Processor device for a brake system, method for operating a processor device, brake system and vehicle

Abstract

A processor device for a braking system, a method for operating the processor device, a braking system, and a vehicle. The processor device for a braking system of a vehicle comprises: a main processor for controlling at least one brake actuator of the braking system during normal operation of the processor device; an auxiliary processor for controlling at least one brake actuator in response to a detected fault in the main processor, wherein the auxiliary processor and the main processor are arranged within the same housing; a monitoring device for monitoring the main processor to detect faults, wherein the monitoring device is designed to control a switching unit upon detection of a fault; and a switching unit for switching the reading of sensor signals from the main processor to the auxiliary processor and / or switching the output of control signals to at least one brake actuator from the main processor to the auxiliary processor in response to a detected fault.

Description

Technical Field

[0001] The present invention relates to a processor device for a braking system, a method for operating the processor device, a braking system, and a vehicle. Background Technology

[0002] Vehicles typically have multiple processors that control different vehicle functions. These functions may include, for example, safety-related functions. Summary of the Invention

[0003] In this context, the present invention provides, according to embodiments, an improved processor device for a braking system, an improved method for operating the processor device, an improved braking system, and an improved vehicle. Advantageous designs are derived from the embodiments and the following description.

[0004] The proposed solution utilizes existing structural space within the vehicle more effectively and reduces costs. Furthermore, it provides protection for vehicle occupants in emergency situations. Advantageously, it enhances usability without requiring an external microprocessor, and the corresponding control device is more compact and economical than existing solutions of the same type.

[0005] A processor device for a vehicle braking system is proposed, comprising: a main processor for controlling at least one brake actuator of the braking system during normal operation of the processor device; an auxiliary processor for controlling at least one brake actuator in response to a detected fault in the main processor, wherein the auxiliary processor and the main processor are arranged in the same housing; a monitoring device for monitoring the main processor to detect faults, wherein the monitoring device is designed to control a switching unit when a fault is detected; and a switching unit designed to switch the reading of sensor signals from the main processor to the auxiliary processor in response to the detected fault, and alternatively or supplementarily, switch the output of control signals to at least one brake actuator from the main processor to the auxiliary processor.

[0006] This processor device can advantageously eliminate the need for a separate external microprocessor, while also improving availability. Therefore, the braking system can be implemented as an electronic parking brake, or perform the functions of an electronic parking brake. The vehicle can be, for example, an electrified vehicle, designed for carrying passengers and, supplementarily or alternatively, for carrying cargo. Here, during normal operation, the main processor can control the operation of the processor device while monitoring the auxiliary processor. The auxiliary processor can also be implemented as a replacement for the main processor and thus as its backup, taking over its tasks in the event of a failure of the main processor, thereby advantageously protecting the vehicle occupants. Faults or failure conditions may, for example, involve damage to the main processor. Therefore, the processor device can be implemented in a low-cost and efficient manner within existing structural space. The monitoring device can, for example, be implemented as a control unit. The switching unit can, for example, be designed as a so-called switch, which can be controlled by the monitoring device. Sensor signals read by the processor device can be read via interfaces to multiple vehicle sensors. Advantageously, the switching unit can activate the emergency operation of the processor device by switching the read and output of corresponding signals from the main processor to the auxiliary processor.

[0007] According to one implementation, the main processor and the auxiliary processor can be arranged or formed on the same semiconductor chip. This can advantageously save structural space and cost.

[0008] The processor device may have a first power supply unit for supplying power to the main processor and a second power supply unit for supplying power to additional processors, wherein the first and second power supply units may be independent of each other. Advantageously, the power supply units can ensure that both processors of the processor device are supplied with sufficient energy.

[0009] According to one embodiment, at least one brake actuator of the braking system can be implemented as an actuator of an electronic parking brake. This advantageously generates a separate mechanical force, which can be transmitted to the rear braking system, for example, via a mechanical cable.

[0010] Furthermore, the additional processor can be designed to provide additional control over the anti-lock braking system and / or anti-lock braking unit during emergency operations. This can advantageously improve the safety of vehicle occupants.

[0011] The main processor can be designed to monitor the functions of additional processors during normal operation, and additionally or alternatively monitor the functions of monitoring devices and switching units. Advantageously, the main processor can additionally monitor the functions of other components of the processor device during normal operation and additionally or alternatively perform these functions.

[0012] Furthermore, a method for a processor device of the aforementioned variant of a braking system is proposed, wherein the method includes a reading step, a switching step, and a control step. In the reading step, a fault signal indicating a malfunction of the main processor is read in. In the switching step, in response to the fault signal, a switching unit is used to switch the reading of sensor signals from the main processor to an auxiliary processor, and alternatively or supplementarily, the output of control signals to at least one brake actuator is switched from the main processor to the auxiliary processor. In the control step, in response to the switching step, the auxiliary processor controls at least one brake actuator of the braking system.

[0013] This method can improve the safety of vehicle occupants, for example, during driving, because the processor can maintain the function of the braking system even if an internal fault is detected.

[0014] According to one embodiment, in the control step, at least one brake actuator can be manipulated to disable non-safety-related system functions of the braking system. Non-safety-related system functions may include, for example, vehicle functions that reduce the probability of an accident during vehicle operation.

[0015] The proposed solution also provides a monitoring device designed to perform, manipulate, or implement steps of variations of the method proposed herein within a corresponding device. The objectives of the invention can also be achieved quickly and efficiently through embodiments of the invention in the form of a monitoring device.

[0016] The monitoring device can be an electrical device that processes electrical signals (e.g., sensor signals) and outputs control signals based on these signals. The device may have one or more suitable interfaces, which can be designed in hardware and / or software. In a hardware design, these interfaces may, for example, be part of an integrated circuit that implements the functionality of the monitoring device. These interfaces may also be inherent integrated circuits or at least partially composed of discrete devices. In a software design, these interfaces may be software modules that exist, for example, on a microcontroller among other software modules.

[0017] Another advantage is a computer program product having program code that can be stored in a machine-readable medium (e.g., semiconductor memory, hard disk storage, or optical storage), and when the program is implemented on a computer or device, the program code is used to perform the method described in one of the above embodiments.

[0018] In addition, a braking system for a vehicle is proposed, wherein the braking system has a processor device of the aforementioned variant and at least one brake actuator coupled to the processor device.

[0019] This braking system can be advantageously used in both monorail and multirail vehicles.

[0020] Furthermore, the present invention also relates to a vehicle, particularly a vehicle that is at least partially electrified (which may also be understood as an electric vehicle or an electrically driven vehicle), having a braking system of the aforementioned variants, and a processor device that additionally or alternatively has the aforementioned variants.

[0021] The vehicle can be advantageously implemented as a passenger car or as a truck. Attached Figure Description

[0022] The invention is illustrated in more detail by way of example with the aid of the accompanying drawings. In the drawings:

[0023] Figure 1 A schematic diagram showing one embodiment of the vehicle;

[0024] Figure 2 A block diagram showing one embodiment of the braking system;

[0025] Figure 3 A flowchart illustrating one embodiment of a method for operating a processor device; and

[0026] Figure 4 A block diagram illustrating one embodiment of the monitoring device is shown.

[0027] In the following description of preferred embodiments of the invention, elements shown in different figures and having similar functions are referred to by the same or similar reference numerals, wherein repetitive descriptions of these elements are omitted. Detailed Implementation

[0028] Figure 1 A schematic diagram of one embodiment of a vehicle 100 is shown. Here, the vehicle 100 is implemented, in particular, as an electrified vehicle, and has a braking system 105 and / or a processor device 110. The braking system 105 includes the processor device 110 and at least one brake actuator 115 coupled to the processor device 110. According to this embodiment, the braking system 105 also has a sensor device 120, which in turn has multiple sensors. The braking system 105 and the processor device 110 will be described in more detail in at least one of the following figures. The braking system is capable of implementing, for example, the functions of an electronic parking brake and / or other vehicle functions related to vehicle braking.

[0029] In other words, extended parking brake control is achieved through the processor device 110. To this end, an existing auxiliary processor is used, which resides in the same housing and / or on the same semiconductor chip as the main processor, to improve the reliability of parking brake control. Furthermore, the processor device 110 also includes a mechanism for detecting a main processor failure and automatically switching to the auxiliary processor, as detailed in at least one of the accompanying drawings described below.

[0030] Figure 2 A block diagram of one embodiment of the braking system 105 is shown, which corresponds, for example, to... Figure 1 The braking system described herein includes a processor device 110 and at least one brake actuator 115 coupled to the processor device 110. According to this embodiment, the at least one brake actuator 115 is electrically connected to the processor device. According to this embodiment, a sensor device 120 is also implemented as part of the braking system 105 and is specifically electrically coupled to the processor device 110. This means that the processor device 110 is designed to read in sensor signals 200 and, by using the sensor signals 200 (which can be processed, for example), output a control signal 205 to the at least one brake actuator 115 to, for example, initiate a braking process. Here, the at least one brake actuator 115 is implemented, for example, as an actuator of an electronic parking brake.

[0031] For this purpose, the processor device 110 has a main processor 210 for controlling at least one brake actuator 115 of the braking system 105 during normal operation of the processor device 110. Additionally, the processor device 110 also has an auxiliary processor 215 for controlling at least one brake actuator 115 in response to a detected fault in the main processor 210, wherein the auxiliary processor 215 and the main processor 210 are arranged in the same housing 220. The processor device 110 also has a monitoring device 225 for monitoring the main processor 210 to detect faults. The monitoring device 225 is designed to control a switching unit 230 upon detection of a fault. The switching unit 230 is also designed as part of the processor device 110, and is also referred to as a switch. Here, the switching unit 230 is designed to switch the reading of the sensor signal 200 from the main processor 210 to the auxiliary processor 215 in response to a detected fault, and / or switch the output of the control signal 205 to at least one brake actuator 115 from the main processor 210 to the auxiliary processor 215, to activate, for example, emergency operation of the processor device 110. The main processor 210 is designed to monitor the function and / or operation of the auxiliary processor 215. When the main processor 210 fails or malfunctions, the auxiliary processor 215 can, for example, act as a backup to the main processor. For example, the auxiliary processor 215 is designed to additionally operate the anti-lock braking function or anti-lock braking unit during emergency operation.

[0032] According to this embodiment, the main processor 210 and the auxiliary processor 215 are arranged or formed on the same semiconductor chip. Furthermore, the main processor 210 is designed, for example, to monitor the functions of the auxiliary processor 215, the monitoring device 225, and / or the switching unit 230 during normal operation.

[0033] Furthermore, the processor device 110 has a first power supply unit 235 for providing power to the main processor 210 and a second power supply unit 240 for providing power to the auxiliary processor 215. The first power supply unit 235 and the second power supply unit 240 are independent of each other and can operate independently.

[0034] In summary, the processor device 110 has a main processor 210, also referred to as the "Main Microcontroller (Main µC)," which performs all control functions and monitors the auxiliary processor 215 ("Aux Microcontroller (Aux µC)") during normal operation. Furthermore, the processor device 110 also has an auxiliary processor 215 that reads the driver's intent and initiates corresponding control of the EPB in case of a malfunction. Optionally, the EPB control also includes a simple anti-lock braking function. According to this embodiment, the main processor 210 and the auxiliary processor 215 are arranged in the same housing 220, or even on the same semiconductor chip. A switching unit 230 (also referred to as a switch), controlled by the monitoring device 225 (also referred to as a watchdog circuit) and determining whether the EPB control is performed by the main processor 210 or the auxiliary processor 215, is also part of the processor device 110.

[0035] According to this embodiment, external sensors (collectively referred to as sensor device 120 in this embodiment) or other input signals affecting the EPB function are part of the braking system 105. Under normal conditions, these signals are processed and / or evaluated by the main processor 210, and in case of a fault, by the auxiliary processor 215. Power supply units 235 and 240, and two separate internal power supplies, described as power supply units 235 and 240 and optionally also powering the main processor 210 and auxiliary processor 215, are implemented as part of the processor device 110.

[0036] In a fault-free state (normal condition), all system functions are executed solely by the main processor 210. Proper operation of the monitoring device 225 ensures that the main processor 210 performs EPB control. Under normal conditions, the main processor 210 periodically checks the functionality of the auxiliary processor 215, the monitoring device 225, and the switching unit 230. When the main processor 210 or its peripherals malfunction (fault condition), the monitoring device 225, upon detecting the fault, can switch the EPB function to the auxiliary processor 215. In the fault condition, the auxiliary processor 215 (if necessary, based on sensor signal 200) takes over the control of the EPB. Other system functions will, for example, be shut down.

[0037] Figure 3 A flowchart illustrating one embodiment of a method 300 for operating a processor device, such as in... Figures 1 to 2At least one figure in the diagram is described or at least mentioned. Method 300 includes a step 305 of reading a fault signal indicating a malfunction of the main processor, a switching step 310, and a manipulation step 315. In the switching step 310, in response to the fault signal, the reading of sensor signals is switched from the main processor to the auxiliary processor using a switching unit, and / or the output of control signals to at least one brake actuator is switched from the main processor to the auxiliary processor. In the manipulation step 315, in response to the switching step 310, the auxiliary processor switches at least one brake actuator of the braking system. Optionally, in the manipulation step 315, at least one brake actuator is manipulated to disable non-safety-related system functions of the braking system. Non-safety-related system functions, for example, refer to functions that reduce the probability of an accident during vehicle operation.

[0038] Figure 4 A block diagram of one embodiment of the monitoring device 225 is shown, which is, for example, with... Figure 1 This corresponds to the monitoring device 225 described herein. The monitoring device 225 includes, for example, control functions and is therefore configured to perform and / or manipulate, for example, within a corresponding unit. Figure 3 The steps of the method described herein. The monitoring device 225 includes: a reading device 400 for reading a fault signal 405 indicating a fault in the main processor 210; a switching device 410 that, in response to the fault signal 405, uses a switching unit 230 to switch the reading of sensor signals from the main processor 210 to the auxiliary processor 215 and / or switches the output of control signals to at least one brake actuator from the main processor 210 to the auxiliary processor 215; and a control device 415 that, in response to the switching, causes at least one brake actuator of the braking system to be controlled by the auxiliary processor 215.

[0039] The embodiments described and shown in the figures are merely exemplary selections. Different embodiments may be combined with each other entirely or in terms of their respective features. One embodiment may also be supplemented by features of another embodiment.

[0040] Furthermore, the method steps according to the invention can be repeated and can be implemented in an order different from that described.

[0041] If an embodiment includes an "and / or" relationship between a first feature and a second feature, then this can be interpreted as: an embodiment according to one implementation has both the first feature and the second feature, while an embodiment according to another implementation has either only the first feature or only the second feature.

[0042] List of reference numerals

[0043] 100 vehicles

[0044] 105 Braking System

[0045] 110 Processor Device

[0046] 115 At least one brake actuator

[0047] 120 sensor units

[0048] 200 sensor signals

[0049] 205 Control Signal

[0050] 210 main processor

[0051] 215 Additional Processor

[0052] 220 housing

[0053] 225 Monitoring Device

[0054] 230 Switching Unit

[0055] 235 First Power Supply Unit

[0056] 240 Second Power Supply Unit

[0057] 300 Methods for operating processor devices

[0058] 305 Reading Steps

[0059] 310 Switching Steps

[0060] 315 Operating Procedures

[0061] 400 Reading Device

[0062] 405 Fault Signal

[0063] 410 Switching device

[0064] 415 Control device.

Claims

1. A processor device (110) for a braking system (105) of a vehicle (100), wherein the processor device (110) has the following characteristics: - A main processor (210) for operating at least one brake actuator (115) of the braking system (105) during normal operation of the processor device (110). - An additional processor (215) for operating the at least one brake actuator (115) in response to a detected failure of the main processor (210), wherein the additional processor (215) and the main processor (210) are arranged in the same housing (220); - A monitoring device (225) for monitoring the main processor (210) to detect faults, wherein the monitoring device (225) is designed to operate the switching unit (230) when a fault is detected. as well as - The switching unit (230) is used to switch the reading of sensor signal (200) from the main processor (210) to the auxiliary processor (215) in response to a detected fault, and / or switch the output of control signal (205) to the at least one brake actuator (115) from the main processor (210) to the auxiliary processor (215).

2. The processor device (110) according to claim 1, wherein the main processor (210) and the additional processor (215) are arranged or formed on the same semiconductor chip.

3. The processor device (110) according to any one of the preceding claims, the processor device having a first power supply unit (235) for providing power to the main processor (210) and a second power supply unit (240) for providing power to the auxiliary processor (215), wherein the first power supply unit (235) and the second power supply unit (240) are independent of each other.

4. The processor device (110) according to any one of the preceding claims, wherein at least one brake actuator (115) of the braking system (105) is implemented as an actuator of an electronic parking brake.

5. The processor device (110) according to any one of the preceding claims, wherein the additional processor (215) is designed to additionally operate the anti-lock braking function and / or the anti-lock braking unit during emergency operation.

6. The processor device (110) according to any one of the preceding claims, wherein the main processor (210) is designed to monitor the functionality of the additional processor (215) and / or the monitoring device (225) and / or the switching unit (230) during normal operation.

7. A method (300) of a processor device (110) according to any one of the preceding claims for operating a braking system (105), wherein the method (300) comprises the following steps: - Read in (305) a fault signal (405) indicating that the main processor (210) is faulty; - In response to the fault signal (405), the switching unit (230) switches the reading of the sensor signal (200) from the main processor (210) to the auxiliary processor (215), and / or switches the output of the control signal (205) to the at least one brake actuator (115) from the main processor (210) to the auxiliary processor (215); and - In response to the switching step (310), the additional processor (215) manipulates (315) at least one brake actuator (115) of the braking system (105).

8. The method (300) according to claim 7, wherein in the control step (315), the at least one brake actuator (115) is controlled to disable non-safety-related system functions of the braking system (105).

9. A monitoring device (225) configured to implement and / or manipulate the steps (305, 310, 315) of the method (300) according to any one of claims 7 to 8 in a corresponding device (400, 410, 415).

10. A computer program configured to implement and / or manipulate the steps (305, 310, 315) of the method (300) according to any one of claims 7 to 8.

11. A machine-readable storage medium on which a computer program according to claim 10 is stored.

12. A braking system (105) for a vehicle (100), wherein the braking system (105) has the following characteristics: - The processor device (110) according to any one of claims 1 to 6; and - At least one braking actuator (115) coupled to the processor device (110).

13. A vehicle (100), particularly a vehicle that is at least partially electrified, the vehicle having a braking system (105) according to claim 12 and / or a processor device (110) according to any one of claims 1 to 6.

Images