Search Results

In this paper, we propose a hardware and a software design method considering functional safety for an electro-mechanical brake (EMB) control system which is used as a brake actuator in a brake-by-wire (BBW) system. A BBW system is usually composed of electro-mechanical calipers, a pedal simulator, and a control system. This simple by-wire structure eliminates the majority of bulky hydraulic brake devices such as boosters and master cylinders. The other benefit of a BBW system is its direct and independent response; this leads to enhanced controllability, thus resulting in not only improved basic braking performance but also considerably easier cooperative regenerative braking in hybrid, fuel-cell, and electric cars. The importance of a functional safety based approach to EMB electronic control unit (ECU) design has been emphasized because of its safety critical functions, which are executed with the aid of many electric actuators, sensors, and application software.

The efforts of the ISO “Test Variability Task Force” have been aimed at improving the understanding and at reducing brake dynamometer test variability during performance testing. In addition, dynamometer test results have been compared and correlated to vehicle testing. Even though there is already a vast amount of anecdotal evidence confirming the fact that different procedures generate different friction coefficients on the same brake corner, the availability of supporting data to the industry has been elusive up to this point. To overcome this issue, this paper focuses on assessing friction levels, friction coefficient sensitivity, and repeatability under ECE, GB, ISO, JASO, and SAE laboratory friction evaluation tests.

With the introduction of the ISO26262 automotive safety standard there is a burden of proof to show that the processing elements in embedded microcontroller hardware are capable of supporting a certain diagnostic coverage level, depending on the required Automotive Safety Integrity Level (ASIL). The current mechanisms used to provide actual metrics of the Built-in Self Tests (BIST) and Lock Step comparators use Register Transfer Level (RTL) simulations of the internal processing elements which force faults into individual nodes of the design and collect diagnostic coverage results. Although this mechanism is robust, it can only be performed by semiconductor suppliers and is costly. This paper describes a new solution whereby the microcontroller is synthesized into a large Field Programmable Gate Array (FPGA) with a test controller on the outside.

FlexRay1 is a high speed, time triggered and fault tolerant communication protocol, which was specified to meet the requirements of safety-critical automotive applications. The achieved maturity of FlexRay encourages the implementation on silicon. The CIC-3102 device is a standalone controller provided by Infineon Technologies. It runs the wide spread E-Ray3 IP from Bosch. A complete communication node for FlexRay requires additional devices for the physical layer and the application part. The CIC-310 can communicate with a host controller via three different interfaces micro link interface MLI, serial synchronous interface SSC, external bus XMU. Its physical layer interface corresponds to the FlexRay specification. The CIC-310 provides features like intelligent move engines to maximize the achievable data rate as well as to minimize the workload of the host. Therefore, the CIC-310 allows a very flexible and efficient way to build and operate FlexRay nodes.

This paper proposes and evaluates improvements to a crash simulation of a fuel delivery module in a fuel tank. The simulations were performed in ANSYS/LS-DYNA. Deviations between the original simulation and test data were studied and reasons for the deviations hypothesized. These reasons stemmed from some of the simplifying assumptions of the model. Improvements consisted of incorporating plasticity and strain rate effects into the material models. Performance criteria were also directly incorporated into the material models such that non-performing portions of the model could be deactivated during the simulation. Finally, solid-fluid interactions were added into the simulation to include the momentum transfer from fuel to the fuel delivery module. It was previously thought that effects of a crash would be most severe on the module when the fuel tank was empty and the module was full with fuel.

Networking of active and passive safety is the fundamental basis for comprehensive vehicle safety. Situation-relevant information relating to driver reactions, vehicle behavior and traffic environment are fed into a crash probability calculator, which continually assesses the current crash risk and intervenes when necessary with appropriate measures to avoid a crash and reduce potential injuries. This provides effective protection not only for vehicle occupants but also for other, vulnerable road users. As this functionality up till now only relates to the vehicle itself, the next logical step is enhancement leading to the ultimate goal in safety performance, telematics. The integration of this embedded, in-vehicle wireless communication system allows Car-to-Car (C2C) and Car-to-Infrastructure (C2I) functionality for, e.g. hazard warning. This is an integral element of the cascaded ContiGuard® protection measures.

The AUTomotive Open System ARchitecture (AUTOSAR) Development Partnership has published early 2008 the specifications Release 3.0 [1], with a prime focus on the overall architecture, basic software, run time environment, communication stacks and methodology. Heavy developments have taken place in the OEM and supplier community to deliver AUTOSAR loaded cars on the streets starting 2008 [2]. The 2008 achievements have been: Improving the specifications in order to secure the exploitation for body, chassis and powertrain applications Adding major features: safety related functionalities, OBD II and Telematics application interfaces.

As the automotive industry quickly moves towards hybridized and electrified vehicles, the optimal integration of power electronics in these vehicles will have a significant impact not only on the cost, performance, reliability, and durability; but ultimately on customer acceptance and market success of these technologies. If properly executed with the right cost, performance, reliability and durability, then both the industry and the consumer will benefit. It is because of these interdependencies that the pace and scale of success, will hinge on effective collaboration. This collaboration will be built around the convergence of automotive and industrial technology. Where real time embedded controls mixes with high power and voltage levels. The industry has already seen several successful collaborations adapting power electronics to the automotive space in target vehicles.

It is the beginning of a new age: multicore technology from the PC desktop market is now also hitting the automotive domain after several years of maturation. New microcontrollers with two or more main processing cores have been announced to provide the next step change in available computing power while keeping costs and power consumption at a reasonable level. These new multicore devices should not be confused with the specialized safety microcontrollers using two redundant cores to detect possible hardware failures which are already available. Nor should they be confused with the heterogeneous multicore solutions employing an additional support core to offload a single main processing core from real-time tasks (e.g. handling peripherals).

Braking systems require a high system safety level: New safety concepts need to be implemented by reducing the system complexity. Microcontrollers with special safety functions are available with implemented features, self detecting and compensating different types of faults. Today usually two microcontrollers are used to check each other. Power devices provide microcontroller supplies and drive motors and valves; internally the functions are supervised to avoid incorrect system behaviour due to wrong voltages, currents, missing loads or other malfunctions. Bus interfaces, signal conditioning and interfaces for high voltage signals are integrated into the power system ICs. Latest BIPOLAR-CMOS-DMOS power technologies enable the power semiconductors to integrate logic functions.

Electronic throttle systems are becoming more and more important in today's motor vehicles. These systems consist of: a throttle valve with an electrical actuator and a transmission a position feedback an electronic acceleration pedal an electronic control unit (ECU) a semiconductor h-bridge for driving the motor. The electronic acceleration pedal gives a set point to the ECU. A control signal is generated and moves the motor of the throttle valve with a semiconductor h-bridge to the requested position. The voltage drop of a potentiometer is used here as control feedback signal. The potentiometer in the throttle valve is moved very often and has a rough environment like high temperature and vibrations. Therefore this system has a lot of problems with mechanical attrition and reliability during the whole system lifetime. The accuracy of the position control decreases over time.

Modern semiconductor devices enable highly efficient conversion of electrical power. Together with the microcontroller, they are the key elements for generation of the alternating currents from the car's DC supply that are necessary to drive high-performance units such as starter-alternators. These allow the combustion engine to crank up in several 100 ms and deliver up to 15 kW of electrical power. Smart driver ICs such as the TLE6280 enable the fast development of the interface between the microcontroller and the power switches. Currents of some 100A can be handled with the new OptiMOS FETs. Their rugged and ultra-low ohmic technology and their innovative packaging concepts, such as Power Modules and Power-Bonded MOSFETs, allow the building of compact and efficient control units.

Today's body and convenience applications in general directly control actuators and sensors from a single central electronic control unit (ECU). Future systems will be made of subsystem-clusters communicating via a local Class/A communication bus. This enables modular system design to reduce system complexity. For these types of new distributed applications the LIN bus is currently the most promising communication protocol. To allow a seamless migration from existing centralized to these next generation clustered system developers require software and hardware products for a homogenous and transparent LIN bus communication.

The objective of this SAE paper is to discuss a power stage partitioning which will provide a cost effective and flexible Infineon Technologies solution to control future E-Valve applications. To fulfil environmental demands, E-Valve applications will enable car manufacturers to: Dynamically reduce the number of working cylinders according to the drivers' torque requirements Have an efficient and variable control over the engine load in various conditions Dispense with throttles and exhaust recirculation valves The paper will describe: 1 The integration of the 4 MosFET and the future technology development required for the next system optimization. 2 Gate driver integration (3 different scenarios): Analog Interfacing between the μcontroller and the MosFETs with an integrated protection functionality (Scenario A).

Infineon proposes a Quasi-Autonomous Gate Driver (QAGD) to manage an electrically actuated component, whether electromechanical, electromagnetic, or electrohydraulic. This paper examines some current control strategies that can be implemented within the QAGD, such as: Synchronous Sampling (SYSA), Hysteresis, Improved Synchronous Sampling-Hysteresis (ISSH), Suboscillation, Suboscillation with Back EMF Feedforward (SBEF) and Synchronous Control in Rotation Coordinates (SCRC). Analysis and simulation of these strategies indicate their advantages and disadvantages, which are then summarized in a comparison chart, from which the best solution for a given application can be determined. The QAGD IC proposed by Infineon adopts this solution by integrating the current controller and the driver unit for the MOSFETs in a single package. The inverter function can therefore be implemented using one QAGD and several MOSFETs, which greatly simplify the system and decrease the costs.

The aim of this paper is to compile the state of the art of engine control and develop scenarios for improvements in a number of applications of engine control where the pace of technology change is at its most marked. The first application is control of downsized engines with enhancement of combustion using direct injection, variable valve actuation and turbo charging. The second application is electrification of the powertrain with its impact on engine control. Various architectures are explored such as micro, mild, full hybrid and range extenders. The third application is exhaust gas after-treatment, with a focus on the trade-off between engine and after-treatment control. The fourth application is implementation of powertrain control systems, hardware, software, methods, and tools. The paper summarizes several examples where the performance depends on the availability of control systems for automotive applications.

Vehicle Security means protecting potential threats, unintended malfunction and illegal tuning. In addition, it has become a more important issue on an automotive system as it is directly connected to the driver and pedestrian's life. Automotive industry significantly needs to enhance security policies to prevent attacks from hackers. Nevertheless, in some systems, performance still has to be considered at first when security functions are implemented. Especially, in case of Engine Management System (EMS), fast engine synchronization for starting should be considered as the first priority. This paper is intended to show an approach to design efficient secure boot implementation for EMS. At the beginning of this paper, the concept of secure boot is explained and several use cases are introduced according to execution modes, such as the foreground and background secure boot modes. As a next step, engine starting process by EMS is explained.

The automotive industry is moving from fossil carburant to electric drive trains due to the stringent CO2 reduction policies. In this context, the electric energy storage becomes one of the key parameters of successful rolling out electrified vehicles. Typical battery management systems comprises of battery cells measurement and monitoring, balancing function, temperature monitoring, together with the State of Charge and State of Health estimations based on the given measurements. Together with the functions above, a robust internal IC communication protocol is one of the key parameters to guarantee battery performance as well as safety. This paper focuses on the automotive battery communication system. On one side, the importance of the communication system and its impact in the EDT (electric drive train) is discussed including safety aspects. Later on, the different communication methods up to date are analyzed to further understand their limitations.

In the research project between the Institute of Automotive Engineering (FZD) of the Technische Universität Darmstadt (TUD) and Continental Teves AG & Co. oHG a new modeling concept has been developed. With the aim to enhance the current development process, the brake caliper is modeled based on coupled rigid bodies integrated into a nonlinear system model. Using an explicit interface definition, the number of degrees of freedom is minimized and the calculation of caliper performance is possible over a wide range of parameters. Compared to models based on the Finite Element Method (FEM), fully parameterized geometry from CAD is not necessary, thus the caliper can be optimized for a variation of its geometrical and physical parameters. With this modeling approach, typical performance criteria such as caliper fluid displacement, hysteresis, uneven pad wear and residual torque can be calculated in a virtual bench test.

The migration of many vehicle security features from mechanical solutions (lock and key) to electronic-based systems (transponder and RF transceiver) has led to the need for purely electrically operated locking mechanisms. One such example is a steering column lock, which locks and unlocks the steering wheel movement via a reversible electric motor. The safety case for this system (in respect to ISO26262) is highly complex, as there is no single safe state of the steering column lock hardware because there is a wider system-level interlock required. The employed control platform uses ASIL D capable multicore microcontroller hardware, together with the first implementation of AutoSAR® version 4.0 operating system to demonstrate a real-world usage of the newly specified encapsulation and monitoring mechanisms using the multicore extensions of AutoSAR and those of PharOS.