Search Results

Advanced safety features and new services in connected cars depend on the security of the underlying vehicle functions. Due to the interconnection with the outside world and as a result of being an embedded system a modern vehicle is exposed to both, malicious activities as faced by traditional IT world systems as well as physical attacks. This introduces the need for utilizing hardware-assisted security measures to prevent both kinds of attacks. In this paper we present a survey of the different classes of hardware security devices and depict their different functional range and application. We demonstrate the feasibility of our approach by conducting a case study on an exemplary implementation of a function-on-demand use case. In particular, our example outlines how to apply the different hardware security approaches in practice to address real-world security topics. We conclude with an assessment of today’s hardware security devices.

The increasing complexity of automotive functions which are necessary for improved driving assistance systems and automated driving require a change of common vehicle architectures. This includes new concepts for E/E architectures such as a domain-oriented vehicle network based on powerful Domain Control Units (DCUs). These highly integrated controllers consolidate several applications on different safety levels on the same ECU. Hence, the functions depend on a strictly separated and isolated implementation to guarantee a correct behavior. This requires middleware layers which guarantee task isolation and Quality of Service (QoS) communication have to provide several new features, depending on the domain the corresponding control unit is used for. In a first step we identify requirements for a middleware in automotive DCUs. Our goal is to reuse legacy AUTOSAR based code in a multicore domain controller.

Strategies for weight reduction have driven the noise treatment advanced developments with a great success considering the already mastered weight decreases observed in the last years in the automotive industry. This is typically the case for all soft trims parts. In the early 2010's a typical european B-segment car soft trims weights indeed 30 to 40% less than in the early 2000's years. The main driver behind such a gap has been to combine insulation and absorption properties on a single part while increasing the number of layers. This product-process evolution was conducted using a significant improvement in the simulation capacities. In that sense, several studies presenting very good correlation results between Transmission Loss measurements and finite elements simulations on dashboard or floor insulators were presented. One may consider that those kinds of parts have already achieved a considerable improvement in performance.

The increased pressure for power, space, and cost reduction in automotive applications together with the availability of high performance, automotive qualified multicore microcontrollers has lead to the ability to engineer Domain Controller ECUs that can host several separate applications in parallel. The standard automotive constraints however still apply, such as use of AUTOSAR operating system, support for legacy code, hosting OEM supplied code and the ability to determine warranty issues and responsibilities between a group of Tier 1 and Tier 2 vendors who all provide Intellectual Property to the final production ECU. Requirements for safety relevant applications add even more complexity, which in most current approaches demand a reconfiguration of all basic software layers and a major effort to redesign parts of the application code to enable co-existence on the same hardware platform. This paper outlines the conflicting requirements of hosting multiple applications.

It is the objective of this work to characterize mixture formation in the sprays emanating from Multi-Layer (ML) nozzles under approximately engine-like conditions by quantitative, spatially, and temporally resolved fuel-air ratio and temperature measurements. ML nozzles are cluster nozzles which have more than one circle of orifices. They were introduced previously, in order to overcome the limitations of conventional nozzles. In particular, the ML design yields the potential of variable spray interaction, so that mixture formation could be controlled according to the operating condition. In general, it was also a primary aim of the cluster-nozzle concepts to combine the enhanced atomization and pre-mixing of small nozzle holes with the longer spray penetration lengths of large holes. The applied diagnostic, which is based on 1d spontaneous Raman scattering, yields the quantitative stoichiometric ratio and the temperature in the vapor phase.

Turbocharged DISI engines with four cylinders have established in the market and provide a performance comparable to larger six-cylinder engines in the smaller compartment of a four-cylinder engine. In the Japanese market, also turbo gasoline engines with 500 - 660 cm₃ displacement have a long tradition in Kei-Cars. However, those engines show a lower specific performance as would be required for propelling typical small or compact vehicles in Europe. Recently, two-cylinder turbo engines have come to market, which are found attractive with respect to sound, package, and also enable low vehicle fuel consumption in NEDC test. The paper presents a turbocharger layout study on 2- and 3-cylinder engines. It discusses the influence of cylinder displacement volume on the sizing of turbines and compressors, and how specific flow phenomena in the turbine can be captured in the simulation model.

With the introduction of the ISO26262 automotive safety standard there is a burden of proof to show that the processing elements in embedded microcontroller hardware are capable of supporting a certain diagnostic coverage level, depending on the required Automotive Safety Integrity Level (ASIL). The current mechanisms used to provide actual metrics of the Built-in Self Tests (BIST) and Lock Step comparators use Register Transfer Level (RTL) simulations of the internal processing elements which force faults into individual nodes of the design and collect diagnostic coverage results. Although this mechanism is robust, it can only be performed by semiconductor suppliers and is costly. This paper describes a new solution whereby the microcontroller is synthesized into a large Field Programmable Gate Array (FPGA) with a test controller on the outside.

Calculating the bearing reliability and behavior is one of the primary tasks which have to be performed to define the main dimensions of the cranktrain of an internal combustion engine. Since the bearing results are essential for the pre-layout of the cranktrain, the conclusion on the bearing safety should be met as early as possible. Therefore detailed simulations like T-EHD or EHD analysis may not be applied to define the dimensions in such an early development phase. In the frame of this study a prediction methodology, based on a HD bearing approach, for bearing reliability of inline-4 crankshafts of passenger cars is proposed. In this way not only the design phase is shortened but also achieving the optimal solution is simplified. Moreover the requirement of a CAD model is eliminated for the preliminary design phase. The influencing parameters on the bearing behavior are first selected and divided into two groups: geometry and loading.

The fulfillment of the aggravated demands on future small-size High-Speed Direct Injection (HSDI) Diesel engines requires next to the optimization of the injection system and the combustion chamber also the generation of an optimal in-cylinder swirl charge motion. To evaluate different port concepts for modern HSDI Diesel engines, usually quantities as the in-cylinder swirl ratio and the flow coefficient are determined, which are measured on a steady-state flow test bench. It has been shown that different valve lift strategies nominally lead to similar swirl levels. However, significant differences in combustion behavior and engine-out emissions give rise to the assumption that local differences in the in-cylinder flow structure caused by different valve lift strategies have noticeable impact. In this study an additional criterion, the homogeneity of the swirl flow, is introduced and a new approach for a quantitative assessment of swirl flow pattern is presented.

GTL (Gas-To-Liquid) fuel is well known to improve tailpipe emissions when fuelling a conventional diesel vehicle, that is, one optimized to conventional fuel. This investigation assesses the additional potential for GTL fuel in a GTL-dedicated vehicle. This potential for GTL fuel was quantified in an EU 4 6-cylinder serial production engine. In the first stage, a comparison of engine performance was made of GTL fuel against conventional diesel, using identical engine calibrations. Next, adaptations enabled the full potential of GTL fuel within a dedicated calibration to be assessed. For this stage, two optimization goals were investigated: - Minimization of NOx emissions and - Minimization of fuel consumption. For each optimization the boundary condition was that emissions should be within the EU5 level. An additional constraint on the latter strategy required noise levels to remain within the baseline reference.

During the past years, there has been an increasing tendency to seriously question and break up old and ingrained structures in combustion engine testing. The reason for this is the continuously increasing number of engine and vehicle variants and a variety of applications resulting from it, which significantly push up development costs and times when carrying out the classical testing patterns. The following article by FEV Motorentechnik GmbH introduces a comprehensive test methodology for purposeful endurance testing of modern drive units (in particular from the fields of passenger cars and commercial vehicles). The procedure and the testing philosophy are explained in detail, illustrated by a concrete development example.

Within a public founded project test cell investigations were undertaken to identify parameters which predominantly influence the development of critical deposits in injection nozzles. A medium-duty diesel engine was operated in two different coking cycles with a zinc-free lubricant. One of the cycles is dominated by rated power, while the second includes a wide area of the operation range. During the experiments the temperatures at the nozzle tip, the geometries of the nozzle orifice and fuel properties were varied. For a detailed analysis of the deposits methods of electron microscopy were deployed. In the course of the project optical access to all areas in the nozzle was achieved. The experiments were evaluated by means of the monitoring of power output and fuel flow at rated power. The usage of a SEM (scanning electron microscope) and a TEM (transmission electron microscope) revealed images of the deposits with a magnification of up to 160 000.

A broad range of diesel, kerosene, and gasoline-like fuels has been tested in a single-cylinder diesel engine optimized for advanced combustion performance. These fuels were selected in order to better understand the effects of ignition quality, volatility, and molecular composition on engine-out emissions, performance, and noise levels. Low-level biofuel blends, both biodiesel (FAME) and ethanol, were included in the fuel set in order to test for short-term advantages or disadvantages. The diesel engine optimized in Part 1 of this study included cumulative engine hardware enhancements that are likely to be used to meet Euro 6 emissions limits and beyond, in part by operating under conditions of Homogeneous Charge Compression Ignition (HCCI), at least over some portions of the speed and load map.

Two single-cylinder diesel engines were optimised for advanced combustion performance by means of practical and cumulative hardware enhancements that are likely to be used to meet Euro 5 and 6 emissions limits and beyond. These enhancements included high fuel injection pressures, high EGR levels and charge cooling, increased swirl, and a fixed combustion phasing, providing low engine-out emissions of NOx and PM with engine efficiencies equivalent to today's diesel engines. These combustion conditions approach those of Homogeneous Charge Compression Ignition (HCCI), especially at the lower part-load operating points. Four fuels exhibiting a range of ignition quality, volatility, and aromatics contents were used to evaluate the performance of these hardware enhancements on engine-out emissions, performance, and noise levels.

This paper proposes end-to-end protection mechanisms to be added to a generic FlexRay network in order to achieve fault detection and integrity levels sufficient for a SIL3 fail safe communication system. The mechanisms are derived from the random hardware failure modes to be considered for communication controllers according to IEC 61508. Mechanisms provided by the FlexRay protocol are pointed out. Additional features necessary to fulfil the requirements are discussed. It is shown how to calculate the failure rate probabilities of the CRC used as a safety code with respect to EN 50159.

Based on the TurboDISI engine presented earlier [1], [2], a new Spray Guided Turbo (SGT) concept with enhanced engine performance was developed. The turbocharged engine was modified towards utilizing a spray-guided combustion system with a central piezo injector location. Higher specific power and torque levels were achieved by applying specific design and cooling solutions. The engine was developed utilizing a state-of-the-art newly developed charge motion design (CMD) process in combination with single cylinder investigations. The engine control unit has a modular basis and is realized using rapid prototyping hardware. Additional fuel consumption potentials can be achieved with high load EGR, use of alternative fuels and a hybrid powertrain. The CO2 targets of the EU (120 g/km by 2012 in the NEDC) can be obtained with a mid-size vehicle applying the technologies presented within this paper.

Electronic Control Units of safety critical systems require constant monitoring of the hardware to be able to bring the system to a safe state if any hardware defects or malfunctions are detected. This monitoring includes memory checking, peripheral checking as well as checking the main processor core. However, checking the processor core is difficult because it cannot be guaranteed that the error will be properly detected if the monitor function is running on a processing system which is malfunctioning. To circumvent this issue, several previously presented monitoring concepts (e.g. SAE#2006-01-0840) employ a second external microprocessor to communicate with the main processor to check its integrity. The addition of a second microcontroller and the associated support circuitry that is required adds to the overall costs of the ECU, increases the size and creates significant system complexity.

Electronic Control Units of safety critical systems require constant monitoring of the hardware to be able to bring the system to a safe state if any hardware defects or malfunctions are detected. This monitoring includes memory checking, peripheral checking as well as checking the main processor core. However, checking the processor core is difficult because it cannot be guaranteed that the error will be properly detected if the monitor function is running on a processing system which is malfunctioning. To circumvent this issue, several previously presented monitoring concepts (e.g. SAE#2006-01-0840) employ a second external microprocessor to communicate with the main processor to check its integrity. This paper will present a concept which maps the functions of the external monitoring unit into an internal second processing core which are frequently available on modern, 32bit, monolithic, dual-core microcontrollers.

Current simulation tools for the investigation of the dynamic system response as well as for the component stresses on the basis of multi-body and finite-element techniques are integral part of today's powertrain development efforts. These tools are typical used for the analysis and optimization of shafts, clutches, chain/belt drives, bearings, levers, brackets, housings and many other components. An exception is made by gears which today are still frequently investigated by the help of semi-empirical methods based on DIN, ISO, AGMA and the specific knowledge base of well experienced developers. The main difficulty is that the gears are rolling off via large contact surfaces with complex nonlinear mechanical contact properties. Within the scope of research work FEV developed a new method for the analysis and optimization of gear drives based on comercial multi-body and finite-element software platforms.

The overall perception of a vehicle's quality is significantly influenced by its interior noise characteristics. Therefore, it is important to strike a balance between “pleasant” and “dynamic” sound that fits the customer requirements with respect to vehicle brand and class [1]. Typically, a significant share of the interior vehicle noise is transferred through structure-borne paths. Hence, the powertrain mounting system plays an important role in designing the interior noise. This paper describes an application of the method of vehicle interior noise simulation (VINS) to achieve a characteristic interior sound. This approach is based on separate measurements (or calculations) of excitations and transfer functions and subsequent calculation of the interior noise in the time domain.