Refine Your Search

Topic

Affiliation

Search Results

Technical Paper

Future Automotive Embedded Systems Enabled by Efficient Model-Based Software Development

2021-04-06
2021-01-0129
This paper explains why software for efficient model-based development is needed to improve the efficiency of automakers and suppliers when implementing solutions with next generation automotive embedded systems. The resulting synergies are an important contribution for the automotive industry to develop safer, smarter, and more eco-friendly cars. To achieve this, it requires implementations of algorithms for machine learning, deep learning and model predictive control within embedded environments. The algorithms’ performance requirements often exceed the capabilities of traditional embedded systems with a homogeneous multicore architecture and, therefore, additional computing resources are introduced. The resulting embedded systems with heterogeneous computing architectures enable a next level of safe and secure real-time performance for innovative use cases in automotive applications such as domain controllers, e-mobility, and advanced driver assistance systems (ADAS).
Technical Paper

The Particle Number Counter as a “Black Box” - A Novel Approach to a Universal Particle Number Calibration Standard for Automotive Exhaust

2020-09-15
2020-01-2195
The reduction of vehicle exhaust particle emissions is a success story of European legislation. Various particle number (PN) counters and calibration procedures serve as tools to enforce PN emission limits during vehicle type approval (VTA) or periodical technical inspection (PTI) of in-use vehicles. Although all devices and procedures apply to the same PN-metric, they were developed for different purposes, by different stakeholder groups and for different target costs and technical scopes. Furthermore, their calibration procedures were independently defined by different stakeholder communities. This frequently leads to comparability and interpretation issues. Systematic differences of stationary and mobile PN counters (PN-PEMS) are well-documented. New, low-cost PTI PN counters will aggravate this problem. Today, tools to directly compare different instruments are scarce.
Technical Paper

Routing Methods Considering Security and Real-Time of Vehicle Gateway System

2020-04-14
2020-01-1294
Recently, vehicle networks have increased complexity due to the demand for autonomous driving or connected devices. This increasing complexity requires high bandwidth. As a result, vehicle manufacturers have begun using Ethernet-based communication for high-speed links. In order to deal with the heterogeneity of such networks where legacy automotive buses have to coexist with high-speed Ethernet links vehicle manufacturers introduced a vehicle gateway system. The system uses Ethernet as a backbone between domain controllers and CAN buses for communication between internal controllers. As a central point in the vehicle, the gateway is constantly exchanging vehicle data in a heterogeneous communication environment between the existing CAN and Ethernet networks. In an in-vehicle network context where the communications are strictly time-constrained, it is necessary to measure the delay for such routing task.
Technical Paper

Model-Based Calibration of an Automotive Climate Control System

2020-04-14
2020-01-1253
This paper describes a novel approach for modeling an automotive HVAC unit. The model consists of black-box models trained with experimental data from a self-developed measurement setup. It is capable of predicting the temperature and mass flow of the air entering the vehicle cabin at the various air vents. A combination of temperature and velocity sensors is the basis of the measurement setup. A measurement fault analysis is conducted to validate the accuracy of the measurement system. As the data collection is done under fluctuating ambient conditions, a review of the impact of various ambient conditions on the HVAC unit is performed. Correction models that account for the different ambient conditions incorporate these results. Numerous types of black-box models are compared to identify the best-suited type for this approach. Moreover, the accuracy of the model is validated using test drive data.
Journal Article

Hardware Supported Data-Driven Modeling for ECU Function Development

2020-04-14
2020-01-1366
The powertrain module is being introduced to embedded System on Chips (SoCs) designed to increase available computational power. These high-performance SoCs have the potential to enhance the computational power along with providing on-board resources to support unexpected feature growth and on-demand customer requirements. This project will investigate the radial basis function (RBF) using the Gaussian process (GP) regression algorithm, the ETAS ASCMO tool, and the hardware accelerator Advanced Modeling Unit (AMU) being introduced by Infineon AURIX 2nd Generation. ETAS ASCMO is one of the solutions for data-driven modeling and model-based calibration. It enables users to accurately model, analyze, and optimize the behavior of complex systems with few measurements and advanced algorithms. Both steady state and transient system behaviors can be captured.
Technical Paper

High Performance Processor Architecture for Automotive Large Scaled Integrated Systems within the European Processor Initiative Research Project

2019-04-02
2019-01-0118
Autonomous driving systems and connected mobility are the next big developments for the car manufacturers and their suppliers during the next decade. To achieve the high computing power needs and fulfill new upcoming requirements due to functional safety and security, heterogeneous processor architectures with a mixture of different core architectures and hardware accelerators are necessary. To tackle this new type of hardware complexity and nevertheless stay within monetary constraints, high performance computers, inspired by state of the art data center hardware, could be adapted in order to fulfill automotive quality requirements. The European Processor Initiative (EPI) research project tries to come along with that challenge for next generation semiconductors. To be as close as possible to series development needs for the next upcoming car generations, we present a hybrid semiconductor system-on-chip architecture for automotive.
Journal Article

A Method for Identifying Most Significant Vehicle Parameters for Controller Performance of Autonomous Driving Functions

2019-04-02
2019-01-0446
In this paper a method for the identification of most significant vehicle parameters influencing the behavior of a lateral control system of autonomous car is presented. Requirements for the design stage of the controller need to consider many uncertainties in the plant. While most vehicle properties can be compensated by an appropriate tuning of the control parameters, other vehicle properties can change significantly during usage. The control system is evaluated based on performance measures. Analyzed parameters comprise functional tire characteristics, mass of the vehicle and position of its center of gravity. Since the parameters are correlated, but Sobol’ sensitivity analysis assumes decorrelated inputs, random variation yields no reasonable results. Furthermore, the variation of each parameter or set of parameters is not applicable since the numbers of required simulations is increased significantly according to input dimension.
Technical Paper

Leveraging Hardware Security to Secure Connected Vehicles

2018-04-03
2018-01-0012
Advanced safety features and new services in connected cars depend on the security of the underlying vehicle functions. Due to the interconnection with the outside world and as a result of being an embedded system a modern vehicle is exposed to both, malicious activities as faced by traditional IT world systems as well as physical attacks. This introduces the need for utilizing hardware-assisted security measures to prevent both kinds of attacks. In this paper we present a survey of the different classes of hardware security devices and depict their different functional range and application. We demonstrate the feasibility of our approach by conducting a case study on an exemplary implementation of a function-on-demand use case. In particular, our example outlines how to apply the different hardware security approaches in practice to address real-world security topics. We conclude with an assessment of today’s hardware security devices.
Journal Article

Novel Index for Evaluation of Particle Formation Tendencies of Fuels with Different Chemical Compositions

2017-08-18
2017-01-9380
Current regulatory developments aim for stricter emission limits, increased environmental protection and purification of air on a local and global scale. In order to find solutions for a cleaner combustion process, it is necessary to identify the critical components and parameters responsible for the formation of emissions. This work provides an evaluation process for particle formation during combustion of a modern direct injection engine, which can help to create new aftertreatment techniques, such as a gasoline particle filter (GPF) system, that are fit for purpose. With the advent of “real driving emission” (RDE) regulations, which include market fuels for the particulate number testing procedure, the chemical composition and overall quality of the fuel cannot be neglected in order to yield a comparable emission test within the EU and worldwide.
Technical Paper

Cyber Security in the Automotive Domain – An Overview

2017-03-28
2017-01-1652
Driven by the growing internet and remote connectivity of automobiles, combined with the emerging trend to automated driving, the importance of security for automotive systems is massively increasing. Although cyber security is a common part of daily routines in the traditional IT domain, necessary security mechanisms are not yet widely applied in the vehicles. At first glance, this may not appear to be a problem as there are lots of solutions from other domains, which potentially could be re-used. But substantial differences compared to an automotive environment have to be taken into account, drastically reducing the possibilities for simple reuse. Our contribution is to address automotive electronics engineers who are confronted with security requirements. Therefore, it will firstly provide some basic knowledge about IT security and subsequently present a selection of automotive specific security use cases.
Technical Paper

Over the Air Software Update Realization within Generic Modules with Microcontrollers Using External Serial FLASH

2017-03-28
2017-01-1613
Connecting mobile communication channels to vehicles’ networks is currently attracting engineers in a wide range. Herein the desire of vehicle manufacturers to remotely execute software updates over the air (SOTA) within electronic control units (ECU) is probably the field of highest attention at the moment. Today software updates are typically done at vehicle service stations and connection the vehicles electronic network via the onboard diagnosis (OBD) interface to a service computer. Herby the duration of the update is invisible to the user, as this happens during standard service appointments. With introduction of SOTA, these updates become very convenient to the customer and can lead to higher customer satisfaction levels. SOTA can be made transparent to the user however the method of implementation can affect the user experience.
Technical Paper

Redundant and Diverse Magnetic Field Digital Linear Hall Sensor Concept for ASIL D Applications

2017-03-28
2017-01-0053
Functional safe systems fulfilling the ISO 26262 standard are getting more important for automotive applications where additional redundant and diverse functionality is needed for higher rated ASIL levels. This can result in a very complex and expensive system setup. Here we present a sensor product developed according ISO 26262. This sensor product comprises a two channel redundant and also diverse implemented magnetic field sensor concept with linear digital outputs on one monolithically integrated silicon substrate. This sensor is used for ASIL D applications like power-steering torque measurement, where the torque is transferred into a magnetic field signal in a certain magnetic setup, but can also be used in other demanding sensor applications concerning safety. This proposed and also implemented solution is beneficial because of implementation on a single chip in one single chip-package but anyway fulfilling ASIL D requirements on system level.
Journal Article

Calculation of Failure Detection Probability on Safety Mechanisms of Correlated Sensor Signals According to ISO 26262

2017-03-28
2017-01-0015
Functional safe products conforming to the ISO 26262 standard are getting more important for automotive applications wherein electronic takes more and more response for safety relevant operations. Consequently safety mechanisms are needed and implemented in order to reach defined functional safety targets. To prove their effectiveness diagnostic coverage provides a measurable quantity. A straight forward safety mechanism for sensor systems can be established by redundant signal paths measuring the same physical quantity and subsequently performing an independent output difference-check that decides if the data can be transmitted or an error message shall be sent. This paper focuses on the diagnostic coverage figure calculation of such data correlation-checks for linear sensors which are also shown in ISO 26262 part5:2011 ANNEX D2.10.2.
Journal Article

Bridging the Gap between Open Loop Tests and Statistical Validation for Highly Automated Driving

2017-03-28
2017-01-1403
Highly automated driving (HAD) is under rapid development and will be available for customers within the next years. However the evidence that HAD is at least as safe as human driving has still not been produced. The challenge is to drive hundreds of millions of test kilometers without incidents to show that statistically HAD is significantly safer. One approach is to let a HAD function run in parallel with human drivers in customer cars to utilize a fraction of the billions of kilometers driven every year. To guarantee safety, the function under test (FUT) has access to sensors but its output is not executed, which results in an open loop problem. To overcome this shortcoming, the proposed method consists of four steps to close the loop for the FUT. First, sensor data from real driving scenarios is fused in a world model and enhanced by incorporating future time steps into original measurements.
Technical Paper

Hardware/Software Co-Design of an Automotive Embedded Firewall

2017-03-28
2017-01-1659
The automotive industry experiences a major change as vehicles are gradually becoming a part of the Internet. Security concepts based on the closed-world assumption cannot be deployed anymore due to a constantly changing adversary model. Automotive Ethernet as future in-vehicle network and a new E/E Architecture have different security requirements than Ethernet known from traditional IT and legacy systems. In order to achieve a high level of security, a new multi-layer approach in the vehicle which responds to special automotive requirements has to be introduced. One essential layer of this holistic security concept is to restrict non-authorized access by the deployment of embedded firewalls. This paper addresses the introduction of automotive firewalls into the next-generation domain architecture with a focus on partitioning of its features in hardware and software.
Journal Article

Markov Chain-based Reliability Analysis for Automotive Fail-Operational Systems

2017-03-28
2017-01-0052
A main challenge when developing next generation architectures for automated driving ECUs is to guarantee reliable functionality. Today’s fail safe systems will not be able to handle electronic failures due to the missing “mechanical” fallback or the intervening driver. This means, fail operational based on redundancy is an essential part for improving the functional safety, especially in safety-related braking and steering systems. The 2-out-of-2 Diagnostic Fail Safe (2oo2DFS) system is a promising approach to realize redundancy with manageable costs. In this contribution, we evaluate the reliability of this concept for a symmetric and an asymmetric Electronic Power Steering (EPS) ECU. For this, we use a Markov chain model as a typical method for analyzing the reliability and Mean Time To Failure (MTTF) in majority redundancy approaches. As a basis, the failure rates of the used components and the microcontroller are considered.
Technical Paper

A Virtual Residual Gas Sensor to Enable Modeling of the Air Charge

2016-04-05
2016-01-0626
Air charge calibration of turbocharged SI gasoline engines with both variable inlet valve lift and variable inlet and exhaust valve opening angle has to be very accurate and needs a high number of measurements. In particular, the modeling of the transition area from unthrottled, inlet valve controlled resp. throttled mode to turbocharged mode, suffers from small number of measurements (e.g. when applying Design of Experiments (DoE)). This is due to the strong impact of residual gas respectively scavenging dominating locally in this area. In this article, a virtual residual gas sensor in order to enable black-box-modeling of the air charge is presented. The sensor is a multilayer perceptron artificial neural network. Amongst others, the physically calculated air mass is used as training data for the artificial neural network.
Technical Paper

Feasibility Study for a Secure and Seamless Integration of Over the Air Software Update Capability in an Advanced Board Net Architecture

2016-04-05
2016-01-0056
Vehicle manufacturers are challenged by rising costs for vehicle recalls. A major part of the costs are caused by software updates. This paper describes a feasibility study on how to implement software update over the air (SOTA) in light vehicles. The differences and special challenges in the automotive environment in comparison to the cellular industry will be explained. Three key requirements focus on the drivers’ acceptance and thus are crucial for the vehicle manufacturers: SOTA must be protected against malicious attacks. SOTA shall interfere as little as possible with the availability of a vehicle. Long update processes with long vehicle downtimes or even complete fails must be avoided. The functional safety of the vehicle during operation may not be limited in any way The study gives options how those objectives can be achieved. It considers the necessary security measures and describes the required adaptations of the board-net architectures both on software and hardware level.
Technical Paper

Enhanced Injector Dead Time Compensation by Current Feedback

2016-04-05
2016-01-0088
The constant motivation for lower fuel consumption and emission levels has always been in the minds of most auto makers. Therefore, it is important to have precise control of the fuel being delivered into the engine. Gasoline Port fuel injection has been a matured system for many years and cars sold in emerging markets still favor such system due to its less system complexity and cost. This paper will explain injection control strategy of today during development, and especially the injector dead-time compensation strategy in detail and how further improvements could still be made. The injector current profile behavior will be discussed, and with the use of minimum hardware electronics, this paper will show the way for a new compensation strategy to be adopted.
Technical Paper

Hardware and Software Constraints for Automotive Firewall Systems?

2016-04-05
2016-01-0063
Introduction The introduction of Ethernet and Gigabit Ethernet [2] as the main invehicle network infrastructure is the technical foundation for different new functionalities such as piloted driving, minimizing the CO2- footprint and others. The high data rate of such systems influences also the used microcontrollers due the fact that a big amount of data has to be transferred, encrypted, etc. Figure 1 Motivation - Vehicles will become connected to uncontrolled networks The usage of Ethernet as the in-vehicle-network enables the possibility that future road vehicles are going to be connected with other vehicles and information systems to improve system functionality. These previously closed automotive systems will be opened up for external access (see Figure 1). This can be Car2X connectivity or connection to personal devices. Allowing vehicle systems to communicate with other systems that are not within their physical boundaries impose a previously non-existing security problem.
X