Search Results

Dynamic route guidance is a main feature when discussing traffic telematics systems. At the present time, several system concepts are in the development or implementation stage. The key elements of dynamic route guidance systems are illustrated in the following. Two approaches could be used when designing the system architecture: 1. Centralized routing in traffic information centers combined with on-board terminals. 2. Mobile routing by on-board navigation units which use information received from traffic information centers. The different approaches are presented in this paper. The influences on component design and the effects on communication needs are discussed. This leads to the “hybrid” system architecture which is presented including implementation examples.

Vehicle inspection in repair shops is often still based on paper forms. Information Technology (IT) does not yet support the entire inspection process. In this paper, we introduce a small wearable IT device that is controlled by speech and enables service technicians to wirelessly access relevant data and to perform on-site communication. Users can carry this device in a pocket and use a small headset to enter speech and receive audio feedback. This system provides a completely speech-enabled functionality and thus offers a hands-free operation. After showing the applicability of wearable computers in this environment, we developed a proprietary hardware system consisting of a thin-client connected via a Digital Enhanced Cordless Telecommunications (DECT) link to a standard Personal Computer (PC) that runs a speech engine and hosts a database. Several field tests in garages helped us during the evolution of our prototypes where service technicians critiqued the prototypes.

Connecting microcontrollers, sensors and actuators by several communication systems is state of the art within the electronic architectures of modern vehicles. The communication among these components is widely based on the event triggered communication on the Controller-Area-Network (CAN) protocol. The arbitrating mechanism of this protocol ensures that all messages are transferred according to the priority of their identifiers and that the message with the highest priority will not be disturbed. In the future some mission critical subnetworks within the upcoming generations of vehicle systems, e.g. x-by-wire systems (xbws), will additionally require deterministic behavior in communication during service. Even at maximum bus load, the transmission of all safety related messages must be guaranteed. Moreover it must be possible to determine the point of time when the message will be transmitted with high precision.

The development of vehicle communication networks is challenged not only by the increasing demand in data exchange and required data rate but also the need to connect the vehicle to external sources for personal connectivity of driver and car to infrastructure applications. Solutions are required to master complexity of in-vehicle communication networks, e.g. diagnostic access, flashing of Electronic Control Units, the data backbone connecting the vehicle domains and the data transfer of cameras. Safety (data transfer) and security (violation) issues of the communication networks gain more importance especially by introducing interfaces to external sources either via mobile devices or by connecting the vehicle to other external sources, e.g. Internet and Car to Infrastructure applications. The Internet Protocol (IP) appears to be an ideal solution to address these challenges, especially in connection with an Ethernet physical layer for fast data transfer.

This paper presents the conceptual model and the fundamental mechanisms for software development in the context of the Brite-EuRam project Safety Related Fault Tolerant Systems in Vehicles (nick-named X-By-Wire). The objective of the X-By-Wire project is to achieve a framework for the introduction of safety related fault tolerant electronic systems without mechanical backup in vehicles. To achieve the required level of fault-tolerance, an X-By-Wire system must be designed as a distributed system comprising a number of fault-tolerant units connected by a reliable real-time communication system. For the communication system, the time-triggered TTP/C real-time communication protocol was selected. TTP/C provides fault-tolerance message transfer, state synchronization, reliable detection of node failures, a global time base, and a distributed membership service. Redundancy is used for masking failures of individual processor nodes and hardware peripherals.

Signals in Automotive Communication Networks often represent safety relevant information. Therefore, automotive network protocols provide multiple powerful mechanisms for error detection and for error reporting. The objective is to ensure that on average less than one undetected error occurs during the lifetime of a vehicle. This places an upper bound on the residual error probability of the communication network. The determination of this residual error probability requires new methods in order to account for the interaction of the various error detection mechanisms. This paper presents an analysis method that has been developed for the investigation of the CAN protocol. This comprehensive investigation distinguishes two types of errors that contribute most significantly to the residual error probability of the CAN protocol. Errors of one type transform stuffbits into information bits or vice versa, and are related to the use of variable bit stuffing.

Tapping of one or more torques (ranges 10 Nm and 60 Nm) on the steering column for the purpose of servo control must satisfy high accuracy requirements on the one hand and high safety requirements on the other hand. A suggestion for developing a low-cost solution to this problem is described below: Strain gages optimally satisfy both these requirements: However, for cost reasons, these are not applied directly to the steering column but to a prefabricated, flat steel rod which is laser welded to the torque rod of the steering column. The measuring direction of the strain gages is under 45° to the steering column axis. The strain gages are either vacuum metallized onto the support rod as a thin film or laminated in a particularly low-cost way by means of a foil-type intermediate carrier.

A significant portion of communication in Automotive Networks consists of signals, which are vital to the safety of the vehicle. In addition to requirements resulting from the actual transfer of information an Automotive Communication Protocol has to incorporate properties which ensure operational safety even in presence of errors. Based upon a discrimination into reversible errors and irreversible failures, defect nodes have to be determined and subsequently disconnected from the network. In this paper proper schemes for error detection, report, recovery and confinement are presented.

The new aerial communication protocol “Controller Area Network” (CAN) efficiently supports distributed realtime control in automotive applications. In order to unload CPUs from high-speed message transfer, dedicated CAN hardware handles messages up to the communication object level. In multiplex wiring message rates are one to two orders of magnitude lower, allowing to implement the upper communication level more cost-effectively in software. This reduces CAN interface hardware to bitwise protocol handling only. It may be incorporated even into low-end microcontrollers without significantly increasing chip size. Thus the same CAN protocol supports the entire range of serial automotive communication, matching implementation costs to requirements at each performance level.

The SAE J2716 SENT (Single Edge Nibble Transmission) Protocol has entered production with a number of announced products. The SENT protocol is a point-to-point scheme for transmitting signal values from a sensor to a controller. It is intended to allow for high resolution data transmission with a lower system cost than available serial data solution. The SAE SENT Task Force has developed a number of enhancements and clarifications to the original specification which are summarized in this paper.

Additional future requirements for automobiles such as improved vehicle dynamics control, enhanced comfort, increased safety and compact packaging are met by modern electrical steering systems. Based on these requirements the new functionality is realized by various additional electrical components for measuring, signal processing and actuator control. However, the reliability of these new systems has to meet the standard of today's automotive steering products. To achieve the demands of the respective components (e.g. sensors, bus systems, electronic control units, power units, actuators) the systems have to be fault-tolerant and/or fail-silent. The realization of the derived safety structures requires both expertise and experience in design and mass production of safety relevant electrical systems. Beside system safety and system availability the redundant electrical systems also have to meet economic and market requirements.

The new generation of drive-by-wire systems currently under development has demanding requirements on the electronic architecture. Functions such as brake-by-wire or steer-by-wire require continued operation even in the presence of component failures. The electronic architecture must therefore provide fault-tolerance and real-time response. This in turn requires the operating system and the communication layer to be predictable, dependable and composable. It is well known that this properties are best supported by a time-triggered approach. A consortium consisting of German and French car manufacturers and suppliers, which aims at becoming a working group within the OSEK/VDX initiative, the OSEKtime consortium, is currently defining a specification for a time-triggered operating system and a fault-tolerant communication layer.1 The operating system and the communication layer are based on applicable interfaces of the OSEK/VDX standard.

To satisfy the increasing demand for automotive safety a warning system (WARN) to support drivers has been developed. The basic idea is to transmit safety-related information from one vehicle to surrounding vehicles by direct wireless communication. To ensure user-acceptance of the system different strategies have been developed in order to provide only relevant information to a specific driver. The strategies rely on a comparison of the received alert messages with the current driving situation. Simulations show a significant safety-improvement due to the system if at least 10 percent of all vehicles are equipped with the system.

Actual research results in the automotive field show that there is a big potential in increasing active and passive safety by implementing intelligent driver assisting systems. Realizing such safety related system functions requires an electronic system without mechanical or hydraulic backup to de-couple the human interface from the vehicle functions, e.g., steering and braking. Safety critical functions without mechanical backup enforce new requirements in system design. Any faulty behavior of a component within the system must not lead to a malfunction of the overall system. Consequently in the system design fault-tolerance mechanisms in real time must be introduced. Active replication of a functional node is a proper solution to guarantee this real time fault-tolerance. Redundancy management of the functional nodes can be implemented by fail-silent replicas, i.e. a node behaves correctly or does not produce any output at all.