DE102021113037A1 - Vehicle data communication system for the transmission of vehicle data - Google Patents

Abstract

The present invention relates to an IP box (integrated powertrain control and/or control box for controlling and/or monitoring the powertrain system) for recording, managing, playing and/or storing data relating to passenger data and/or data relating to a Energy management of the vehicle and for data exchange with a charging station and/or a vehicle battery, in particular to be able to charge the vehicle battery, for recording, managing, playing and/or storing data relating to passenger data and/or data relating to energy management of the vehicle, the data between an MC box (Media and Communication Box) and a BSC box (Body & Safety Control Box), in particular only bidirectionally interchangeable if this data flows with the help of a security ECU (Security ECU), so that the security ECU, on the basis of at least one security gate, receives any data compression f can be established, the IP box also comprising a first IP module, which controls, regulates and/or monitors a first set of administrative functions and/or safety aspects, such as vehicle monitoring and/or driver health monitoring, within a vehicle, and, in particular at the same time, the IP module controls, regulates and/or monitors a second set of management aspects within a vehicle, such as battery management and/or a battery state of charge, as well as a vehicle data communication system for transmitting vehicle data between processing boxes of the system and a method for Operating a vehicle data communication system for the transmission of vehicle data between processing boxes of the system by means of a vehicle data communication system

Description

The present invention relates to an IP box (integrated powertrain controller and/or control box for controlling and/or monitoring the powertrain system) for recording, managing, playing and/or storing data relating to passenger data and/or data relating to a Energy management of the vehicle and for data exchange with a charging station and/or a vehicle battery, in particular to be able to charge the vehicle battery, for recording, managing, playing and/or storing data relating to passenger data and/or data relating to energy management of the vehicle, the data between an MC box (Media and Communication Box) and a BSC box (Body & Safety Control Box), in particular only bidirectionally interchangeable if this data flows with the help of a security ECU (Security ECU), so that the security ECU, on the basis of at least one security gate, receives any data compression f can be established, the IP box also comprising a first IP module, which controls, regulates and/or monitors a first set of administrative functions and/or safety aspects, such as vehicle monitoring and/or driver health monitoring, within a vehicle, and, in particular at the same time, the IP module controls, regulates and/or monitors a second set of management aspects within a vehicle, such as battery management and/or a battery state of charge.

The present application also relates to a vehicle data communication system for transmitting vehicle data between processing boxes of the system and a method for operating a vehicle data communication system for transmitting vehicle data between processing boxes of the system by means of a vehicle data communication system according to the respective preambles of claims 1 and 10. Previous vehicle data communication systems were constructed in this way, among other things that individual "boxes", i.e. processing units for processing signals and/or data, were directly connected to the vehicle with corresponding sensors or connection points. Also, in previous configuration structures of a vehicle data communication system, such a system is involved, which is actually constructed with haptic units, ie units that are constructed, for example, in the form of an "Apple Box" relative to an Apple TV. These had to be mounted separately in or on the vehicle and were therefore very space-demanding and difficult to coordinate with one another. Corresponding boxes for certain functions are often provided by different manufacturers and have therefore been difficult to configure. A corresponding configuration of a tuning also required a very high computing and memory capacity, a corresponding control unit, for example a corresponding control chip.

The application presented here would therefore like to eliminate the above-mentioned disadvantages, so that it is an object of the present invention to set up a vehicle data communication system for transmitting vehicle data in a particularly inexpensive and simple manner, which requires little installation space and achieves a particularly high security level.

This object is solved by the subject matter of claim 1.

Remaining embodiments can be found in purely exemplary form in the corresponding dependent claims (subclaims).

According to at least one embodiment, the vehicle data communication system for transmitting vehicle data includes at least one MC box (media and communication box) for recording, managing, playing back and/or storing audio and/or video data in digital and/or analog form.

According to at least one embodiment, the present application comprises at least one BSC box (Body & Safety Control Box) for recording, managing, playing back and/or storing data by means of which actuators in a vehicle can be addressed in order to protect a passenger in an alarm state from physical protect damage.

According to at least one embodiment, the vehicle data communication system also includes at least one IP box (integrated powertrain control and/or control box for controlling and/or monitoring the powertrain system) for recording, managing, playing, and/or storing data with regard to Passenger data and/or data regarding energy management of the vehicle, the data between the MC box and de4r BSC box can only be exchanged bidirectionally if this data flows with the help of a security ECU (Security ECU), so that the security ECU Based on at least one security gate can detect any data compression coming from the MC-Box.

For the purposes of the application, an “ECU” is a control device (ECU = electronic control unit or ECM = electronic control module). ECU's are electronic modules that are about installed mainly in places where something needs to be controlled or regulated. Control devices are used in the automotive sector in all imaginable electronic areas, as well as for controlling machines, systems and other technical processes. They belong to the embedded systems.

In connection with the terminology "box" in the present invention is meant in particular a self-contained unit either in terms of software technology or structurally haptically with specific tasks.

For example, the box is a processing chip including a corresponding memory and/or processing unit.

For example, the box is formed by at least one SoC "system-on-a-chip method").

System-on-a-Chip (SoC, dt. Ein-Chip-System), also System-on-Chip, means the integration of all or a large part of the functions of a configurable and/or programmable electronic system in one chip, for example an integrated circuit (IC) on a semiconductor substrate, also called monolithic integration. Due to the frequent use of silicon as a substrate material, it is also referred to as System-on-Silicon (SoS). A system is understood as a combination of different elements (logical circuits, clocking, automatic start-up, microtechnical sensors, etc.) which together provide a specific functionality, for example an acceleration sensor including evaluation electronics. SoCs are usually used in embedded systems.

While systems initially consisted of a microprocessor or microcontroller IC and many other ICs for special functions that were soldered onto a circuit board, the integration density possible today allows almost all functions to be combined on a single IC. Digital, analog and mixed-signal functional units are integrated. The main advantages are cost savings, lower energy consumption or power loss and comprehensive miniaturization. For example, the digital function of mobile phones today, possibly with the exception of the memory, is implemented on an IC. The interfaces to the keyboard, the SIM card or the display, for example, are also already included on this IC.

A similar technology for achieving high integration densities even with components from very different technologies is the so-called system-in-package (SiP). Several chips are combined in one housing.

SoCs are used in mobile devices such as smartphones, tablet computers, other gadgets and data acquisition devices, as well as in control and automation technology (e.g. washing machines, automotive electronics, industrial automation) and in all kinds of modern consumer electronics devices. Usually many different interfaces have to be operated (sensors, actuators, networks, buttons, displays) and the quantities are large. The integration of functions that were previously distributed over several components or even several printed circuit boards can also increase reliability and functional safety, especially if a variety of error detection measures are integrated that would not be marketable with discrete components. Specially adapted SoCs are rarely used for applications that generate smaller quantities, such as in medical technology or avionics, and many of the integrated modules often remain unused.

Today, SoCs are usually not developed from scratch, but the designs are based - at least in part - on existing or purchased components, so-called IP cores. These are, for example, macros for full CPU cores, or coprocessors - such as hardware accelerators for encryption or graphics calculations. Likewise, these are peripheral blocks for the implementation of storage, Ethernet, Bluetooth or other interfaces, or complete storage units including their management.

Many standard components are included free of charge in chip manufacturers' EDA tools in proprietary form. Other components can be provided by the chip manufacturer or other IP suppliers such as e.g. B.ARM, Transmeta or smaller, often very specialized development companies. Such IP cores can often be generated via parameters adapted to the intended use, for example in the form of the pipeline length, the cache size or the bus bit widths.

Other required components of a SoC have already been developed in previous projects and ideally can be used directly - or changes have to be made, at best a parameterization of the IP cores is sufficient. Another option is to use "free hardware". This is how more and more open source projects are being created in the hardware sector (e.g. on OpenCores.org), which are often still in the development stage. What may be missing here must be developed by the user himself or have it developed.

The transitions between what is implemented in software and what is implemented in hardware are becoming increasingly fluid, depending on the application - see Software Defined Radio (SDR).

As a rule, SoCs have a debug interface. This is often a simple RS-232 interface, but USB is increasingly used here as well. Error messages and general information can then be output via this debug interface during operation, for example on a terminal, i.e. a console application. In more complex environments, this function is often also performed by a JTAG interface. This is typically used not only to transmit error messages, but also to communicate with a hardware or software debug module in the SoC. Such a module allows the user, for example, to "stop" the SoC and carry out the processing in the CPU core in single-step mode ("step-by-step") and, if necessary, to change individual register values or, for example, to shorten a loop or a jump instruction evade.

Another application of this interface is the programming of programmable areas of a SoC, e.g. B.RAM, EEPROM, Flash or even individual circuit parts up to the entire SoC design (only in an FPGA or similar). Other external components are usually attached as a "chain" to the same JTAG interface, which are addressed via a so-called boundary scan.

In this respect, the individual boxes or a box can be manufactured monolithically integrated with one another on a common substrate, for example a silicon substrate. It is conceivable that all boxes, i. H. all processing and data units are arranged and installed on a single chip, for example on a SoC monolith, in particular monolithically integrated.

Due to the feature described here, according to which data between the MX-Box and BSC-Box can only be exchanged bidirectionally if this data flows with the help of a security ECU, so that the security ECU based on at least one security gate any of the MC-Box Outgoing data compression can determine, a particularly flexible and secure security system is created, which can also be integrated with the common boxes based on SoC technology.

In particular, the security ECU, further in particular monolithically integrated, can be based on a SoC principle and in particular can also be produced monolithically integrated on a common substrate together with the other boxes or at least one of the boxes.

A data error or a deviating data structure can be identified as data compression in the sense of the present application. For example, a data error includes, but is not limited to, a virus or faulty software that causes at least one component of the vehicle data communication system described herein to malfunction. Such data compression can therefore be filtered out by the security ECU. If the data sent from the MC-Box to the security ECU contains a corresponding data compression, this data is not forwarded to the BSC-Box at all and/or only partially, for example.

It is also conceivable that the security ECU repairs the corresponding data compression and/or cuts it out of the data stream in terms of data or software and only then forwards a correspondingly decompressed data set, i.e. one that has been freed from the corresponding software error, to the BSC box.

In other words, the security ECU forms a so-called "door opener" or "gatekeeper", which prevents the MC box, which is supplied with data or compressed, for example for corresponding downloads or USB connections, not corresponding compressed messages forwarded to the BSC box.

Data exchange between the security ECU and the MC box is preferably bidirectional. This can mean that in the event of an error being detected by the safety ECU, it supplies an error code, for example an error alarm, to the MC box and the MC box therefore corrected accordingly in this case, i. H. error-free data or no further data stream at all to the safety ECU. For example, if an error is detected, a data stream that is still being transmitted from the MC box to the security ECU can then be interrupted.

The interruption can therefore be remedied either by the MC box or by the safety ECU, in particular by means of data-related consultation, or it can also be sent back to the MC box by the safety ECU.

According to at least one embodiment, a data transfer between the BSC box and the MC box can only be routed directly, i.e. without being redirected via the security ECU, if data is out going from the BSC box to the MC box.

According to at least one embodiment, the BSC box exchanges data, preferably bidirectional data exchange, with a vehicle safety system, for example an airbag controller, the BXC box exchanges data with an emergency seat controller, an emergency braking system and/or another vehicle assistance system.

However, the data communication between the BSC box and the MC box can be unidirectional, i. H. exclusively starting from the BSC box to the MC box. A direct exchange of data between the MC box and the BSC box is therefore excluded in at least one embodiment of the above-mentioned invention. This ensures that the MC-Box cannot communicate directly with the BSC-Box and then transmit any error data or even viruses to the BSC-Box. In at least one embodiment of the present invention, only communication from the MC box to the BSC box can take place via the security ECU.

According to at least one embodiment, the IP box exchanges data with a charging station and/or a vehicle battery, in particular in order to be able to charge the vehicle battery.

The IP box can therefore be such a unit which, as already mentioned above, is preferably constructed as a SoC unit, a unit which regulates a corresponding battery and, in particular, charging management.

In this respect, the IP box is a kind of "powertrain box" that monitors and monitors the safety and performance of the vehicle and monitors and monitors the battery management. For this purpose, the IP box can be controlled separately and/or the IP box controls charging channels, for example direct current or alternating current charging channels, separately by means of corresponding control commands.

This can be done via a corresponding distribution matrix, which is part of the IP box. The distribution matrix is therefore a control element which is able to activate and/or control and/or regulate corresponding charge channels or energy channels.

The data exchange between the IP box and the BSC box is preferably redundant and/or bidirectional. For example, it is conceivable that in the event of a partial failure of the functions of the IP box, this function is at least partially and/or at least temporarily taken over by the BSC box, which is actually responsible for the security management of the passenger. A failure of the IP box can therefore be compensated for at least partially, but preferably completely. The reverse model is also possible, according to which the BSC box can relate in at least one embodiment to, as already mentioned above, sensor management, in particular relating to passenger safety management and/or vehicle safety management. For this purpose, the BSC box can take over the functions of passenger well-being.

An "AI-based sensor fusion function" is conceivable here, which is connected to a passenger safety manager and an "enviromental perspective function" as well as any other driver, safety and manager systems within the BSC box.

The BSC box therefore preferably receives the corresponding passenger data, in particular relating to the passenger's temperature, for example the skin temperature, the passenger's weight, eye movement or other biological characteristics, through direct data exchange with a corresponding sensor and/or sensor network. Such a sensor can include at least one capacitor with at least two electrodes, which are arranged in a horizontal direction along and on a flexible carrier material to one another, with at least one dielectric layer being arranged between the electrodes, so that on a side facing away from the carrier material at least one Electrode and/or dielectric layer, at least one at least partially liquid-permeable and/or liquid-absorbing moisture layer is arranged at least in places, with the electrodes and/or the dielectric layer being arranged in a transverse direction between the carrier material and the moisture layer, so that a capacitance is created by the on the liquid that at least partially hits the dielectric layer changes at least partially, with a processing unit being set up and provided for measuring and/or storing this change, so that a capacitive Feu chtesensor arises, wherein the sensor is also a capacitive pressure sensor, wherein the processing unit is additionally set up and provided for this purpose to measure and/or store a change in capacitance of the capacitor caused by external pressure, and further wherein a capacitive pressure sensor is one in which the change in capacitance as a result of the deflection of a membrane and the resulting change in the distance between the plates is evaluated as a sensor effect, so that it the membrane being the dielectric layer or the individual capacitor electrodes, the sensor having at least one further capacitor arranged transversely above or below the capacitor and spaced from the capacitor by a further water-impermeable layer above or below it another water-impermeable layer is arranged, so that a capacitor stack is formed, and further wherein both capacitors are constructed in the same way, and further wherein the two sensors forming the capacitor stack perform the same tasks.

According to at least one embodiment, the BC box receives sensor data from active and/or passive vehicle sensors, in particular in order to be able to forward this data to the vehicle assistance system in whole or in part or in a partially modified form.

According to at least one embodiment, data fusion for data analysis is carried out by various sensors and/or sensor functions within the S-Box.

According to at least one embodiment, the data fusion is carried out on the basis of an AI machine (Artificial Intelligence Machine), in particular with sensor data from the sensors that changes dynamically during operation being transmitted, for example only, between local AI nodes of a common AI system and further , wherein an AI node is such a data node that is formed from at least two data streams.

According to at least one embodiment, the security gate is set up and intended to check data transmitted from the MC box to the security box, in particular update data for updating the vehicle assistance system, for data compression, and only after such a compression check at least this data partially forwarded to the BS box.

According to at least one embodiment, the security box comprises at least one device for vehicle fleet management and/or vehicle parking position management, so that (update) data obtained via the MC box controls and/or changes fleet management and/or parking position management.

Furthermore, the present application relates to a method for operating a vehicle data communication system for the transmission of vehicle data between the processing boxes of the system by means of a vehicle data communication system.

This means that all features disclosed for the vehicle data communication system described here are also disclosed for the method described here and vice versa.

According to at least one embodiment, in the method for operating a vehicle data communication system for the transmission of vehicle data between processing boxes of the system, data is only exchanged bidirectionally between the MC box and the BSC box by means of a vehicle data communication system if this data is exchanged via a security ECU (security ECU) flow, so that the security ECU can determine any data compression coming from the MC box based on at least one security gate.

According to at least one embodiment, the IP box (integrated powertrain controller and/or control box for controlling and/or monitoring the powertrain system) is used to record, manage, play back and/or store data relating to passenger data and/or data relating to energy management of the vehicle and for data exchange with a charging station and/or a vehicle battery, in particular in order to be able to charge the vehicle battery, recording, managing, playing and/or storing data relating to passenger data and/or data relating to energy management of the vehicle are used, whereby the data can only be exchanged bidirectionally between an MC box (Media and Communication Box) and a BSC box (Body & Safety Control Box), in particular if this data can be exchanged with the aid of a security ECU (Security ECU) flow, so that the security ECU based on at least one security gate any emanating from the MC box can determine data compression, the IP box also comprising a first IP module, which controls, regulates and/or monitors a first set of management functions and/or security aspects, such as vehicle monitoring and/or driver health monitoring, within a vehicle, and, in particular at the same time, the IP module within a vehicle controls, regulates and/or monitors a second set of management aspects, such as battery management and/or battery state of charge, which is characterized in that a management function between the two IP Modules during operation is at least partially and / or at least temporarily redundant and / or bidirectional.

According to at least one embodiment, the IP box is formed by at least one SoC “system-on-a-chip method”, whereby one is also referred to as a system-on-a-chip (SoC, dt. One-chip system). System-on-chip, which means integration of all or a large part of the functions of a configurable and/or programmable electronic system in one chip, for example an integrated circuit (IC) on a semiconductor substrate, also called monolithic integration.

According to at least one embodiment, the IP box has at least one distribution matrix, which is in bidirectional data exchange and/or energy exchange with at least one IP module and the distribution matrix is in bidirectional exchange with a connection matrix, the connection matrix having at least one DC/ DC power connection, an inverter power connection and a charging connection (charging/grid), so that the distribution matrix controls the DC/DC power connection, the inverter power connection and the charging connection (charging/grid) separately or together via a programmed or manual setting can.

According to at least one embodiment, data from at least one of the IP modules is bidirectional with at least one of the DC/DC power connection, the inverter power connection and the charging connection (charging/grid) directly, i.e. without having to run or run through the connection matrix beforehand, in data exchange.

According to at least one embodiment, at least one motor, in particular an electric motor, is connected to the INV power connection and can be operated via the INV power connection.
According to at least one embodiment, the IP Power Box controls, preferably regulates, in particular by means of the DC/DC power connection and/or the charging connection (charging/grid), charging management, in particular data communication of an external charging station and charging and/or discharging of a vehicle battery, to drive the engine.

According to at least one embodiment, the method for operating an IP box (integrated powertrain control and/or control box for controlling and/or monitoring the powertrain system) uses for recording, managing, playing and/or storing data with regard to passenger data and /or data regarding energy management of the vehicle and for data exchange with a charging station and/or a vehicle battery, in particular to be able to charge the vehicle battery, whereby for recording, managing, playing and/or storing data regarding passenger data and/or data regarding of an energy management of the vehicle, whereby the data between an MC box (Media and Communication Box) and a BSC box (Body & Safety Control Box) can only be exchanged bidirectionally, in particular if this data can be exchanged with the help of a safety ECU (Security ECU) flow, so that the security ECU based on at least one security gate about Some of the MC box outgoing data compression can determine, wherein the IP box also includes a first IP module, which controls a first set of management functions and / or security aspects, such as vehicle monitoring and / or driver health monitoring within a vehicle , regulates and/or monitors, and, in particular at the same time, the IP module controls, regulates and/or monitors a second set of management aspects within a vehicle, such as battery management and/or a battery state of charge, which is characterized in that a management function between the two IP modules is at least partially and/or at least temporarily redundant and/or bidirectional during operation.

• Dabei zeigt die 1 die IP-Box (Integrated Powertrain-Steuerung und/oder Control-Box zur Steuerung und/oder Überwachung des Powertrain-Systems) zum Aufnehmen, Verwalten Abspielen und/oder Speichern von Daten hinsichtlich von Passagierdaten und/oder Daten hinsichtlich eines Energiemanagements des Fahrzeugs sowie zum Datenaustausch mit einer Ladestation und/oder einer Fahrzeugbatterie, insbesondere um die Fahrzeugbatterie laden zu können, zum Aufnehmen, Verwalten, Abspielen, und/oder Speichern von Daten hinsichtlich von Passagierdaten und/oder Daten hinsichtlich eines Energiemanagements des Fahrzeugs, wobei die Daten zwischen einer MC-Box (1) (Media und Communication Box) und einer BSC-Box (2) (Body & Safety Control Box), insbesondere nur, dann bidirektional austauschbar sind, sofern diese Daten mit Hilfe eines Sicherheits-ECU (Security ECU) fließen, sodass der Sicherheits-ECU auf Basis zumindest eines Sicherheitstors etwaige von der MC-Box ausgehende Datenkomprimierungen feststellen kann, wobei des Weiteren die IP-Box ein erstes IP-Modul umfasst, welche innerhalb eines Fahrzeugs eine erste Menge an Verwaltungsfunktionen und/oder Sicherheitsaspekten, wie zum Beispiel einem Fahrzeugmonitoring und/oder einer Fahrergesundheitsüberwachung, steuert, regelt und/oder überwacht, und, insbesondere gleichzeitig, das IP-Modul innerhalb eines Fahrzeugs eine zweite Menge an Verwaltungsaspekten, wie zum Beispiel einem Batteriemanagement und/oder einem Batterieladezustand steuert, regelt und/oder überwacht, welcher dadurch gekennzeichnet ist, dass eine Verwaltungsfunktion zwischen den beiden IP-Modulen während des Betriebs zumindest teilweise und/oder zumindest zeitweise redundant und/oder bidirektional ist.

The invention is described in more detail below with reference to a figure and the corresponding reference symbols.

• The 1 the IP box (integrated powertrain control and/or control box for controlling and/or monitoring the powertrain system) for recording, managing, playing and/or storing data relating to passenger data and/or data relating to energy management of the vehicle, and for exchanging data with a charging station and/or a vehicle battery, in particular in order to be able to charge the vehicle battery, for recording, managing, playing back and/or storing data relating to passenger data and/or data relating to energy management of the vehicle, with the data between a MC box (1) (Media and Communication Box) and a BSC box (2) (Body & Safety Control Box), in particular only then can be exchanged bidirectionally, provided that this data flows with the help of a security ECU (Security ECU). , so that the security ECU can determine any data compression coming from the MC box on the basis of at least one security gate, with the further n the IP box comprises a first IP module, which controls, regulates and/or monitors a first set of management functions and/or safety aspects, such as vehicle monitoring and/or driver health monitoring, within a vehicle, and, in particular at the same time, the IP module controls, regulates and/or monitors a second set of management aspects, such as battery management and/or a battery state of charge, within a vehicle, which is characterized in that a management function between the two IP modules during operation at least partially and/or at least is temporarily redundant and/or bi-directional.

Also shows the 1 the IP box (integrated powertrain control and/or control box for controlling and/or monitoring the powertrain system) for recording, managing, playing and/or storing data relating to passenger data and/or data relating to energy management of the vehicle, and for data exchange with a charging station and/or a vehicle battery, in particular to be able to charge the vehicle battery, for recording, managing, playing back and/or storing audio and/or video data in digital and/or analogue form, at least one BSC box 2 (Body & Safety Control Box) for recording, managing, playing back and/or storing data by means of which actuators in a vehicle can be addressed in order to protect a passenger from physical damage in an alarm state and at least one IP box 3 (Integrated Powertrain box) for recording, managing, playing, and / or storing data regarding passenger data and / or data regarding an energy Management of the vehicle includes, with data between the MC box 1 and the BSC box 2 can only be exchanged bidirectionally if this data flows with the help of a security ECU (Security ECU), so that the security ECU based on at least one security gate can detect any outgoing from the MC-Box 1 data compression.

Of the 1 It can also be seen that the IP box is formed by at least one SoC "system-on-a-chip process, with one under System-on-a-Chip (SoC, dt. One-chip system) , also called system-on-chip, means the integration of all or a large part of the functions of a configurable and/or programmable electronic system in one chip, for example an integrated circuit (IC) on a semiconductor substrate, also called monolithic integration.

A data transfer between the BSC box 2 and the MC box 1 can only be routed directly, i.e. without diversion, via the security ECU if data are sent from the BSC box 2 to the MC box 1 .

Besides, the 1 It can be seen that the IP box has at least one distribution matrix, which is in bidirectional data exchange and/or energy exchange with at least one IP module, and the distribution matrix is in bidirectional exchange with a connection matrix, the connection matrix having at least one DC /DC power connection, an inverter power connection and a charging connection (charging/grid), so that the distribution matrix has the DC/DC power connection, the inverter power connection and the charging connection (charging/grid) separately or together via a programmed or manual setting can control.

The BSC box 2 exchanges data, preferably bidirectional data exchange, with a vehicle safety system, for example an airbag controller, the BXC box 2 exchanges data with an emergency seat controller, an emergency braking system and/or another vehicle assistance system, with the IP box 3 in Data exchange with a charging station 4 and / or a vehicle battery 5 is available, in particular to charge the vehicle battery 5 can.

It can be taken from the 1 at the same time that the data of at least one of the IP modules is bidirectional with at least one of the DC/DC power connection, the inverter power connection and the charging connection (charging/grid) directly, i.e. without having to run or run through the connection matrix beforehand data exchange.

It can be seen that at least one motor, in particular an electric motor, is connected to the INV power connection and can be operated via the INV power connection.

The BSC box 2 receives sensor data from active and/or passive vehicle sensors, in particular in order to be able to forward this data to the vehicle assistance system in whole or in part or in a partially modified form.

It can be seen that the IP Power Box, in particular by means of the DC/DC power connection and the charging connection (charging/grid), controls charging management, in particular data communication with an external charging station and charging and/or discharging a vehicle battery to drive the motor , preferably regulates.

Within the S-Box, a data fusion is carried out by various sensors and/or sensor functions for data analysis, the data fusion being carried out on the basis of an AI machine (Artificial Intelligence Machine), in particular with the sensor data of the sensors changing dynamically during operation, for example, only between local AI nodes of a common AI system are transmitted and further, with an AI node being such a data node point formed from at least two data streams.

Of the 1 It can also be seen that the security gate is set up and intended to check data transmitted from the MC box 1 to the security box, in particular update data for updating the vehicle assistance system, for data compression, and only after such a compression check Data are at least partially forwarded to the BS box 2.

The security box comprises at least one device for vehicle fleet management and/or vehicle parking position management, so that the (update) data obtained via the MC box 1 control and/or change the fleet management and/or parking position management.

Of the 1 is also a method for operating an IP box (integrated powertrain control and/or control box for controlling and/or monitoring the powertrain system) for recording, managing, playing and/or storing data with regard to passenger data and/or data with regard to energy management of the vehicle and for data exchange with a charging station (4) and/or a vehicle battery (5), in particular in order to be able to charge the vehicle battery (5), for recording, managing, playing and/or storing data with regard to passenger data and/or data relating to energy management of the vehicle, the data between an MC box (1) (Media and Communication Box) and a BSC box (2) (Body & Safety Control Box), in particular only then be exchanged bidirectionally, provided that this data flows via a security ECU (security ECU), so that the security ECU based on at least one security gate any of the MC-Box au sgoing data compression, the IP box also includes a first IP module, which controls, regulates and/or monitors a first set of management functions and/or security aspects, such as vehicle monitoring and/or driver health monitoring, within a vehicle , and, in particular at the same time, the IP module controls, regulates and/or monitors a second set of management aspects within a vehicle, such as battery management and/or a battery state of charge, which is characterized in that a management function between the two IP Modules during operation is at least partially and / or at least temporarily redundant and / or bidirectional.

In the method for operating a vehicle data communication system for the transmission of vehicle data between processing boxes 1, 2, 3 of the system, by means of a vehicle data communication system, data is only exchanged bidirectionally between the MC box 1 and the BSC box 2 if this data is sent via a security ECU (Security ECU) flow, so that the security ECU can determine any data compression coming from the MC box 1 based on at least one security gate.

It can also be seen that the IP box 3 is connected to a corresponding charging station 4, a motor 6 and/or a battery 5 in order to initiate, regulate and regulate a charging or discharging process, in particular in the sense of a drive process /or to control.

It can also be seen that the individual arrows relating to BSC box 2 mean that BSC box 2 can be connected to an airbag, a seat or some other emergency device. A corresponding intervention and/or control and/or regulation can also be seen, in particular in relation to a dynamic vehicle stability device or traffic number recognition or another assistance system, for example in relation to the steering, the braking or the damping/suspension.
The redundancy and bidirectionality and/or unidirectionality can also be recognized directly by the individual, different arrow directions between the MC box 1, the BSC box 2 and the IP box 3.

How from the 1A can be recognized, the BSC box 2 and the IP box 3 are integrated together, preferably integrated in such a way that they are arranged on a common substrate, for example in the form of an SOC substrate. Both units can therefore share a common, continuous and preferably one-piece SOC substrate.

In the 1 It can be seen that alternatively or additionally, several base or carrier substrates can also be installed, which are then connected to one another together, so that the BSC box and the IP box 3 result in a common one that is to be integrated and installed in the vehicle Component, for example in the form of an "Appiebox".

The same was done with the merging of MC-Box 1 and Security ECU 7. These two are also based on a common SOC principle. These two boxes are preferably also integrated, preferably monolithically integrated, on a common substrate, for example a silicon substrate built together. The BSC box 2 and the IP box 3 can also be integrated with one another.

Together, the BSC box 2 and the IP box 3 can form a CDI and C box (Central Drive Intelligence and Control Box).

The same can also be devised for the MC box. This can be interpreted as an M and C box (Media and Communication Box).

Also is in the 1 shown that there only the security ECU 7 is realized with the M and C box on a common SOC substrate, whereas the BSC box 2 and the IP box 3 are each on separate substrates, in particular components arranged separately from one another, ie are arranged in separate boxes in the form of an "Appiebox".

However, the individual functions can be identical in both versions, independently of the individual exemplary embodiments, with the different installation space requirements, form factor and corresponding installation space installation time of course being adapted here.

reference list

1

MC box

2

BSC box

3

IP box

4

charging station

5

vehicle battery

6

engine

7

Security ECU

8th

sensor data

9

DC/DC power

10

Inverter power connection

11

Charge/Grid

12

IP module

13

distribution matrix

400

procedure

Claims (7)

IP box (3) (integrated powertrain controller and/or control box for controlling and/or monitoring the powertrain system) for recording, managing, playing and/or storing data relating to passenger data and/or data relating to energy management of the vehicle and for exchanging data with a charging station (4) and/or a vehicle battery (5), in particular in order to be able to charge the vehicle battery (5), with - for recording, managing, playing and/or storing data relating to passenger data and/or or data relating to energy management of the vehicle, with the data between an MC box (1) (media and communication box) and a BSC box (2) (body & safety control box), in particular only being exchangeable bidirectionally if this data flows with the help of a security ECU (security ECU), so that the security ECU can determine any data compression coming from the MC box on the basis of at least one security gate n, wherein the IP box (3) further comprises a first IP module (12), which controls a first set of management functions and/or security aspects, such as vehicle monitoring and/or driver health monitoring, within a vehicle and/or monitors and, in particular at the same time, the IP module (12) controls, regulates and/or monitors a second set of management aspects, such as battery management, within a vehicle, characterized in that a management function between the two IP modules (12) is at least partially and/or at least temporarily redundant and/or bidirectional during operation. Vehicle data communication system claim 1 , characterized in that the IP box (3) is formed by at least one SoC "system-on-a-chip method", whereby one under a system-on-a-chip (SoC, dt. Ein-Chip -System), also called system-on-chip, is the integration of all or a large part of the functions of a configurable and/or programmable electronic system in one chip, for example an integrated circuit (IC) on a semiconductor substrate, also called monolithic integration , understands. Vehicle data communication system claim 2 , characterized in that the IP box (3) has at least one distribution matrix, which is in bidirectional data exchange and/or energy exchange with at least one IP module (12), and the distribution matrix on the other hand is in bidirectional exchange with a connection matrix , wherein the connection matrix has at least one DC/DC power connection (9), an inverter power connection (10) and a charging connection (charging/grid) (11), so that the distribution matrix (8) has the DC/ DC power connection (9), the inverter power connection (10) and the charging connection (charging/grid) (11) can control separately or together. Vehicle data communication system according to the preceding claim, characterized in that data from at least one of the IP modules is bidirectional with at least one of the DC/DC power connection (9), the inverter power connection (10) and the charging connection (charging/grid) (11) directly, This means that data is exchanged without having to run or have to run through the connection matrix beforehand. Vehicle data communication system according to the preceding claim, characterized in that at least one motor (6), in particular an electric motor, is connected to the INV power connection and can be operated via the INV power connection. Vehicle data communication system according to the preceding claim, characterized in that the IP power box, in particular by means of the DC/DC power connection (9) and/or the charging connection (charging/grid) (11), a charging management, in particular a data communication of an external charging station (4 ) and charging and / or discharging a vehicle battery (5) to drive the motor (6) controls, preferably regulates. Method (400) for operating an IP box (3) (Integrated Powertrain Box) for data exchange with a charging station (4) and/or a vehicle battery (5), in particular in order to be able to charge the vehicle battery (5), wherein - for Recording, managing, playing back and/or storing data relating to passenger data and/or data relating to energy management of the vehicle, the data between an MC box (1) (media and communication box) and a BSC box (2) (Body & Safety Control Box), in particular only if this data flows via a security ECU (Security ECU), so that the security ECU detects any data compression coming from the MC-Box on the basis of at least one security gate, further comprising the IP box (3) a first IP module (12), which within a vehicle, a first set of management functions and / or security aspects, such as vehicle monitoring and / or ei ner driver health monitoring, controls, regulates and / or monitors, and, in particular at the same time, the IP module (12) controls, regulates and / or monitors a second set of management aspects , such as battery management and / or a battery state of charge within a vehicle characterized in that a management function between the two IP modules (12) is at least partially and/or at least temporarily redundant and/or bidirectional during operation.

Images