Search Results

Starting from the USA and followed by the European Union, legal requirements concerning “Tire Pressure Monitoring Systems” (TPMS) for passenger cars and light trucks will be introduced in China as well and therefore in the third of the three largest automobile markets worldwide. Changes of pressure dependent physical tire properties such as dynamic roll radius and a certain tire eigenfrequency, which are included in the ESC-wheel speed signals, indicates pressure loss in an indirect manner. Systems with corresponding working principles are called “indirect Tire Pressure Monitoring System” (iTPMS). Since the tire is a structural element with varying characteristics according to the design parameters, the roll radius and frequency behavior due to pressure loss is variable as well. As a consequence, tires have to be evaluated regarding there compatibility to iTPMS during the vehicle development process.

A main challenge when developing next generation architectures for automated driving ECUs is to guarantee reliable functionality. Today’s fail safe systems will not be able to handle electronic failures due to the missing “mechanical” fallback or the intervening driver. This means, fail operational based on redundancy is an essential part for improving the functional safety, especially in safety-related braking and steering systems. The 2-out-of-2 Diagnostic Fail Safe (2oo2DFS) system is a promising approach to realize redundancy with manageable costs. In this contribution, we evaluate the reliability of this concept for a symmetric and an asymmetric Electronic Power Steering (EPS) ECU. For this, we use a Markov chain model as a typical method for analyzing the reliability and Mean Time To Failure (MTTF) in majority redundancy approaches. As a basis, the failure rates of the used components and the microcontroller are considered.

This study deals with the experimental investigation of the mechanical properties of a lithium-ion pouch cell and its modelling in an explicit finite element simulation code. One can distinguish between ‘macroscopic’ and ‘microscopic’ modelling approaches. In the ‘macroscopic’ approach, one material model approximates the behaviour of multiple inner cell layers. In the ‘microscopic’ approach, which is used in the present study, all layers and their interactions are modelled separately. The cell under study is a pouch-type lithium-ion cell with a liquid electrolyte. With its cell chemistry, design, size and capacity it is usable for automotive applications and can be assembled into traction batteries. One cell sample was fully discharged and disassembled, and its components (anode, cathode, separator and pouch) were examined and measured by electron microscopy. Components were also tensile tested.

Electronic Control Units of safety critical systems require constant monitoring of the hardware to be able to bring the system to a safe state if any hardware defects or malfunctions are detected. This monitoring includes memory checking, peripheral checking as well as checking the main processor core. However, checking the processor core is difficult because it cannot be guaranteed that the error will be properly detected if the monitor function is running on a processing system which is malfunctioning. To circumvent this issue, several previously presented monitoring concepts (e.g. SAE#2006-01-0840) employ a second external microprocessor to communicate with the main processor to check its integrity. The addition of a second microcontroller and the associated support circuitry that is required adds to the overall costs of the ECU, increases the size and creates significant system complexity.

Electronic Control Units of safety critical systems require constant monitoring of the hardware to be able to bring the system to a safe state if any hardware defects or malfunctions are detected. This monitoring includes memory checking, peripheral checking as well as checking the main processor core. However, checking the processor core is difficult because it cannot be guaranteed that the error will be properly detected if the monitor function is running on a processing system which is malfunctioning. To circumvent this issue, several previously presented monitoring concepts (e.g. SAE#2006-01-0840) employ a second external microprocessor to communicate with the main processor to check its integrity. This paper will present a concept which maps the functions of the external monitoring unit into an internal second processing core which are frequently available on modern, 32bit, monolithic, dual-core microcontrollers.

More and more high-level algorithms are emerging to improve the existing systems in a car. Often these algorithms only need a platform with a bus connection and some resources such as CPU time and memory space. These functions can easily be integrated into existing systems that have free resources. This paper describes some encapsulation techniques and mechanisms that can be used in the automotive domain. The discussion also takes into account the additional resources consumed on the microcontroller to meet these requirements and by the software to implement the encapsulation mechanisms. Overviews of some general concepts of software-architectures that provide encapsulation are also shown.

This paper proposes end-to-end protection mechanisms to be added to a generic FlexRay network in order to achieve fault detection and integrity levels sufficient for a SIL3 fail safe communication system. The mechanisms are derived from the random hardware failure modes to be considered for communication controllers according to IEC 61508. Mechanisms provided by the FlexRay protocol are pointed out. Additional features necessary to fulfil the requirements are discussed. It is shown how to calculate the failure rate probabilities of the CRC used as a safety code with respect to EN 50159.

With the ever increasing amount of available software processing resources in a vehicle, more and more high-level algorithms are emerging to improve the existing systems in a car. Often these algorithms only need a platform with a bus connection and some resources such as processing power and memory space. These functions are predestined to be integrated into existing systems that have free resources. This paper will examine the role of time protection in these multi-algorithm systems and describe what timing protection means and why it is required. The processing time will be partitioned to the different processing levels like interrupts, services and tasks. The problems of timing protection will be illustrated as well as its limitations. The conflict between real-time requirements and timing protection will be shown. Finally Autosar will be examined with focus on timing protection and applicability in actual development projects.

In open jet wind tunnels with high blockage ratios a sharp rise in drag is observed for models approaching the nozzle exit plane. The physical background for this rise in drag will be analyzed in the paper. Starting with a basic analysis of the dependencies of the effect on model and wind tunnel properties, the key parameters of the problem will be identified. It will be shown using a momentum balance and potential flow theory that interaction between model and nozzle exit can result in significant tunnel-induced gradients at the model position. In a second step, a CFD-based investigation is used to show the interaction between nozzle exit and a bluff body. The results cover the whole range between open jet and closed wall test section interaction. The model starts at a large distance from the nozzle, then moves towards the nozzle, enters the nozzle and is finally completely inside the nozzle.

We are the first to report about a micromachined flow sensor directly integrated in the Common Rail injection nozzle body between the double guidance and the tip of the nozzle. The thermal measurement principle is chosen, because it enables a very precise and fast detection of gaseous and liquid mass flows. Additionally, the velocity field in the nozzle is only slightly influenced by the integration of the sensor in the nozzle body due to the negligible height of the sensitive layer. For a hot film anemometer, a high pressure stable ceramic substrate can be used, fabricated in a low cost batch process. The technology, to fabricate the sensor, as well as the first flow measurements, carried out at a high pressure test set up, are presented.

BMW, DaimlerChrysler, Motorola and Philips present their joint development activity related to the FlexRay communication system that is intended for distributed applications in vehicles. The designated applications for powertrain and chassis control place requirements in terms of availability, reliability and data bandwidth that cannot be met by any product currently available on the market under the testing conditions encountered in an automobile. A short look back on events so far is followed by a description of the protocol and its first implementation as an integrated circuit, as well as its incorporation into a complete tool environment.

This paper describes the results of a joint development program focussing on the introduction of the new generation of Pt/Rh-technology for current and future emission standards as a cost effective alternative to the in serial Pd/Rh based exhaust gas concepts. In the initial phase of the program combinations of Pd- and Pt-based three-way catalyst technologies were evaluated on vehicles equipped with a 8 cylinder engine. One goal in this portion of the study was to achieve technical equivalence between a viable Pd-based technology and the new Pt/Rh technology in the underfloor position at lower precious metal loading. A combination of a close-coupled Pd/Rh technology and the new Pt/Rh in the underfloor position was able to meet the emission targets at significant lower costs of the system after a catalyst aging that resembles more than 100.000 km of vehicle German highway driving.

Permanently increasing software complexity of today's electronic control units (ECUs) makes testing a central and significant task within embedded software development. While new software functions are still being developed or optimized, other functions already undergo certain tests, mostly on module level but also on system and integration level. Testing must be done as early as possible within the automotive development process. Typically ECU software developers test new function modules by stimulating the code with test data and capturing the modules' output behavior to compare it with reference data. This paper presents a new and systematic way of testing embedded software for automotive electronics, called MTest. MTest combines the classical module test with model-based development. The central element of MTest is the classification-tree method, which has originally been developed by the DaimlerChrysler research department.

Suspension systems have a major effect on the handling characteristics of a vehicle, particularly ride comfort and handling safety, and thus substantially determine its character. Their increasing significance is reflected by the greater value that ever more demanding customers attribute to the properties ride comfort and handling safety. Now that the potential of conventional, passive systems is largely exhausted, adaptive and active systems open up new possibilities, e.g.: the suppression of rolling and pitching movements, handling and ride height independent of load, handling characteristics and ride height adaptable to situation and customer requirement. The DaimlerChrysler active suspension and damping system (Active Body Control – ABC) manages to resolve the conflict of aims between handling safety and ride comfort which afflicts conventional fixed suspension systems, and as a result offers greater freedom of layout whilst enabling optimization of both target criteria.

In view of tight emission standards, injection strategies to reduce raw HC-emissions during the cold starting of port fuel injected engines are evaluated in this study. The relevance of spray targeting and atomization is outlined in the first part of this paper. The foundation and performance of different injector concepts with respect to spray characteristics are discussed. Laboratory experiments demonstrate that concepts relying on auxiliary energy, such as air-assistance, fuel heating and injection at elevated system pressures, are capable of producing spray droplet sizes in the SMD-range of 25μm. For future injection strategies aimed at the compliance of SULEV emission levels, this target value is considered to be essential. In the second part of this paper, emission tests of selected injector concepts are carried out using a V6-3.2I ULEV engine operated both in a vehicle and on a test bench.

With increasing levels of driving automation, the perception provided by automotive environment sensors becomes highly safety relevant. A correct assessment of the sensors’ perception reliability is therefore crucial for ensuring the safety of the automated driving functionalities. There are currently no standardized procedures or guidelines for demonstrating the perception reliability of the sensors. Engineers therefore face the challenge of setting up test procedures and plan test drive efforts. Null Hypothesis Significance Testing has been employed previously to answer this question. In this contribution, we present an alternative method based on Bayesian parameter inference, which is easy to implement and whose interpretation is more intuitive for engineers without a profound statistical education. We show how to account for different environmental conditions with an influence on sensor performance and for statistical dependence among perception errors.

Driven by the growing internet and remote connectivity of automobiles, combined with the emerging trend to automated driving, the importance of security for automotive systems is massively increasing. Although cyber security is a common part of daily routines in the traditional IT domain, necessary security mechanisms are not yet widely applied in the vehicles. At first glance, this may not appear to be a problem as there are lots of solutions from other domains, which potentially could be re-used. But substantial differences compared to an automotive environment have to be taken into account, drastically reducing the possibilities for simple reuse. Our contribution is to address automotive electronics engineers who are confronted with security requirements. Therefore, it will firstly provide some basic knowledge about IT security and subsequently present a selection of automotive specific security use cases.

The anti-lock braking system (ABS) is a widespread driver assistance system which allows a short braking distance while simultaneously maintaining the stability and steerability of the car. Vehicles with electric single-wheel drive offer many possibilities of improving the energy efficiency and the braking performance during ABS braking. In this paper, two different ways of including the electric machines in the ABS are analyzed in detail: the damping of torsional drive train vibrations in combination with recuperation and the dynamic split of the braking torque, where the hydraulic braking torque is kept constant and the dynamic modulation of the braking torque is performed by the electric machines. The damping algorithm is developed on the basis of a linearized model of the drive train and the tire-road contact by using state feedback and pole placement methods. Simulation results with a detailed multi-body system show the effectiveness of the control algorithms.

Advanced safety features and new services in connected cars depend on the security of the underlying vehicle functions. Due to the interconnection with the outside world and as a result of being an embedded system a modern vehicle is exposed to both, malicious activities as faced by traditional IT world systems as well as physical attacks. This introduces the need for utilizing hardware-assisted security measures to prevent both kinds of attacks. In this paper we present a survey of the different classes of hardware security devices and depict their different functional range and application. We demonstrate the feasibility of our approach by conducting a case study on an exemplary implementation of a function-on-demand use case. In particular, our example outlines how to apply the different hardware security approaches in practice to address real-world security topics. We conclude with an assessment of today’s hardware security devices.

ISO 26262 is the actual standard for Functional Safety of automotive E/E (Electric/Electronic) systems. One of the challenges in the application of the standard is the distribution of safety related activities among the participants in the supply chain. In this paper, the concept of a Safety Element out of Context (SEooC) development will be analyzed showing its current problematic aspects and difficulties in implementing such an approach in a concrete typical automotive development flow with different participants (e.g. from OEM, tier 1 to semiconductor supplier) in the supply chain. The discussed aspects focus on the functional safety requirements of generic hardware and software development across the supply chain where the final integration of the developed element is not known at design time and therefore an assumption based mechanism shall be used.