Control unit arrangement and method for temperature control of a control unit arrangement

Abstract

Control unit arrangement (1) for a vehicle with - two control units (2, 3) and - a temperature control device with a first temperature control unit (10) for controlling the temperature of both control devices (2, 3) and a second temperature control unit (15) for controlling the temperature of both control devices (2, 3), wherein - the first temperature control unit (10) comprises a heat pipe (11) which is arranged between two printed circuit boards (6 to 9) located in one of the two control units (2, 3) and is thermally coupled thereto, - the second temperature control unit (15) comprises a heat exchanger (16) through which a temperature control liquid can flow, which heat exchanger is arranged between two printed circuit boards (6 to 9) located in the other control unit (2, 3) and is thermally coupled to them, - the temperature control units (10, 15) are thermally coupled to each other, - a first circuit board (6) of one control unit (2) is designed redundantly to a first circuit board (8) of the other control unit (3) and a second circuit board (7) of one control unit (2) is designed redundantly to a second circuit board (9) of the other control unit (3) and - the first circuit boards (6, 8) are each redundantly designed to control an automated driving operation of the vehicle and the second circuit boards (7, 9) are each redundantly designed to control infotainment functions of the vehicle or vice versa.

Description

The invention relates to a control device arrangement for a vehicle.The invention further relates to a method for tempering such a control device arrangement.It is generally known from the prior art that control units for infotainment functions and functions for automated, in particular highly automated or autonomous driving are implemented in vehicles in two separate units.DE 10 2018 222 668 A1 describes a cooling device for redundant cooling of a control unit for a vehicle, wherein the control unit comprises a first electronic component and a second electronic component redundant to the first electronic component. The cooling device has a first cooling circuit for cooling the first and the second electronic component and a second cooling circuit, which is fluidically separate from the first cooling circuit, for cooling the first and the second electronic component. The first cooling circuit is designed to cool a control device for controlling autonomous driving of the vehicle or a processor as the first electronic component. The second cooling circuit is designed to cool, as a second electronic component, a control device for controlling autonomous driving of the vehicle or a processor. The first cooling circuit and the second cooling circuit are designed to cool electronic components arranged in series or in parallel in the relevant cooling circuit.DE 10 2006 059 418 A1 describes an aircraft cooling system. The aircraft cooling system includes a first coolant stream cooling a first thermal load and a second coolant stream thermally coupled to the first coolant stream cooling a second thermal load. In this case, the first thermal load and the second thermal load are generated by two aircraft components redundant with respect to one another.DE 10 2020 104 336 A1 describes a motor vehicle having a power electronic device and a cooling medium circuit which is fluidically coupled to a condensation unit of the power electronic device. The power electronic device comprises a power semiconductor and a first printed circuit board connected to the power semiconductor in terms of control technology. The power electronic device further comprises a leadframe which realizes the control connection between the power semiconductor and the first printed circuit board. The power semiconductor is connected to a contacting region of the leadframe in such a way that heat can be transferred from the power semiconductor to the leadframe and can be conducted away from the power semiconductor by the leadframe. The power electronic device further comprises a housing which delimits a liquid reservoir in which a cooling liquid is accommodated. In this case, the power semiconductor and the leadframe are arranged in the liquid reservoir for the purpose of transferring heat from the power semiconductor and from the heat to the cooling liquid.DE 103 61 645 A1 describes a cooling system for cooling heat-generating devices in an aircraft, having a central refrigeration device, a refrigeration consumer and a refrigeration transport system connecting the refrigeration device and the refrigeration consumer. The refrigeration transport system has a cooling circuit which conveys a refrigerant cooled by the refrigeration device to the refrigeration consumer and from there back to the refrigeration device. In this case, the cold consumer is supplied with cold generated in the refrigeration device via the refrigerant circulating in the cooling circuit.DE 10 2018 211 664 A1 describes an electronic control unit for a vehicle having a unit case and a fan unit including a blade part rotated to supply air to the outside of an external surface of the unit case to cool the unit case. The control unit further includes a temperature detection part for detecting an internal temperature of the unit case, and a control part accommodated inside the unit case for performing drive control for the fan unit and travel control for the vehicle.DE 10 2017 222 797 A1 describes a device for operating a voltage converter, which has two parallel-connected converter strings, which are connected between a high-voltage side and a low-voltage side of the voltage converter for converting the voltage. Furthermore, a cooling device is provided which conducts a coolant and is assigned to the converter trains, wherein a temperature sensor is assigned to each of the converter trains.The invention is based on the object of specifying a novel control device arrangement and a novel method for controlling the temperature of such a control device arrangement.The object is achieved according to the invention by a control device arrangement which has the features specified in claim 1 and by a method which has the features specified in claim 8.Advantageous embodiments of the invention are the subject matter of the dependent claims.The control device arrangement according to the invention for a vehicle comprises two control devices and a temperature control device having a first temperature control unit for controlling the temperature of both control devices and a second temperature control unit for controlling the temperature of both control devices.The first temperature control unit comprises a heat pipe which is arranged between two printed circuit boards located in one of the two control units and is thermally coupled to the latter. The second temperature control unit comprises a heat exchanger through which a temperature control liquid can flow, which is arranged between two printed circuit boards located in the other control unit and is thermally coupled to these. The temperature control units are thermally coupled to one another.The heat pipe can be a so-called vapor chamber for each type of heat pipe, for example.The present control device arrangement enables a combination of a plurality of control devices to form a common so-called vehicle computer or car computer, wherein problems with regard to cooling and failures resulting therefrom can be avoided. A combined control device arrangement for infotainment functions and functions for automated, in particular highly automated or autonomous driving is thus realized. In this case, a control unit arrangement provides a required redundancy for controlling a vehicle in automated driving operation, in particular according to an SAE level 3, SAE level 4 and SAE level 5, and also independent temperature control systems and control units. For example, both control units can be installed in a housing, wherein an independent function can be achieved electrically with respect to an on-board power supply system of the vehicle. Furthermore, it is made possible that efficient system-on-chip components can be used due to the liquid-temperature-controlled heat exchanger.The control device arrangement thus enables control devices for automated driving functions and infotainment functions of a common unit to be combined while maintaining the respective requirements with regard to reliability and temperature control, in particular cooling. This means that redundant temperature control of a plurality of control units is made possible in a central vehicle computer in such a way that continued operation is possible in the event of failure of a temperature control unit. In this case, the redundant temperature control is realized with a hybrid liquid, heat pipe and air cooling system.As a result of this redundancy realized by means of the hybrid temperature control technology, no additional separate (satellite) control device is required and, in the case of a partial temperature control failure, in particular a cooling failure, the vehicle can still be operated further until a more secure position is reached by means of a cooling generated by means of the redundant temperature control unit. Only one liquid tempering is required here, which leads to great cost savings compared to systems in which a plurality of liquid temperings are required to realize the redundancy. Redundant temperature control is thus made possible in separate units. A hardware upgrade which is still independent is also possible for the automated driving functions and the infotainment functions. Furthermore, two control units, which can be produced separately, can be coupled to a redundant temperature control system.Furthermore, a first printed circuit board of one control unit is designed to be redundant to a first printed circuit board of the other control unit. This makes it possible for the respective function to be ensured in the event of a failure of the temperature control of one of the printed circuit boards or a failure of one of the printed circuit boards. Thus, so-called common-cause faults can be avoided even without an embodiment of the control device arrangement with two fluid temperings.Furthermore, a second printed circuit board of the one control unit is designed to be redundant to a second printed circuit board of the other control unit. This makes it possible for the respective function to be ensured in the event of a failure of the temperature control of one of the printed circuit boards or a failure of one of the printed circuit boards. Thus, so-called common-cause faults can be avoided even without an embodiment of the control device arrangement with two fluid temperings.The redundant configuration of the control units is effected not only via their temperature control, but also via an arrangement and functional configuration of the printed circuit boards in the control units. In this case, the first printed circuit boards are each designed redundantly for controlling an automated driving mode of the vehicle and the second printed circuit boards are each designed redundantly for controlling infotainment functions of the vehicle, or vice versa.In one possible configuration of the control device arrangement, the first temperature control unit is coupled to a temperature sensor for detecting a temperature at a heat sink thermally coupled to the first temperature control unit and / or to a flow sensor for detecting an air flow at the heat sink. Such a temperature sensor and such a flow sensor enable a temperature detection or flow detection in a simple, cost-effective and reliable manner and consequently also the detection of a malfunction of the first temperature control unit in a simple, cost-effective and reliable manner.In a further possible embodiment of the control device arrangement, the second temperature control unit is coupled to a temperature sensor for detecting a temperature of the temperature control liquid and / or to a flow sensor for detecting a flow and / or a flow of the temperature control liquid. Such a temperature sensor and such a flow sensor enable a temperature detection or flow or flow detection in a simple, cost-effective and reliable manner and consequently also the detection of a malfunction of the second temperature control unit in a simple, cost-effective and reliable manner.In a further possible embodiment of the control device arrangement, the control devices and the temperature control units are stacked one above the other. This enables the control device arrangement to be realized on a particularly small base area and thus multiple possible applications thereof.In a further possible embodiment of the control device arrangement, the control devices and temperature control units are arranged next to one another and the heat pipe thermally couples a heat sink thermally coupled thereto to the heat exchanger. This enables the control device arrangement to be realized with a particularly low height and thus multiple possible applications thereof.In a further possible embodiment of the control device arrangement, the latter comprises a plurality of conveying units which can be operated independently of one another for conveying the temperature control liquid through the heat exchanger. Thus, in the event of a failure of one of the conveying units, a further one of the conveying units can be activated, so that a function of the second temperature control unit can be maintained.In a further possible embodiment of the control device arrangement, the latter comprises at least one blower for directly and / or indirectly supplying air to the heat pipe and / or the heat exchanger. Such a blower can be used to increase a temperature control, in particular cooling capacity. A functional failure or a functional restriction of at least one of the temperature control units can also be compensated for or at least its / their effects reduced by means of such a blower.In a further possible embodiment of the control device arrangement, in the event of a detected malfunction of at least one of the temperature control units, a warning message can be issued and / or a power of at least one of the control devices can be reduced and / or the blower can be activated and / or, in the event of a failure of a conveying unit for conveying the temperature control liquid through the heat exchanger, a further conveying unit for conveying the temperature control liquid through the heat exchanger can be activated.In the method for tempering an aforementioned control device arrangement, a warning message is / is output in the event of a malfunction of at least one of the temperature control units and / or a power of at least one of the control devices is reduced and / or at least one blower provided for the direct and / or indirect application of air to the heat pipe and / or the heat exchanger is activated and / or, in the event of a failure of a delivery unit for delivering the temperature control liquid through the heat exchanger, a further delivery unit for delivering the temperature control liquid through the heat exchanger is activated. This makes it possible that in the event of a malfunction of at least one of the temperature control units, the function of at least one of the control units can be maintained.In one possible embodiment of the method, a malfunction of the first temperature control unit is determined on the basis of signals from a temperature sensor provided for detecting a temperature at a heat sink thermally coupled to the first temperature control unit and / or from a flow sensor provided for detecting an air flow at the heat sink. Such a temperature sensor and such a flow sensor enable a temperature detection or flow detection in a simple, cost-effective and reliable manner and consequently also the detection of a malfunction of the first temperature control unit in a simple, cost-effective and reliable manner.In a further possible embodiment of the method, a malfunction of the second temperature control unit is determined on the basis of signals from a temperature sensor provided for detecting a temperature of the temperature control liquid and / or from a temperature sensor provided for detecting a flow and / or a flow of the temperature control liquid. Such a temperature sensor and such a flow sensor enable a temperature detection or flow or flow detection in a simple, cost-effective and reliable manner and consequently also the detection of a malfunction of the second temperature control unit in a simple, cost-effective and reliable manner.Exemplary embodiments of the invention are explained in more detail below with reference to drawings.The following are shown: FIG. 1 schematically shows a sectional illustration of a control device arrangement, FIG. 2 schematically shows a sectional illustration of a further control device arrangement, and FIG. 3 schematically shows a sequence of a method for temperature control of a control device arrangement.Corresponding parts are provided with the same reference numerals in all figures.FIG. 1 shows a sectional illustration of a possible exemplary embodiment of a control device arrangement 1 for a vehicle. The vehicle is designed, in particular, for automated driving operation.The control device arrangement 1 comprises two control devices 2, 3 stacked one above the other, each of which has a housing 4, 5. Two printed circuit boards 6 to 9 are arranged in each case within the housings 4, 5, that is to say within the control units 2, 3, wherein the printed circuit boards 6 to 9 are each designed for controlling infotainment functions or functions for automated driving.A first temperature control unit 10 is arranged within the upper control unit 2, which comprises a heat pipe 11 arranged between the two printed circuit boards 6, 7 located in the control unit 2 and thermally coupled to the latter. The heat pipe 11 is thermally coupled to a heat sink 12 arranged outside the housing 4, for example a heat sink through which air can be applied, in particular can be passed.In the region of the heat sink 12, a temperature sensor 13 for detecting a temperature of the heat sink 12 and a flow sensor 14 for detecting an air flow are arranged on the heat sink 12.A second temperature control unit 15 is arranged within the lower control unit 3, which comprises a heat exchanger 16 through which a temperature control liquid can flow, which is arranged between the two printed circuit boards 8, 9 located in the control unit 3 and is thermally coupled to these.At coupling points 17, 18 of the heat exchanger 16 for supplying the same with the temperature control liquid, a temperature sensor 19 for detecting a temperature of the temperature control liquid and a flow sensor 20 for detecting a flow and / or a flow of the temperature control liquid are arranged.The temperature control units 10, 15 are thermally coupled to one another, wherein between contact surfaces of the temperature control units 10, 15 in particular a heat conducting metal 21, 22 is arranged in each case, which has a low thermal resistance. The contact surfaces are designed to be as large as possible.Furthermore, in the exemplary embodiment shown, the control units 2, 3 are mechanically coupled to one another in the region of the thermal coupling between the temperature control units 10, 15 by means of non-destructively releasable connections 23, 24, for example screw connections, clip connections, hook and loop connections or other possible connections.In particular for an automated driving operation, printed circuit boards 6 to 9 must be designed redundant for controlling the same. In this case, it must also be ensured that, in the event of a failure of temperature control, in particular cooling of a printed circuit board 6 to 9, temperature control of the at least one remaining printed circuit board 6 to 9 is ensured for the purpose of controlling and thus maintaining the automated driving function. Furthermore, installation space and complexity in the vehicle are to be reduced.These goals are achieved with the control device arrangement 1 shown, wherein this enables a combination of several control devices 2, 3 to form a common so-called vehicle computer or car computer. In this case, problems with regard to cooling and failures resulting therefrom are avoided. Thus, for example, a combined control device arrangement 1 for infotainment functions and functions for automated driving can be realized. In this case, the required redundancy for controlling a vehicle in automated driving operation, in particular according to an SAE level 3, SAE level 4 and SAE level 5, and also independent temperature control systems and control units can be provided in the control unit arrangement 1.If, for example, a malfunction of one of the two temperature control units 10, 15 is detected, the temperature control of all printed circuit boards 6 to 9 in the control units 2, 3 can be adopted by means of the remaining temperature control unit 10, 15 on account of the thermal coupling of the two temperature control units 10, 15.In addition, in order to maximize a possible driving mode of the vehicle, for example, until a position for a safe stop is reached, at least one of the two temperature control units 10 can / can be optimized in the event of a malfunction, 15a warning signal is output and / ora power of at least one of the control units 2, 3 is reduced and / orat least one blower provided for the direct and / or indirect impingement of the heat pipe 11 and / or the heat exchanger 16 with air is activated and / ora failure of a delivery unit for conveying the temperature control liquid through the heat exchanger 16 activates a further delivery unit for conveying the temperature control liquid through the heat exchangerwill.A malfunction of the first temperature control unit 10 is detected here in particular on the basis of signals from the temperature sensor 13 and / or the flow sensor 14.A malfunction of the second temperature control unit 15 is detected here in particular on the basis of signals from the temperature sensor 19 and / or flow sensor 20.The redundant configuration of the control units 2, 3 is effected not only via their temperature control but also via the arrangement and functional configuration of the printed circuit boards 6 to 9 in the control units 2, 3. The second printed circuit board 7 of the upper control unit 2 can also be designed to be redundant to the second printed circuit board 9 of the lower control unit 3. This means that the first printed circuit boards 6, 8 are each designed redundantly for controlling the automated driving operation and the second printed circuit boards 7, 9 for controlling the infotainment functions, or vice versa. The redundancies between the first printed circuit board 7 of the upper control unit 2 and the second printed circuit board 9 of the lower control unit 3 and between the second printed circuit board 8 of the upper control unit 2 and the first printed circuit board 8 of the lower control unit 3 can also be formed.FIG. 2 shows a sectional illustration of a further possible exemplary embodiment of a control device arrangement 1.In contrast to the exemplary embodiment shown in FIG. 1, the control units 2, 3 and their temperature control units 10, 15 are arranged next to one another. Here, too, the control units 2, 3 are mechanically coupled to one another by means of non-destructively releasable connections 23, 24, but the thermal coupling of the temperature control units 10, 15 takes place on other, in particular larger, coupling surfaces. A heat conducting metal 21 is arranged between the contact surfaces of the temperature control units 10, 15, which metal has a low thermal resistance.The temperature control units 10, 15 are arranged and thermally coupled to one another in such a way that the heat pipe 11 thermally couples the heat sink 12 to the heat exchanger 16.Otherwise, the structure and the function of the control device arrangement 1 correspond to the structure and the function of the control device arrangement 1 illustrated in FIG. 1.FIG. 3 shows a sequence of a possible exemplary embodiment of a method for controlling the temperature of a control device arrangement 1, for example a control device arrangement 1 according to FIG. 1 or according to FIG. 2.In the method, after a start in a method step S 1, the temperature of the temperature control liquid is determined by means of temperature sensor 19 and the flow and / or the flow of the temperature control liquid is determined by means of flow sensor 20.In a branch V 1, it is checked whether the temperature, the flow and the flow rate correspond to respective specifications. If this is the case, represented by a yes branch J 1, in a further method step S 2 the temperature control, in particular cooling of the control units 2, 3, is carried out further by means of the second temperature control unit 15.If, on the other hand, the temperature, the flow and / or the flow of the temperature control liquid are outside predefined limit values, represented by a no branch N 1, in a further method step S 3 the redundant cooling is activated by activation of the first temperature control unit 10, for example by active application of air to the heat sink by a blower.Subsequently, in a further method step S 4, a temperature of at least one of the printed circuit boards 6 to 9 is measured.In a branch V 2, it is checked whether the temperature corresponds to a corresponding specification, i.e. does not exceed a specified limit value. If this is the case, represented by a yes branch J 2, the method step S 4 is carried out again.If this is not the case, represented by a no branch N 2, it is determined in a further branch V 3 whether the corresponding printed circuit board 6 to 9 is already operated with the lowest possible power. If this is not the case, represented by a no branch N 3, in a further method step S 5 the power of the printed circuit board 6 to 9 is reduced and the method step S 4 is then carried out again.If, however, the printed circuit board 6 to 9 is already operated with the lowest possible power and nevertheless its temperature does not meet the specification, represented by a yes branch J 3, a temperature control system fault F is set and the control device arrangement 1 is operated in a safe state.List of reference characters1 Control device arrangement 2 Control device 3 Control device 4 Housing 5 Housing 6 to 9 Printed circuit board 10 Temperature control unit 11 Heat pipe 12 Heat sink 13 Temperature sensor 14 Flow sensor 15 Temperature control unit 16 Heat exchanger 17 Coupling point 18 Coupling point 19 Temperature sensor 20 Flow sensor 21 Heat-conducting material 22 Heat-conducting material 23 Connection 24 Connection F Fault J 1 to J 3 Yes branch N 1 to N 3 No branch S 1 to S 5 Method step V 1 to V 3 Branching

Claims

Control device arrangement (1) for a vehicle, having - two control devices (2, 3) and - a temperature control device having a first temperature control unit (10) for controlling the temperature of both control devices (2, 3) and a second temperature control unit (15) for controlling the temperature of both control devices (2, 3), wherein - the first temperature control unit (10) comprises a heat pipe (11) which is arranged between two printed circuit boards (6 to 9) located in one of the two control devices (2, 3) and is thermally coupled to the latter, - the second temperature control unit (15) comprises a heat exchanger (16) through which a temperature control liquid can flow, which heat exchanger is arranged between two printed circuit boards (6 to 9) located in the other control device (2, 3) and is thermally coupled to the latter, - the temperature control units (10, 15) are thermally coupled to one another, a first printed circuit board (6) of one control unit (2) is designed to be redundant with a first printed circuit board (8) of the other control unit (3) and a second printed circuit board (7) of the one control unit (2) is designed to be redundant with a second printed circuit board (9) of the other control unit (3), and the first printed circuit boards (6, 8) are each designed to be redundant for controlling an automated driving mode of the vehicle and the second printed circuit boards (7, 9) are each designed to be redundant for controlling infotainment functions of the vehicle or vice versa.Control device arrangement (1) according to Claim 1, characterized in that the first temperature control unit (10) is coupled to - a temperature sensor (13) for detecting a temperature at a heat sink (12) which is thermally coupled to the first temperature control unit (10) and / or - a flow sensor (14) for detecting an air flow at the heat sink (12).Control device arrangement (1) according to one of the preceding claims, characterized in that the second temperature control unit (15) is coupled to - a temperature sensor (19) for detecting a temperature of the temperature control liquid and / or - a flow sensor (20) for detecting a flow and / or a flow of the temperature control liquid.Control device arrangement (1) according to one of the preceding claims, characterized in that the control devices (2, 3) and the temperature control units (10, 15) are stacked one above the other.Control device arrangement (1) according to one of Claims 1 to 3, characterized in that the control devices (2, 3) and temperature control units (10, 15) are arranged next to one another and the heat pipe (11) thermally couples a heat sink (12), which is thermally coupled to the heat exchanger, to the heat exchanger (16).Control device arrangement (1) according to one of the preceding claims, characterized byseveral conveying units operable independently of one another for conveying the temperature control liquid through the heat exchanger.Control device arrangement (1) according to one of the preceding claims, characterized byat least one fan for the direct and / or indirect application of air to the heat pipe (11) and / or the heat exchanger (16).Method for tempering a control device arrangement (1) according to one of the preceding claims, characterized in that in the event of a malfunction of at least one of the temperature control units (10, 15) - a warning is issued and / or - a power of at least one of the control devices (2, 3) is reduced and / or - at least one fan provided for directly and / or indirectly acting on the heat pipe (11) and / or the heat exchanger (16) with air is activated and / or - in the event of a failure of a conveying unit for conveying the temperature control liquid through the heat exchanger (16), a further conveying unit for conveying the temperature control liquid through the heat exchanger (16) is activated.Method according to Claim 8, characterized in that a malfunction of the first temperature-control unit (10) is determined on the basis of signals - of a temperature sensor (13) provided for detecting a temperature at a heat sink (12) thermally coupled to the first temperature-control unit (10) and / or - of a flow sensor (14) provided for detecting an air flow at the heat sink (12), and / or a malfunction of the second temperature-control unit (15) is determined on the basis of signals - of a temperature sensor (19) provided for detecting a temperature of the temperature-control liquid and / or - of a flow sensor (20) provided for detecting a flow and / or a flow rate of the temperature-control liquid.

Images