Search Results

The development of future automotive electronic systems requires new concepts in the software architecture, development methodology and information exchange. At Bosch an XML and MSR based technology is applied to achieve a consistent information handling throughout the entire software development process. This approach enables the tool independent exchange of information and documentation between the involved development partners. This paper presents the software architecture, the specification of software components in XML, the process steps, an example and an exchange scenario with an external development partner.

Car Periphery Supervision (CPS) systems comprise a family of automotive systems that are based on sensors installed around the vehicle to monitor its environment. The measurement and evaluation of sensor data enables the realization of several kinds of higher level applications such as parking assistance or blind spot detection. Although a lot of similarity can be identified among CPS applications, these systems are traditionally built separately. Usually, each single system is built with its own electronic control unit, and it is likely that the application software is bound to the controller's hardware. Current systems engineering therefore often leads to a large number of inflexible, dedicated systems in the automobile that together consume a large amount of power, weight, and installation space and produce high manufacturing and maintenance costs.

This paper describes the concept of the Diagnostic System Management DSM which introduces an improved object-oriented software architecture in order to meet the high performance and reliability requirements of automotive On-Board Diagnostic Systems (OBD). DSM handles standard tasks and offers services to integrate diagnostic and control functions. This architecture enables the flexible composition of system-independent, reusable function implementations. Hence a distributed software development and software sharing are supported. The module DSM consists of a Fault Code Memory, an Inhibit Handler, a Validator and a Function Scheduler. Special care has been taken to achieve robustness against EMI effects. Bosch will use DSM in the future powertrain control systems.

In recognition of safety considerations, modern fuel tanks are frequently extremely irregular in shape. This places limits on the application of conventional potentiometric sensors. Required are more universal sensors without mechanically-moving parts. These sensors should also be characterized by especially good resolution and precision in the residual-quantity range, that is, the zero point precision should be of a high order. One type of metal rod can be bent into any of a variety of shapes to provide an effective means of monitoring the fuel level. In this metal rod, the propagation characteristics of a certain type of sound wave, known as bending waves, display major variations according to the level of the surrounding medium: The waves spread more rapidly through the exposed section of the rod than through the area which remains submerged. Thus the rod's characteristic oscillation frequency varies as a function of immersion depth.

Antilock Braking Systems (ABS) and Traction Control Systems (ASR) should ensure maximum stability and steerability even under extreme driving conditions. Since high performance systems additionally improve brake distance and traction within the given physical limits, every vehicle equipped with ABS and ASR offers considerably higher active safety. ABS was introduced into the market by the Robert Bosch GmbH more than ten years ago, and more than 3 million systems have been produced by the end of 1988. Volume production of ASR began in 1987. This paper describes several high-, medium-, and low performance concepts and compares them with regard to safety and performance. Although it seems to be nearly impossible to define a cost/benefit ratio between monetary values and safety, our purpose here is to identify further development strategies through the use of a decision matrix.

In 1978, Bosch was the first supplier on the market to offer full-function antilock braking systems. In 1993, six years will have passed since Bosch delivered the first traction control system for passenger cars. In the meantime, a considerable amount of experience has been gained through ongoing development and testing. This experience enabled us to define the requirements for directional stability, optimum control strategy, maximum usage of the entire spectrum of drive torque intervention possibilities, and optimized hydraulics for automatic brake intervention. The result is Bosch ABS/ASR5, which in now being introduced to the market. This new ABS/ASR family is designed in modules, which offers high flexibility in function and assembly. Systems are available with traction improvement, or with optimized directional stability and traction. Each version is adapted to the needs of the vehicle drive layout, and adaptable to customer requirements.

Control of a car is lost, or considerably reduced, whenever one or more of the wheels exceed the stability limit during braking or accelerating due to excessive brake or drive slip. The problem of ensuring optimum stability, steerability and brake distance of a car during hard braking is solved by means of the well-known Anti-lock Braking System (ABS). The task to guarantee stability, steerability and optimum traction during acceleration, particularly on asymmetrical road surfaces and during cornering maneuvers, is being performed by the traction control system (ASR). Several means to provide an optimum traction control are described, e. g the control of engine torque by influencing the throttle plate and/or the ignition and/or the fuel injection.

Closed loop vehicle control comprising of the driver, the vehicle and the environment is now achieved by the automatic wheel slip control combination of ABS and ASR. To improve directional control during acceleration, the Robert Bosch Corporation has introduced five ASR-Systems into series production. In one system, the electronic control unit works exclusively with the engine management system to assure directional control. In two other systems, brake intervention works in concert with throttle intervention. For this task, it was necessary to develop different highly sophisticated hydraulic units. The other systems improve traction by controlling limited slip differentials. The safety concept for all five systems includes two redundant micro controllers which crosscheck and compare input and output signals. A Traction Control System can be achieved through a number of torque intervention methods.

AUTOSAR (AUTomotive Open System ARchitecture) is a worldwide standard for automotive basic software in line with an architecture that eases exchange and transfer of application software components between platforms or companies. AUTOSAR provides the standardized architecture together with the specifications of the basics software along with the methodology for developing embedded control units for automotive applications. AUTOSAR matured over the last several years through intensive development, implementation and maintenance. Two main releases (R3.2 and R4.0) represent its current degree of maturity. AUTOSAR is driven by so called core partners: leading car manufacturers (BMW, Daimler, Ford, GM, PSA, Toyota, Volkswagen) together with the tier 1 suppliers Continental and Bosch. AUTOSAR in total has more than 150 companies (OEM, Tier X suppliers, SW and tool suppliers, and silicon suppliers) as members from all over the world.

This paper is based on the experiences with Adaptive Cruise Control (ACC) systems at BOSCH. Necessary components (especially range sensor, curve sensors, actuators and display) are described, roughly specified, and their respective strength and weaknesses are addressed. The system overview contains the basic structure, the main control strategy and the concept for driver-ACC interaction. Afterwards the principal as well as the current technical limits of ACC systems are discussed. The consequences on traffic flow, safety and driver behavior are emphasized. As an outlook, development trends for extended functionality are given for the next generation of driver assistance systems.

Safety-critical embedded software has to satisfy stringent quality requirements. One such requirement, imposed by all contemporary safety standards, is that no critical run-time errors must occur. Runtime errors can be caused by undefined or unspecified behavior of the programming language; examples are buffer overflows or data races. They may cause erroneous or erratic behavior, induce system failures, and constitute security vulnerabilities. A sound static analyzer reports all such defects in the code, or proves their absence. Sound static program analysis is a verification technique recommended by ISO/FDIS 26262 for software unit verification and for the verification of software integration. In this article we propose an analysis methodology that has been implemented with the static analyzer Astrée. It supports quick turn-around times and gives highly precise whole-program results.

The new aerial communication protocol “Controller Area Network” (CAN) efficiently supports distributed realtime control in automotive applications. In order to unload CPUs from high-speed message transfer, dedicated CAN hardware handles messages up to the communication object level. In multiplex wiring message rates are one to two orders of magnitude lower, allowing to implement the upper communication level more cost-effectively in software. This reduces CAN interface hardware to bitwise protocol handling only. It may be incorporated even into low-end microcontrollers without significantly increasing chip size. Thus the same CAN protocol supports the entire range of serial automotive communication, matching implementation costs to requirements at each performance level.

In recent times, the software portion and the complexity of software within automotive electronic control units have grown noticeably and continue to grow. In order to get a grip on the software complexity and the amount of customer-specific software variants, a modeling concept for a structured and easily extensible software architecture is needed. This concept should efficiently support the formation of variants and code reuse without increasing runtime and memory space overhead. In this paper, we present our approach to such a modeling concept: The object-oriented modeling concept OMOS and its application to signal conditioning of vehicle control systems.

This paper describes the first results from the AutoMoDe project (Automotive Model-based Development), where an integrated methodology for model-based development of automotive control software is being developed. The results presented include a number of problem-oriented graphical notations, based on a formally defined operational model, which are associated with system views for various degrees of abstraction. It is shown how the approach can be used for partitioning comprehensive system designs for subsequent implementation-related tasks. Recent experiences from a case study of an engine management system, specific issues related to reengineering, and the current status of CASE-tool support are also presented.

The car industry has reached a point where electronic systems, which were so far essentially autonomous, begin to grow together to a Car-Wide Web. The main driving force is the demand for more safety, security, and comfort implemented economically. Already various parties are working on control networks. In the long run, vehicle motion and dynamic systems, safety, security, comfort as well as mobile multimedia systems will integrate and reach out for the vision of accident-free, comfortable, and well-informed driving. As a foundation for a Car-Wide Web, Bosch is developing an open architecture called CARTRONIC. The essence of CARTRONIC is to define structuring rules, modeling rules and patterns for total, integrated control of vehicles. The rules and patterns allow the mapping of high-level functions onto several physical implementations, for instance one logical description of functional connections could be created for cars with different equipment packages.

Engine management control systems basically consist of injection and ignition control. Additionally, closed loop control systems incorporating air fuel ratio control, automatic idle speed control and cylinder selective knock control have proven to be essential. To keep the performance stable during the car's lifetime, extensive use is made of self-adaptive strategies. As a new feature of engine management control, the self-adaptive canister purge control improves driveability and prevents the leakage of fuel vapors. To simplify the closed loop control algorithms primarily during transient operation conditions a sophisticated sequential fuel injection is added. The paper presents the aforementioned self-adaptive closed loop control strategies and the MOTRONIC MI. 3 ECU. Future development trends in engine management and drive train control demand powerful communication links like the Controller Area Network (CAN). This requirement and its planned realisation is discussed.

The fuel spray behavior in the near nozzle region of a gasoline injector is challenging to predict due to existing pressure gradients and turbulences of the internal flow and in-nozzle cavitation. Therefore, statistical parameters for spray characterization through experiments must be considered. The characterization of spray velocity fields in the near-nozzle region is of particular importance as the velocity information is crucial in understanding the hydrodynamic processes which take place further downstream during fuel atomization and mixture formation. This knowledge is needed in order to optimize injector nozzles for future requirements. In this study, the results of three experimental approaches for determination of spray velocity in the near-nozzle region are presented. Two different injector nozzle types were measured through high-speed shadowgraph imaging, Laser Doppler Anemometry (LDA) and X-ray imaging.

To meet future CO₂ emissions limits and satisfy the bounds set by exhaust gas legislation reducing the engine displacement while maintaining the power output ("Downsizing") becomes of more and more importance to the SI-engine development process. The total number of cylinders per engine has to be reduced to keep the thermodynamic disadvantages of a small combustion chamber layout as small as possible. Doing so leads to new challenges concerning the mechanical design, the design of the combustion system concept as well as strategies maintaining a satisfying transient torque behavior. To address these challenges a turbocharged 2-cylinder SI engine with gasoline direct injection was designed for research purposes by Weber Motor and Bosch. This paper wants to offer an insight in the design process. The mechanical design as well as the combustion system concept process will be discussed.

In this paper we present the design of a cryogenic platform for new space borne communication payloads. This platform is dedicated to service the operation of a communication payload in a cryogenic environment. In addition, an easy adaptation to any kind of available satellite buses must be reflected by the design of all interfaces. A first experimental demonstrator of this cryogenic platform with HTSC-components is foreseen to be operated on board the International Space Station (ISS) [1]. The paper will present such a new kind of cryogenic platform. The thermal requirements and boundary conditions for the platform development are summarized. A comparison of the typical thermal environment of a communication satellite with the environment of the ISS and is performed. Two different concepts for the design of a cryogenic platform will be presented. A redundancy concept for the provision of cooling power and the thermal control of the cryogenic platform is discussed.