Search Results

Today's automotive software integration is a static process. Hardware and software form a fixed package and thus hinder the integration of new electric and electronic features once the specification has been completed. Usually software components assigned to an ECU cannot be easily transferred to other devices after they have been deployed. The main reasons are high system configuration and integration complexity, although shifting functions from one to another ECU is a feature which is generally supported by AUTOSAR. The concept of a Virtual Functional Bus allows a strict separation between applications and infrastructure and avoids source code modifications. But still further tooling is needed to reconfigure the AUTOSAR Basic Software (BSW). Other challenges for AUTOSAR are mixed integrity, versioning and multi-core support. The upcoming BMW E/E-domain oriented architecture will require all these features to be scalable across all vehicle model ranges.

The conventional measurements to describe the photometric quality of headlamps usually only comprise the luminous flux and the illuminance (resp. the luminous intensity) in several measuring points given by Type Approval Legislation. Practically, these photometric measurements do not describe the visual impression of a headlamp light distribution sufficiently, neither in lab nor in real street geometry. With the clear outer lens headlamps introduced recently, filament images are projected directly onto the screens or streets, thus giving new impulses to research. Starting from the established photometric practice, other types of measurements and physiological fundamentals will be discussed. The basic tools to make physical measurement and physiological impression comparable, e.g. in terms of homogeneity, are shown.

Dynamic route guidance is a main feature when discussing traffic telematics systems. At the present time, several system concepts are in the development or implementation stage. The key elements of dynamic route guidance systems are illustrated in the following. Two approaches could be used when designing the system architecture: 1. Centralized routing in traffic information centers combined with on-board terminals. 2. Mobile routing by on-board navigation units which use information received from traffic information centers. The different approaches are presented in this paper. The influences on component design and the effects on communication needs are discussed. This leads to the “hybrid” system architecture which is presented including implementation examples.

Vehicle inspection in repair shops is often still based on paper forms. Information Technology (IT) does not yet support the entire inspection process. In this paper, we introduce a small wearable IT device that is controlled by speech and enables service technicians to wirelessly access relevant data and to perform on-site communication. Users can carry this device in a pocket and use a small headset to enter speech and receive audio feedback. This system provides a completely speech-enabled functionality and thus offers a hands-free operation. After showing the applicability of wearable computers in this environment, we developed a proprietary hardware system consisting of a thin-client connected via a Digital Enhanced Cordless Telecommunications (DECT) link to a standard Personal Computer (PC) that runs a speech engine and hosts a database. Several field tests in garages helped us during the evolution of our prototypes where service technicians critiqued the prototypes.

BMW, DaimlerChrysler, Motorola and Philips present their joint development activity related to the FlexRay communication system that is intended for distributed applications in vehicles. The designated applications for powertrain and chassis control place requirements in terms of availability, reliability and data bandwidth that cannot be met by any product currently available on the market under the testing conditions encountered in an automobile. A short look back on events so far is followed by a description of the protocol and its first implementation as an integrated circuit, as well as its incorporation into a complete tool environment.

Connecting microcontrollers, sensors and actuators by several communication systems is state of the art within the electronic architectures of modern vehicles. The communication among these components is widely based on the event triggered communication on the Controller-Area-Network (CAN) protocol. The arbitrating mechanism of this protocol ensures that all messages are transferred according to the priority of their identifiers and that the message with the highest priority will not be disturbed. In the future some mission critical subnetworks within the upcoming generations of vehicle systems, e.g. x-by-wire systems (xbws), will additionally require deterministic behavior in communication during service. Even at maximum bus load, the transmission of all safety related messages must be guaranteed. Moreover it must be possible to determine the point of time when the message will be transmitted with high precision.

A new simulation tool was established and approved by TRW as part of the continuous improvement of the development process. This tool allows the OEM and the system supplier to keep high quality even with further reduced development times. The introduction of the tool in a side air-bag development program makes it possible to ensure high development confidence with a reduced number of vehicle crash tests and late availability of interior component parts.

Time Triggered CAN (TTCAN) is an extension of the well-known CAN protocol, introducing to CAN networks time triggered communication and a system wide global network time with high precision. Time Triggered CAN has been accepted as international standard ISOCD11898-4. The time triggered communication is built upon the unchanged standard CAN protocol. This allows a software implementation of the time triggered function of TTCAN, based on existing CAN ICs. The high precision global time however requires a hardware implementation. A hardware implementation also offers additional functions like time mark interrupts, a stopwatch, and a synchronization to external events, all independent of software latency times. The TTCAN testchip (TTCAN_TC) is a standalone TTCAN controller and has been produced as a solution to the hen/egg problem of hardware availability versus tool support and research.

Many software functions currently available in the engine control units have been developed for several years (decades in some cases), reengineered or adapted due to new requirements, what may add to their inherent complexity an unnecessary complication. This paper deals with the study and implementation of a software reengineering strategy for the embedded domain, which is in transfer from research department to product development, here applied to improve maintainability of flex fuel functions. The strategy uses the SCODE “Essential Analysis”, an approach for the embedded system domain. The method allows to reduce the system complexity to the unavoidable inherent problem complexity, by decomposing the system into smaller sub problems based on its essential physics. A case study was carried out to redesign a function of fuel adaptation. The analysis was performed with the support of a tool, which covers all the phases of the method.

The development of vehicle communication networks is challenged not only by the increasing demand in data exchange and required data rate but also the need to connect the vehicle to external sources for personal connectivity of driver and car to infrastructure applications. Solutions are required to master complexity of in-vehicle communication networks, e.g. diagnostic access, flashing of Electronic Control Units, the data backbone connecting the vehicle domains and the data transfer of cameras. Safety (data transfer) and security (violation) issues of the communication networks gain more importance especially by introducing interfaces to external sources either via mobile devices or by connecting the vehicle to other external sources, e.g. Internet and Car to Infrastructure applications. The Internet Protocol (IP) appears to be an ideal solution to address these challenges, especially in connection with an Ethernet physical layer for fast data transfer.

The release of ISO 26262 is only about three months after the 2011 World Congress. However, there are still some contentious aspects that can introduce challenges or cause a disproportionate effort. In this paper, we will show how to avoid these problems. ISO 26262 provides a detailed method for classifying the Automotive Safely Integrity Level (ASIL) of in-vehicle electronic systems. However, the ASIL value for a specific function/product can vary significantly across the industry. Applying a lower level than the industry norm can cause substantial liability problems. Applying a higher level can initiate an “arms race” with competitors. This is particularly true if there are no vehicle-related reasons for choosing the higher level or if it doesn't make the product any safer. To encourage international harmonization, this paper will define ASIL classifications for the main automotive components. Most functions/products are currently being developed using parts of existing products.

This paper presents the conceptual model and the fundamental mechanisms for software development in the context of the Brite-EuRam project Safety Related Fault Tolerant Systems in Vehicles (nick-named X-By-Wire). The objective of the X-By-Wire project is to achieve a framework for the introduction of safety related fault tolerant electronic systems without mechanical backup in vehicles. To achieve the required level of fault-tolerance, an X-By-Wire system must be designed as a distributed system comprising a number of fault-tolerant units connected by a reliable real-time communication system. For the communication system, the time-triggered TTP/C real-time communication protocol was selected. TTP/C provides fault-tolerance message transfer, state synchronization, reliable detection of node failures, a global time base, and a distributed membership service. Redundancy is used for masking failures of individual processor nodes and hardware peripherals.

The car industry has reached a point where electronic systems, which were so far essentially autonomous, begin to grow together to a Car-Wide Web. The main driving force is the demand for more safety, security, and comfort implemented economically. Already various parties are working on control networks. In the long run, vehicle motion and dynamic systems, safety, security, comfort as well as mobile multimedia systems will integrate and reach out for the vision of accident-free, comfortable, and well-informed driving. As a foundation for a Car-Wide Web, Bosch is developing an open architecture called CARTRONIC. The essence of CARTRONIC is to define structuring rules, modeling rules and patterns for total, integrated control of vehicles. The rules and patterns allow the mapping of high-level functions onto several physical implementations, for instance one logical description of functional connections could be created for cars with different equipment packages.

Signals in Automotive Communication Networks often represent safety relevant information. Therefore, automotive network protocols provide multiple powerful mechanisms for error detection and for error reporting. The objective is to ensure that on average less than one undetected error occurs during the lifetime of a vehicle. This places an upper bound on the residual error probability of the communication network. The determination of this residual error probability requires new methods in order to account for the interaction of the various error detection mechanisms. This paper presents an analysis method that has been developed for the investigation of the CAN protocol. This comprehensive investigation distinguishes two types of errors that contribute most significantly to the residual error probability of the CAN protocol. Errors of one type transform stuffbits into information bits or vice versa, and are related to the use of variable bit stuffing.

This paper presents an object-oriented method customized for a tool-assisted development of car software components. Tough market conditions motivate smart software development. ASCET SD is a tool to generate target code from graphic specifications, avoiding costly programming in C. But ASCET lacks guidelines on what to do, how to do it, in what order, like a fully equipped kitchen without a cooking book. Plans to employ the tool for BMW vehicle software sparked off demand for an adequate, object-oriented real-time methodology. We show how to scan the methodology market in order to adopt an already existing method for this purpose. The result of the adaptation of a chosen method to ASCET SD is a pragmatic version of ROOM, which we call BROOM. We present a modeling guidebook that includes process recommendations not only for the automotive sector, but for real-time software development in general.

The increasing number of local control units in automotive systems led to growing emphasis on developing and using multiplex systems. For reasons of price and robustness the use of asynchronous and slow multiplex systems is preferred. Since the communication volume now reaches critical dimensions in peak load situations during the use of those systems, new concepts on different communication levels have to be developed. Due to the use of many different message types (wide range of message length) and the statistical dependence of the communication behaviour of control units (e.g. question-answer-combinations), the application of standard methodologies is only partly suitable for a performance analysis of automotive multiplex systems.

The increasing complexity of communication protocols for asynchronous multiplex systems requires the use of simulation during the optimisation of these protocols or the integration of other control units. Consideration of realistic communication behaviour of the connected control units is essential for performance analysis of multiplex systems. For a first pass, the use of simple statistical distributions (e.g. Poisson distribution) is suitable to get some simulation results. A better way to get realistic results is the approximation of empirical communication data through the use of more complex statistical distribution (e.g. mixed Erlang distributions). In this paper several approaches for the approximation of empirical data are presented. Beside simple statistical distributions (with one parameter), the use of more complex statistical distributions is discussed and methods for the identification of their parameters are presented.

The environmental impact of automobiles and components is of growing importance both in the public discussion and in the complex decision finding process for future car concepts. Especially more and more conflicts of objectives occur between technical, economical, ecological and political requirements. For a lasting improvement of environmental compatibility and recyclability as an element of the so-called „sustainable development” of automobiles and components, BMW is the first carmaker which has developed quantitative management tools /1, 2/. These component related instruments enable designers in the product development phase to evaluate different component variations practice-oriented and with an ecological perspective in mind. In this endeavor, BMW is placing its bets on „intelligent lightweight construction”, i. e., the ecologically-economically best component solution.

This paper describes the first results from the AutoMoDe project (Automotive Model-based Development), where an integrated methodology for model-based development of automotive control software is being developed. The results presented include a number of problem-oriented graphical notations, based on a formally defined operational model, which are associated with system views for various degrees of abstraction. It is shown how the approach can be used for partitioning comprehensive system designs for subsequent implementation-related tasks. Recent experiences from a case study of an engine management system, specific issues related to reengineering, and the current status of CASE-tool support are also presented.

BMW has introduced new test stands for noise measurements on passenger cars and motorcycles. Information is given on room conditions, machinery equipment, sound levels, frequency ranges and types of measurement. The semi-anechoic room is designed for measuring the sound distribution emitted by a single vehicle. Road influence is simulated by a reflecting floor and a roller-dynamometer. The free field sound distribution in terms of distance and direction is measured in the anechoic room. This room has high-precision installations for sound source identification and noise mapping. The reverberation room serves to measure sound power emitted by the test object. Its second purpose is to subject the bodywork to a high-power external sound source and to measure the sound-deadening effect of the passenger compartment. In conclusion, the presentation provides reports on the initial experience with these test facilities.