EP1740815B1 - Dispositif de commande electronique et procede pour faire fonctionner des composants d'un vehicule - Google Patents

Dispositif de commande electronique et procede pour faire fonctionner des composants d'un vehicule Download PDF

Info

Publication number
EP1740815B1
EP1740815B1 EP05731759A EP05731759A EP1740815B1 EP 1740815 B1 EP1740815 B1 EP 1740815B1 EP 05731759 A EP05731759 A EP 05731759A EP 05731759 A EP05731759 A EP 05731759A EP 1740815 B1 EP1740815 B1 EP 1740815B1
Authority
EP
European Patent Office
Prior art keywords
modulation
control device
release
signal
release signal
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
EP05731759A
Other languages
German (de)
English (en)
Other versions
EP1740815A1 (fr
Inventor
Norman Marenco
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Continental Automotive GmbH
Original Assignee
Continental Automotive GmbH
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Continental Automotive GmbH filed Critical Continental Automotive GmbH
Publication of EP1740815A1 publication Critical patent/EP1740815A1/fr
Application granted granted Critical
Publication of EP1740815B1 publication Critical patent/EP1740815B1/fr
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
    • F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
    • F02D—CONTROLLING COMBUSTION ENGINES
    • F02D41/00—Electrical control of supply of combustible mixture or its constituents
    • F02D41/24—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means
    • F02D41/26—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means using computer, e.g. microprocessor
    • F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
    • F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
    • F02D—CONTROLLING COMBUSTION ENGINES
    • F02D41/00—Electrical control of supply of combustible mixture or its constituents
    • F02D41/24—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means
    • F02D41/26—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means using computer, e.g. microprocessor
    • F02D41/266—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means using computer, e.g. microprocessor the computer being backed-up or assisted by another circuit, e.g. analogue
    • F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
    • F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
    • F02D—CONTROLLING COMBUSTION ENGINES
    • F02D41/00—Electrical control of supply of combustible mixture or its constituents
    • F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
    • F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
    • F02D—CONTROLLING COMBUSTION ENGINES
    • F02D41/00—Electrical control of supply of combustible mixture or its constituents
    • F02D41/22—Safety or indicating devices for abnormal conditions
    • F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
    • F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
    • F02D—CONTROLLING COMBUSTION ENGINES
    • F02D41/00—Electrical control of supply of combustible mixture or its constituents
    • F02D41/24—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means
    • F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
    • F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
    • F02D—CONTROLLING COMBUSTION ENGINES
    • F02D41/00—Electrical control of supply of combustible mixture or its constituents
    • F02D41/22—Safety or indicating devices for abnormal conditions
    • F02D41/221—Safety or indicating devices for abnormal conditions relating to the failure of actuators or electrically driven elements
    • F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
    • F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
    • F02D—CONTROLLING COMBUSTION ENGINES
    • F02D41/00—Electrical control of supply of combustible mixture or its constituents
    • F02D41/24—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means
    • F02D41/26—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means using computer, e.g. microprocessor
    • F02D41/28—Interface circuits

Definitions

  • the present invention relates to a control device and a method for controlling the operation of motor vehicle components, in particular an internal combustion engine or a transmission of a motor vehicle, according to the preamble of claim 1 or 8.
  • control unit electronic module in which diverse control and / or monitoring functions for electronic or electrical components are summarized.
  • control unit electronic module in which diverse control and / or monitoring functions for electronic or electrical components are summarized.
  • the steadily increasing requirements in the past regarding the functionalities of such control devices have meant that the desired functions are nowadays largely implemented by using a microcontroller.
  • microcontroller here refers to an electronic program-controlled control device, which typically, like a PC, has a CPU, a RAM, a ROM and I / O ports, but, unlike a PC, is designed for a very specific application.
  • the components to be controlled by the control device can be components that are directly attributable to the internal combustion engine, such as a fuel pump, a throttle valve, a fuel injector or a lambda probe, and also other components of the vehicle.
  • the control device On the input side, the control device is required for control Sensor signals or measured variables entered, z. B. relating to the crankshaft rotational speed and position, the engine temperature, the intake air temperature and quantity, the accelerator pedal position, etc.
  • This list of the components to be controlled or sensed is by no means exhaustive and serves only to illustrate the variety of conceivable functions of a control device.
  • a microcontroller or its I / O ports are technologically not usually suitable for direct control of vehicle components of interest here, these components are usually controlled by associated amplifiers, which receive on the input side corresponding control signals of the microcontroller and the output side for activation and deactivation provide the components required voltages or currents, for example, the charging and discharging of a piezaketätigten fuel injection valve.
  • the power amplifiers are usually supplied in addition to the control signals and a digital, so-called enable signal, by means of which depending on the enable signal state, a blocking or release of the activation is signaled.
  • release control which is integrated in known control devices in a monitoring device which monitors the proper operation of the microcontroller to take appropriate measures in case of failure, for example, reset the microcontroller (Reset ) and / or set one or more enable signals to the first enable signal state with which each associated power amplifier is disabled.
  • Such a monitoring device can in this case be integrated in the microcontroller or arranged separately from it.
  • the function of such a monitoring device is based, for example, on the fact that this device provides the microcontroller from time to time with tasks and determines from the results returned by the microcontroller, whether the microcontroller is working correctly or not.
  • the electrical connections which are provided for the transmission of enable signals to the relevant output stages (shutdown paths), can be designed multiple times (redundantly) for reasons of increased security. Furthermore, the ability to shut down power amplifiers by means of the digital enable signals can be checked by means of a self-test in the inactive system state, i. H. at least once per usage cycle. However, erroneously deviating operating conditions from the allowable range, particularly any errors within the microcontroller, including faults caused by faulty software, are most likely to occur during active system operation.
  • the control device is characterized by a modulation device for periodically modulating the enable signal provided by the enable control device and an evaluation device for analyzing the output signal supplied to the output stage with respect to the periodic modulation and for putting the output stage in a predetermined error state in the absence of the periodic modulation.
  • the modulation of the enable signal provided by the enable control device and the evaluation of the enable signal in the direction of the output stage with respect to this modulation ensure that an error due to an error in the area of the enable signal generation and / or enable signal transmission is reliable (based on the absence of the modulation). is recognized.
  • the relevant output stage can thus be brought reliably even in such a case in a predetermined error condition, the z. B. is provided as a shutdown or Resetschreib the power amplifier.
  • the evaluation device may include an evaluation stage upstream of the output stage, which input the enable signal from the modulation stage and which analyzes the input enable signal for the presence of the corresponding in accordance with the modulation pulse sequence inverted enable signal sections and in the presence of these inverted enable signal sections, the enable signal passes to the power amplifier and at Absence of these inverted enable signal sections offset the output stage in the predetermined error state.
  • the evaluation device is provided such that when a transition of the input enable signal from one to the other enable signal state passed to the power amplifier enable signal is only passed if it can be excluded from the evaluation that the transition of the input signal was only due to the modulation, so was not caused by a corresponding transition of the release control provided by the enable signal.
  • This check of the evaluation device before a change of the issued enable signal state may require a certain amount of time, which is often acceptable in practice.
  • this evaluation of the evaluation device which is usually associated with a delay, can only be provided if the enable signal changes from the first into the second or from the second into the first enable signal state.
  • the evaluation device is designed such that the modulation of the input enable signal is removed, that is, the output to the output stage enable signal contains no such modulation. It is also conceivable, however, to leave the modulation in the enable signal, be it that the temporal signal curve relatively short-term modulation sections do not significantly affect the control of the relevant output stage or the modulations are filtered away in the final stage.
  • the pulse generator can be used together with the modulation level z. B. may be provided integrated in the monitoring device, ie in particular together with the other circuit parts of the monitoring device in a common integrated circuit, which may also include the microcontroller.
  • the release control device is integrated in a monitoring device (such as the watchdog mentioned above) which monitors the proper operation of the microcontroller and provides the enable signal in the second enable signal state only upon detection of proper operation.
  • a monitoring device such as the watchdog mentioned above
  • the monitor including the enable controller and including at least a portion of the modulator (eg, without the pulse generator described below) in a common integrated circuit, which is arranged separately from the microcontroller chip in an electronic module (control unit).
  • the evaluation device is preferably integrated in an output stage device containing the output stage, that is to say in particular implemented in a common integrated circuit. Apart from the advantage of a cost-effective implementation the evaluation, z. B. without additional electronic components, this results in practice another, very significant advantage in connection with an overvoltage monitoring or in connection with the "failsafe" behavior of the entire system in the special case of error overvoltage.
  • the monitoring device exceeds a certain complexity, then in practice it makes economic sense to carry out this technology in one of the final stages, which are mostly power stages, different technology, namely expediently in a low-voltage technology (such the microcontroller).
  • this monitoring device also takes on the task of overvoltage detection, since the required precision in the switched off power output stages can not be achieved in the rule, it may happen that the permissible voltage range of the monitoring device is exceeded, even if the power amplifier still in their permissible range works, so that a transition to the desired predetermined error state can no longer be guaranteed.
  • the evaluation has a higher dielectric strength than the microcontroller or those circuit parts of the control device, which are required to provide the enable signal, so the evaluation z. B. in a final stage containing power amplifier device is integrated with a relatively high dielectric strength, the overvoltage failure in the area of the microcontroller or the monitoring device or the release control device can still be reliably detected as long as the overvoltage does not cause a failure of the power amplifier.
  • the latter can be easily ensured by appropriate dimensioning of the dielectric strength of the output stage, which in practice anyway must at least be designed at least for the vehicle electrical system voltage of the vehicle plus a certain safety margin.
  • the modulation of the enable signal used according to the invention should affect the normal operation of the system as little as possible.
  • the period of the modulation is predetermined such that it is selected to be at most as large as an error reaction time specified for the monitoring device, preferably smaller than this error reaction time.
  • B periods of less than 100 ms well suited.
  • the duty cycle of the modulation is less than 10%, z. On the order of 1%.
  • the pulse duration should be proportional to the period So be chosen relatively small and the period itself also be short enough for the application in question to ensure a reaction of the evaluation in case of error considering all tolerances within predetermined error reaction times.
  • z. B. issued in the first enable signal state release signal to the subsequent output stage or the subsequent output stages to inhibit activation of the controlled components (at least as long as the modulation is absent and / or at least for a predetermined period of time).
  • the failure state in which the final stage is to be offset is to release the activation. It is crucial that in the event of an error that is detected by the absence of modulation, the relevant power amplifier is placed in a predetermined error state.
  • Fig. 1 3 shows essential components of an engine control device, generally designated 10, for a direct injection engine of a motor vehicle, comprising a microcontroller 12 for providing a control signal S for controlling the fuel injection system to be controlled during operation of the internal combustion engine, not shown, a release unit 14 for providing a digital enable signal b, by means of which a first logical enable signal state “Low” (L) is signaled a blocking and by a second logic enable signal state “High” (H) a release of the activation of the fuel injection system, and an output stage 16 for activating and deactivating the component to be controlled, here the fuel injection system, based on the control signal S taking into account one of these output stage 16 input enable signal d.
  • the release signal b outputted from the release unit 14 is directly input to the output stage 16, or the signals b and d are identical. Not so in the illustrated controller 10, as will be described below.
  • the final stage 16 initiates fuel injection by outputting corresponding drive signals to the various fuel injectors (located at the right edge of FIG Fig. 1 drawn signal lines symbolize the control of four fuel injectors) only if the output signal 16 input to the enable signal d is in the H state.
  • the injection timing and the injection quantities are essentially determined by the control signal S output by the microcontroller 12.
  • the transmission of the control signal S is symbolized here only by a line. In fact, depending on the final stage to be driven, this connection can be designed as a more complicated line arrangement. Furthermore, in the presentation of Fig.
  • controller 10 omits all circuit parts of the controller 10 which are not essential to the understanding of the invention and which may be designed in a conventional manner (eg power supply (s), input signals to the microcontroller for receiving various sensor signals needed in the context of vehicle component control or engine control) ,
  • a special feature of the illustrated control unit 10 is the generation, transmission and use of a special release signal and will be explained below with reference to only to be understood as an example output stage 16 for a fuel injection system.
  • the engine control unit 10 in practice further power amplifiers for controlling further vehicle components, in particular engine components, for which the method described below of a particularly "safe" enable signal can also be used.
  • a modulation device formed by a modulation stage 18 and a pulse generator 20 is immediately downstream of the release unit 14 and provides for a periodic modulation of the release signal b provided by the release control device. If several release units, such as the illustrated release unit 14 are provided, for. B. in a monitoring device, it can be advantageously used a common pulse generator for the modulation of the individual enable signals.
  • the in Fig. 2 the uppermost (first) curve represents the modulation pulse signal a generated by the pulse generator 20.
  • This signal a consists of a periodic sequence of rectangular modulation pulses having a period Tpuls of a pulse duration of tpuls.
  • the in Fig. 2 second course represents an example of an output from the release unit 14 enable signal b, which changes at a time t1 from L to H and at a time t2 back to L again.
  • the modulation stage 18 is inputted these signals a and b, to form therefrom a "modulated" enable signal c, whose course is also in Fig. 2 is shown. It can be seen that the modulation stage 18, the H-state, which signals the release of the activation of the fuel injection system, is interrupted periodically by comparatively short modulation pulses, during which the signal c to a certain extent signals the blocking of the injection system activation. In the example shown, this periodic modulation takes place only in the signal sections in which the signal b is in the H state.
  • an evaluation stage 22 which is implemented in the same technology (here on the same chip) as the output stage 16 and together with it forms an output stage device 24.
  • the evaluation signal 22 input to the evaluation stage 22 is analyzed by the evaluation unit 22 with regard to the presence of the periodic modulation in the signal c and, in simplified terms, passed on as the enable signal d to the output stage 16 only when the modulation in the input signal c is detected.
  • the evaluation stage 22 interprets a failure of the modulation as an error case and then puts the output stage 16 in a previously defined error state. In the illustrated embodiment, this is done by permanent output of the enable signal d in the low state, regardless of the state of the signal c.
  • the fuel injection is forcibly terminated.
  • Fig. 2 This shows that the signal transition taking place at time t1 from L to H (in signal c) is not passed on directly to the output stage (in signal d) but rather to the lowest level only after expiration of a fixed increase delay ⁇ t1.
  • the evaluation unit 22 in the illustrated example initially excludes the case in which this transition was caused by a "static" error in the signal c (or the transmission line provided for this purpose).
  • the time period ⁇ t1 is waited to determine the arrival of a modulation pulse. Only if this pulse is actually detected, the evaluation unit 22 also leaves the signal d in go over the H state.
  • ⁇ t1 is slightly larger than the pulse period Tpuls and fixed.
  • the transition in the signal c from time to time t2 from H to L is not reflected directly in the output signal d, but only after a certain time delay (deceleration delay ⁇ t2).
  • the evaluation stage 22 in the present example initially excludes the case in which this transition is caused only by the arrival of a modulation pulse. Accordingly, the time period ⁇ t2 is long-awaited. Only if the signal c does not change back to H within this period, the evaluation stage 22 causes the signal d to go to L.
  • This deceleration ⁇ t2 is also fixed here and slightly larger than the pulse width tpuls.
  • the pulse period Tpuls, the pulse width tpuls and the "filter times" .DELTA.t1, .DELTA.t2 are suitable to choose according to the relevant system requirements.
  • the duty cycle (tpuls / Tpuls) should be as small as possible in most applications, z. B. less than 10%, in particular less than 1%.
  • the shortest possible period Tpuls is advantageous. In the example shown for the fuel injection z. B. a Tpuls in the order of about 10 ms conceivable.
  • the evaluation stage 22 also checks the time interval between successive pulses when pulses are detected in the signal to determine whether it is in line with the predetermined modulation period.
  • a proper modulation pulse train z. B. be more accurately demarcated by a caused by a fault pulse sequence.
  • the release unit 14 is contained in a monitoring device 26 which communicates via a communication link 28 with the microcontroller 12, in particular to monitor its proper operation and depending on the result of this monitoring z. B. set the enable signal b accordingly.
  • the evaluation stage 22 due to its microelectronic integration in the area of the output stage device 24, has a relatively high dielectric strength (eg 36 V) in comparison to the microcontroller 12 and / or the monitoring device 26.
  • the evaluation stage 22 can therefore also advantageously still reliably take fallback measures, in particular block or switch off the output stage 16, if circuit parts of the control unit 10 were impaired or destroyed by an overvoltage that is involved in the provision of the enable signal.
  • the fail-safe behavior of the overall system is therefore due to the modulation not only particularly reliable but somewhat autonomous, which concerns a caused by overvoltage failure of logic devices such as the microcontroller.
  • the additional logic in the output stage device 24 results in an automatic, permanent shutdown of the output stage 16 as soon as a static state of the shutdown path is detected, which transmits the signal c.
  • the required dynamics must be generated only in error-free system operation, so that a limited operating mode is made possible if only the Abschaltpfad is faulty, but not the control logic. In the event of a fault, the power amplifier behaves under the critical operating conditions as specified.

Landscapes

  • Engineering & Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Chemical & Material Sciences (AREA)
  • Combustion & Propulsion (AREA)
  • Mechanical Engineering (AREA)
  • Computer Hardware Design (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Combined Controls Of Internal Combustion Engines (AREA)
  • Safety Devices In Control Systems (AREA)

Claims (8)

  1. Dispositif de commande électronique destiné à commander le fonctionnement d'un composant d'un véhicule automobile, en particulier d'un moteur à combustion interne ou d'une transmission d'un véhicule automobile, comprenant :
    - un microcontrôleur (12) destiné à fournir au moins un signal de commande (S) pour commander au moins un composant devant être commandé dans le fonctionnement du véhicule automobile ;
    - un dispositif de surveillance (26) destiné à surveiller le fonctionnement correct du microcontrôleur (12) ;
    - un dispositif de commande de validation (14) destiné à fournir un signal de validation numérique (b) au moyen auquel :
    si un fonctionnement incorrect du microcontrôleur (12) est constaté par le dispositif de surveillance (26), un verrouillage est signalé par un premier état du signal de validation (L) et
    si un fonctionnement correct du microcontrôleur (12) est constaté par le dispositif de surveillance (26), une libération de l'activation du composant devant être commandé est signalée par un deuxième état du signal de validation (H) ; et
    - un étage final (16) destiné à activer et à désactiver le composant devant être commandé sur la base du signal de commande (S) en prenant en considération le signal de validation (b, c, d) ;
    étant entendu que le dispositif de commande comprend également :
    - un dispositif de modulation (18, 20) destiné à moduler périodiquement le signal de validation (b) fourni par le dispositif de commande de validation (14) ; et
    - un dispositif d'évaluation (22) destiné à analyser le signal de validation (c) amené au niveau de sortie (16) pour déterminer la présence de la modulation périodique et à commuter l'étage final (16) dans un état d'erreur prédéterminé en cas d'absence de la modulation périodique.
  2. Dispositif de commande selon la revendication 1, dans lequel le dispositif de modulation (18, 20) comprend :
    - un générateur d'impulsions (20) destiné à produire une succession périodique d'impulsions de modulation ; et
    - un étage de modulation (18) monté en aval du dispositif de commande de validation (14), auquel le signal de validation (b) produit par le dispositif de commande de validation (14) ainsi que la succession périodique d'impulsions de modulation produite par le générateur d'impulsions (20) sont adressés et qui, au moins en cas de présence du deuxième état du signal de validation (H), inverse à chaque fois le signal de validation pendant la durée (tpuls) d'une impulsion de modulation ;
    et dans lequel le dispositif d'évaluation (22) est réalisé sous la forme d'un niveau d'évaluation monté en amont de l'étage final (16), auquel le signal de validation (c) produit par l'étage de modulation (18) est adressé, qui analyse le signal de validation (c) reçu afin de déterminer la présence des sections du signal de validation inversées conformément à la succession d'impulsions de modulation et qui, en cas de présence de ces sections du signal de validation inversées, transmet le signal de validation (d) à l'étage final (16) et, en cas d'absence de ces sections du signal de validation inversées, commute l'étage final (16) dans l'état d'erreur prédéterminé.
  3. Dispositif de commande selon la revendication 1 ou 2, dans lequel le dispositif de commande de validation (14) est intégré dans le dispositif de surveillance (26).
  4. Dispositif de commande selon la revendication 1, 2 ou 3, dans lequel le dispositif d'évaluation (22) est intégré dans un dispositif d'étage final (24) contenant le niveau l'étage final (16).
  5. Dispositif de commande selon la revendication 4, dans lequel le dispositif d'évaluation (22) possède une tenue à la tension plus élevée que le dispositif de surveillance (26) et/ou le microcontrôleur (12).
  6. Dispositif de commande selon l'une quelconque des revendications précédentes, dans lequel la période (Tpuls) de la modulation est définie de telle sorte qu'elle est au maximum égale, et de préférence inférieure, à un délai de réaction en cas d'erreur spécifié pour le dispositif de surveillance (26) du dispositif de commande.
  7. Dispositif de commande selon l'une quelconque des revendications précédentes, dans lequel le taux d'impulsions (tpuls/Tpuls) de la modulation est inférieur à 10 %.
  8. Procédé de commande du fonctionnement d'un composant d'un véhicule automobile, en particulier d'un moteur à combustion interne ou d'une transmission d'un véhicule automobile, au moyen d'un dispositif de commande qui comprend :
    - un microcontrôleur (12) destiné à fournir au moins un signal de commande (S) pour commander au moins un composant devant être commandé dans le fonctionnement du véhicule automobile ;
    - un dispositif de surveillance (26) destiné à surveiller le fonctionnement correct du microcontrôleur (12) ;
    - un dispositif de commande de validation (14) destiné à fournir un signal de validation numérique (b) au moyen auquel :
    si un fonctionnement incorrect du microcontrôleur (12) est constaté par le dispositif de surveillance (26), un verrouillage est signalé par un premier état du signal de validation (L) et
    si un fonctionnement correct du microcontrôleur (12) est constaté par le dispositif de surveillance, une libération de l'activation du composant devant être commandé est signalée par un deuxième état du signal de validation (H) ; et
    - un étage final (16) destiné à activer et à désactiver le composant devant être commandé sur la base du signal de commande (S) en prenant en considération le signal de validation (b, c, d) ;
    étant entendu que le procédé comprend :
    - une modulation périodique du signal de validation (b) fourni par le dispositif de commande de validation (14) ;
    - une analyse du signal de validation (c) amené à l'étage final (16) pour déterminer la présence de la modulation périodique ; et
    - une commutation de l'étage final (16) dans un état d'erreur prédéterminé si la modulation périodique est absente.
EP05731759A 2004-04-27 2005-03-21 Dispositif de commande electronique et procede pour faire fonctionner des composants d'un vehicule Expired - Fee Related EP1740815B1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE102004020538A DE102004020538B4 (de) 2004-04-27 2004-04-27 Elektronische Steuereinrichtung und Verfahren zur Steuerung des Betriebs von Kraftfahrzeugkomponenten
PCT/EP2005/051294 WO2005106229A1 (fr) 2004-04-27 2005-03-21 Dispositif de commande electronique et procede pour faire fonctionner des composants d'un vehicule

Publications (2)

Publication Number Publication Date
EP1740815A1 EP1740815A1 (fr) 2007-01-10
EP1740815B1 true EP1740815B1 (fr) 2012-10-31

Family

ID=34963663

Family Applications (1)

Application Number Title Priority Date Filing Date
EP05731759A Expired - Fee Related EP1740815B1 (fr) 2004-04-27 2005-03-21 Dispositif de commande electronique et procede pour faire fonctionner des composants d'un vehicule

Country Status (7)

Country Link
US (1) US7444226B2 (fr)
EP (1) EP1740815B1 (fr)
JP (1) JP4331778B2 (fr)
KR (1) KR101166594B1 (fr)
CN (1) CN100436792C (fr)
DE (1) DE102004020538B4 (fr)
WO (1) WO2005106229A1 (fr)

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102006020793A1 (de) * 2006-05-03 2007-11-08 Ab Skf Schaltungsanordnung und Verfahren zum Betrieb einer Schaltungsanordnung
ATE416403T1 (de) 2006-08-10 2008-12-15 Sick Ag Prozesssteuerung
DE102007033365A1 (de) * 2007-07-16 2009-01-22 Huf Hülsbeck & Fürst Gmbh & Co. Kg Eine ein temperaturabhängiges Signal liefernde Watchdog-Schaltung für einen Mikrocontroller einer ELV
JP4968099B2 (ja) * 2008-02-14 2012-07-04 株式会社アドヴィックス 駐車ブレーキ制御装置
EP3534226B1 (fr) * 2018-03-02 2022-02-09 Emm! solutions GmbH Système de contrôle modulaire

Family Cites Families (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5589639A (en) * 1986-02-28 1996-12-31 D'antonio; Nicholas F. Sensor and transducer apparatus
DE3728561C2 (de) * 1987-08-27 1997-08-21 Vdo Schindling Verfahren zur Überprüfung einer Überwachungseinrichtung für einen Mikroprozessor
DE4004427C2 (de) * 1989-02-22 1995-02-09 Motorola Inc Diagnostisches Störungsmeldesystem
US4932246A (en) * 1989-02-22 1990-06-12 Motorola, Inc. Diagnostic fault test system and circuit
DE4231432A1 (de) * 1992-09-19 1994-03-24 Vdo Schindling Verfahren und Einrichtung zur digitalen Steuerung eines Leistungs-Stellgliedes einer Brennkraftmaschine
DE4237198A1 (de) * 1992-11-04 1994-05-05 Bosch Gmbh Robert Verfahren und Vorrichtung zur Überprüfung einer Überwachungseinheit
JPH079883A (ja) * 1993-06-24 1995-01-13 Jidosha Denki Kogyo Co Ltd 自動定速走行装置
DE4438714A1 (de) * 1994-10-29 1996-05-02 Bosch Gmbh Robert Verfahren und Vorrichtung zur Steuerung der Antriebseinheit eines Fahrzeugs
WO1998040255A1 (fr) * 1997-03-12 1998-09-17 Küster & Co. Gmbh Systeme de freinage pour l'immobilisation de vehicules
US6213259B1 (en) * 1998-02-25 2001-04-10 Dura Automotive Systems, Inc. Device, method and system for control of an electrically powered parking brake
DE10057916C2 (de) * 2000-11-21 2003-04-17 Bosch Gmbh Robert Steuergerät für ein Rückhaltesystem in einem Kraftfahrzeug
US20040263099A1 (en) * 2002-07-31 2004-12-30 Maslov Boris A Electric propulsion system
US6997299B2 (en) * 2003-07-28 2006-02-14 Magna Powertrain, Inc. Hydraulic clutch actuation system

Also Published As

Publication number Publication date
KR20070006927A (ko) 2007-01-11
KR101166594B1 (ko) 2012-07-18
EP1740815A1 (fr) 2007-01-10
WO2005106229A1 (fr) 2005-11-10
DE102004020538A1 (de) 2005-12-01
JP4331778B2 (ja) 2009-09-16
CN1946924A (zh) 2007-04-11
JP2007535049A (ja) 2007-11-29
DE102004020538B4 (de) 2008-04-10
US7444226B2 (en) 2008-10-28
CN100436792C (zh) 2008-11-26
US20080033626A1 (en) 2008-02-07

Similar Documents

Publication Publication Date Title
DE102015222530B4 (de) Fahrzeugelektroniksteuervorrichtung
EP0185667B1 (fr) Remise a l'etat initial d'un microprocesseur
EP0101850B1 (fr) Dispositif de secours pour la marche au ralenti de camions
WO1997033083A1 (fr) Procede et dispositif de commande d'une unite motrice de vehicule
WO2005106230A1 (fr) Dispositif de commande electronique et procede pour commander le fonctionnement d'un composant de vehicule
EP1740815B1 (fr) Dispositif de commande electronique et procede pour faire fonctionner des composants d'un vehicule
DE4329919A1 (de) Verfahren zum Betreiben eines Verbrauchers in einem Fahrzeug
WO2007025844A1 (fr) Procede pour augmenter la disponibilite de moteurs de vehicules automobiles
DE10339464A1 (de) Kommunikationsfehler-Detektionsverfahren für ein Buskommunikationsnetz in einem Fahrzeug
DE10345424A1 (de) Motorluftansaugsteuervorrichtung und Motorluftansaugsteuerverfahren
EP1277095B1 (fr) Systeme et procede pour controler un dispositif de mesure, de commande et de regulation
EP1733131A1 (fr) Dispositif et procede destines a reduire la contamination d'un detecteur
EP1679729B1 (fr) Dispositif destiné à une émission de signal sûre
EP1305509B1 (fr) Ensemble circuit electronique et procede associe, servant a commander un actionneur sous la forme d'une soupape ou d'un injecteur
EP0596297B1 (fr) Méthode et dispositif pour tester une unité de surveillance de système de commande de moteur
DE10148646A1 (de) Brennkraftmaschinensteuerung sowie Verfahren zum Betrieb einer Brennkraftmaschinensteuerung
DE19755311B4 (de) Verfahren und Vorrichtung zur Informationsübertragung in Kraftfahrzeugen
DE102009050692A1 (de) Sicherheits-Kommunikationssystem zur Signalisierung von Systemzuständen
EP0508081B1 (fr) Circuit et procédé pour surveiller un appareil chauffé au combustible
EP2435915B1 (fr) Réduction du délai de réaction dans un système de surveillance d'un calculateur fonctionnel
DE19854306A1 (de) Steller mit kapazitivem Element
EP0326693A1 (fr) Système de sécurité pour moteur à combustion interne
DE102007018003A1 (de) Überwachungseinheit und Auswerteeinheit zum Überprüfen einer Fehlerfreiheit eines Systems
DE3808382A1 (de) Verfahren und vorrichtung zur ueberwachung eines sicherheitsabstellers bei brennkraftmaschinen
DE3838266A1 (de) Verfahren und vorrichtung zur ueberwachung eines sicherheitsabstellers bei brennkraftmaschinen, insbesondere dieselmotoren

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20061005

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): DE FR GB IT

DAX Request for extension of the european patent (deleted)
RBV Designated contracting states (corrected)

Designated state(s): DE FR GB IT

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: CONTINENTAL AUTOMOTIVE GMBH

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): DE FR GB IT

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

Free format text: NOT ENGLISH

REG Reference to a national code

Ref country code: DE

Ref legal event code: R096

Ref document number: 502005013229

Country of ref document: DE

Effective date: 20121227

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

26N No opposition filed

Effective date: 20130801

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 502005013229

Country of ref document: DE

Effective date: 20130801

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: DE

Payment date: 20140331

Year of fee payment: 10

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: FR

Payment date: 20140319

Year of fee payment: 10

Ref country code: IT

Payment date: 20140326

Year of fee payment: 10

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: GB

Payment date: 20140319

Year of fee payment: 10

REG Reference to a national code

Ref country code: DE

Ref legal event code: R119

Ref document number: 502005013229

Country of ref document: DE

GBPC Gb: european patent ceased through non-payment of renewal fee

Effective date: 20150321

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IT

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20150321

REG Reference to a national code

Ref country code: FR

Ref legal event code: ST

Effective date: 20151130

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: GB

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20150321

Ref country code: DE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20151001

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: FR

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20150331