Continental Teves, Ag and Company Ohg

Itt Manufacturing Enterprises, Inc.

Bernhard Giers

Robert Schmidt

Helmut Fennel

Michael Zydek

Thorsten Ullrich

Bernhard Kant

Jochen Burgdorf

Peter Volz

Jürgen Böhm

Joachim Nell

J&uuml;rgen B&ouml;hm

Jochen Führer

Oliver Hoffmann

Stefan Stölzl

Rainer Oehler

Thomas Kranz

Stefan St&ouml;lzl

Peter Willimowski

Thomas Sticher

Hermann Esselbrugge

Ralf Junge

Herman Esselbrugge

Thomas Pröger

Stephan STÖLZL

An integrated microprocessor system for safety-critical control systems, comprising at least two microprocessor system modules each comprising at least one processor core, a read/write memory and a memory protection unit, and a read-only memory which is jointly assigned to the processor cores of the microprocessor system modules. Each of the microprocessor system modules executes a main program and a monitoring program which may comprise a plurality of subprograms. If the memory protection unit detects unauthorized operations by one of the programs for accessing a separate address area (A, B) of another program, then the respective memory protection unit assigns a separate address area (A, B) of the read/write memory to the main program and to the monitoring program.

Integrated microprocessor system for safety-critical control systems including a main program and a monitoring program stored in a memory device

Disclosed is a device for influencing the driving dynamics of a vehicle with an electronic brake system. The device includes a brake actuator for adjusting a brake torque at least one wheel brake of the vehicle. The brake torque can be determined in a torque distributing device according to a yaw torque requirement. A first control unit can be activated in the presence of a critical driving condition as is used to determine a first yaw torque requirement due to driving dynamics control. A management device () has a second control unit, which can be activated in the presence of a subcritical driving condition, and a second yaw torque requirement (R:D_GM) can be determined by the second control unit due to driving dynamics control, and the second yaw torque requirement (R:D_GM) can be sent to the torque distributing device (), and an activated state of the first control unit a signal (I:EBS_Status; R: D_GM; R:[S, S, . . . ]) can be sent from the electronic brake system () to the management device (), which causes deactivation of the second control unit.

Device and method for driving dynamics control in a vehicle

In a method of operating a microprocessor system provided with safety functions, which comprises two or more processor cores () and periphery elements () on a common chip carrier, to which the cores can have access for write or read operations, a distinction is made between algorithms for safety-critical functions and algorithms for comfort functions. Further, a microprocessor system appropriate for implementing the method, and the use of the same, has process cores connected to periphery elements () by way of bus systems (), and bus driver circuits () can transmit bus information from one bus to another with the provision of at least one address comparator ().

Method, microprocessor system for critical safety regulations and the use of the same

The present invention describes an electronic circuit arrangement with a motor vehicle control adapted to be activated by a current/voltage supply, wherein the motor vehicle control or the current/voltage supply for the motor vehicle control is connected to an activation unit for the independent activation of the motor vehicle control, and the motor vehicle control can be switched on or off by the activation unit, and it also describes the use thereof for the control and/or monitoring of electronic or electrohydraulic brake systems. Also described is a system wherein leakage of a pressure reservoir is monitored and the pressure reservoir is replenished by means of a filling device as soon as the pressure drops below a defined limit value during the temporally limited activation.

System for connecting a motor vehicle controller

The present invention relates to a device for controlling electromagnetically operable valves of an electrohydraulic brake system for motor vehicles of the 'brake-by-wire' type having an electronic control or regulation unit that comprises at least one valve driver stage. In order to ensure maximum possible availability of the electronically controlled system functions, especially with a view to achieving a short stopping distance and a sufficient degree of vehicle stability regardless of the vehicle type or of whether the vehicle is loaded or unloaded, according to the present invention, the control and regulation unit includes two additional valve driver stages associated with which is a first and a second group of valves, the said driver stages being used to disable the first or the second group when malfunction occurs.

Device for controlling electromagnetically operated valves

The invention discloses methods and control systems for controlling an electronically controllable brake actuating system for automotive vehicles, with a depressurized pressure medium supply reservoir, with at least one pressure source which can be controlled by an electronic control unit. The pressure source is used to apply pressure to the wheel brakes of the vehicle, with pressure sensors and pressure control valves being associated with the wheel brakes. The pressure control valves are controllable in an analog manner by means of an electric variable in dependence on the differential pressure applied to them.

Method and control system for controlling an electronically regulated brake actuating system

A microprocessor system for safety-critical control operations includes at least three central units which are preferably located jointly on one chip and execute the same program. Further, there is provision of read-only memories and random-access memories with additional memory locations for test data, input and output units and comparators which check the output signals of the central units for correlation. The central units are interconnected by way of bus systems and bypasses which enable the central units to jointly read and process the existing data, including the test data and commands, according to the same program. The central units are extended by redundant periphery units into two complete control signal circuits and are interconnected in such a manner that, upon failure, the faulty central unit is identified by a majority decision and an emergency operation function is maintained.

Microprocessor system for safety-critical control systems

A method for operating a multi-cylinder internal combustion engine having gas exchange valves which are variably adjustable with respect to the valve opening characteristics either directly electromagnetically or by way of an electrohydraulic valve actuation system which includes several electromagnetic valves. For adaptation of all gas exchange valves to a desired valve opening characteristics, the electromagnetic valves are operated cylinder-selectively in the operation of the internal combustion engine by means of variable actuating voltages and/or actuating currents.

Method for operating an internal combustion engine

A circuit arrangement for a safety-critical control system, such as ABS, TCS, ASMS, brake-by-wire, etc., has a dual-circuit or multiple-circuit design, and each circuit includes a complete microprocessor system that processes the input data redundantly and delivers an error identification signal (FAIL) when an error or a discrepancy between the redundantly produced data processing results occurs. Upon error detection, there is a transition to an emergency operation mode where either a circuit is disconnected or the actuator activation of both circuits is assumed by the intact microprocessor system. Each of the two systems is equipped with peripherals of its own, comprised of signal detection, actuator activation, and energy supply.

Circuit configuration for a motor vehicle control system

An electromechanical brake system, particularly for motor vehicles, with a pedal simulator and brake modules is disclosed. A central module is also provided. The connection between the aforesaid modules can be provided by a data bus. The central module evaluates the braking request signals from a sensor device and checks them for errors. Also, a central module supplies and appropriate desired braking value based on the braking request and possibly higher functions such as ABS or ASR. The desired braking value is then conveyed on to the brake module, which then determines the corresponding control signals for the actuators, which interact with the wheels in order to brake the vehicle as the driver requires.

Electromechanical brake system

A microprocessor system for safety-critical control operations includes three central units which are located jointly on one chip and execute the same program. Further, there is provision of read-only memories and random-access memories, input and output units, and comparators which check the output signals of the central units for correlation. The central units are interconnected by way of bus systems and bypasses which enable the central units to jointly read and execute the existing data and commands according to the same program. The memory capacity of the read-only and the random-access memories in total amounts to at least 200% compared to the memory required for a non-redundant system. The memory locations are distributed among the three systems, for example, in a ratio of 100:50:50. The central units are extended by redundant periphery components to provide two complete control signal circuits and are interconnected so that, in case of a failure, the faulty central unit can be identified by a majority decision, and a change-over to an emergency operation mode can take place.

Growing community of inventors

Frankfurt-am-Main, Germany

Bernhard Giers