Search Results

Advanced safety features and new services in connected cars depend on the security of the underlying vehicle functions. Due to the interconnection with the outside world and as a result of being an embedded system a modern vehicle is exposed to both, malicious activities as faced by traditional IT world systems as well as physical attacks. This introduces the need for utilizing hardware-assisted security measures to prevent both kinds of attacks. In this paper we present a survey of the different classes of hardware security devices and depict their different functional range and application. We demonstrate the feasibility of our approach by conducting a case study on an exemplary implementation of a function-on-demand use case. In particular, our example outlines how to apply the different hardware security approaches in practice to address real-world security topics. We conclude with an assessment of today’s hardware security devices.

Driven by the growing internet and remote connectivity of automobiles, combined with the emerging trend to automated driving, the importance of security for automotive systems is massively increasing. Although cyber security is a common part of daily routines in the traditional IT domain, necessary security mechanisms are not yet widely applied in the vehicles. At first glance, this may not appear to be a problem as there are lots of solutions from other domains, which potentially could be re-used. But substantial differences compared to an automotive environment have to be taken into account, drastically reducing the possibilities for simple reuse. Our contribution is to address automotive electronics engineers who are confronted with security requirements. Therefore, it will firstly provide some basic knowledge about IT security and subsequently present a selection of automotive specific security use cases.

The increasing complexity of automotive functions which are necessary for improved driving assistance systems and automated driving require a change of common vehicle architectures. This includes new concepts for E/E architectures such as a domain-oriented vehicle network based on powerful Domain Control Units (DCUs). These highly integrated controllers consolidate several applications on different safety levels on the same ECU. Hence, the functions depend on a strictly separated and isolated implementation to guarantee a correct behavior. This requires middleware layers which guarantee task isolation and Quality of Service (QoS) communication have to provide several new features, depending on the domain the corresponding control unit is used for. In a first step we identify requirements for a middleware in automotive DCUs. Our goal is to reuse legacy AUTOSAR based code in a multicore domain controller.

The trend towards even more sophisticated driver assistance systems and growing automation of driving sets new requirements for the robustness and availability of the involved automotive systems. In case of an error, today it is still sufficient that safety related systems just fail safe or silent to prevent safety related influence of the driving stability resulting in a functional deactivation. But the reliance on passive mechanical fallbacks in which the human driver taking over control, being inevitable in such a scenario, is expected to get more and more insufficient along with a rising degree of driving automation as the driver will be given longer reaction time. The advantage of highly or even fully automated driving is that the driver can focus on other tasks than controlling the car and monitoring it’s behavior and environment.

In ride comfort as well as driving dynamics, the behavior of the vehicle is affected by several subsystems and their properties. When analyzing the suspension, especially the characteristics of the main spring and damper but also rubber bushings are of main importance. Still, the properties of the different components are dependent on the present operating conditions. Concerning rubber bushings, several effects have already been investigated, e.g. dependencies of the transfer function of frequency, amplitude or load history. In this context influences of changes in temperature are often neglected. However, in the following research, the focus specifically lies on determination and analysis of the temperature dependency of rubber bushings. For this purpose, initially the relationship between properties of pure rubber and rubber bushings is described, which serves as a basis for correlating respective temperature dependencies.

Structural component testing is essential for the development process to have an early knowledge of the real world behaviour of critical structural components in crash load cases. The objective of this work is to show the development for a self-sufficient structural component test bench, which can be used for different side impact crash load cases and can reflect the dynamic behaviour, which current approaches are not able. An existing basic system is used, which includes pneumatic cylinders with a controlled hydraulic brake and was developed for non-structural deformable applications only (mainly occupant assessments). The system is extended with a force-distance control. The method contains the analysis of a whole vehicle FEM simulation to develop a methodology for controlled force transmission with the pneumatic cylinders for a structural component test bench.

Strategies for weight reduction have driven the noise treatment advanced developments with a great success considering the already mastered weight decreases observed in the last years in the automotive industry. This is typically the case for all soft trims parts. In the early 2010's a typical european B-segment car soft trims weights indeed 30 to 40% less than in the early 2000's years. The main driver behind such a gap has been to combine insulation and absorption properties on a single part while increasing the number of layers. This product-process evolution was conducted using a significant improvement in the simulation capacities. In that sense, several studies presenting very good correlation results between Transmission Loss measurements and finite elements simulations on dashboard or floor insulators were presented. One may consider that those kinds of parts have already achieved a considerable improvement in performance.

The increased pressure for power, space, and cost reduction in automotive applications together with the availability of high performance, automotive qualified multicore microcontrollers has lead to the ability to engineer Domain Controller ECUs that can host several separate applications in parallel. The standard automotive constraints however still apply, such as use of AUTOSAR operating system, support for legacy code, hosting OEM supplied code and the ability to determine warranty issues and responsibilities between a group of Tier 1 and Tier 2 vendors who all provide Intellectual Property to the final production ECU. Requirements for safety relevant applications add even more complexity, which in most current approaches demand a reconfiguration of all basic software layers and a major effort to redesign parts of the application code to enable co-existence on the same hardware platform. This paper outlines the conflicting requirements of hosting multiple applications.

Multicore-based ECUs are increasingly used in embedded automotive software systems to allow more demanding automotive applications at moderate cost and energy consumption. Using a high number of parallel processors together with a high number of executed software components results in a practically unmanageable number of deployment alternatives to choose from. However correct deployment is one important step for reaching timing goals and acceptable latency, both also a must to reach safety goals of safety-relevant automotive applications. In this paper we focus at reducing the complexity of deployment decisions during the phases of allocation and scheduling. We tackle this complexity of deployment decisions by a mixed constructive and analytic approach.

ISO 26262 is the actual standard for Functional Safety of automotive E/E (Electric/Electronic) systems. One of the challenges in the application of the standard is the distribution of safety related activities among the participants in the supply chain. In this paper, the concept of a Safety Element out of Context (SEooC) development will be analyzed showing its current problematic aspects and difficulties in implementing such an approach in a concrete typical automotive development flow with different participants (e.g. from OEM, tier 1 to semiconductor supplier) in the supply chain. The discussed aspects focus on the functional safety requirements of generic hardware and software development across the supply chain where the final integration of the developed element is not known at design time and therefore an assumption based mechanism shall be used.

Both, the continuous strengthening of the exhaust emission legislation and the striving for a substantial reduction of carbon dioxide output in the traffic sector depict substantial requirements for the development of future diesel engines. These engines will comprise not only the mandatory diesel oxidation catalyst (DOC) and particulate filter DPF but a NOx aftertreatment system as well - at least for heavier vehicles. The oxidation catalysts as well as currently available NOx aftertreatment technologies, i.e., LNT and SCR, rely on sufficient exhaust gas temperatures to achieve a proper conversion. This is getting more and more critical due to the fact that today's and future measures for CO₂ reduction will result in further decrease of engine-out temperatures. Additionally this development has to be considered in the light of further engine electrification and hybridization scenarios.

Both, the continuous strengthening of the exhaust emission legislation and the striving for a substantial reduction of the carbon dioxide output in the traffic sector depict substantial requirements for the global automotive industry and especially for the engine manufacturers. From the multiplicity of possible approaches and strategies for clear compliance with these demands, engine internal measures offer a large and, eventually more important, very economical potential. For example, the achievements in fuel injection technology are a measure which in the last years has contributed significantly to a notable reduction of the emissions of the modern DI Diesel engines at favorable fuel efficiency. Besides the application of modern fuel injection technology, the linked combustion control (Closed Loop Combustion Control) opens possibilities for a further optimization of the combustion process.

Turbocharged DISI engines with four cylinders have established in the market and provide a performance comparable to larger six-cylinder engines in the smaller compartment of a four-cylinder engine. In the Japanese market, also turbo gasoline engines with 500 - 660 cm₃ displacement have a long tradition in Kei-Cars. However, those engines show a lower specific performance as would be required for propelling typical small or compact vehicles in Europe. Recently, two-cylinder turbo engines have come to market, which are found attractive with respect to sound, package, and also enable low vehicle fuel consumption in NEDC test. The paper presents a turbocharger layout study on 2- and 3-cylinder engines. It discusses the influence of cylinder displacement volume on the sizing of turbines and compressors, and how specific flow phenomena in the turbine can be captured in the simulation model.

In this study the fuel influence of several bio-fuel candidates on homogeneous engine combustion systems with direct injection is investigated. The results reveal Ethanol and 2-Butanol as the two most knock-resistant fuels. Hence these two fuels enable the highest efficiency improvements versus RON95 fuel ranging from 3.6% - 12.7% for Ethanol as a result of a compression ratio increase of 5 units. Tetrahydro-2-methylfuran has a worse knock resistance and a decreased thermal efficiency due to the required reduction in compression ratio by 1.5 units. The enleanment capability is similar among all fuels thus they pose no improvements for homogeneous lean burn combustion systems despite a significant reduction in NOX emissions for the alcohol fuels as a consequence of lower combustion temperatures.

From current point of view future emission legislations for heavy-duty engines as well as industrial engines will require complex engine internal measures in combination with sophisticated aftertreatment systems as well as according control strategies to reach the emission targets. With EU VI, JP 09/NLT and US10 for heavy-duty engines as well as future Tier4 final or stage IV emission legislation for industrial applications, EGR + DPF + SCR probably will be combined for most applications and therefore quite similar technological approaches will be followed up in Europe as well as in the US and in Japan. Most “emerging markets” all over the world follow up the European, US or Japanese emission legislation with a certain time delay. Therefore similar technologies need to be introduced in these markets in the future. On the other hand specific market boundary conditions and requirements have to be considered for the development of tailored system concepts in these markets.

With the introduction of the ISO26262 automotive safety standard there is a burden of proof to show that the processing elements in embedded microcontroller hardware are capable of supporting a certain diagnostic coverage level, depending on the required Automotive Safety Integrity Level (ASIL). The current mechanisms used to provide actual metrics of the Built-in Self Tests (BIST) and Lock Step comparators use Register Transfer Level (RTL) simulations of the internal processing elements which force faults into individual nodes of the design and collect diagnostic coverage results. Although this mechanism is robust, it can only be performed by semiconductor suppliers and is costly. This paper describes a new solution whereby the microcontroller is synthesized into a large Field Programmable Gate Array (FPGA) with a test controller on the outside.

Due to increasing demand for environment friendly vehicles with better fuel economy and strict legislations on greenhouse gas emissions, lightweight design has become one of the most important issues concerning the automobile industry. Within the scope of this work lightweight design potentials that a conventional single cylinder engine crankshaft offers are researched through utilization of structural optimization techniques. The objective of the study is to reduce mass and moment of inertia of the crankshaft with the least possible effect on the stiffness and strength. For precise definition of boundary conditions and loading scenarios multi body simulations are integrated into the optimization process. The loading conditions are updated at the beginning of each optimization loop, in which a multi body simulation of the output structure from the previous optimization loop is carried out.

The application of technologies such as direct injection, turbo charging and variable valve timing has caused a significant evolution of the gasoline engine with positive effects on fuel consumption and emissions. The current developments are primarily focused on the realization of improved full load characteristics and fuel consumption reduction with stoichiometric operation, following the downsizing approach in combination with turbo charging and high specific power. The requirements of high specific power in a relatively small cylinder displacement and a wide range of DI injection specifications lead to competing development targets and to a high number of degrees of freedom during engine layout and optimization. One of the major targets is to assess the stability of the combustion system in the early development phase.

The requirement of reducing worldwide CO₂ emissions and engine pollutants are demanding an increased use of bio-fuels. Ethanol with its established production technology can contribute to this goal. However, due to its resistive auto-ignition behavior the use of ethanol-based fuels is limited to the spark-ignited gasoline combustion process. For application to the compression-ignited diesel combustion process advanced ignition systems are required. In general, ethanol offers a significant potential to improve the soot emission behavior of the diesel engine due to its oxygen content and its enhanced evaporation behavior. In this contribution the ignition behavior of ethanol and mixtures with high ethanol content is investigated in combination with advanced ignition systems with ceramic glow-plugs under diesel engine relevant thermodynamic conditions in a high pressure and temperature vessel.

Thermal management describes measures that result in the improved engine or vehicle operation in terms of energetics and thermo mechanics. In this context the involvement of the entire power train becomes more important as the interaction between engine, transmission and temperature sensitive battery package (of hybrid vehicles or electric vehicles with range extender) or the utilization of exhaust gas thermal energy play a major role for future power train concepts. The aim of thermal management strategies is to reduce fuel consumption while simultaneously increasing the comfort under consideration of all temperature limits. In this case it is essential to actively control the heat flow, in order to attain the optimal temperature distribution in the power train components.