Search Results

Software-in-the-Loop (SiL) test environments are the ideal virtual platforms for enabling continuous-development, -integration, -testing -delivery or -deployment commonly referred as Continuous-X (CX) of the complex functionalities in the current automotive industry. This trend especially is contributed by several factors such as the industry wide standardization of the model exchange formats, interfaces as well as architecture definitions. The approach of frontloading software testing with SiL test environments is predominantly advocated as well as already adopted by various Automotive OEMs, thereby the demand for innovating applicable methods is increasing. However, prominent usage of the existing monolithic architecture for interaction of various elements in the SiL environment, without regarding the separation between functional and non-functional test scope, is reducing the usability and thus limiting significantly the cost saving potential of CX with SiL.

Autonomous driving systems and connected mobility are the next big developments for the car manufacturers and their suppliers during the next decade. To achieve the high computing power needs and fulfill new upcoming requirements due to functional safety and security, heterogeneous processor architectures with a mixture of different core architectures and hardware accelerators are necessary. To tackle this new type of hardware complexity and nevertheless stay within monetary constraints, high performance computers, inspired by state of the art data center hardware, could be adapted in order to fulfill automotive quality requirements. The European Processor Initiative (EPI) research project tries to come along with that challenge for next generation semiconductors. To be as close as possible to series development needs for the next upcoming car generations, we present a hybrid semiconductor system-on-chip architecture for automotive.

Sensing and acting elements to guarantee the locking functions of seat belt retractors can emit noise when the retractor is subjected to externally applied vibrations. For these elements to function correctly, stiffness, inertia and friction needs to be in tune, leading to a complex motion resistance behavior, which makes it delicate to test for vibration induced noise. Requirements for a noise test are simplicity, robustness, repeatability, and independence of laboratory and test equipment. This paper reports on joint development activities for an alternative test procedure, involving three test laboratories with different equipment. In vehicle observation on parcel shelf mounted retractors, commercially available test equipment, and recent results from multi-axial component tests [1], set the frame for this work. Robustness and reliability of test results is being analyzed by means of sensitivity studies on several test parameters.

Seatbelt retractors as important part of modern safety systems are mounted in any automotive vehicle. Their internal locking mechanism is based on mechanically sensing elements. When the vehicle is run over rough road tracks, the retractor oscillates by spatial mode shapes and its interior components are subjected to vibrations in all 6 degrees of freedoms (DOF). Functional backlash of sensing elements cause impacts with neighbouring parts and leads to weak, but persistent rattle sound, being often rated acoustically annoying in the vehicle. Current acoustic retractor bench tests use exclusively uni-directional excitations. Therefore, a silent 2 DOF test bench is developed to investigate the effect of multi-dimensional excitation on retractor acoustics, combining two slip-tables, each driven independently by a shaker. Tests on this prototype test bench show, that cross coupling between the two perpendicular directions is less than 1%, allowing to control both directions independently.

From an acoustical point of view, the integration of seatbelt retractors in a vehicle is a real challenge that has to be met early in the vehicle development process. The buzz and rattle noise of seat belt retractors is a weak yet disturbing interior noise. Street irregularities excite the wheels and this excitation is transferred via the car body to the mounting location of the retractor. Ultimately, the inertia sensor of the locking mechanism is also excited. This excitation can be amplified by structural resonances and generate a characteristic impact noise. The objective of this paper is to describe a simulation method for an early development phase that predicts the noise-relevant low frequency local modes and consequently the contact of the retractor with the mounting panel of the car body via the finite element method.

This paper presents an overview of the evolution & revolution of automotive E/E architectures and how we at Bosch, envision the technology in the future. It provides information on the bottlenecks for current E/E architectures and drivers for their evolution. Functionalities such as automated driving, connectivity and cyber-security have gained increasing importance over the past few years. The importance of these functionalities will continue to grow as these cutting-edge technologies mature and market acceptance increases. Implementation of these functionalities in mainstream vehicles will demand a paradigm shift in E/E architectures with respect to in-vehicle communication networks, power networks, connectivity, safety and security. This paper expounds on these points at a system level.

Timing evaluation methods help to design a robust and extendible E/E architecture (electric/electronic). BMW has introduced the systematic application of such methods in the E/E design process within the last three years. Meanwhile, most of the architectural changes are now verified by a tool-based, automatic real-time analysis. This has increased the accuracy of the network planning and productivity of the BMW network department. In this paper, we give an overview of the actual status of timing evaluations in BMW's E/E architecture design. We discuss acceptance criteria, analysis metrics, and design rules, as far as these are related to timing. We look specifically at automation options, as these improve the productivity further. We will see that timing analysis has matured and should be mandatory for application in mass production E/E architecture development. At the same time, there is room for future improvements.

Today's automotive software integration is a static process. Hardware and software form a fixed package and thus hinder the integration of new electric and electronic features once the specification has been completed. Usually software components assigned to an ECU cannot be easily transferred to other devices after they have been deployed. The main reasons are high system configuration and integration complexity, although shifting functions from one to another ECU is a feature which is generally supported by AUTOSAR. The concept of a Virtual Functional Bus allows a strict separation between applications and infrastructure and avoids source code modifications. But still further tooling is needed to reconfigure the AUTOSAR Basic Software (BSW). Other challenges for AUTOSAR are mixed integrity, versioning and multi-core support. The upcoming BMW E/E-domain oriented architecture will require all these features to be scalable across all vehicle model ranges.

The potential to reduce the cost of embedded software by standardizing the application behavior for Automotive Body and Comfort domain functions is explored in this paper. AUTOSAR, with its layered architecture and a standard definition of the interfaces for Body and Comfort application functions, has simplified the exchangeability of software components. A further step is to standardize the application behavior, by developing standard specifications for common Body and Comfort functions. The corresponding software components can be freely exchanged between different OEM/Tier-1 users, even if developed independently by multiple suppliers. In practice, individual OEM users may need to maintain some distinction in the functionality. A method of categorizing the specifications as ‘common’ and ‘unique’, and to configure them for individual applications is proposed. This allows feature variability by means of relatively simple adapter functions.

Multicore-based ECUs are increasingly used in embedded automotive software systems to allow more demanding automotive applications at moderate cost and energy consumption. Using a high number of parallel processors together with a high number of executed software components results in a practically unmanageable number of deployment alternatives to choose from. However correct deployment is one important step for reaching timing goals and acceptable latency, both also a must to reach safety goals of safety-relevant automotive applications. In this paper we focus at reducing the complexity of deployment decisions during the phases of allocation and scheduling. We tackle this complexity of deployment decisions by a mixed constructive and analytic approach.

Among the currently available sensor interfaces for automotive applications, only the PSI5 interface - as standardized in the new 2001 PSI5 V2.0 - meets the rising system requirements, the increased requirements of the new environmental regulations, and the requirements of current functional safety standards. PSI5 not only features the capability to transmit highly accurate sensor data, high EMC robustness, bus capability, and bidirectional communication, but also offers savings in the cable harness and a reduced number of connector pins by using just two wires. It therefore offers enhanced technical functionality at a reasonable cost. To improve the environmental friendliness and sustainable operation of drive concepts, Bosch is also employing sophisticated and cross-linked sensors, actuators and control units. In addition, there is also the need to optimize system functions, weight, construction space and costs.

AUTOSAR (AUTomotive Open System ARchitecture) is a worldwide standard for automotive basic software in line with an architecture that eases exchange and transfer of application software components between platforms or companies. AUTOSAR provides the standardized architecture together with the specifications of the basics software along with the methodology for developing embedded control units for automotive applications. AUTOSAR matured over the last several years through intensive development, implementation and maintenance. Two main releases (R3.2 and R4.0) represent its current degree of maturity. AUTOSAR is driven by so called core partners: leading car manufacturers (BMW, Daimler, Ford, GM, PSA, Toyota, Volkswagen) together with the tier 1 suppliers Continental and Bosch. AUTOSAR in total has more than 150 companies (OEM, Tier X suppliers, SW and tool suppliers, and silicon suppliers) as members from all over the world.

The development of vehicle communication networks is challenged not only by the increasing demand in data exchange and required data rate but also the need to connect the vehicle to external sources for personal connectivity of driver and car to infrastructure applications. Solutions are required to master complexity of in-vehicle communication networks, e.g. diagnostic access, flashing of Electronic Control Units, the data backbone connecting the vehicle domains and the data transfer of cameras. Safety (data transfer) and security (violation) issues of the communication networks gain more importance especially by introducing interfaces to external sources either via mobile devices or by connecting the vehicle to other external sources, e.g. Internet and Car to Infrastructure applications. The Internet Protocol (IP) appears to be an ideal solution to address these challenges, especially in connection with an Ethernet physical layer for fast data transfer.

In order to master the increasing complexity of electrical/electronic (E/E) systems in vehicles, E/E architecture design has become an established discipline. The task of the E/E architecture design is to come up with solutions to challenging and often contradictory requirements such as reduced cost and increased flexibility / scalability. One way to optimize the E/E architecture in terms of cost (electronics & wiring harness) is to integrate functions. This can be done by either combining functions from multiple ECUs into a single ECU or by introducing Domain Control Units. Domain Control Units provide the main software functionality for a vehicle domain, while relegating the basic functions of actuator control to connected intelligent actuators. Depending on the different market segments (low price, volume and premium) and the different vehicle domains, the actual usage of Domain Control Units can be quite different and sometimes questionable.

Bosch Automotive Semiconductor Unit investigated destroyed semiconductor devices (ASIC) from electronic control unit complaints, which failed due to electrical overstress. It turned out that failure fingerprints could only be reproduced by semiconductor operation far beyond spec limits. One main failure mechanism is caused by hot plugging and bad or late ground connection. In today’s cars some applications are still active for minutes after ignition switch off. So, currents of several amps are delivered and in a typical production or garage environment, hot plugging cannot be avoided completely. Bosch suggests introducing extended ground pins to get an enforced switch on/off sequence during plugging. This poka yoke protection principle is successfully used in other industries for a long time and should now come into cars.

Since introduction of safety belts in the 70s and airbags in the early 80s, these passive safety technologies have become standard in many markets. Remarkable improvement in passive safety, efforts to alter driver behaviour and infrastructural programmes have led to substantial reductions of fatalities in many regions, although the absolute number of highway fatalities increased e.g. in the USA in 2002 to the highest level since 1990. Electronic Stability Control (ESC) as an active safety technology assists the driver to keep the vehicle on the intended track and thereby actively prevents accidents. In 1995 Bosch was the first supplier to introduce ESC for the Mercedes-Benz S-Class, where it is marketed as ESP® - Electronic Stability Program. Since then, Bosch has produced more than 30 million systems worldwide. Many studies have now confirmed that ESC can prevent a vehicle from skidding or rolling over in nearly all driving situations.

One of the most important aims of the automotive industry is to provide the best possible protection for drivers, passengers and pedestrians. Through their CAPS (Combined Active and Passive Safety) program (see Figure 1), Bosch is developing new functions which help to achieve these goals and contribute to accident mitigation and/or reduction of accident severity. By linking existing active and passive automobile safety systems and extending these by adding systems for monitoring and evaluating the vehicle's environment, the foundation for new safety functions is created. The growing number of airbags in vehicles provides more and better protection against injury for the occupants. In addition, active safety systems such as the ESP® Electronic Stability Program help to prevent an accident occurring in the first place. If these systems are linked together, they can share information and provide even better safety for drivers and passengers through new functions.

Surround sensing methods provide information which can be used in PRECRASH functionalities for advanced control of the passenger protection system. The relevant data (closing velocity (cv), time to impact (tti), and offset of contact point (Δy)) are determined with a Predictive Safety System and transmitted to the airbag control unit for further processing in the PRECRASH algorithm. The PRECRASH algorithm controls both, the activation of reversible restraints and the deployment of irreversible restraints. Therefore it consists of two components: The PREFIRE and the PRESET algorithm. The PREFIRE algorithm uses the PRECRASH information for the activation of the reversible belt pretensioner in advance of a crash to reduce chest load in the crash phase. The PRESET algorithm calculates the trigger decision for deployment of pyrotechnical restraints. Inputs of the PRESET algorithm are the PRECRASH information as well as the acceleration signal.

Modern zirconia oxygen sensors are heated internally to achieve an optimal detection of the oxygen concentration in the exhaust gas and fast light off time. The temperature of the gas in the exhaust pipe varies in a wide range. The zirconia sensor is cooled by radiation and forced convection caused by cold exhaust gas. If the zirconia temperature falls, the oxygen detection capability of the sensor decreases. To minimize the cooling effects, protection tubes cover the zirconia sensor. However, this is in conflict with the aim to accelerate the dynamics of the lambda sensor. In this paper, the heat transfer at the surface of a heated planar zirconia sensor with two different double protection tubes of a Bosch oxygen sensor is examined in detail. The geometric configuration of the tubes forces different flow patterns in the inner protection tube around the zirconia sensor. The zirconia sensor is internally electrically heated by a platinum heater layer.

The development of future automotive electronic systems requires new concepts in the software architecture, development methodology and information exchange. At Bosch an XML and MSR based technology is applied to achieve a consistent information handling throughout the entire software development process. This approach enables the tool independent exchange of information and documentation between the involved development partners. This paper presents the software architecture, the specification of software components in XML, the process steps, an example and an exchange scenario with an external development partner.