DE102006037126A1 - Drive system for a drive unit of a motor vehicle - Google Patents

Abstract

The invention relates to a drive system for a drive unit of a motor vehicle, having a control unit (100, 400, 500) which has a functional level (3), a function monitoring level (4) and a power output stage (9, 9 ') for controlling the Drive unit or the drive unit associated with actuators or sensors (2).
The object of the invention is to present a drive system with high availability with good fault detection and data security.
This object is achieved according to the invention in that the power output stage (9; 9 ') of the control unit (100; 400; 500) can be operated in accordance with an emergency running torque (Mnot) if an emergency operation device (31, 29) detects an error in the data transmission of a desired torque (Msoll_BKM) detects.

Description

The The invention relates to a drive system for a drive unit Motor vehicle according to the preamble of claim 1.

From the still unpublished DE 10 2005 025 994 a method for operating an electrical machine with an electrical drive system is known, which provides a plurality of operating modes of the electric machine and performs a monitoring of an operating variable of the electric machine and / or the drive system. An emergency mode is started when the monitor detects an error that requires activation of an emergency mode. Furthermore, the method can allow additional torque-influencing interventions independently of the torque request of the driver and perform fault monitoring of these interventions.

From the publication DE 102 51 095 A1 a method for operating an electrical machine is known, with a drive system, wherein an operating variable of the electrical machine and / or the drive system is monitored, and wherein the permissibility of an actual torque of the electric machine is checked and an error reaction is initiated in the event of inadmissibility of the actual torque. The permissibility of the actual torque is preferably checked in such a way that an allowable torque is formed from a desired torque and predefined limit values for the desired torque, and that the actual torque is permissible if its deviation from the permissible torque does not exceed a certain amount. The invention can be used to monitor an electrical machine used as a starter / generator in a motor vehicle.

The monitoring of control units of a drive system of a drive unit is generally carried out as a three-level monitoring concept. Such a surveillance concept is from the document DE 44 38 714 A1 known. It describes a method and a device for controlling the drive power of a vehicle with a microcomputer having at least two mutually independent planes, wherein a first level performs the control functions and a second level performs the monitoring functions. A third level is a control level which controls the surveillance level and thus the microcomputer.

task The invention is a drive system with high availability to be displayed with good error detection and data security.

These The object is achieved by the Characteristics of claim 1 solved.

According to the invention this Task solved by that the power output stage of the control unit in accordance with a Notlaufmoments is operable when an emergency running a Error in the data transfer detects a desired torque.

One Error in the data transfer is typically an interruption of data transmission. But others too Errors, such as in the carried checksum or an error in the message counter (Message count corresponds to the previous message or dodges more as +1 from the previous message) are possible. When Data communications equipment In the following, a data bus input, a data bus output or a combination of both. The associated data bus is typically formed as a serial data bus or as a CAN data bus.

in the Error case, the power output stage according to the invention in accordance with operated an emergency running torque. This is the drive unit in set a defined state. This will ensure that the drive turns into a harmless one Operating state is located. In this way, the drive unit continue to operate if an error occurs. Thereby will the availability of Drive unit increased. this leads to also to an increased Availability of the drive unit associated overall system.

In an embodiment is a data transmission device for the Receiving a desired torque provided, which can be acted upon an emergency running device is formed so that in the emergency running device, the output of a Emergency running torque can be triggered is when the data transmission device no Target torque is received. The data transmission device So it is able to trigger the output of an emergency running torque. Receives the Data communications equipment no setpoint torque, so the missing setpoint torque is due to the emergency running torque replaced. This has the advantage that the drive system can continue operate. With it increased the availability of the drive system and the drive unit.

The Notlaufmoment is preferably formed from a target axle torque, which in turn is formed from the signal of an accelerator pedal. This will be calculated from the target axis torque a target torque of the drive unit becomes. This target torque of the drive unit is called emergency running torque output.

In one embodiment, actuators or Sensors of an internal combustion engine in accordance with this emergency torque can be controlled. This makes it possible to prevent erroneous inadmissible control of the drive unit without disabling the drive of the drive unit. This increases the availability of the drive unit and the entire drive system.

In an embodiment is a target axle torque or a target torque of the drive unit limited to the value of an allowable moment associated with it and from the first moment comparator to a data transmission device and / or the emergency running device can be output when the first torque comparator detects that target axle torque or torque of the drive unit the permissible one assigned to him Moment exceeds. This sets the moment to a non-critical and permissible value limited.

In an embodiment is from the first moment comparator is an invalid value or shutdown signal to a data transmission device and / or Emergency running devices can be output, if a target axle torque or a Target torque of the drive unit associated with him permissible torque longer than exceeds a definable debounce time. About one Invalid value or a shutdown signal it is possible a drive unit, a control unit and / or other safety-related Disable facilities. This measure is especially then he wishes, if the driver system determines that there is a detected error over a can not remedy a tolerable period of time. This prevents that a fault of one device of the drive system is on others Affects facilities.

In an embodiment a second moment comparator is provided, by means of which a remedy can be triggered, when the second torque comparator detects that an actual torque supplied to it the drive unit over him an emergency running device supplied Target torque of the drive unit via exceeds a definable tolerance range. In this way may be inadmissible high actual torque can be detected. The initiation of a remedy can prevent damage and a legal one Operating state of the drive unit can be ensured. For example a remedy, that above a speed no moment may be made more (implementation in an internal combustion engine by injection quantity limitation). In order to may be inadmissible high actual torque can be prevented.

In an embodiment is the second torque comparator an emergency running torque as the desired torque fed, if the emergency device has an error in the data transmission of the setpoint torque is detected. So that's the second comparator too then a review of the Perform actual moments when the target torque was not transmitted or incorrectly transmitted. At a Message interruption of the transmitted from the data transmission device target torque will be over the emergency running device from the output data of the first comparator formed emergency torque (result of the first comparator converted on crankshaft torque) and the second comparator instead with the faulty / missing target torque of the data transmission device fed with this emergency torque. In this way is also in the emergency case another monitoring from nominal torque to actual torque active. This is very important to one Incorrect operation of Recognize drive unit and turn off if necessary.

In an embodiment the control unit is associated with an internal combustion engine, wherein an incoming driver request torque processed in the control unit and a resulting axis desired torque can be passed on to a hybrid control unit is. This is a distributed system can be displayed, in which the controller the actuators in local proximity takes place to the actuators (because, for example, the power electronics incl. Control is located directly on the machine). In this case are no cables for the machine is necessary, but it can also power rails instead be used. These are power busbars To make rigid tracks that are inexpensive to manufacture and robust against heat, humidity, dirt and mechanical stress.

The Converting driver torque into a desired axle torque has the advantage that this axis target torque of the type and extent of available Drive units and the gear ratios of the drivetrain independently is. So can also different internal combustion engines via a hybrid control unit be coordinated.

If the conversion of the driver's desired torque in a target axle torque in the control unit an internal combustion engine takes place, is the axis target torque even with sole operation of this internal combustion engine is available and is even in the absence or failure of a hybrid control unit usable.

The Passing on to a hybrid control unit allows for coordination of several drive units outside the control unit of the internal combustion engine perform and so the control unit of the internal combustion engine from these tasks to relieve.

In one embodiment, in the hybrid control unit from the target axle torque single ne setpoint torques for driven drive units can be formed and these individual setpoint torques can be forwarded by the hybrid control unit to the control units of the drive units to be controlled. This allows central coordination of all the drive units to be controlled.

In an embodiment stand the control units of the drive units to be controlled such with the hybrid controller in connection that the actual moments of the drive units of the Control units of the drive units via a data transmission device can be forwarded to the hybrid control unit. This is the hybrid control unit in capable of proper implementation to monitor the specifications and, if necessary, intervene regulatively.

Further details and embodiments of a drive system are the still unpublished DE 10 2005 025 994 can be removed, in which a drive system for an electric machine and a method for operating an electrical machine with an electric drive system will be described. These are therefore not explained here.

Further Advantages and embodiments will become apparent from the dependent claims and the descriptions. Showing:

1 a schematic representation of an embodiment of a drive system according to the invention with a control unit for an internal combustion engine,

2 a schematic representation of an embodiment of a drive system according to the invention with multiple control units,

All in the 1 and 2 illustrated devices and other components of the control unit can equally be designed as an electronic component as a functionality or storage area of a computer module, as software or similar.

1 shows the internal structure of an embodiment of a control unit 100 an internal combustion engine. This control unit 100 an internal combustion engine, for example, in a drive system for a hybrid drive, as in 2 is shown used. The control unit 100 has a functional level 3 and a functional monitoring level 4 on.

From an accelerator pedal 1 receives the control unit 100 Information about the accelerator pedal position. This accelerator pedal position can be assigned to a driver's desired torque M_driver. The accelerator pedal 1 gives the information about the accelerator pedal position to the control unit 100 further. The control unit 100 forms from it in a facility 5 the functional level 3 a setpoint axis torque Msoll_Ax. The device 5 gives the target axle torque Msoll_Ax to a comparator 12 further.

Likewise receives the function monitoring level 4 the control unit 100 the information about the accelerator pedal position of the accelerator pedal 1 , In a facility 10 forms the function monitoring level 4 from this a maximum permissible axle torque Mzul_Ax. The device 10 gives the maximum permissible axle torque Mzul_Ax to the comparator 12 further.

In the comparator 12 is the permissible axle torque Mzul_Ax with the in the device 5 compared formed target axle torque Msoll_Ax. It is checked whether the target axle torque Msoll_Ax is less than or equal to the device 10 formed maximum permissible axle torque Mzul_Ax. The resulting information of the comparator 12 are sent to a data transmission device 15 and at emergency running facilities 29 and 30 passed.

Is the target axle torque Msoll_Ax less than or equal to the set-up 10 formed maximum permissible axle torque Mzul_Ax, so the target axle torque Msoll_Ax to a data transmission device 15 and at emergency running facilities 29 and 30 passed.

The data transmission device 15 gives that in the control unit 100 formed target axle torque Msoll_Ax via a data line 110 out. In the in 2 illustrated embodiment sends the control unit 100 over this data line 110 the target axle torque Msoll_Ax to a hybrid control unit 300 ,

Is the setpoint axle torque Msoll_Ax greater than that in setup 10 formed maximum permissible axle torque Mzul_Ax, so gives the comparator 12 this information to the data transmission device 15 , The data transmission device 15 gives this information as a shutdown command over the data line 110 out.

If the setpoint axle torque Msoll_Ax is greater than the maximum permissible axle torque Mzul_Ax and the fault does not last longer than a definable debounce time, then the setpoint axle torque Msoll_Ax is limited to the maximum permissible axle torque Mzul_Ax and to the emergency running devices 29 and 30 output.

In one embodiment, existing signs of the moments are taken into account. is For example, the value for the setpoint axis torque Msoll_Ax = +100 and the value for the maximum permissible axis torque Mzul_Ax, = +80, so +80 is output, the value for the setpoint axis torque Msoll_Ax = -100 and the value for the maximum permissible axis torque Mzul_Ax, = +80, 0 is output, if the value for the setpoint axis torque Msoll_Ax = -100 and the value for the maximum permissible axis torque Mzul_Ax, = -80, then -80 is output.

If the setpoint axle torque Msoll_Ax is greater than the maximum permissible axle torque Mzul_Ax for a period of time which is longer than the debounce time, then an invalid value is sent to the emergency mode devices 29 and 30 output and / or a reset of the control unit 100 carried out.

The emergency running device 30 calculated from the specifications of the accelerator pedal supplied to it 1 a replacement value for the target torque Msoll_BKM, which is referred to below as the emergency running torque Mnot.

For converting the specifications of the accelerator pedal 1 (Driver request torque M_driver, target axle torque Msoll_Ax or similar) into a setpoint torque Msoll_BKM, the gear ratios of all active drive units must be known. Only with this information can the conversion of the accelerator pedal settings to Msoll_BKM be done with a defined factor. For this purpose, the transmission is preferably connected via a defined gear with the electric machines. Alternatively, a detection of the transmission ratios can be provided for each active drive unit.

Via a data line 330 becomes the control unit 100 a target torque Msoll_BKM supplied to the internal combustion engine. In the in 2 illustrated embodiment of a drive system according to the invention, this target torque Msoll_BKM the internal combustion engine in the hybrid control unit 300 from the from the control unit 100 output set torque Msoll_Ax formed.

The data line 330 Gives the target torque Msoll_BKM for the internal combustion engine to a data transmission device 27 the functional level 3 the control unit 100 ,

That of the data transmission device 27 detected target torque Msoll_BKM the internal combustion engine is via an emergency running device 31 to a torque converter 8th passed. The torque converter 8th sets the target torque Msoll_BKM the internal combustion engine in control commands for a power output stage 9 around. The power output stage 9 takes the from the control commands of the torque converter 8th predetermined state and thus operates its associated actuators and / or sensors 2 in accordance with the torque converter 8th given control commands.

The emergency running device 31 is designed so that it detects whether the data transmission device 27 works without errors. Typical error is a message interruption. Detects the emergency running device 31 an error in the data transmission device 27 So it gives instead of the data from the communication device 27 that you from the emergency running device 30 supplied emergency torque Mnot to the torque converter 8th out.

The emergency running device 31 gives the emergency running torque Mnot to the torque converter 8th and thus to the power output stage 9 and the actuators and / or sensors 2 further. The actuators and / or sensors 2 are operated in accordance with the emergency running torque Mnot.

From the actuators and / or sensors 2 the internal combustion engine information about the actual state of the internal combustion engine to the control unit 100 returned. In the in 1 illustrated embodiment, this information of the device 16 the functional level 3 and the facility 17 the functional monitoring level 4 fed. From the information about the actual state of the internal combustion engine is in the device 16 a current actual torque Mist_BKM of the internal combustion engine formed and a comparator 32 fed.

Also in the decor 17 From the information about the actual state of the internal combustion engine, a current actual torque Mist_BKM of the internal combustion engine is formed. Subsequently, the institution performs 17 the actual torque Mist_BKM of the internal combustion engine is a comparator 22 and the comparator 32 to.

The comparator 32 compare that in the decor 16 the functional level 3 formed actual torque Mist_BKM the internal combustion engine with the in the device 17 the functional monitoring level 4 formed actual torque Mist_BKM the internal combustion engine. At equality in the two facilities 16 and 17 formed values, the comparator outputs the actual torque Mist_BKM the internal combustion engine. The values are considered equal if they deviate from one another by less than a predefinable tolerance range. In this way, differences can be made between functional level 3 and functional monitoring level 4 discovered and functional level errors 3 or the functional monitoring level 4 be recognized.

The comparator 22 compares the actual torque Mist_BKM of the internal combustion engine supplied to it with the setpoint torque Msetpoint_BKM for the internal combustion engine. This is the data line 330 it has to be moment Msoll_BKM for the internal combustion engine to a data transmission device 28 the functional monitoring level 4 the control unit 100 , This data transmission device 28 Gives the target torque Msoll_BKM for the internal combustion engine via the emergency running device 29 to the comparator 22 , Detects the comparator 22 that the setpoint torque Msetpoint_BKM and the actual torque Mist_BKM of the internal combustion engine deviate from one another beyond a tolerance, the comparator then conducts 22 via a data line 23 Corrective actions.

Between the data transmission device 28 and the comparator 22 is an emergency running device in the illustrated embodiment 29 arranged.

The emergency running device 29 is designed so that it detects whether the data transmission device 28 works without errors. Detects the emergency running device 29 an error in the data transmission device 28 that will be the comparator 22 supplied target torque Msoll_BKM by one of the emergency running device 29 calculated emergency torque Mnot replaced.

Preferably, the remedy is that of the comparator 12 over the emergency running device 29 the comparator 22 supplied axle torque Msoll_Ax converted into an emergency torque Mnot and the internal combustion engine is supplied as a replacement target torque.

In an embodiment of the control unit 100 is between the emergency running device 29 and the comparator 22 provided an additional device. In this device, the setpoint torque Msoll_BKM is provided with a tolerance range. A comparison value lying within the tolerance range is considered equal. This tolerance range can be symmetrical or asymmetrical about the desired torque. The tolerated in the device target torque Msoll_BKM is then the comparator 22 fed.

In the 1 illustrated embodiment of a drive system has a control plane 24 on. Detects the control plane 24 an error in the question and answer communication of the control unit 100 , So it sends a shutdown signal to the power amplifier 9 and turn it off.

In the 2 illustrated embodiment of a drive system according to the invention shows an example for others a drive system that is able to coordinate several different drive units.

In 2 is a drive system shown that includes multiple control units. There is a control unit 100 for an internal combustion engine, a control unit 400 for a first electric machine and a control unit 500 provided for a second electric machine. The cooperation of these control units is controlled by a hybrid control unit 300 coordinated. In the illustrated embodiment, the hybrid control unit 300 , the control unit 400 for the first electric machine and the control unit 500 for the second electric machine in a structural unit 200 integrated.

From an accelerator pedal 1 receives the control unit 100 Information about the accelerator pedal position and forms a target axle torque Msoll_Ax. The control unit 100 Gives this target axis torque Msoll_Ax via a data connection 110 to the hybrid control unit 300 further.

The hybrid control unit 300 forms from the target axle torque Msoll_Ax a target torque Msoll_BKM the internal combustion engine, a target torque Msoll_E1 the first electric machine and a target torque Msoll_E2 the second electric machine.

The desired torque Msoll_BKM of the internal combustion engine is via a data connection 330 to the control unit 100 forwarded for the internal combustion engine. The control unit 100 the internal combustion engine controls in accordance with this target torque Msoll_BKM. The control unit 100 for its part gives the actual torque Mist_BKM of the internal combustion engine via a data connection 120 to the hybrid control unit 300 ,

The setpoint torque Msetpoint_E1 of the first electric machine is connected via a data connection 310 to the control unit 400 forwarded for the first electric machine. The control unit 400 the first electric machine controls in accordance with this setpoint torque Msetpoint_E1. The control unit 400 in turn gives the actual torque Mist_E1 of the first electric machine via a data connection 410 to the hybrid control unit 300 ,

The setpoint torque Msetpoint_E2 of the second electric machine is connected via a data connection 320 to the control unit 500 forwarded for the second electric machine. The control unit 500 controls the second electric machine in accordance with this target torque Msoll_E2. The control unit 500 in turn gives the actual torque Mist_E2 of the second electric machine via a data connection 510 to the hybrid control unit 300 ,

The structure of a control unit 400 . 500 for an electromechanical drive can be comparable to 1 be educated. This is different to the 1 only one setpoint Msoll_E1 or Msoll_E2 the facilities 27 . 5 . 10 and 28 fed and in a comparator 12 with an associated allowable torque Mzul and in a comparator 22 compared with an actual torque Mist_E1 or Mist_E2.

Claims (10)

Drive system for a drive unit of a motor vehicle, comprising: - a control unit associated with the drive unit ( 100 ; 400 ; 500 ), which has a functional level ( 3 ) and a functional monitoring level ( 4 ), - a power amplifier ( 9 ; 9 ' ) for controlling the drive unit or the drive unit assigned actuators or sensors ( 2 ), characterized in that the power output stage ( 9 ; 9 ' ) of the control unit ( 100 ; 400 ; 500 ) is operable in accordance with an emergency running torque (Mnot), if an emergency running device ( 31 . 29 ) detects an error in the data transmission of a setpoint torque (Msoll_BKM). Drive system according to Claim 1, characterized in that a data transmission device ( 27 . 28 ) is provided for the reception of a setpoint torque (Msoll_BKM), which on an emergency running device ( 31 . 29 ) is formed einwirkbar, so that in the emergency running device ( 31 . 29 ) the output of a Notlaufmomentes (Mnot) is triggered when the data transmission device ( 27 . 28 ) no target torque is received. Drive system according to claim 1, characterized in that actuators or sensors ( 2 ) of an internal combustion engine in accordance with this emergency torque (Mnot) can be controlled. Drive system according to Claim 1, characterized in that a first torque comparator ( 12 ), in which a setpoint axle torque (Msetpoint_Ax) or a setpoint torque of a drive unit (Msetpoint_E1, Msetpoint_E2) can be limited to the value of an admissible torque (Mzul_Ax; Mzul) assigned to it and to a data transmission device ( 15 ) and the emergency running device ( 29 . 30 ) is outputable when the first moment comparator ( 12 ) recognizes that the setpoint axle torque (Msetpoint_Ax) or setpoint torque of the drive unit (Msetpoint_E1, Msetpoint_E2) exceeds the permissible torque (Mzul_Ax; Mzul) assigned to it. Drive system according to claim 4, characterized in that of the first moment comparator ( 12 ) an invalid value or switch-off signal to a data transmission device ( 15 ) and emergency equipment ( 29 . 30 . 31 ) can be output if a setpoint axle torque (Msoll_Ax) or a setpoint torque of the drive unit (Msetpoint_E1, Msetpoint_E2) exceeds an allowable torque (Mzul_Ax; Mzul) assigned to it for longer than a definable debounce time. Drive system according to claim 1, characterized in that a second moment comparator ( 22 ) is provided by which a remedial action can be triggered when the second moment comparator ( 12 ) recognizes that an actual torque (Mist_BKM) of the drive unit supplied to it via an emergency running device ( 29 ) supplied target torque (Msoll_BKM, Mnot) exceeds the drive unit beyond a definable tolerance range addition. Drive system according to claim 6, characterized in that the second moment comparator ( 22 ) an emergency running torque (Mnot) can be supplied as a desired torque when the emergency running device ( 29 ) detects an error in the data transmission of the setpoint torque (Msoll_BKM). Drive system according to one of Claims 1 to 6, characterized in that the control unit ( 100 ) is assigned to an internal combustion engine, wherein in the control unit ( 100 ) an incoming driver request torque (M_driver) can be processed and an axle nominal torque (Msoll_Ax) that can be formed from this is transmitted to a hybrid control unit ( 300 ) can be passed on. Drive system according to claim 7, characterized in that in the hybrid control unit ( 300 ) from the desired axle torque (Msoll_Ax) individual target torques (Msoll_BKM, Msoll_E1, Msoll_E2) for drive units to be controlled are formed and these individual setpoint moments (Msoll_BKM, Msoll_E1, Msoll_E2) of the hybrid control unit ( 300 ) to the control units ( 100 . 400 . 500 ) of the drive units to be controlled can be relayed. Drive system according to claim 8, characterized in that the control units ( 100 . 400 . 500 ) of the drive units to be controlled in such a way with the hybrid control unit ( 300 ), that the actual moments (Mist_BKM, Mist_E1, Mist_E2) of the drive units from the control units ( 100 . 400 . 500 ) of the drive units via a data transmission device ( 15 ) to the hybrid control unit ( 300 ) can be passed on.