WO2017148762A1

WO2017148762A1 - Method and device for verifying a trigger decision for triggering a safety device for a vehicle, method and device for triggering a safety device for a vehicle, sensor device for a vehicle, and safety system for a vehicle

Info

Publication number: WO2017148762A1
Application number: PCT/EP2017/054030
Authority: WO
Inventors: Nikolaos Gortsas
Original assignee: Robert Bosch Gmbh
Priority date: 2016-02-29
Filing date: 2017-02-22
Publication date: 2017-09-08
Also published as: DE102016203177A1

Abstract

The invention relates to a method for verifying a trigger decision for triggering a safety device (410) for a vehicle (400). The method has a step of reading a sensor signal (450) from at least one detection element (442) of a sensor device (440) of the vehicle (400). The sensor signal (450) represents a physical measurement variable to be taken into consideration in the trigger decision. The method further has a step of carrying out a check of the sensor signal (450) for the presence of a trigger event using an electronic circuit (444) of the sensor device (440). The electronic circuit (444) and the detection element (442) form an integrated assembly. The method also has a step of determining verification information (455) using the result of the check in order to output to an output interface (446) of the sensor device (440).

Description

Description title

A method and apparatus for verifying a deployment decision to fire a safety device for a vehicle, method and

Device for triggering a safety device for a vehicle, sensor device for a vehicle and safety system for a vehicle

State of the art

The invention is based on a device or a method according to the preamble of the independent claims. The subject of the present invention is also a computer program.

In particular, an airbag control device for a vehicle can be a two-path system architecture for verification of fire decisions or

Have trigger decisions.

DE 10 2011 077 486 B3 describes an apparatus and a method for triggering an occupant protection means.

Disclosure of the invention

Against this background, with the approach presented here, a method, a device which uses this method, and finally a corresponding computer program according to the main claims are presented. The measures listed in the dependent claims advantageous refinements and improvements of the independent claim device are possible. According to embodiments of the present invention, in particular, a verification of a triggering decision or fire decision, for example of a microprocessor or other electronic circuit in a control device for triggering a safety device of a vehicle by a microprocessor or other electronic circuit at least one sensor involved in the triggering decision can be taken. In other words, a verification of a triggering decision of a control device for a safety device of a vehicle can be realized by an electrical circuit of at least one sensor relevant for the triggering decision. Such a sensor can be an electronic

Have circuit for verification.

Advantageously, according to embodiments of the present invention, in particular, a dedicated verification device can be saved as a microprocessor or the like separately arranged by a controller for a safety device and a sensor and additionally or alternatively a simplified electronic circuit, such as an application-specific integrated circuit (ASIC) integrated circuit) or the like, are provided in the controller. In other words, an extra microprocessor outside the

Sensors and the control unit and additionally or alternatively a complex application-specific integrated circuit can be saved in the control unit. Thus, a reduction in area, communication bandwidth, and power consumption can be achieved as well as a more compact and cost-efficient controller can be provided. By taking over the verification by the electronic circuit of the sensor, in particular an area consumption, a complexity in a software and a

Energy consumption can be reduced. The saving of the separate

Verification apparatus may also reduce area consumption, increase flexibility in evaluation logic, and reduce a communication load. By calculating the verification in an electronic circuit of a sensor increased flexibility can be achieved with regard to a design of the verification, which can be made possible, an improved distinction between a plausible accident situation and a

Borderline situation that does not lead to an accident. It sure can Preventing possible errors in a component, such as

Example, a microprocessor, lead to an unwanted trigger decision.

A method is presented for verifying a triggering decision to trigger a safety device for a vehicle, the method comprising the following steps:

Reading in a sensor signal from at least one detection element of a sensor device of the vehicle, the sensor signal representing a physical measured variable for consideration in the triggering decision;

Carrying out a check of the sensor signal for the presence of a triggering event using an electronic circuit of the sensor device, wherein the electronic circuit and the

Detection element form an integrated assembly; and

Determining a verification information using a result of the check for output to an output interface of

Sensor device.

This method can be implemented, for example, in software or hardware or in a mixed form of software and hardware, for example in a control device or a device. The vehicle may be a motor vehicle. The safety device can be means for

Personal protection, occupant protection or the like, for example, at least one airbag. The sensor device can at least one

Acceleration sensor, rotation rate sensor or the like as

Have detection element. The physical measurand can be a

Acceleration, a rate of rotation or the like. The

Triggering event may be due to a characteristic signal level

to be marked. The electronic circuit and the sensing element of the sensor device can be mounted on a common printed circuit board or

Divorce board be arranged within a common housing be arranged, be potted together and in addition or alternatively be hardwired together.

According to one embodiment, the verification information determined in the step of determining may be a verification bit. Thus, the

Verification information either the value one or the value zero. Such an embodiment offers the advantage that a

Communication bandwidth for transmitting the verification information can be reduced.

In particular, the one determined in the step of determining

Verification information may be designed to effect locking or unlocking of release means of the safety device. Such

Embodiment offers the advantage that a triggering of the safety device reliably allows for the present triggering event and can be safely prevented in the absence of triggering event.

Also, in the performing step, the check may be performed using at least one check parameter representing a threshold, a hold time, and additionally or alternatively a filter characteristic. In particular, a filter parameter may have at least one corner frequency

which differs from a frequency at the output interface of the sensor device. Such an embodiment offers the advantage that sensor signals can be subjected to an accurate and versatile check in order to enable reliable verification.

Further, in the step of performing, at least one check parameter for the check may be set depending on an application information representing a type of a trigger event. The type of

Triggering event, for example, by at least one typical

Acceleration property be characterized. In particular, the type of triggering event may include acceleration along at least one typical axis. Such an embodiment offers the advantage that different applications, accident scenarios or the like can be considered, so that a protective function of the safety device can be extended.

According to one embodiment, in the step of performing the

Check the sensor signal are filtered, a threshold comparison made to the sensor signal and depending on the

Threshold comparison a counter can be incremented or decremented. In this case, the counter can represent the result of the check. In this case, the sensor signal can be filtered in particular using a low-pass filter. Such an embodiment offers the advantage that an accurate and reliable evaluation of the sensor signal can be made to enable a secure verification.

A method for triggering a safety device for a vehicle is also presented, the method comprising the following steps:

Generate a trigger request depending on at least one

Sensor signal from at least one sensor device of the vehicle; and

Making a trip decision to trigger the safety device depending on the trip request and the according to a

Embodiment of the above-mentioned method for verification provided verification information.

This method can be implemented, for example, in software or hardware or in a mixed form of software and hardware, for example in a control device or a device. The triggering procedure is in

Compatible with an embodiment of the above method for verification executable. In the step of generating, the at least one sensor signal can be evaluated. The triggering decision may be represented by a triggering signal that may be provided for output to the security device.

Furthermore, a sensor device for a vehicle is presented, wherein the sensor device has the following features: at least one detection element for detecting a physical measured variable for consideration in a triggering decision for triggering a safety device for the vehicle; an electronic circuit that is designed to take one step

To carry out the embodiment of the above-mentioned method for verification; and an output interface configured to receive the sensor signal and the

Output verification information.

In connection with or using the sensor device, an embodiment of the above-mentioned method for verification may be carried out. The output interface may be configured to accommodate the

Sensor signal in unprocessed form and the verification information

issue.

In addition, a safety system for a vehicle is presented, wherein the safety system has the following features: at least one embodiment of the aforementioned sensor device; at least one safety device; and a control unit configured to perform steps of an embodiment of the above-mentioned method for triggering, wherein the control unit can be connected or connected to the at least one sensor device and the at least one safety device in a manner capable of transmitting signals.

Thus, in connection with or using the security system, an embodiment of the above-mentioned method for verification and an embodiment of the above-mentioned method for triggering can be carried out. The approach presented here also provides a device which is designed to implement the steps of a variant of a method presented here

to implement, control or implement appropriate facilities. Also by this embodiment of the invention in the form of a device, the object underlying the invention can be solved quickly and efficiently.

For this purpose, the device may comprise at least one computing unit for processing signals or data, at least one memory unit for storing signals or data, at least one interface to a sensor or an actuator for reading sensor signals from the sensor or for outputting data or control signals to the sensor Actuator and / or at least one

Communication interface for reading or outputting data embedded in a communication protocol. The arithmetic unit may be, for example, a signal processor, a microcontroller or the like, wherein the memory unit is a flash memory, an EPROM or a

magnetic storage unit can be. The communication interface can be designed to read or output data wirelessly and / or by line, wherein a communication interface that can read or output line-bound data, for example, electrically or optically read this data from a corresponding data transmission line or output to a corresponding data transmission line.

In the present case, a device can be understood as meaning an electrical device which processes sensor signals and outputs control and / or data signals in dependence thereon. The device may have an interface, which may be formed in hardware and / or software. In the case of a hardware-based embodiment, the interfaces can be part of a so-called system ASIC, for example, which contains a wide variety of functions of the device. However, it is also possible that the interfaces are their own integrated circuits or at least partially consist of discrete components. In a software training, the interfaces may be software modules that are present, for example, on a microcontroller in addition to other software modules. In an advantageous embodiment, the device is used to control the triggering of at least one safety device. For this purpose, the device can access, for example, sensor signals such as acceleration signals and motion signals. Control or activation is achieved via actuators such as gas generators of airbags and seat belt tensioners.

Also of advantage is a computer program product or computer program with program code which can be stored on a machine-readable carrier or storage medium such as a semiconductor memory, a hard disk memory or an optical memory and for carrying out, implementing and / or controlling the steps of the method according to one of the above

described embodiments, in particular when the program product or program is executed on a computer or a device.

Embodiments of the approach presented here are shown in the drawings and explained in more detail in the following description. It shows:

Fig. 1 is a schematic representation of a verification of a

Tripping decision by two microprocessors;

Fig. 2 is a schematic representation of a verification of a

Triggering decision by a calculation in an application-specific integrated circuit;

Fig. 3 is a schematic representation of a vehicle with a

Security system according to an embodiment;

4 shows a schematic representation of a sequence of a verification of a triggering decision according to an exemplary embodiment;

5 is a schematic representation of a security system according to an embodiment; 6 is a schematic representation of a security system according to an embodiment;

7 is a flowchart of a method for verifying according to an embodiment; and

8 is a flow chart of a method for triggering according to one embodiment. In the following description of favorable embodiments, the same or similar reference numerals are used for the elements shown in the various figures and similar acting, with a repeated description of these elements is omitted. Fig. 1 shows a schematic representation of a verification of a

Tripping decision by two microprocessors. In other words, FIG. 1 shows a safety system 100 for a vehicle, in particular

Motor vehicle. The safety system 100 is designed, for example, to make a triggering decision to trigger or ignite one or more airbags.

Of the security system 100 in Fig. 1, a sensor 110, a first

Microprocessor 120, a second microprocessor 130, means 140 for unlocking or locking of ignition means and an ignition device or triggering device 150 or 150 for effecting an ignition or

Triggering shown.

Here, the first microprocessor 120 on the one hand and the second

Microprocessor 130 and the device 140 on the other hand between the sensor 110 and the device 150 arranged in parallel. The sensor 110 is signal transmitting capable of being connected to the first microprocessor 120 and to the second microprocessor 130. The first microprocessor 120 is signal transmitting capable connected to the device 150. The second

Microprocessor 130 is capable of signal transmission with device 140 connected, wherein the device 140 is capable of signal transmission with the

Device 150 is connected.

The first microprocessor 120 and the second microprocessor 130 are configured to receive a sensor signal 115 from the sensor 110. The first microprocessor 120 is configured to process the sensor signal 115 and to output a spark request signal 125 to the device 150. The second microprocessor 130 is configured to receive the

Process sensor signal 115 and the device 140 to control to cause unlocking or locking of the ignition means. The device 140 is designed to output an enable signal 145 to the device 150 depending on an unlocking or locking of the ignition means.

Fig. 2 shows a schematic representation of a verification of a

Tripping decision by a calculation in an application-specific integrated circuit. FIG. 2 shows a security system 100 which corresponds to the security system shown in FIG. 1, except that an application-specific integrated circuit 230 (ASIC) is provided instead of the second microprocessor.

With reference to FIGS. 1 and 2, it should be noted that, in particular, an airbag control unit has a two-path system architecture for the verification of triggering decisions or fire decisions. This is done on the microprocessor of the controller, i. H. the first microprocessor 120, a trip decision made by a second independent

Hardware instance, d. H. the second microprocessor 130 and the

application specific integrated circuit 230, is verified. The second hardware instance may be a second microprocessor 130 that calculates the same or a similar algorithm as the first microprocessor 120. The second hardware instance may alternatively be the ASIC 230 on which an algorithm for verifying the triggering decision may be implemented. The airbag is ignited only when the decisions from the first microprocessor 120 and the second hardware instance 130 or 230 are positive. FIG. 3 shows a schematic representation of a vehicle 400 having a security system 410 according to an exemplary embodiment. The vehicle 400 is a motor vehicle. According to the embodiment shown in FIG. 3, the security system 410 is embodied as an airbag system.

The security system 410 has, according to that shown in FIG

Embodiment, a safety device 420, a control unit 430 and a sensor device 440 on. In this case, the sensor device 440

signal transmission capable connected to the control unit 430. The control unit 430 is connected to the safety device 420 in a manner capable of transmitting signals.

The sensor device 440 has according to that shown in FIG

Embodiment, a detection element 442, an electronic circuit 444 and an output interface 446 on. At least that is

Detection element 442 and the electronic circuit 444 arranged on a common circuit board and / or in a common housing or form an integrated assembly. The electronic circuit 444 is embodied, for example, as a microprocessor or an application-specific integrated circuit. The detection element 442 is

signal transmittable connected to the electronic circuit 444 and to the output interface 446. The electronic circuit 444 is also signal transmitting capable connected to the output interface 446.

The detection element 442 is designed to be a physical measurand for consideration in a triggering decision for triggering the

Safety device 420 to capture. Further, the sensing element 442 is configured to provide a sensor signal 450 which detected

Measurements represented. Also, the sensing element 442 is configured to provide the sensor signal 450 to the electronic circuit 444 and the output interface 446.

For example, the detection element 442 is formed around a

Acceleration and / or rate of rotation. The electronic circuit 444 is configured to generate verification information 455 using the sensor signal 450. In other words, the electronic circuit 444 is designed to be a

Tripping decision to trigger the safety device 420 to verify.

The electronic circuit 444 has a read-in device 462, a

Test device 464 and a determination device 466 on. In this case, the read-in device 462 is designed to receive the sensor signal 450 from the

Read in detection element 442. The test device 464 is designed to check the sensor signal 450 for the presence of a

Triggering event. The triggering event can be achieved, for example, by a characteristic signal curve of the sensor signal 450

be characterized, for example, an acceleration value that is above a threshold. The determining device 466 is designed to be under

Use a result of the verification to determine the verification information 455. The verification information 455 is present, for example, as a bit or a verification bit. The electronic circuit 444 is configured to supply the verification information 455 to the output interface 446 of FIG

Output sensor device 440.

The output interface 446 is configured to output the sensor signal 450 and the verification information 455. In this case, the output interface 446 is designed to receive the sensor signal 450 from the detection element 442 and the verification information 455 from the electronic

Circuit 444 to receive. In particular, the output interface 446 and 40 is designed to output the sensor signal 450 and the verification information 455 to the control unit 430 or to provide it to the control unit 430 for output.

The controller 430 is configured to trigger the safety device 420. According to the exemplary embodiment illustrated in FIG. 3, the control unit 430 has a generating device 432 and a

Decision facility 434. The generator 432 is designed to receive the sensor signal 450 from the sensor device 440, more precisely the Output interface 446 of the sensor device 440 to receive. Furthermore, the generation device 432 is designed to generate a triggering request as a function of the sensor signal 450. Also, the generator 432 is configured to provide a request signal 433 representing the triggering request. The decision device 434 is designed to receive the request signal 433 from the generation device 432 and the verification information 455 from the sensor device 440. The decision device 434 is also designed to make the triggering decision for triggering the safety device 420, depending on the request signal 433 and the verification information 455.

The control unit 430 is designed to output a trigger signal 435 to the safety device 420 depending on the triggering decision. Thus, the controller 430 is configured to generate the trigger signal 435 using the sensor signal 450 and the verification information 455.

According to one embodiment, the safety device 420 further comprises release means 422 and ignition means 422, respectively. The verification information 455 may cause the release means 422 of the security device 420 to lock or unlock. Here, the triggering signal 435 may be received by the triggering means 422.

The controller 430 and the safety device 420 may be implemented as a unit or integrated assembly according to one embodiment. According to embodiments, the safety device 420 may also be another device for occupant protection, personal protection or the like.

4 shows a schematic representation of a sequence 500 of a verification of a triggering decision according to an exemplary embodiment. The process 500 or the verification can be carried out by the electronic circuit of the sensor device from FIG. 3 or a similar electronic circuit. In other words, FIG. 4 shows a workflow 500 in an exemplary manner

Microprocessor executed electronic circuit of the sensor device for verification of the triggering decision or ignition decision made in the control unit.

At a block 501, the process 500 starts. In a block 502, signal filtering or filtering of the sensor signal takes place. In a following

Block 503, a threshold comparison is performed. In a subsequent block 504, a counter treatment is performed, whereupon in a subsequent block 505 a verification bit is handled. Subsequently, it is checked in a block 506 whether the verification bit has the value 1.

If the check in block 506 reveals that the verification bit is equal to 1, then flow 500 proceeds to block 507, where it is checked whether the sensor or the sensor device is not in one

Error status is. If the check in block 507 reveals that the sensor device is not in an error state, the procedure proceeds

500 to block 508, where the verification bit is at a

Sensor output or the output interface of the sensor device is set. If the check in block 506 reveals that the verification bit is not 1, then flow 500 proceeds to block 509 where the verification bit at the sensor output is cleared. Even if the

Verification in block 507 indicates that the sensor device is in a fault condition, flow 500 proceeds to block 509.

After block 508 or after block 509, flow 500 proceeds to block 510, which represents an end of flow 500.

In particular, FIG. 4 shows, in other words, a sequence 500 for plausibility of a fire decision, for example for one of the

Rollover detection in the form of a program with several subfunctions. A first function, represented by block 502, includes a low-pass filter. A second function, represented by block 503, includes a threshold comparison of the low pass filtered sensor signal. A third function, represented by block 504, includes a counter, which is initialized to a maximum value each time the filtered sensor signal sweeps the threshold. If the threshold has not been exceeded again, the counter is counted down. A fourth function represented by block 505 sets at its output the verification bit x to 1 if the counter is greater than zero. This documents to the outside that the current situation is considered to be a plausible accident situation. The fourth function sets at its output the verification bit x to 0, provided that the counter is zero. This signals to the outside that the situation can not be a plausible accident. A fifth function, represented by blocks 506 and 507, evaluates the verification bit and the status of the sensor. If the verification bit is set and the sensor is not in an error state, then the verification bit is set at the sensor output, as represented by block 508. If the verification bit is not set, or if the sensor is in an erroneous state, but the verification bit is set, then the verification bit is not set at the sensor output, as represented by block 509. Alternatively, another error handling strategy may be implemented.

5 shows a schematic representation of a security system 410 according to an exemplary embodiment. In other words, FIG. 5 shows, in particular, examples of clearances or tripping decisions for different ones

Accident detection functions. The security system 410 is similar to the security system shown in FIG.

5, a first sensor device 440 with an electronic circuit 444, a second sensor device 640 with an electronic circuit 444, a third sensor device 670,

Sensor signals 450, Verifikationsbits 455, the generating device 432 in the form of a microcontroller (μθ), the request signal 433 and a

Ignition request, an application-specific integrated circuit 636, means 638 for unlocking or locking the release means or

Ignition means, an enable signal 655 and the decision means 434 for deciding on the ignition shown. The first sensor device 440 here is assigned to a rollover detection function or is designed to detect a rollover of the vehicle. According to the exemplary embodiment shown in FIG. 5, the first sensor device 440 has three detection elements, a first acceleration sensor for acceleration along a Y-axis (aY), a second acceleration sensor for acceleration along a Z-axis (aZ) and a rotation rate sensor for a rotation about an X-axis (ωΧ).

The second sensor device 640 is an ESP application (ESP =

electronic stability program). In this case, the second

Sensor device 640 three detection elements on, a first

Acceleration sensor for acceleration along the X-axis (aX), a second acceleration sensor for acceleration along the Y-axis (aY) and a rotation rate sensor for rotation about the Z-axis (ωΖ).

The third sensor device 670 is designed to prevent an impact of the

Detect vehicle at front, side and / or rear. In this case, the second sensor device 640 has two detection elements, a first one

Acceleration sensor for acceleration along the X-axis (aX) and a second acceleration sensor for acceleration along the Y-axis (aY).

The generation device 432 or the microcontroller 432 is designed to receive the sensor signals 450 from the first sensor device 440, the second one

Sensor device 640 and the third sensor device 670 to receive. The application specific integrated circuit 636 is configured to receive the verification bits 455 from the first sensor device 440 and the second sensor device 640. The application specific integrated circuit 636 is signal transmitting capable connected to the device 638. The device 638 is designed to output the release signal 655 upon an unlocking of the release means of the safety device to the decision device 434. The decision device 434 is designed to receive the request signal 433 and the enable signal 655 to receive and possibly trigger the safety device to trigger, for example, an ignition of an airbag.

In other words, it should be noted that the sensors for

Rollover detection, such as the first sensor device 440, or for the ESP

Application, like the second sensor device 640, has its own

Microprocessor 444 and each exemplary three Sensierelemente or

Have detection elements. The first sensor device 140 has two acceleration sensors in the lateral and vertical vehicle direction and a rotation rate element for detecting rotations about the longitudinal axis.

The second sensor device 640 has two acceleration elements in the longitudinal and lateral vehicle directions and a rotation rate element for detecting yaw movements. The verification bit 455 is evaluated in the controller by the application specific integrated circuit 636.

As long as the verification bit 455 is set to 1, the ignition means are unlocked in hardware. A fire decision is then over the

Microcontroller 432 of the controller possible. If the verification bit is zero, then the ignition means are locked. A fire decision via the microcontroller 432 of the controller is not possible. A hardware two-pass airbag ignition is given.

6 shows a schematic representation of a security system 410 according to an exemplary embodiment. The security system 410 is the

Security system of Fig. 3 and Fig. 5 similar. Here it is

Security system 410 is adapted to respond to a rollover detection, wherein a calculation of the verification takes place in the sensor device 440. The sensor device 440 is hereby for example as a

Roll rate sensor executed. Furthermore, the sensor device 440 is designed to verify a triggering decision in the event of a rollover of the vehicle.

Of the security system 410 in Fig. 6, the sensor device 440 with the detection element 442, which is here designed to detect a rate of rotation Ωχ, and with the electronic circuit 444 in the form of a microcontroller, wherein the electronic circuit 444 is a filter device 761, a Threshold comparison means 763 and a hold timer 765, the verification bit 455, the generator 432 and the microcontroller 432 and the decision means 434 with an adder 782 for combining the Verifikationsbits 455 and a request signal from the generator 432 and with a trigger 784 shown. The

Decision facility 434 may also be referred to as a system ASIC

be designated.

The verification may be performed in the form of a program in the electronic circuit 444 of the sensor device 440 and at the

Output interface as a verification bit 455 documented. This verification image 455 may be provided via a communication interface, such as PSI, SPI or CAN, by a hardware component in the control unit that is independent of the microprocessor 432 of the control unit, ie. H. the system ASIC, to lock or unlock the ignition means.

According to one embodiment, the verification with other parameters may be applied to a longitudinal acceleration channel of an ESP sensor to verify a fire decision in the event of a front or rear impact. According to a further embodiment, the verification with other parameters may be applied to a lateral acceleration channel to enable a fire decision in the event of a side impact

to verify. FIG. 7 shows a flow chart of a method 800 for verification according to one exemplary embodiment. The method 800 is executable to perform a

Tripping decision for triggering a safety device for a

Vehicle to verify. In this case, the method 800 for verifying in

Connection with the shown in Fig. 3, Fig. 5 or Fig. 6 or a similar security system and / or one shown in Fig. 3, Fig. 5 or Fig. 6 or a similar sensor device executable. Also, the method 800 for verification is to be considered in conjunction with the process of FIG. 4.

The method 800 for verifying comprises a step 810 of reading in a sensor signal from at least one detection element of a sensor device of the vehicle. In this case, the sensor signal represents a physical measured variable for consideration in the triggering decision. In a subsequently executable step 820 of performing, in the method 800 for verifying using an electronic circuit of the sensor device, a check of the sensor signal for a presence of

Tripping event performed. The electronic circuit and the

Detection element thereby form an integrated module. In one

Subsequently executing step 830 of determining, using a result of the check performed in the step 820 of performing, a verification information for output to a

Output interface of the sensor device determined.

According to one embodiment, the verification information determined in step 830 of determining is a verification bit and / or configured to effect locking or unlocking of release means of the security device. Additionally or alternatively, in one embodiment, in step 820 of performing, the verification is performed using at least one test parameter representing a threshold, a hold time, and / or a filter characteristic. Optionally, according to one embodiment, at least in step 820 of performing

Test parameters set for verification depending on application information. The application information represents a type of a triggering event. According to one embodiment, in step 820 of performing the check, the sensor signal is filtered, a threshold comparison is further made on the sensor signal, and in addition, depending on the threshold comparison, a counter is incremented or decremented. The counter hereby represents the result of the check carried out in step 820 of the execution. FIG. 8 shows a flow diagram of a method 900 for triggering according to one exemplary embodiment. The method 900 is executable to a

Safety device for a vehicle. In this case, the method 900 for triggering in conjunction with that shown in FIG. 3, FIG. 5 or FIG. 6 or a similar safety system can be executed. Also, the method 900 is for Triggered in connection with or in connection with the method for

Verify from Fig. 7 executable.

The triggering method 900 includes a step 910 of generating a trigger request in response to at least one sensor signal from at least one sensor device of the vehicle. In a subsequently executable step 920, in the method 900, a triggering decision for triggering the safety device is made depending on the triggering request and the verification information, wherein the verification information is provided by executing the method of verifying FIG. 7.

With reference to Figures 4 to 8, in summary and in other words, it should be noted that airbag sensors, such as sensor devices 440 and 640, may for example have their own microprocessor 444 and programming interface 444, respectively. It can be realized by the use of the electronic circuit 444 in a sensor device 440 or 640 an evaluation logic for verification of the fire decision. For this purpose, a preprocessing of the sensor signals 450 may belong to arrive at a physical useful signal. Possible processes for this are window integrals or filters with others

Corner frequencies as at the sensor output. Furthermore, this can be done by calculating an evaluation algorithm with flexible thresholds for various

Use cases belong. In addition, this may include an implementation of an application-specific holding mechanism 765 to provide a

To enable fire decision in a defined or predefined time interval. For example, rollover detection may be different

Requirements for the retention mechanism 765 as a

Have frontal impact detection. If the sensor device 440 has verified a situation, this is made available to the sensor device 440 on the basis of the verification information 455 at the output interface 446. As a result, in particular a communication bandwidth can be reduced compared to system architectures in which the at least 10 bit wide sensor signals are to be made available to a second hardware instance. If an exemplary embodiment comprises a "and / or" link between a first feature and a second feature, then this is to be read so that the embodiment according to one embodiment, both the first feature and the second feature and according to another embodiment either only first feature or only the second feature.

Claims

claims

A method (800) for verifying a triggering decision to trigger a safety device (410) for a vehicle (400), the method (800) comprising the steps of:

Reading in (810) a sensor signal (450) from at least one

Detecting element (442) of a sensor device (440, 640) of the vehicle (400), wherein the sensor signal (450) represents a physical measurand for consideration in the triggering decision;

Performing (820) a check of the sensor signal (450) for a presence of a triggering event using a

electronic circuit (444) of the sensor device (440, 640), wherein the electronic circuit (444) and the detection element (442) form an integrated assembly; and

Determining (830) verification information (455) using a result of the check for outputting to a

Output interface (446) of the sensor device (440, 640).

The method (800) of claim 1, wherein the verification information (455) determined in step (830) of determining is a verification bit.

The method (800) of any one of the preceding claims, wherein the step of determining (830)

Verification information (455) is designed to effect locking or unlocking of release means (422) of the safety device (420). The method (800) according to one of the preceding claims, wherein in the step (820) of performing the check under

Using at least one test parameter is performed, which represents a threshold value, a holding time and / or a filter characteristic.

A method (800) according to any one of the preceding claims, wherein in the step (820) of performing, setting at least one test parameter for verification in response to application information representing a type of a triggering event.

The method (800) of any one of the preceding claims, wherein in step (820) of performing the check

Sensor signal (450) is filtered, a threshold comparison is made to the sensor signal (450) and depending on the

Threshold comparison a counter is incremented or decremented, the counter representing the result of the check.

A method (900) for triggering a safety device (420) for a vehicle (400), the method (900) comprising the following steps:

Generating (910) a trigger request (433) dependent upon at least one sensor signal (450) from at least one

Sensor means (440, 640, 670) of the vehicle (400); and

Meeting (920) a trigger decision to trigger the

Security device (420) depending on the trigger request (433) and provided by the method (800) for verifying according to one of the preceding claims

Verification information (455).

Sensor device (440, 640) for a vehicle (400), wherein the

Sensor device (440, 640) has the following features: at least one detection element (442) for detecting a

physical quantity to be taken into account in one

Triggering decision for triggering a safety device (420) for the vehicle (400); an electronic circuit (444) configured to perform steps of the method (800) for verification according to any one of the preceding claims; and an output interface (446) configured to receive the

Sensor signal (450) and the verification information (455) output.

A security system (410) for a vehicle (400), wherein the

Security system (410) comprises the following features: at least one sensor device (440, 640) according to one of the preceding claims; at least one safety device (420); and a controller (430) configured to perform steps of the triggering method (900) of any of the preceding claims, wherein the controller (430) is signal transmitting capable with the at least one sensor device (440, 640) and the at least one safety device (4). 420) is connectable or connected.

Apparatus (444; 430) arranged to execute steps of the method (800; 900) according to any one of the preceding claims in respective units (462, 464, 466; 432, 434).

A computer program adapted to execute the method (800; 900) according to one of the preceding claims.

A machine readable storage medium storing the computer program of claim 11.