated in this paper. Of special interest will be the dependence on the wind velocity.

This paper proposes end-to-end protection mechanisms to be added to a generic FlexRay network in order to achieve fault detection and integrity levels sufficient for a SIL3 fail safe communication system. The mechanisms are derived from the random hardware failure modes to be considered for communication controllers according to IEC 61508. Mechanisms provided by the FlexRay protocol are pointed out. Additional features necessary to fulfil the requirements are discussed. It is shown how to calculate the failure rate probabilities of the CRC used as a safety code with respect to EN 50159.

Electronic Control Units of safety critical systems require constant monitoring of the hardware to be able to bring the system to a safe state if any hardware defects or malfunctions are detected. This monitoring includes memory checking, peripheral checking as well as checking the main processor core. However, checking the processor core is difficult because it cannot be guaranteed that the error will be properly detected if the monitor function is running on a processing system which is malfunctioning. To circumvent this issue, several previously presented monitoring concepts (e.g. SAE#2006-01-0840) employ a second external microprocessor to communicate with the main processor to check its integrity. The addition of a second microcontroller and the associated support circuitry that is required adds to the overall costs of the ECU, increases the size and creates significant system complexity.

Electronic Control Units of safety critical systems require constant monitoring of the hardware to be able to bring the system to a safe state if any hardware defects or malfunctions are detected. This monitoring includes memory checking, peripheral checking as well as checking the main processor core. However, checking the processor core is difficult because it cannot be guaranteed that the error will be properly detected if the monitor function is running on a processing system which is malfunctioning. To circumvent this issue, several previously presented monitoring concepts (e.g. SAE#2006-01-0840) employ a second external microprocessor to communicate with the main processor to check its integrity. This paper will present a concept which maps the functions of the external monitoring unit into an internal second processing core which are frequently available on modern, 32bit, monolithic, dual-core microcontrollers.

In open jet wind tunnels with high blockage ratios a sharp rise in drag is observed for models approaching the nozzle exit plane. The physical background for this rise in drag will be analyzed in the paper. Starting with a basic analysis of the dependencies of the effect on model and wind tunnel properties, the key parameters of the problem will be identified. It will be shown using a momentum balance and potential flow theory that interaction between model and nozzle exit can result in significant tunnel-induced gradients at the model position. In a second step, a CFD-based investigation is used to show the interaction between nozzle exit and a bluff body. The results cover the whole range between open jet and closed wall test section interaction. The model starts at a large distance from the nozzle, then moves towards the nozzle, enters the nozzle and is finally completely inside the nozzle.

In order to suppress the well-documented low frequency pressure fluctuations in open jet wind tunnels, termed ‘wind tunnel buffeting’, an Active Resonance Control (ARC) System was implemented in the Audi aero-acoustic wind tunnel several years ago. This ARC-Sys-tem reduces the periodic pressure fluctuations by up to 23 dB and completely eliminates the periodic velocity fluctuations using a simple feedback control scheme. To set up the ARC system in practice, the system's parameters are optimised once for each critical flow velocity, when the vortex shedding frequency coincides with an acoustic resonance mode of the wind tunnel. Due to the fact that both frequency and amplitude of the excited resonances not only depend on flow velocity but also on other parameters such as collector position and test-car geometry, the system has to be adjusted with regard to each of these cases.

A region with floor boundary-layer suction upstream of the vehicle to remove the oncoming boundary layer is often used in automotive wind tunnels. These suction systems inevitably change the empty-tunnel pressure gradient. In this paper, the empty-tunnel pressure gradient created by the use of boundary layer suction and its effect on measured drag are investigated. By using excess suction - more suction than necessary to remove the floor boundary layer – it was possible to show experimentally that the major part of the drag increase due to boundary layer suction is created by unintended gradient effects. Only a minor part of the drag increase is due to the increased flow velocities at the lower parts of the vehicle, or in other words, due to the improved ground simulation. A theoretical model, using the concept of horizontal buoyancy to predict the gradient effect, is proposed. The model is compared to the experimental results as well as to CFD calculations.

The reference pressures are determined in automotive wind tunnels by measurement of pressures and pressure differences at upstream positions along the wind tunnel nozzle. For closed wall wind tunnels usually the so called nozzle method is used, where the volume flux is calculated from a pressure difference measured at the nozzle contour and a calibration factor determined in the empty test section. For open jet wind tunnels a choice is available between nozzle and plenum method. For the plenum method the reference static pressure is taken from the plenum chamber and the dynamic pressure also refers to the plenum conditions. The static reference pressure in closed wall tunnels is calculated by subtracting the dynamic pressure from the total pressure in the settling chamber. In this paper, the definitions and the differences between the two methods are discussed in detail.

The lightweight construction strategies that are demanded by the automobile industry are being employed more and more. These strategies lead to the increasing importance of the forming method and types of materials used. Especially forming technologies based on liquid media have the potential to meet these demands. These forming technologies make it possible to produce parts that have both, more complex geometries and optimized characteristics. This forming technology constitutes an intelligent process management including the significant materials parameters and behavior, the simulation and some new developments especially for the optimization of the quality and the cycle time. Hydromechanical sheet forming (AHU®) is an alternative production (forming) process, with very interesting results and developments for the manufacture of specific automobile components.

Optimization of ride comfort is becoming increasingly important in chassis development. Constantly rising traffic density and comfort-orientated customer preferences are mainly responsible for this. Comfort and its improvement are important, not only on bad road surfaces, but also on even surfaces. The complexity of analysis leads to a strong link between car testing and simulation. The testing itself is divided in to roadtests and test stands. It is of outstanding importance to analyze the vehicles vibrational behavior from road tests as it is a real life situation. In order to get meaningful results from the roadtest the vehicle has to be seen as a complete vibrational system. The vibrational behavior of a system is clearly defined by input and output of the system. Road tests are chosen in relation to the predicted car. The roads surface is the input of the system exciting the vibrational subsystems of a car. The ride tests are used for the evaluation of drive response behavior.