Search Results

This paper presents the “Virtual Failure Mode and Effects Analysis (vFMEA)” system, which is a high-fidelity electrical-failure-simulation platform, and applies it to the software verification of an electric power steering (EPS) system. The vFMEA system enables engineers to dynamically inject a drift fault into a circuit model of the electronic control unit (ECU) of an EPS system, to analyze system-level failure effects, and to verify software-implemented safety mechanisms, which consequently reduces both cost and time of development. The vFMEA system can verify test cases that cannot be verified using an actual ECU and can improve test coverage as well. It consists of a cycle-accurate microcontroller model with mass-production software implemented in binary format, analog and digital circuit models, mechanical models, and a state-triggered fault-injection mechanism.

“Virtual Failure Mode and Effects Analysis” (vFMEA), a novel safety-verification method of control software for automotive electronic systems, was proposed to save prototyping cost at verification stage. The proposed vFMEA is system-level FMEA method, which uses virtualized electronic control units (ECUs) consisting of microcontroller models on a microcontroller simulator and a transistor-level circuit models on a circuit simulator. By using the structure, the control software in binary code formats can be verified when a circuit-level fault occurs in the ECU hardware. As an illustrative example, vFMEA was applied to an engine ECU. As a result of short-circuit fault into a driver IC, engine revolution and engine speed decreased. However, the engine continued to operate normally when an open-circuit fault occurred in a capacitor connected in parallel. Effects of the hardware faults in ECU on a vehicle are demonstrated; thereby software verification can be performed using vFMEA system.

Predicting the vibration of a motor gearbox assembly driven by a PWM inverter in the early stages of development is demanding because the assembly is one of the dominant noise sources of electric vehicles (EVs). In this paper, we propose a simulation model that can predict the transient vibration excited by gear meshing, reaction force from the mount, and electromagnetic forces including the carrier frequency component of the inverter up to 10 kHz. By utilizing the techniques of structural model reduction and state space modeling, the proposed model can predict the vibration of assembly in the operating condition with a system level EV simulator. A verification test was conducted to compare the simulation results with the running test results of the EV.

The flight area of drones and other unmanned aerial vehicles (UAVs) had been highly restricted but has been relaxing, including flights beyond the scope of sight. Deregulation without aircraft-reliability improvement increases the risk of accidents. However, demanding high reliability for all aircraft leads to an increase in the price of the aircraft. Therefore, if airspace restrictions are relaxed for more reliable aircraft, the cost of higher reliability and its benefits can be balanced. This will improve efficiency and optimize cost-effectiveness. The purpose of this proposal is to balance the cost of aircraft-reliability improvement (which allows flight to continue in the event of a failure) and its advantages. Specifically, the author proposes rules that apply more relaxed airspace restrictions to UAVs with higher FCLs (Flight Continuity Possibility Levels) and stricter airspace restrictions to those with lower FCLs.

We have developed a model-based control for the air intake system in a variable valve engine, employing total engine simulation, the response surface method and multi-objective optimization scheme. In our technique, we performed the simulation model tuning and validation, followed by the creation of a dataset for the polynomial regression analysis of the charging efficiency. A D-optimal design, robust least squares method, and likelihood-ratio test were demonstrated to yield a robust and accurate control model. Coupling the total engine simulator with a genetic algorithm, model based calibration for optimal valve timing stored in lookup table was carried out under multiple objectives and restrictions. The reliability of the implementation control model, which considers the effect of gas dynamics in the intake system, was confirmed using a model-in-the-loop simulation.

The purpose of this study is to develop model-based methodologies which employ thermo-fluid dynamic engine simulation and multiple-objective optimization schemes for engine control and calibration, and to validate the reliability of the method using a dynamometer test. In our technique, creating a total engine system model begins by first entirely capturing the characteristics of the components affecting the engine system's behavior, then using experimental data to strictly adjust the tuning parameters in physical models. Engine outputs over the full range of engine operation conditions as determined by design of experiment (DOE) are simulated, followed by fitting the provided dataset using a nonlinear response surface model (RSM) to express the causal relationship among engine operational parameters, environmental factors and engine output. The RSM is applied to an L-jetronic® air-intake system control logic for a turbocharged engine.

The increasing number of controllable parameters in modern engine systems leads to complicated and enlarged engine control software. This in turn has led to dramatic increases in software development time and costs in recent years. Model-based control design seems to be an effective way to reduce development time and costs. In the present study, we have developed model-based methodologies for the engine calibration process using an engine cycle simulation technique combined with a regression analysis of engine responses. From the results it was clear that the engine cycle simulation technique was useful in the engine calibration process, if the empirical parameters included in physical models were adjusted at typical sampling-points in several engine speeds and loads. The cycle simulation produced a multi-dimensional MBT map, and a response surface method was employed in the modeling of the engine map dataset using a polynomial equation.

The concept of a “controller grid”, which makes effective use of computational resources distributed on a network while guaranteeing real-time operation, is proposed and applied to realize highly advanced control. It facilitates the total optimization of a plant control and achieves the high efficiency that is not acquired by individual plant optimization. To realize this concept, migration of a control task customized to be executed on one particular microcontroller to another microcontroller is necessary while strictly observing the required response time. Two techniques to meet this requirement are proposed: “task migration” for a control system and “real-time guaranteed scheduling of task migration and execution”. The effectiveness of the controller grid is assessed by applying it in experiments with electronic-throttle-body (ETB) advanced control.

The increasing number of controllable parameters in modern engine systems has led to increasingly complicated and enlarged engine control software. This in turn has created dramatic increases in software development time and cost. Model-based control design seems to be an effective way to reduce development time and costs and also to enable engineers to understand the complex relationship between the many controllable parameters and engine performance. In the present study, we have developed model-based methodologies for the engine calibration process, employing engine cycle simulation and regression analysis. The reliability of the proposed method was investigated by validating the regression model predictions with measured data.

Highly automated driving systems have a responsibility to keep a vehicle safe even in abnormal conditions such as random or systematic failures. However, creating redundancy in a system to respond to failures increases the cost of the system, and simple redundancy cannot detect systematic failures because some systematic failures occur in each system at the same time. Systematic failures in automated driving systems cannot be verified sufficiently during the development phase due to numerous patterns of parameters input from outside the system. A safety concept based on a “safety sustainer” for highly automated driving systems is proposed. The safety sustainer is designed for keeping a vehicle in a safe state for several seconds if a failure occurs in the system and notifying the driver that the system is in failure mode and requesting the driver to take over control of the vehicle.