Robert Boschgmbh

Texas Instruments Corporation

Harald Tschentscher

Peter Taufer

Hartmut Schumacher

Michael Ulmer

Jens Otterbach

Gerhard Koelle

Achim Henne

Davor Lukacic

Carsten Gebauer

Andreas Rupp

Bernhard Straub

Bernhard Mattes

Thomas Huber

Peter Ahner

Manfred Ackermann

Martin Eisenhardt

Harald Kazmierczak

Falko Sievers

Wolfgang Jacob

Peter Sautter

Jochen Seibold

Gotthilf Koerner

Alexandre Pierre Palus

Klaus-Peter Mattern

Gerald Nitsche

Torsten Grotendiek

Werner Weber

Stephan Rees

Bernd Stoehr

Berthold Fehrenbacher

Achim Schaefer

Helmut Binder

Simon-Florian Gzerny

Venkata Kishore Gadde

Axel Breitmaier

Hoi-Man Low

Charles Ming-Fong Tsai

Roy M Haley

Thomas Kahnert

Andreas Frey

Christian Wenzel-Benner

In order to detect a faulty error correcting unit () in an embedded system, wherein the error correcting unit () receives output data from a data source () and determines, whether the received data are incorrect, and wherein if the received data are incorrect, the error correcting unit () is expected to correct at least one error within the received data, output the corrected data and manipulate an error vector (), a method and a system (Ia) are suggested that enable to compare the output data of the error correcting unit () with at least one reference data, wherein the at least one reference data originate at least indirectly from the data source (). Both, the error vector () and the result of the comparison are input to a plausibility test in order to decide, whether the error correcting unit () is faulty. According to the result of the plausibility test, a failure vector () is manipulated in order to indicate whether a failure in the error correcting unit () is detected.

Method and system for detecting a failure in an error correcting unit

A method for checking an interface module, the interface module returning to the processor, using a second data message, stored values representing sensor values, after a request for a test by a processor using a data message. Using these firm sensor values, the processor can check the functioning of the interface module and its own algorithm. A safety module, which also picks up the sensor values, also checks its functioning with them, since the safety module is a redundant hardware path to the processor and is used as a plausibility check for the release decision of means of restraint. The interface module is changed into a test mode as soon as it receives the first data message from the processor, and it then suppresses the transmission of the real sensor values which were received from connected sensors.

Method for checking an interface module

A method for testing a memory and a control device having means for a memory test. A destination address of the memory is selected in the process, dependent addresses of the memory are determined from the destination address, and user data at the destination address and the dependent addresses are backed up. Furthermore, the destination address and the dependent addresses are described by test patterns, via which a signature is formed. The backed-up user data of the destination address and the dependent addresses are then restored. Finally, the determined signature is compared with the known setpoint value. In the event of a deviation between the signature and the setpoint value, suitable protective mechanisms are initiated.

Method for testing a memory device, as well as a control device having means for testing a memory

A device for wireless transmission of a deployment signal. The device includes two processors on both the primary side and the secondary side, which exchange data with one another. A high degree of redundancy is thereby achieved. The wireless transmission is preferably carried out as inductive transmission.

Deployment of vehicle safety restraint via wireless trigger signal

A device for monitoring a processor is described. A watchdog simultaneously monitors the system clock, the software base functions and performs a check of the tests of the system components of the processor. If an error is detected, the watchdog communicates this to the processor, an error counter is incremented and at least one device that is connected to the processor is blocked. If the error counter attains a predetermined value, the block is continued until the device of the present invention is deactivated. If an additional error is detected during a blocking time, the blocking time is extended.

Device for monitoring a processor

An interface module is proposed, to which sensors are connected and which is positioned in a control device, it being indicated via an identification input how the sensor data are to be classified by the interface module. In particular, this can be used to distinguish between safety-relevant and safety-irrelevant data. Furthermore, the nature of the data can be identified therewith. This identification input is advantageously designed as a voltage input, the voltage levels being then converted into a bit sequence. The identification input is connected to ground via a resistor, so that, in the case of an unspecified input potential, the voltage level is connected to ground. The interface module has a logic circuit to which voltage comparators are connected, which compare the voltages to reference potentials, and then the logic circuit performs a coding using the bit sequences, as a function of the output signals of the voltage comparators.

Interface module

A control device for a restraining system in a motor vehicle is proposed, a safety switch, which also includes a watchdog, performing the function of a safety switch in the control device. The safety switch monitors sensor signals which are transmitted to the processor of the control device for plausibility and triggers appropriate restraining systems via a time unit for a predefined time period only when the safety switch itself detects a trigger event. On the basis of supplementary data from the sensor signals, the safety switch infers how the sensor signals are to be processed. The safety switch is designed such that it triggers the restraining systems correspondingly assigned to the sensors. When the control device is switched on, the processor performs a test of the safety switch by generating a test signal using the sensors.

Control device for a restraining system in a motor vehicle

In a method of monitoring a voltage supply of a control unit in a motor vehicle, a supply module which provides the voltages is connected to the components of the control unit via a RESET line and the RESET line is tested every time the control unit is started or all monitoring limits of the supply module show no fault again after the faults of the monitored voltages have been filtered. This test occurs by forced periodic pulses which are generated on the basis of a shift in the limits of the monitoring bands of the supply voltages. The reference voltages VREGUL and VREF are kept independent of each other here in order to prevent system perturbations.

Method for monitoring a power supply of a control unit in a motor vehicle

The invention relates to a drive train for a motor vehicle, having an internal combustion engine ( ), having an electric machine ( ), which upon starting of the engine ( ) generates a torque, and having a clutch ( ), which is disposed between the engine ( ) and a gear train ( ) by way of which a torque generated by the engine ( ) can be transmitted to at least one vehicle drive wheel. A mechanism ( ) is provided, which upon starting of the engine can actuate the clutch ( ) in such a way that a first part of the torque generated upon starting of the engine by the electric machine ( ) is transmitted to the at least one vehicle drive wheel, and a second part of the torque generated by the electric machine and sufficient for starting the engine is transmitted to the engine.

Drivetrain for a motor vehicle

A device for controlling firing circuits for restraining devices, a processor and a safety IC for controlling the restraining devices being connectable to the firing circuit control, and the firing circuit control having blocking inputs and blocking registers for the blocking of groups of connectable firing circuits; the processor setting the blocking registers after switching-on (of the device) and logically linking the firing circuit control data of the blocking inputs and the blocking registers with one another, so as to block individual groups of firing circuits. Thus it is especially possible individually to block firing circuits for air bags in dependence upon the degree of occupancy and the classification of the occupants in a vehicle. Setting the blocking inputs and the blocking registers takes place shortly after switching-on (of the device), after function tests of the IC's have been conducted. Besides the blocking inputs for individual control, the firing circuit control also has blocking inputs for blocking all plus and minus output stages.

Device for controlling firing circuits for restraining devices

A method for generating manipulated variables for the direct-axis and cross voltage, respectively, to represent the flux-forming current ID and torque-forming current IQ in field-oriented control of asynchronous machines, taking into account the stator voltage drop and steady-state internal voltage. The steady-state internal voltage is calculated on the basis of reference variables of the currents.

Methods for simplified field-oriented control of asynchronous machines

A device for data transmission between vehicle sensors and a control unit, which is used to decode data telegrams having sensor data from the vehicle sensors and to reformat them into SPI (serial peripheral interface) data telegrams. Furthermore, an interface module of the control unit transmits the SPI data telegrams to the processor of the control unit. By using an alter bit, the processor determines whether to retrieve the newest sensor data or the preceding sensor data. The interface module converts the sensor data in each case into a 10-bit data field of an SPI data telegram, into which the interface module may supplement missing data. By counting out the edges, it is possible for the interface module to recognize the data telegrams from the sensors.

Device for data transmission between vehicle sensors and a processor in a controller

A device and a method are proposed for controlling firing circuits for an element of restraint, individual transistors of the output stages being controlled by bit combinations, and impermissible bit combinations lead to an error message to a processor. In addition, a firing current is measured, in order to estimate a firing energy from it, so that efficient energy management can be carried out. Furthermore, determination of the firing current makes it possible to update a crash protocol as to whether the firing circuit was activated or not. When a voltage of the energy reserve is exceeded, it is further proposed to switch over to pulse operation for operating the output stages. Thereby a greater resistance to short-circuits and a higher efficiency are achieved.

Method and device for controlling firing circuits for restraining devices

A method for controlling gear shifting in a motor vehicle which utilizes a drive assembly that includes an internal combustion engine having an output shaft, a multiple-gear transmission having a transmission input and a transmission output shaft that be selective coupled and uncoupled from one another, a main clutch assembly capable of causing the transmission input shaft and output shaft to be selectively coupled or uncoupled, an electrical machine capable of being selectively coupled to the transmission input shaft via an intermediate transmission, and a control unit for controlling the electrical machine and/or the intermediate transmission during gear shifting, as a function of a standard shift value provided to the transmission along with the operating parameters and the operating states of the components. According to the method, when the operator manipulates the gear shift lever for the main clutch and/or opens the same, a possible standard shift value and its associated transmission ratio (ip) are predicted, and the operating parameters and operating states of the electrical machine and of the control unit are controlled during the gear shift as a function of the possible standard shift value.

Drive assembly and method for controlling a gear shift operation in a drive assembly of a motor vehicle

In order to improve heat dissipation and to reduce parasitic inductivity in an electronic semiconductor module, which has a carrier substrate having an electrically insulating layer, a metal layer in which printed conductors are formed via structuring and which is arranged on the upper side of the insulating layer, and a metal cooling body arranged on the lower side of the insulating layer, and at least one semiconductor component arranged on the carrier substrate, the electrically insulating layer has at least one notch, and at least one terminal face provided on the upper side of the semiconductor component facing away from the carrier substrate is electrically connected to a contact element which is directly connected to the metal cooling body via the notch.

Growing community of inventors

Grossbottwar, Germany

Harald Tschentscher