Search Results

Software-in-the-Loop (SiL) test environments are the ideal virtual platforms for enabling continuous-development, -integration, -testing -delivery or -deployment commonly referred as Continuous-X (CX) of the complex functionalities in the current automotive industry. This trend especially is contributed by several factors such as the industry wide standardization of the model exchange formats, interfaces as well as architecture definitions. The approach of frontloading software testing with SiL test environments is predominantly advocated as well as already adopted by various Automotive OEMs, thereby the demand for innovating applicable methods is increasing. However, prominent usage of the existing monolithic architecture for interaction of various elements in the SiL environment, without regarding the separation between functional and non-functional test scope, is reducing the usability and thus limiting significantly the cost saving potential of CX with SiL.

Safety-critical embedded software has to satisfy stringent quality requirements. One such requirement, imposed by all contemporary safety standards, is that no critical run-time errors must occur. Runtime errors can be caused by undefined or unspecified behavior of the programming language; examples are buffer overflows or data races. They may cause erroneous or erratic behavior, induce system failures, and constitute security vulnerabilities. A sound static analyzer reports all such defects in the code, or proves their absence. Sound static program analysis is a verification technique recommended by ISO/FDIS 26262 for software unit verification and for the verification of software integration. In this article we propose an analysis methodology that has been implemented with the static analyzer Astrée. It supports quick turn-around times and gives highly precise whole-program results.

As automobiles become increasingly smarter, the need to understand within the automotive software the physical behavior of its parts is growing as well. The laws of physics governing such behavior are mostly formulated as differential equations, which today are usually created or obtained from various modeling tools. For solving them, the tools offer several solvers to satisfy the requirements of different problems. E.g. simple and fast explicit low order solvers for non-stiff problems and more complex implicit solvers for stiff problems. Though the modeling and code generation features as available in such tools are desirable for embedded automotive software, they cannot be used directly due to special restrictions with respect to hard realtime constraints. One such restriction is the organization of automotive software in components complying with the AUTOSAR standard which is not widely supported by the modeling tools.

The Side View Assist is the World’s first rider assistance system for two-wheelers. This is a Blind Spot Warning system, which uses four ultrasonic sensors to monitor the surrounding of the rider. Whenever there is a vehicle (i.e. a car, truck, or another motorbike) in the rider’s blind spot, the technology warns the rider with an optical signal close to the mirror. This will allow the rider to avoid a collision when changing lanes. In the current vehicle application, Side View Assist is active at speeds ranging from 25 to 80 kilometers per hour and supports riders whenever the difference in relative speed to other road users is small. The system helps to improve safety especially in cities, where heavy traffic makes it necessary to change lanes more often. Originally such systems have been developed for cars and different system solutions for cars have been in serial production for several years. The challenge was to adapt these systems so they would work for two-wheelers as well.

Many software functions currently available in the engine control units have been developed for several years (decades in some cases), reengineered or adapted due to new requirements, what may add to their inherent complexity an unnecessary complication. This paper deals with the study and implementation of a software reengineering strategy for the embedded domain, which is in transfer from research department to product development, here applied to improve maintainability of flex fuel functions. The strategy uses the SCODE “Essential Analysis”, an approach for the embedded system domain. The method allows to reduce the system complexity to the unavoidable inherent problem complexity, by decomposing the system into smaller sub problems based on its essential physics. A case study was carried out to redesign a function of fuel adaptation. The analysis was performed with the support of a tool, which covers all the phases of the method.

On the way to automated driving, the installation rate of surround sensing systems will rapidly increase in the upcoming years. The respective technical progress in the areas of driver assistance and active safety leads to a numerous and valuable information and signals to be used prior to, during and even after an accident. Car makers and suppliers can make use of this new situation and develop integrated safety functions to further reduce the number of injured and even deaths in car accidents. Nevertheless, the base occupant safety remains the core of this integrated safety system in order to ensure at least a state-of-the-art protection even in vehicles including partial, high or full automation. Current networked safety systems comprehend a point-to-point connection between single components of active and safety systems. The optimal integration requires a much deeper and holistic approach.

This paper presents an overview of the evolution & revolution of automotive E/E architectures and how we at Bosch, envision the technology in the future. It provides information on the bottlenecks for current E/E architectures and drivers for their evolution. Functionalities such as automated driving, connectivity and cyber-security have gained increasing importance over the past few years. The importance of these functionalities will continue to grow as these cutting-edge technologies mature and market acceptance increases. Implementation of these functionalities in mainstream vehicles will demand a paradigm shift in E/E architectures with respect to in-vehicle communication networks, power networks, connectivity, safety and security. This paper expounds on these points at a system level.

In the year of 2012 in India the total number of accidents with injuries is registered by Ministry of Road Transport and Highway with 490,383 out of which injured people are 509,667 and fatalities are 138,258 [1]. Nearly 17% of the fatalities are occupants of passenger cars which constitute the second highest contributor for fatal accidents in India [1]. In order to understand the root causes for car accidents in India, Bosch accident research carried out a study based on in-depth accidents collected in India. Apart from other accident contributing factors e.g. infrastructure the driver behaviour and his actions few milliseconds just prior to the crash is an extremely important and a key valuable data for the understanding of accident causation. Further on it supports also the development of modern automotive safety functions. Hence this research was undertaken to evaluate the benefit of the state-of-the art vehicle safety systems known as Antilock Braking System (ABS).

Current exhaust gas emission regulations can only be well adhered to through optimal interplay of combustion engine and exhaust gas after-treatment systems. Combining a modern diesel engine with several exhaust gas after-treatment components (DPF, catalytic converters) leads to extremely complex drive systems, with very complex and technically demanding control systems. Current engine ECUs (Electronic Control Unit) have hundreds of functions with thousands of parameters that can be adapted to keep the exhaust gas emissions within the given limits. Each of these functions has to be calibrated and tested in accordance with the rest of the ECU software. To date this task has been performed mostly on engine test benches or in Hardware-in-the-Loop (HiL) setups. In this paper, a Software-in-the-Loop (SiL) approach, consisting of an engine model and an exhaust gas treatment (EGT) model, coupled with software from a real diesel engine ECU, will be described in detail.

AUTOSAR (AUTomotive Open System ARchitecture) is a worldwide standard for automotive basic software in line with an architecture that eases exchange and transfer of application software components between platforms or companies. AUTOSAR provides the standardized architecture together with the specifications of the basics software along with the methodology for developing embedded control units for automotive applications. AUTOSAR matured over the last several years through intensive development, implementation and maintenance. Two main releases (R3.2 and R4.0) represent its current degree of maturity. AUTOSAR is driven by so called core partners: leading car manufacturers (BMW, Daimler, Ford, GM, PSA, Toyota, Volkswagen) together with the tier 1 suppliers Continental and Bosch. AUTOSAR in total has more than 150 companies (OEM, Tier X suppliers, SW and tool suppliers, and silicon suppliers) as members from all over the world.

In order to master the increasing complexity of electrical/electronic (E/E) systems in vehicles, E/E architecture design has become an established discipline. The task of the E/E architecture design is to come up with solutions to challenging and often contradictory requirements such as reduced cost and increased flexibility / scalability. One way to optimize the E/E architecture in terms of cost (electronics & wiring harness) is to integrate functions. This can be done by either combining functions from multiple ECUs into a single ECU or by introducing Domain Control Units. Domain Control Units provide the main software functionality for a vehicle domain, while relegating the basic functions of actuator control to connected intelligent actuators. Depending on the different market segments (low price, volume and premium) and the different vehicle domains, the actual usage of Domain Control Units can be quite different and sometimes questionable.

Electromagnetic Compatibility (EMC) requirements and the effort to fulfill them are increasing steadily in automotive applications. This paper demonstrates the usage of virtual prototyping to efficiently investigate the EMC behavior of a gasoline direct injection system. While the system worked functionally as designed, tests indicated that current and especially future client-specific EMC limits could not be met. The goal of this investigation was to identify and eliminate the cause of EMC emissions using a virtual software prototype including the controller ASIC, boost converter, pi filter, injection valves and wire harness. Applying virtual prototyping techniques it was possible to capture the motor control system in a simulation model which reproduced EMC measurements in the frequency ranges of interest.

Since introduction of safety belts in the 70s and airbags in the early 80s, these passive safety technologies have become standard in many markets. Remarkable improvement in passive safety, efforts to alter driver behaviour and infrastructural programmes have led to substantial reductions of fatalities in many regions, although the absolute number of highway fatalities increased e.g. in the USA in 2002 to the highest level since 1990. Electronic Stability Control (ESC) as an active safety technology assists the driver to keep the vehicle on the intended track and thereby actively prevents accidents. In 1995 Bosch was the first supplier to introduce ESC for the Mercedes-Benz S-Class, where it is marketed as ESP® - Electronic Stability Program. Since then, Bosch has produced more than 30 million systems worldwide. Many studies have now confirmed that ESC can prevent a vehicle from skidding or rolling over in nearly all driving situations.

This paper describes the first results from the AutoMoDe project (Automotive Model-based Development), where an integrated methodology for model-based development of automotive control software is being developed. The results presented include a number of problem-oriented graphical notations, based on a formally defined operational model, which are associated with system views for various degrees of abstraction. It is shown how the approach can be used for partitioning comprehensive system designs for subsequent implementation-related tasks. Recent experiences from a case study of an engine management system, specific issues related to reengineering, and the current status of CASE-tool support are also presented.

The amount of software integrated into today's vehicles growths exponential and tends to be a patchwork of non interrelated applications. However the interrelationship gets more and more intensive as applications start to cooperate and therefore communicate with each other. By introducing a domain exceeding middleware concept we want applications to experience a high level of integration and enable outsourcing of features applications have in common.

In spite of improvements in passive safety and efforts to alter driver behavior, the absolute number of highway fatalities in 2002 increased to the highest level since 1990 in the US. ESP is an active safety technology that assists the driver to keep the vehicle on the intended path and thereby helps to prevent accidents. ESP is especially effective in keeping the vehicle on the road and mitigating rollover accidents which account for over 1/3 of all fatalities in single vehicle accidents. In 1995 Bosch was the first supplier to introduce electronic stability control (ESC) for the Mercedes-Benz S-Class sedan. Since then, Bosch has produced more than 10 million systems worldwide which are marketed as ESP - Electronic Stability Program. In this report Bosch will present ESP contributions to active safety and the required adaptations to support four wheel driven vehicles and to mitigate rollover situations.

The development of future automotive electronic systems requires new concepts in the software architecture, development methodology and information exchange. At Bosch an XML and MSR based technology is applied to achieve a consistent information handling throughout the entire software development process. This approach enables the tool independent exchange of information and documentation between the involved development partners. This paper presents the software architecture, the specification of software components in XML, the process steps, an example and an exchange scenario with an external development partner.

In the last decades the development of Diesel engines has made substantial progress. New, powerful and scalable injection systems have been introduced. In consequence Diesel systems are continuously gaining market share in many places of the world. Advanced direct injection engines with systems like the electronically controlled distributer pump, the unit injection system and of course the common rail system are replacing the chamber engines in all automotive applications. This is all unthinkable without the electronic management of these injection systems by means of Electronic Diesel Control units (EDC). The following presentation describes the status and some future trend of technology of EDCs with particular emphasis on functional and on software development. It also outlines the challenge of global automotive industry that requires global development and application services from its tier 1 suppliers.

Time Triggered CAN (TTCAN) is an extension of the well-known CAN protocol, introducing to CAN networks time triggered communication and a system wide global network time with high precision. Time Triggered CAN has been accepted as international standard ISOCD11898-4. The time triggered communication is built upon the unchanged standard CAN protocol. This allows a software implementation of the time triggered function of TTCAN, based on existing CAN ICs. The high precision global time however requires a hardware implementation. A hardware implementation also offers additional functions like time mark interrupts, a stopwatch, and a synchronization to external events, all independent of software latency times. The TTCAN testchip (TTCAN_TC) is a standalone TTCAN controller and has been produced as a solution to the hen/egg problem of hardware availability versus tool support and research.

Automotive product lines promote reuse of software artifacts such as architectures, designs and implementations. System architectures, and especially software architectures, are difficult to create due to the need to support variations. Traditional approaches emphasize the identification and description of generic components, which makes it difficult to support variations among products. The paper proposes an approach for transforming a software architecture to product design through using patterns in a four-way refinement and evolution process. The paper investigates how patterns may be used to verify the conceptual integrity in the view integration procedure to support software sharing in an open automotive system.