Method, computing unit and storage medium for checking that a system is suitable for its intended use

Abstract

The present invention relates to a method for checking whether a technical system consisting of at least two technical subsystems (100, 200, 300) is suitable for its intended use, wherein in a first checking mode, data from a first technical subsystem (200) of the at least two technical subsystems (100, 200, 300) is received by a second technical subsystem (100) of the at least two technical subsystems (100, 200, 300) and processed at the second technical subsystem to perform at least one checking step, wherein in a second checking mode, data from a computational model (400) of the first technical subsystem (200) is received by the second technical subsystem (100) and processed at the second technical subsystem to perform the at least one checking step.

Description

TECHNICAL FIELD

[0001] The invention relates to a method for checking whether a system composed of at least two technical subsystems is suitable for its purpose of use and a computing unit and a computer program for carrying out the method. BACKGROUND

[0002] There are different approaches to verifying technical systems composed of subsystems or checking whether these technical systems are suitable for their purpose of use. It is possible, for example, to bring the technically developed subsystems together at one location and to verify them with one another. However, it is disadvantageous in this respect that confidential information often has to be disclosed in connection with the delivery of the subsystems to the common location. High transport costs can also be required. Here, in addition to the transport costs, political and security-technical restrictions are also to be taken into account. A further disadvantage is that modifications to the subsystems at the common location in order to better adapt them to the combined system are often not technically possible.

[0003] Alternatively, it is thus possible to develop the combined technical system or the overall system at one location from the outset and to check it on site as to whether it is suitable for the purpose of use. However, it is disadvantageous in this respect that complex combined systems require a plurality of specialist skills which are often not concentrated in one company or at the development location. SUMMARY

[0004] According to the invention, a method for checking whether a technical system composed of at least two technical subsystems is suitable for its purpose of use having the features of the independent patent claim is proposed as well as a computing unit and a computer program for carrying out the method having the features of the independent patent claim. Advantageous design proposals are the subject matter of the dependent claims and the following description.

[0005] The invention makes use of the measure of networking the subsystems developed at a distance apart in order to verify the subsystems in interaction with one another. In particular, for this purpose the technical subsystems of the combined technical system are coupled to one another during the checking process for the verification or during the checking as to whether it is suitable for the purpose of use, so that data are exchanged between the subsystems and are processed in order to carry out at least one checking step. At the same time, there is also a second checking mode in which data of a computing model of at least one of the technical subsystems are exchanged with at least one other technical subsystem and are processed in order to carry out the at least one checking step. In this case, i.e. one of the subsystems is replaced by a (computing) model of the subsystem.

[0006] Thereby, transport and security problems can be avoided and the core competence of different development environments can still be used. For example, test benches with different subsystems can be networked with one another in order to thus hand over measurement results of one subsystem to another development environment and use these measurement results for checking this development environment. The subsystems can be coupled to one another, for example, by a satellite connection, a mobile radio connection, a DSL connection or another data connection. In particular for cases in which time requirements for data transmission, such as latencies, cannot be adhered to, another checking mode with a calculation model is used. In this way, if a hard real-time requirement is required by another subsystem for a test bench test with regard to one subsystem and this hard real-time requirement cannot be fulfilled for technical reasons, the hard real-time requirement can be better adhered to, in particular, by the calculation model of this other checking mode.

[0007] If the communication interface is paralyzed or cannot ensure the hard real-time requirement for this communication interface, the calculation model can be used in the process of the verification as a basis for the exchange of information between the different checking environments.

[0008] A bidirectional connection can also be provided between the subsystems, that is to say the second subsystem can also, depending on the checking mode, transmit state data to the first subsystem or the calculation model, which can then be further processed at the first subsystem or the calculation model.

[0009] Preferably, the at least two technical subsystems are respectively spatially separated during the method and are connected to one another by a data connection. This is advantageous because by spatial separation the technical subsystems can be developed separately and do not need to be transported to a common location.

[0010] Suitably, a changeover between the first and the second checking mode is automatically made depending on the quality of the data connection, wherein the quality of the data connection is preferably determined by measuring the latency and / or the bandwidth. This is advantageous because in this way the first checking mode can advantageously be used when the data connection is good enough in order to exchange actually generated, for example, detected by a measurement system, data, whereas in the case of a data connection which is not sufficient for test purposes, data can be exchanged with the calculation model, so that the at least one checking step is not invalidated.

[0011] In particular, the calculation model is trained by means of a machine learning method, such as an artificial neural network, preferably a so-called deep neural network ("Deep Learning"). In particular, for this purpose the input variables of the first technical subsystem and the pertaining output variables are used. This is advantageous because the properties of the component to be checked in the verification process can be learned by a self-learning method.

[0012] Preferably, the calculation model comprises a correlation between at least one input variable and at least one output variable of the first technical subsystem. By means of a machine learning method, in particular, a highly non-linear correlation of a plurality of parameters can be learned very precisely.

[0013] For example, the calculation model is trained during a run of the first technical subsystem on a test bench. In this case, it is advantageous that learning cases can be generated specifically, which have a particularly high information content. Alternatively or additionally, the calculation model can be trained on the basis of data transmitted in the first operating mode. This is advantageous because in this way a separate structure for the learning process is not required.

[0014] In particular, the calculation model is implemented in a computing unit or realized there, in particular in a computing unit remote from or separate from the first subsystem, for example at the site of the second subsystem or in the sense of a so-called cloud solution. Thus, the second subsystem has reliable access to the calculation model.

[0015] Preferably, the combined technical system is a vehicle. Vehicles are very complex combined systems, in which each subsystem requires very specialized skills in development.

[0016] In a particularly advantageous embodiment, at least one of the at least two subsystems is selected from an internal combustion engine, an electric motor, a traction battery and a control unit or control device. These are examples of subsystems which often have to be designed in a separate development environment.

[0017] In particular, at least one of the at least two technical subsystems is examined on a test bench during the method. This is advantageous because the subsystem can thus be loaded with predetermined input variables.

[0018] In a particularly advantageous embodiment, the calculation model is implemented in a vehicle control device. In this way, the application effort in the vehicle can be reduced, because the application of the vehicle control device already takes place in a coupled test bench run in the framework of a networked examination environment before the vehicle control device is embedded in the physical vehicle. The battery control device of a vehicle is an example. The control device can be applied in a test complex before it is embedded in the vehicle.

[0019] A computing unit according to the invention, for example a control device of a motor vehicle, is in particular programmed technically to carry out a method according to the invention.

[0020] An implementation of the method according to the application in the form of a computer program or computer program product having program code for carrying out all method steps is also advantageous, especially when the control device being implemented is also used for other tasks and thus always present, as this results in particularly low costs. In particular, data carriers suitable for providing the computer program are magnetic, optical and electronic memories such as hard disks, flash memories, EEPROMs, DVDs and others. It is also possible to download the program via a computer network (Internet, Intranet, etc.).

[0021] Further advantages and embodiments of the application result from the description and the drawings.

[0022] The application is schematically shown in the drawings according to embodiments and described in the following with reference to the drawings. BRIEF DESCRIPTION OF DRAWINGS

[0023] Figure 1 Three schematically shown technical subsystems are shown, which are verified according to a preferred embodiment of the method according to the application according to a first checking mode;

[0024] Figure 2 Three schematically shown technical subsystems are shown, which are verified according to a preferred embodiment of the method according to the application according to a second checking mode. DETAILED DESCRIPTION

[0025] Now, a preferred embodiment of the method according to the application is described according to Figure 1 and 2

[0026] In Figure 1 and 2 , a first technical subsystem 200, a second technical subsystem 100 and a third technical subsystem 300 are shown. The technical subsystems 100, 200, 300 are set up to form a technical overall system in combination, here for example a hybrid vehicle. Here, the technical subsystems are spatially separated from one another and connected to one another by data connections. The technical subsystems are for example at different development partners.

[0027] In the drawings, each technical subsystem 100, 200, 300 is shown in a manner divided into four fields. Here, the upper left field each represents a simulated or virtual component of the subsystem in development, the lower left field represents a physical component of the subsystem in development, which is checked during the checking process, for example on a suitable test bench. The upper right field represents a simulated component of the other subsystem (remaining system), while the lower right field represents a physical component of the remaining system. ​

[0028] For example, the development partner B has test rights to the third subsystem 300 here. The subsystem that is being developed at this development partner B should be the internal combustion engine 31. In order to be able to operate the internal combustion engine, the development partner B requires the associated control strategy, which is implemented in a so-called engine control unit (ECU) or here in a virtual engine control unit 32. The development partner B also has a vehicle 33 with a real or here virtual vehicle control unit 35 (VCU) operated on a roller test stand, which is actuated according to a virtual driving cycle 34. The vehicle control unit 35 controls the torque distribution between the internal combustion engine and the electric motor, for example.

[0029] The development partner C develops the battery cell 21 or the battery as a first subsystem 200. The development partner C has a corresponding battery cell test stand.

[0030] The development partner A develops the E-axis, i.e. the electrically driven drive, as a second subsystem 100. At the development partner A, there is an electric motor as a physical component on a test stand. In order to be able to operate the electric motor, the development partner A requires the associated control strategy, which is implemented in an electric motor control unit or here in a virtual electric motor control unit 11. The development partner A also requires data of the battery 12.

[0031] In order to now test the E-axis system, the development partner A requires data about the properties of the battery cell 21 of the development partner C for its virtual battery system 12. Thus, in a first checking mode, data from the second subsystem 200 are transmitted to the first subsystem 100 and processed there. If necessary, this can also be done in the reverse direction. In order to successfully carry out the test, the data of the respective other subsystem must be provided in real time.

[0032] In particular in order to safeguard the case in which the real-time requirement is not met, a calculation model 400 of the first subsystem 200 can be used. Figure 2

[0033] In a second checking mode, the second subsystem 100 receives data from the calculation model 400 and can further process these data. The calculation model 400 thus represents a simulation of the first subsystem 200.

[0034] The training of the calculation model 400 can be achieved, for example, by means of test stand measurements on a test stand or in accordance with real transmitted data, to some extent by investigating the data transmission between the first and the second subsystem.

[0035] ​Once the quality of the calculation model is good enough, the real-time requirement in the first check mode can also be completely dispensed with in the communication, since the verification process at the development partner A can work only in the second check mode and with the calculation model 400 of the battery pack. In this case, the calculation model 400 can be implemented in particular in a calculation unit at the site of the second subsystem or in a calculation unit remote from the site of the second subsystem.

[0036] The model can be an empirical-physical model or also a behavior model in the form of a synthesis characteristic curve or an artificial neural network. Behavior models in the form of a synthesis characteristic curve or an artificial neural network can in particular be exchanged between different development partners without revealing component-specific know-how.

Claims

1. A method for checking whether a technical system composed of at least two technical subsystems (100, 200, 300) is suitable for its purpose of use, wherein in a first checking mode data from a first technical subsystem (200) of the at least two technical subsystems (100, 200, 300) are received by a second technical subsystem (100) of the at least two technical subsystems (100, 200, 300) and processed at the second technical subsystem in order to perform at least one checking step, wherein in a second checking mode data from a computational model (400) of the first technical subsystem (200) are received by the second technical subsystem (100) and processed at the second technical subsystem in order to perform the at least one checking step, wherein the at least two technical subsystems (100, 200, 300) are spatially separated from each other and connected to each other by a data connection during the method, wherein a changeover between the first checking mode and the second checking mode is made automatically depending on the quality of the data connection, wherein the quality of the data connection is determined by measuring a latency and / or a bandwidth, wherein the composed technical system is a vehicle.

2. The method according to claim 1, wherein in the first checking mode data from a second technical subsystem (100) of the at least two technical subsystems (100, 200, 300) are transmitted to the first technical subsystem (200) of the at least two technical subsystems (100, 200, 300); and wherein in the second checking mode data from the second technical subsystem (100) of the at least two technical subsystems are transmitted to the computational model (400).

3. The method according to claim 1 or 2, wherein the computational model (400) comprises an association between at least one input variable and at least one output variable of the first technical subsystem (200).

4. The method according to claim 1 or 2, wherein the computational model (400) is trained by means of a machine learning method.

5. The method according to claim 1 or 2, wherein the computational model (400) is trained during a run of the first technical subsystem on a test stand.

6. The method according to claim 1 or 2, wherein the computational model (400) is trained on the basis of transmitted data in a first operating mode.

7. The method according to claim 1 or 2, wherein the computational model (400) is implemented or realized in a computational unit which is spatially remote from the first technical subsystem.

8. The method according to claim 1 or 2, wherein at least one of the at least two technical subsystems (100, 200, 300) is selected from an internal combustion engine (31), an electric motor, a battery (12) and a control device.

9. The method according to claim 1 or 2, wherein at least one of the at least two technical subsystems (100, 200, 300) is examined on a test stand during the method.

10. A computing device set up to perform all method steps of the method according to one of claims 1 to 9.

11. A computer program product comprising a computer program which, when implemented on a computing unit, causes the computing unit to perform all method steps of the method according to any one of claims 1 to 9.

12. A machine-readable storage medium having stored thereon a computer program which, when implemented on a computing unit, causes the computing unit to perform all method steps of the method according to any one of claims 1 to 9.

Images