Search Results

The development of highly automated driving functions (AD) recently rises the demand for so called Fail-Operational systems for native driving functions like steering and braking of vehicles. Fail-Operational systems shall guarantee the availability of driving functions even in presence of failures. This can also mean a degradation of system performance or limiting a system’s remaining operating period. In either case, the goal is independency from a human driver as a permanently situation-aware safety fallback solution to provide a certain level of autonomy. In parallel, the connectivity of modern vehicles is increasing rapidly and especially in vehicles with highly automated functions, there is a high demand for connected functions, Infotainment (web conference, Internet, Shopping) and Entertainment (Streaming, Gaming) to entertain the passengers, who should no longer occupied with driving tasks.

The technology in the automotive industry is evolving rapidly in recent times. Thus, with the development of new technologies, the challenges are also ever-increasing from an Electromagnetic Interference and Susceptibility (EMI/EMC) perspective. A lot of the latest technologies in Adaptive Driver Assistance Systems (ADAS), which include Rear Drive Assist, Blind Spot Detection (BSD), Lane Change Assist (LCA) to name a few, and other features like Anti-Braking System (ABS), Emergency Brake Assist (EBD) etc. rely heavily on different types of sensors and their detection circuitry. In addition, a lot of other internal functions in the Engine Control Unit (ECU) also depend on such sensors’ functionalities. Thus, it becomes imperative to study the potential impact of higher field emissions on the immunity behaviour of the sensors.

Classic vehicle production had limitations in bringing the driving commands to the actuators for vehicle motion (engine, steering and braking). Steering columns, hydraulic tubes or steel cables needed to be placed between the driver and actuator. Change began with the introduction of e-gas systems. Mechanical cables were replaced by thin, electric signal wires. The technical solutions and legal standardizations for addressing the steering and braking systems, were not defined at this time. Today, OEMs are starting E/E-Architecture transformations for manifold reasons and now have the chance to remove the long hydraulic tubes for braking and the solid metal columns used for steering. X-by-wire is the way forward and allows for higher Autonomous Driving (AD) levels for automated driving vehicles. This offers new opportunities to design the vehicle in-cabin space. This paper will start with the introduction of x-by-wire technologies.

Software complexity of vehicles is constantly growing especially with additional autonomous driving features being introduced. This increases the risk for bugs in the system, when the car is delivered. According to a car manufacturer, more than 90% of availability problems corresponding to Electronic Control Unit (ECU) functionality are either caused by software bugs or they can be resolved by applying software updates to overcome hardware issues. The main concern are sporadic errors which are not caught during the development phase since their trigger condition is too unlikely to occur or is not covered by the tests. For such systems, there is a need of safe and secure infield diagnosis. In this paper we present a tool software architecture with remote access, which facilitates standard read/write access, an efficient channel interface for communication and file I/O, and continuous trace.

Air conditioning acoustics have become of paramount importance in electric vehicles, where noise from electromechanical components is no longer masked by the presence of the internal combustion engine. In a car HVAC systems, the coolant compressor is one of the most important sources in terms of vibration and noise generation. The paper, the generated structural noise is studied in detail on a prototype installation, and the noise transmission and propagation mechanisms are analyzed and discussed. Through ”in situ” measurements and virtual point transformation, the rotor unbalance forces and torque acting within the component are identified. The dynamic properties of the rubber mounts, installed between the compressor and its support, are identified thanks to matrix inversion methods. To assess the quality of the proposed procedure, the synthesized sound pressure level is compared with experimental SPL measurements in different operational conditions.

The continuous encouragement of lightweight design in modern vehicles demands a reliable and efficient method to predict and ameliorate the interior acoustic comfort for passengers. Due to considerable psychological effects on stress and concentration, the low frequency contribution plays a vital rule regarding interior noise perception. Apart other contributors, low frequency noise can be induced by transient aerodynamic excitation and the related structural vibrations. Assessing this disturbance requires the reliable simulation of the complex multi-physical mechanisms involved, such as transient aerodynamics, structural dynamics and acoustics. The domain of structural dynamics is particularly sensitive regarding the modelling of attachments restraining the vibrational behaviour of incorporated membrane-like structures. In a later development stage, when prototypes are available, it is therefore desirable to replace or update purely numerical models with experimental data.

It is particularly easy to get tunnel vision as a domain expert, and focus only on the improvements one could provide in their area of expertise. To make matters worse, many Original Equipment Manufacturers (OEMs) are silo-ed by domain of expertise, unconsciously promoting this single mindedness in design. Unfortunately, the successful and profitable development of a vehicle is dependent on the delicate balance of performance across many domains, involving multiple physics and departments. Taking for instance the design of a Heating, Ventilation & Air Conditioning (HVAC) system, the device’s primary function is to control the climate system in vehicle cabins, and more importantly to make sure that critical areas on the windshield can be defrosted in cold weather conditions within regulation time. With the advent of electric and autonomous vehicles, further importance is now also placed on the energy efficiency of the HVAC, and its noise.

The reduction of vehicle exhaust particle emissions is a success story of European legislation. Various particle number (PN) counters and calibration procedures serve as tools to enforce PN emission limits during vehicle type approval (VTA) or periodical technical inspection (PTI) of in-use vehicles. Although all devices and procedures apply to the same PN-metric, they were developed for different purposes, by different stakeholder groups and for different target costs and technical scopes. Furthermore, their calibration procedures were independently defined by different stakeholder communities. This frequently leads to comparability and interpretation issues. Systematic differences of stationary and mobile PN counters (PN-PEMS) are well-documented. New, low-cost PTI PN counters will aggravate this problem. Today, tools to directly compare different instruments are scarce.

Recently, vehicle networks have increased complexity due to the demand for autonomous driving or connected devices. This increasing complexity requires high bandwidth. As a result, vehicle manufacturers have begun using Ethernet-based communication for high-speed links. In order to deal with the heterogeneity of such networks where legacy automotive buses have to coexist with high-speed Ethernet links vehicle manufacturers introduced a vehicle gateway system. The system uses Ethernet as a backbone between domain controllers and CAN buses for communication between internal controllers. As a central point in the vehicle, the gateway is constantly exchanging vehicle data in a heterogeneous communication environment between the existing CAN and Ethernet networks. In an in-vehicle network context where the communications are strictly time-constrained, it is necessary to measure the delay for such routing task.

For highly automated driving, commercial vehicles require an Electric/Electronic (E/E) architecture, which - in addition to sensor fusion - ensures safety-critical processes such as steering and braking at all times. Among other things, a redundant 24 V supply with corresponding disconnection is required. The battery switch is a key component. Commercial, construction, and agricultural vehicles (CAV) need to operate at the highest possible availability and the lowest possible cost of ownership. This is why automated and autonomous driving has the potential to revolutionize the CAV sector. Driverless machines can be operated around the clock and almost non-stop. Platooning allows automated, interconnected trucks to drive in a convoy and very close to each other. Platooning saves fuel.

Autonomous driving systems and connected mobility are the next big developments for the car manufacturers and their suppliers during the next decade. To achieve the high computing power needs and fulfill new upcoming requirements due to functional safety and security, heterogeneous processor architectures with a mixture of different core architectures and hardware accelerators are necessary. To tackle this new type of hardware complexity and nevertheless stay within monetary constraints, high performance computers, inspired by state of the art data center hardware, could be adapted in order to fulfill automotive quality requirements. The European Processor Initiative (EPI) research project tries to come along with that challenge for next generation semiconductors. To be as close as possible to series development needs for the next upcoming car generations, we present a hybrid semiconductor system-on-chip architecture for automotive.

In this paper a method for the identification of most significant vehicle parameters influencing the behavior of a lateral control system of autonomous car is presented. Requirements for the design stage of the controller need to consider many uncertainties in the plant. While most vehicle properties can be compensated by an appropriate tuning of the control parameters, other vehicle properties can change significantly during usage. The control system is evaluated based on performance measures. Analyzed parameters comprise functional tire characteristics, mass of the vehicle and position of its center of gravity. Since the parameters are correlated, but Sobol’ sensitivity analysis assumes decorrelated inputs, random variation yields no reasonable results. Furthermore, the variation of each parameter or set of parameters is not applicable since the numbers of required simulations is increased significantly according to input dimension.

Sensing and acting elements to guarantee the locking functions of seat belt retractors can emit noise when the retractor is subjected to externally applied vibrations. For these elements to function correctly, stiffness, inertia and friction needs to be in tune, leading to a complex motion resistance behavior, which makes it delicate to test for vibration induced noise. Requirements for a noise test are simplicity, robustness, repeatability, and independence of laboratory and test equipment. This paper reports on joint development activities for an alternative test procedure, involving three test laboratories with different equipment. In vehicle observation on parcel shelf mounted retractors, commercially available test equipment, and recent results from multi-axial component tests [1], set the frame for this work. Robustness and reliability of test results is being analyzed by means of sensitivity studies on several test parameters.

From an acoustical point of view, the integration of seatbelt retractors in a vehicle is a real challenge that has to be met early in the vehicle development process. The buzz and rattle noise of seat belt retractors is a weak yet disturbing interior noise. Street irregularities excite the wheels and this excitation is transferred via the car body to the mounting location of the retractor. Ultimately, the inertia sensor of the locking mechanism is also excited. This excitation can be amplified by structural resonances and generate a characteristic impact noise. The objective of this paper is to describe a simulation method for an early development phase that predicts the noise-relevant low frequency local modes and consequently the contact of the retractor with the mounting panel of the car body via the finite element method.

Advanced safety features and new services in connected cars depend on the security of the underlying vehicle functions. Due to the interconnection with the outside world and as a result of being an embedded system a modern vehicle is exposed to both, malicious activities as faced by traditional IT world systems as well as physical attacks. This introduces the need for utilizing hardware-assisted security measures to prevent both kinds of attacks. In this paper we present a survey of the different classes of hardware security devices and depict their different functional range and application. We demonstrate the feasibility of our approach by conducting a case study on an exemplary implementation of a function-on-demand use case. In particular, our example outlines how to apply the different hardware security approaches in practice to address real-world security topics. We conclude with an assessment of today’s hardware security devices.

Highly automated driving (HAD) is under rapid development and will be available for customers within the next years. However the evidence that HAD is at least as safe as human driving has still not been produced. The challenge is to drive hundreds of millions of test kilometers without incidents to show that statistically HAD is significantly safer. One approach is to let a HAD function run in parallel with human drivers in customer cars to utilize a fraction of the billions of kilometers driven every year. To guarantee safety, the function under test (FUT) has access to sensors but its output is not executed, which results in an open loop problem. To overcome this shortcoming, the proposed method consists of four steps to close the loop for the FUT. First, sensor data from real driving scenarios is fused in a world model and enhanced by incorporating future time steps into original measurements.

Functional safe systems fulfilling the ISO 26262 standard are getting more important for automotive applications where additional redundant and diverse functionality is needed for higher rated ASIL levels. This can result in a very complex and expensive system setup. Here we present a sensor product developed according ISO 26262. This sensor product comprises a two channel redundant and also diverse implemented magnetic field sensor concept with linear digital outputs on one monolithically integrated silicon substrate. This sensor is used for ASIL D applications like power-steering torque measurement, where the torque is transferred into a magnetic field signal in a certain magnetic setup, but can also be used in other demanding sensor applications concerning safety. This proposed and also implemented solution is beneficial because of implementation on a single chip in one single chip-package but anyway fulfilling ASIL D requirements on system level.

The automotive industry experiences a major change as vehicles are gradually becoming a part of the Internet. Security concepts based on the closed-world assumption cannot be deployed anymore due to a constantly changing adversary model. Automotive Ethernet as future in-vehicle network and a new E/E Architecture have different security requirements than Ethernet known from traditional IT and legacy systems. In order to achieve a high level of security, a new multi-layer approach in the vehicle which responds to special automotive requirements has to be introduced. One essential layer of this holistic security concept is to restrict non-authorized access by the deployment of embedded firewalls. This paper addresses the introduction of automotive firewalls into the next-generation domain architecture with a focus on partitioning of its features in hardware and software.

Functional safe products conforming to the ISO 26262 standard are getting more important for automotive applications wherein electronic takes more and more response for safety relevant operations. Consequently safety mechanisms are needed and implemented in order to reach defined functional safety targets. To prove their effectiveness diagnostic coverage provides a measurable quantity. A straight forward safety mechanism for sensor systems can be established by redundant signal paths measuring the same physical quantity and subsequently performing an independent output difference-check that decides if the data can be transmitted or an error message shall be sent. This paper focuses on the diagnostic coverage figure calculation of such data correlation-checks for linear sensors which are also shown in ISO 26262 part5:2011 ANNEX D2.10.2.

Air charge calibration of turbocharged SI gasoline engines with both variable inlet valve lift and variable inlet and exhaust valve opening angle has to be very accurate and needs a high number of measurements. In particular, the modeling of the transition area from unthrottled, inlet valve controlled resp. throttled mode to turbocharged mode, suffers from small number of measurements (e.g. when applying Design of Experiments (DoE)). This is due to the strong impact of residual gas respectively scavenging dominating locally in this area. In this article, a virtual residual gas sensor in order to enable black-box-modeling of the air charge is presented. The sensor is a multilayer perceptron artificial neural network. Amongst others, the physically calculated air mass is used as training data for the artificial neural network.