Method for the prevention of erroneous actuator access in a multifunctional general electronic control system
원문보기
IPC분류정보
국가/구분
United States(US) Patent
등록
국제특허분류(IPC7판)
G05B-019/042
B60G-017/0185
B60G-017/0195
출원번호
US-0550989
(2004-02-27)
등록번호
US-9423783
(2016-08-23)
우선권정보
DE-103 13 409 (2003-03-25)
국제출원번호
PCT/EP2004/050217
(2004-02-27)
§371/§102 date
20060925
(20060925)
국제공개번호
WO2004/086157
(2004-10-07)
발명자
/ 주소
Kohl, Andreas
Kebbel, Christian
출원인 / 주소
CONTINETAL TEVES AG & CO. OHG
인용정보
피인용 횟수 :
0인용 특허 :
30
초록▼
Disclosed is a method for the prevention of erroneous actuator access in a multifunctional general electronic control system wherein the actuator access requirements emanate from different system services (1), a rights management (2), which determines the authorization of actuator access requirement
Disclosed is a method for the prevention of erroneous actuator access in a multifunctional general electronic control system wherein the actuator access requirements emanate from different system services (1), a rights management (2), which determines the authorization of actuator access requirements, a mode of operation control unit (4), and an access management (6) are integrated into the general control system. The rights management (2), in the event of an access requirement by a system service (1), brings about an adjustment or a change of the mode of operation according to predefined rules in consideration of the instantaneous mode of operation of the general system and reports the current mode of operation to the access management (6). Depending on the reported general mode of operation, the access management (6) allows actuation of the actuator by means of the ‘authorized’ system service (1) and processes the actuator access requirements of the system services (1) according to predefined arbitration rules.
대표청구항▼
1. A method for the prevention of erroneous actuator access in a multifunctional general electronic control system wherein actuator access requirements for directing operation of an individual actuator emanate from various different system services (1), the method comprising: receiving actuator acce
1. A method for the prevention of erroneous actuator access in a multifunctional general electronic control system wherein actuator access requirements for directing operation of an individual actuator emanate from various different system services (1), the method comprising: receiving actuator access requirements for directing operation of an individual actuator from at least one of a plurality of different system services;determining authorization of a system service for changing a current mode of operation of the general electronic control system in response to receiving the actuator access requirements for directing operation of the individual actuator from one of the plurality of different system services, wherein the current mode of operation includes one of a normal mode of operation which occurs after termination of a starting phase in the absence of one of an error message and an actuator access requirement by an extraneous or auxiliary system, a starting phase mode of operation which applies until expiration of a predetermined period of time, until a minimum speed is reached for the first time, or until an include diagnosis mode including initial testing routines are completed, a customer software mode of operation which is initiated in a case of an actuator access requirement by an extraneous or auxiliary system, and a failsafe mode of operation indicating the presence of an error message;changing the current mode of operation of the individual actuator according to predefined rules in consideration of the current mode of operation;reporting the current mode of operation;depending on the reported current mode of operation, performing a vertical arbitration step with an access management system including allowing an actuator actuation of the individual actuator only by an authorized system service and blocking access requirements that are not authorized for the current mode; andprocessing with the access management system the actuator access requirements of the system services according to horizontal arbitration rules to determine which of the actuator access requirements is passed to an actuator based on a form of the access requirement including one of an on/off signal, a current signal and a pressure signal, wherein the on/off signal is prioritized over the current signal and the pressure signal. 2. The method according to claim 1, wherein the actuator access requirements are recorded in a memory and sent to an access management sorted according to types of arbitration. 3. The method according to claim 1, wherein one of the actuator access requirements includes a signal for driving the individual actuator is admitted to pass to the individual actuator based on a two-stage arbitration. 4. The method according to claim 3, wherein unauthorized access requirements are determined, eliminated or rejected in a first step depending on the reported current mode of operation, wherein the vertical arbitration is performed to evaluate and select authorized access requirements according to a predefined order of priority of arbitration, wherein, higher priority is given to signals for the failsafe mode when an error is detected and the normal mode of operation is given priority in the absence of a error message. 5. The method according to claim 1, wherein rights of the system services for a change of the current mode of operation are written down in a read-only memory. 6. A general control system for motor vehicles comprising: a rights management system which determines authorization of a system services for changing a current mode of operation of the general control system directing operation of an individual actuator in the event of an actuator access requirement in a current operating mode;a mode of operation control unit (4); andan access management system (6) that receives an actuator access requirement for directing operation of an individual actuator from a rights management system (2) in the event of an access requirement by a plurality of system services that each seek control of the individual actuator (1) based on a vertical arbitration evaluation and brings about an adjustment or a change of the current mode of operation of the individual actuator according to the vertical arbitration evaluation in consideration of the current mode of operation of the general control system and reports the current mode of operation to the access management system (6), and depending on the reported current mode of operation, performs a horizontal arbitration evaluation of an output signal based on the current mode of operation, wherein the output signal is one of an on/off signal, a current signal and a pressure signal and the horizontal arbitration evaluation selects which of the output signals are passed to the individual actuator with the on/off signal given the highest priority over a current signal and a pressure signal;wherein the plurality of system services (1) that originate actuator access requirements include one of basic brake functions (BBF) for a brake-by-wire system (EHB, EMB), wheel slip control functions including at least one of an anti-lock control (ABS), traction slip control (TCS), and driving stability control (ESP), diagnosis functions (DIAG), motor pump control systems (MPA) and interfaces (BUS). 7. The system according to claim 6, wherein at least one further one of the plurality of system services includes one of a customer software (CSW) and steering functions (steer) is integrated into the general control system. 8. The system according claim 6, wherein a distinction is made in the mode of operation control unit for vertical arbitration evaluation between: a normal mode of operation which occurs after termination of a starting phase in the absence of one of an error message and an actuator access requirement by an extraneous or auxiliary system,a starting phase mode of operation which applies until expiration of a predetermined period of time, until a minimum speed is reached for the first time, or until an included diagnosis mode including initial testing routines are completed;a customer software mode of operation which is initiated in a case of an actuator access requirement by an extraneous or auxiliary system, anda failsafe mode of operation indicating the presence of an error message.
연구과제 타임라인
LOADING...
LOADING...
LOADING...
LOADING...
LOADING...
이 특허에 인용된 특허 (30)
Kawabata Kazunobu (4688-1 ; Sobudai 3-chome Zama-shi ; Kanagawa-ken JPX), Actively controlled suspension system with fail-safe operation in response to failure of sensor for monitoring vehicle a.
Struger Odo J. (Chagrin Falls OH) Klimas Edward J. (Lyndhurst OH), Adaptive alarm controller changes multiple inputs to industrial controller in order for state word to conform with store.
Kawabata Kazunobu (Kanagawa JPX), Fail detecting system for electromagnetic actuator and fail-safe system for active suspension system incorporating elect.
Matsuda Toshiro (Kanagawa JPX), Fail-safe system for multiple control systems having at least one common sensor for monitoring common control parameter.
Jackson Douglas O. (Mercer Island WA), Method and apparatus for implementing a databus voter to select flight command signals from one of several redundant asy.
Vaniglia Christopher L. (West Chester OH) Anderson Perry J. (Cincinnati OH) O\Keefe Dennis G. (Cincinnati OH), Method and apparatus for process control.
Reimann Gerd,DEX ; Volkart Asmus,DEX ; Schubert Michael,DEX ; Kraemer Wolfgang,DEX, Method and device for controlling motion parameters representing the movement of a motor vehicle motion quantity.
Corio Lawrence F. ; Brundrett Robert L. ; Ralea Mihai ; Brown Rollin W. ; Garcia Jean Pierre,FRX ; Lauzier Cedrick,FRX, Method to connect and distribute power to an electromechanical braking system.
James Lewis G. (Clarence NY) Burke Valentine L. (East Aurora NY) Poczciwinski Kenneth M. (Cheektowaga NY), Multi-level state language controller for multi-threaded machine control.
Takeuchi Kunihiko (Kawasaki JPX) Baba Fujio (Tokyo JPX) Shimomura Yasuo (Tokyo JPX) Morishige Yuji (Funabashi JPX), Set point change-over circuit for fluid control valves.
※ AI-Helper는 부적절한 답변을 할 수 있습니다.