Search Results

Multicore processor are well established in classical and tablet personal computers for some year. Such processors use more then one central core for computation and allow to integrate more computational power with smaller costs. However more than 90% of all processors worldwide are not placed in classical IT but are empedded in bigger systems like in modern vehicles or airplanes. Such systems face a very high demand in terms of safety, security an reliability which hinders the use of multicores in such systems. The funded project ARAMiS faces these demands and has the goal to enable the usability of multicore systems in the domains automotive and avionics, as well as later also railway. ARAMiS is the basis for higher traffic safety, traffic efficiency and comfort.

The trend towards even more sophisticated driver assistance systems and growing automation of driving sets new requirements for the robustness and availability of the involved automotive systems. In case of an error, today it is still sufficient that safety related systems just fail safe or silent to prevent safety related influence of the driving stability resulting in a functional deactivation. But the reliance on passive mechanical fallbacks in which the human driver taking over control, being inevitable in such a scenario, is expected to get more and more insufficient along with a rising degree of driving automation as the driver will be given longer reaction time. The advantage of highly or even fully automated driving is that the driver can focus on other tasks than controlling the car and monitoring it’s behavior and environment.

Electronic Control Units of safety critical systems require constant monitoring of the hardware to be able to bring the system to a safe state if any hardware defects or malfunctions are detected. This monitoring includes memory checking, peripheral checking as well as checking the main processor core. However, checking the processor core is difficult because it cannot be guaranteed that the error will be properly detected if the monitor function is running on a processing system which is malfunctioning. To circumvent this issue, several previously presented monitoring concepts (e.g. SAE#2006-01-0840) employ a second external microprocessor to communicate with the main processor to check its integrity. The addition of a second microcontroller and the associated support circuitry that is required adds to the overall costs of the ECU, increases the size and creates significant system complexity.

This paper describes how a safety-oriented software development could look like as soon as an appropriate standard exists which is applicable for the automotive industry. Such a standard is currently being developed which is a tailoring of the safety standard IEC61508. The IEC61508 is generic and not specific for any industry. It allows tailoring of the complete safety lifecycle for specific domains. This paper focuses mainly on the software lifecycle of the evolving standard for the automotive industry. With regard to the development process the objectives of each phase are explained and it is described how these can be achieved by using certain techniques and measures.

Strategies for weight reduction have driven the noise treatment advanced developments with a great success considering the already mastered weight decreases observed in the last years in the automotive industry. This is typically the case for all soft trims parts. In the early 2010's a typical european B-segment car soft trims weights indeed 30 to 40% less than in the early 2000's years. The main driver behind such a gap has been to combine insulation and absorption properties on a single part while increasing the number of layers. This product-process evolution was conducted using a significant improvement in the simulation capacities. In that sense, several studies presenting very good correlation results between Transmission Loss measurements and finite elements simulations on dashboard or floor insulators were presented. One may consider that those kinds of parts have already achieved a considerable improvement in performance.

This paper deals with the correction of aerodynamic interference effects taking place between the nozzle of an open jet wind tunnel and a test model. In order to deduce correct aerodynamic coefficients these interference effects have to be allowed for in the determination of the correct wind tunnel speed. In open jet wind tunnels basically two different methods are used to determine the tunnel speed. One is the so-called nozzle-method, utilizing the pressure difference down the nozzle to determine the nozzle exit velocity or tunnel speed. The other procedure is the so-called plenum-method, where the pressure difference between the settling chamber and the surrounding plenum chamber of the test section is measured and used. In this paper it is shown that both methods yield a systematic error, since the velocity distribution in the nozzle differs from the velocity distribution in an unbounded stream measured at the same distance from the model.

In open jet wind tunnels with high blockage ratios a sharp rise in drag is observed for models approaching the nozzle exit plane. The physical background for this rise in drag will be analyzed in the paper. Starting with a basic analysis of the dependencies of the effect on model and wind tunnel properties, the key parameters of the problem will be identified. It will be shown using a momentum balance and potential flow theory that interaction between model and nozzle exit can result in significant tunnel-induced gradients at the model position. In a second step, a CFD-based investigation is used to show the interaction between nozzle exit and a bluff body. The results cover the whole range between open jet and closed wall test section interaction. The model starts at a large distance from the nozzle, then moves towards the nozzle, enters the nozzle and is finally completely inside the nozzle.

GTL (Gas-To-Liquid) fuel is well known to improve tailpipe emissions when fuelling a conventional diesel vehicle, that is, one optimized to conventional fuel. This investigation assesses the additional potential for GTL fuel in a GTL-dedicated vehicle. This potential for GTL fuel was quantified in an EU 4 6-cylinder serial production engine. In the first stage, a comparison of engine performance was made of GTL fuel against conventional diesel, using identical engine calibrations. Next, adaptations enabled the full potential of GTL fuel within a dedicated calibration to be assessed. For this stage, two optimization goals were investigated: - Minimization of NOx emissions and - Minimization of fuel consumption. For each optimization the boundary condition was that emissions should be within the EU5 level. An additional constraint on the latter strategy required noise levels to remain within the baseline reference.

More and more high-level algorithms are emerging to improve the existing systems in a car. Often these algorithms only need a platform with a bus connection and some resources such as CPU time and memory space. These functions can easily be integrated into existing systems that have free resources. This paper describes some encapsulation techniques and mechanisms that can be used in the automotive domain. The discussion also takes into account the additional resources consumed on the microcontroller to meet these requirements and by the software to implement the encapsulation mechanisms. Overviews of some general concepts of software-architectures that provide encapsulation are also shown.

This paper proposes end-to-end protection mechanisms to be added to a generic FlexRay network in order to achieve fault detection and integrity levels sufficient for a SIL3 fail safe communication system. The mechanisms are derived from the random hardware failure modes to be considered for communication controllers according to IEC 61508. Mechanisms provided by the FlexRay protocol are pointed out. Additional features necessary to fulfil the requirements are discussed. It is shown how to calculate the failure rate probabilities of the CRC used as a safety code with respect to EN 50159.

The increased pressure for power, space, and cost reduction in automotive applications together with the availability of high performance, automotive qualified multicore microcontrollers has lead to the ability to engineer Domain Controller ECUs that can host several separate applications in parallel. The standard automotive constraints however still apply, such as use of AUTOSAR operating system, support for legacy code, hosting OEM supplied code and the ability to determine warranty issues and responsibilities between a group of Tier 1 and Tier 2 vendors who all provide Intellectual Property to the final production ECU. Requirements for safety relevant applications add even more complexity, which in most current approaches demand a reconfiguration of all basic software layers and a major effort to redesign parts of the application code to enable co-existence on the same hardware platform. This paper outlines the conflicting requirements of hosting multiple applications.

Hydromechanical sheet forming (AHU®) is an innovative production process with interesting applications, possibilities and potential for the cost-effective manufacture of automobile body parts, particularly with regard to the use of new and improved steels. The targeted, component-specific use of hydro-mechanical sheet forming in automobile construction promises to deliver outstanding results from both a technological and economic point of view.

Electronic Control Units of safety critical systems require constant monitoring of the hardware to be able to bring the system to a safe state if any hardware defects or malfunctions are detected. This monitoring includes memory checking, peripheral checking as well as checking the main processor core. However, checking the processor core is difficult because it cannot be guaranteed that the error will be properly detected if the monitor function is running on a processing system which is malfunctioning. To circumvent this issue, several previously presented monitoring concepts (e.g. SAE#2006-01-0840) employ a second external microprocessor to communicate with the main processor to check its integrity. This paper will present a concept which maps the functions of the external monitoring unit into an internal second processing core which are frequently available on modern, 32bit, monolithic, dual-core microcontrollers.

The German funded project ARAMiS included work on several demonstrators one of which was a multicore approach on large scale software integration (LSSI) for the automotive domain. Here BMW and Audi intentionally implemented two different integration platforms to gain both experience and real life data on a Hypervisor based concept on one side as well as using only native AUTOSAR-based methods on the other side for later comparison. The idea was to obtain figures on the added overhead both for multicore as well as safety, based on practical work and close-to-production implementations. During implementation and evaluation on one hand there were a lot of valuable lessons learned about multicore in conjunction with safety. On the other hand valuable information was gathered to make it finally possible to set up a cost model for estimation of potential overhead generated by different integration approaches for safety related software functions.

In ride comfort as well as driving dynamics, the behavior of the vehicle is affected by several subsystems and their properties. When analyzing the suspension, especially the characteristics of the main spring and damper but also rubber bushings are of main importance. Still, the properties of the different components are dependent on the present operating conditions. Concerning rubber bushings, several effects have already been investigated, e.g. dependencies of the transfer function of frequency, amplitude or load history. In this context influences of changes in temperature are often neglected. However, in the following research, the focus specifically lies on determination and analysis of the temperature dependency of rubber bushings. For this purpose, initially the relationship between properties of pure rubber and rubber bushings is described, which serves as a basis for correlating respective temperature dependencies.

Advanced safety features and new services in connected cars depend on the security of the underlying vehicle functions. Due to the interconnection with the outside world and as a result of being an embedded system a modern vehicle is exposed to both, malicious activities as faced by traditional IT world systems as well as physical attacks. This introduces the need for utilizing hardware-assisted security measures to prevent both kinds of attacks. In this paper we present a survey of the different classes of hardware security devices and depict their different functional range and application. We demonstrate the feasibility of our approach by conducting a case study on an exemplary implementation of a function-on-demand use case. In particular, our example outlines how to apply the different hardware security approaches in practice to address real-world security topics. We conclude with an assessment of today’s hardware security devices.

With the introduction of the ISO26262 automotive safety standard there is a burden of proof to show that the processing elements in embedded microcontroller hardware are capable of supporting a certain diagnostic coverage level, depending on the required Automotive Safety Integrity Level (ASIL). The current mechanisms used to provide actual metrics of the Built-in Self Tests (BIST) and Lock Step comparators use Register Transfer Level (RTL) simulations of the internal processing elements which force faults into individual nodes of the design and collect diagnostic coverage results. Although this mechanism is robust, it can only be performed by semiconductor suppliers and is costly. This paper describes a new solution whereby the microcontroller is synthesized into a large Field Programmable Gate Array (FPGA) with a test controller on the outside.

The object of this study is a new chain tensioner with two labyrinth seals. For the simulation of chain tensioners within the framework of multi-body dynamics, a physically orientated model to describe the fluid dynamics of the labyrinth seals is derived. The easiest way to describe labyrinth seals is to use maps obtained from measurements. As this is very time-consuming, methods of 1D and 2D fluid-mechanics are used in this work to model the labyrinth seals. The seals are characterized by physically motivated parameters e.g. coefficients of resistance or friction. As these parameters can be derived from geometric data, a very good forecast feasibility without experimental investigations is provided. For high accuracy simulations model parameters can be refined by experimental data. As many and highly complex parameters have to be identified, this refinement is very time-consuming and requires lots of experiments.

The lightweight construction strategies that are demanded by the automobile industry are being employed more and more. These strategies lead to the increasing importance of the forming method and types of materials used. Especially forming technologies based on liquid media have the potential to meet these demands. These forming technologies make it possible to produce parts that have both, more complex geometries and optimized characteristics. This forming technology constitutes an intelligent process management including the significant materials parameters and behavior, the simulation and some new developments especially for the optimization of the quality and the cycle time. Hydromechanical sheet forming (AHU®) is an alternative production (forming) process, with very interesting results and developments for the manufacture of specific automobile components.

The reference pressures are determined in automotive wind tunnels by measurement of pressures and pressure differences at upstream positions along the wind tunnel nozzle. For closed wall wind tunnels usually the so called nozzle method is used, where the volume flux is calculated from a pressure difference measured at the nozzle contour and a calibration factor determined in the empty test section. For open jet wind tunnels a choice is available between nozzle and plenum method. For the plenum method the reference static pressure is taken from the plenum chamber and the dynamic pressure also refers to the plenum conditions. The static reference pressure in closed wall tunnels is calculated by subtracting the dynamic pressure from the total pressure in the settling chamber. In this paper, the definitions and the differences between the two methods are discussed in detail.