Method for the safety shutdown of at least one electrical device of a vehicle

Abstract

The invention relates to a method (100) for the safety shutdown of at least one electrical device (20, 21, 22, 23, 24) of a vehicle (10), comprising steps of determining an impending accident event based on at least one detected piece of information, and of deactivating the at least one electrical device (20, 21, 22, 23, 24) of the vehicle (10) when an impending accident event is detected.

Description

The invention relates to a method for safety shutdown of at least one electrical device of a vehicle, having steps of determining an imminent accident event based on at least one piece of detected information and of deactivating the at least one electrical device of the vehicle if an imminent accident event is detected. The invention also relates to a monitoring device for at least one electrical device of a vehicle.In the case of vehicle accidents or collisions, there is a safety risk for and due to current- and voltage-carrying vehicle components due to possible deformations and accelerations. Therefore, modern vehicles have shutdown devices for these components, which are typically triggered by acceleration signals in the event of a collision. Such shutdown systems are generally configured to irreversibly shut down the respective component and, on account of high reaction time requirements during the collision, are typically triggered by pyrotechnic means in order to shut down the respective component or to set it without current or voltage.Irreversible shut-downs often result in damage to the component and thus to the vehicle. In addition, it is not possible for some devices or vehicle components to ensure a shutdown before a collision, for example on the basis of a sensing time and / or a shutdown speed. For such devices, complex mechanical protective measures, such as, for example, armouring, a protective cage and / or a protective coating, are used.Against this background, it is an object of the invention to improve a method for safety shutdown of at least one electrical device of a vehicle. In particular, a safety shutdown of such an electrical device is to be improved to the extent that it enables a shutdown or deactivation before a collision of the vehicle.This object is achieved by a method for safety shutdown of at least one electrical device of a vehicle having the features of claim 1 and a monitoring device for at least one electrical device of a vehicle having the features of claim 10 and by a vehicle having the features of claim 11.According to a first aspect, a method for safety shutdown of at least one electrical device of a vehicle is specified, having steps of detecting at least one piece of environmental information of the vehicle by means of at least one environment sensor of the vehicle, determining an imminent accident event based on the at least one piece of environmental information detected, and deactivating the at least one electrical device of the vehicle if an imminent accident event is determined.Because a surroundings sensor system of the vehicle is used for detecting a potential collision, it may be determined already before it occurs and not only at the time of the collision, as in the case of detection by means of acceleration sensors, for example. Thus, a deactivation of, in particular, safety-relevant electrical devices and / or components of the vehicle can also be triggered and / or brought about already before the collision.According to a further aspect, a monitoring device for at least one electrical device of a vehicle is proposed, having at least one environment sensor which is configured to capture at least one piece of environmental information of the vehicle, a processing device which is coupled to the at least one environment sensor and is configured to determine an imminent accident event on the basis of the at least one piece of environmental information, and a deactivation device which is coupled to the processing device and is configured to deactivate at least one electrical device of the vehicle on the basis of the determined accident event. In particular, the proposed monitoring device is configured to carry out a method described herein.An electrical or electronic device of a vehicle is in particular a device or assembly operated by means of current and / or voltage and can be connected to an on-board power supply system of the vehicle. The on-board power supply system is in particular configured for supplying power and for communicating between components and control units of the vehicle. Such an electrical device can be, for example, a traction machine, a control device, a display device, an energy storage device, a bus system, a lighting system, a heating system, a comfort device, such as, for example, a seat adjustment and / or a similar electrical or electronic device of a vehicle.A surroundings sensor may be, for example, a (measurement) sensor or a sensor for qualitative and / or quantitative detection of a physical property as surroundings information and / or may be part of a surroundings sensor system or of a surroundings detection system, such as, for example, an adaptive cruise control system (ACC) or of a distance warning system of the vehicle. A surroundings sensor is configured, in particular, to acquire surroundings information on an ultrasonic, radar, lidar and / or camera basis, in order to be able to provide sensor data for the processing device in order to be able to determine and / or evaluate a vehicle surroundings or a surroundings of the vehicle.Environmental information of the vehicle can be, for example, a distance of the vehicle from an object in an immediate or indirect vehicle environment, a trajectory and / or absolute or relative speed of the vehicle with respect to an object and / or a speed of an object which moves toward the vehicle. An object is understood in the present case to be a moving or immovable object, a building, a motor vehicle, an animal, a person and / or other objects of an activated or non-activated nature. In addition, environmental information can comprise characteristic information relating to a ground and / or weather conditions and can be provided as a data record in order to be able to determine an imminent accident event or an imminent collision.In addition to the sensor data of the at least one environment sensor, sensor data of further sensor systems, such as sensors of an electronic stability program (ESP) or of an anti-lock brake system (ABS), which can include or determine in particular a wheel rotational speed and / or a straight or rotational speed of the vehicle about the vertical axis and a longitudinal and / or lateral acceleration, can also be used to determine an accident event. This sensor data can be combined in the sense of a sensor data fusion in order to determine an imminent accident or an imminent collision. An accident event is an event which can be determined in particular in time and / or location and acts on the vehicle from the outside, in which damage and / or destruction of the vehicle or of its components is to be expected or occurs.In this case, an imminent accident event is determined in particular centrally or by means of the processing device of the vehicle and a disconnection or disconnection from the on-board power supply of at least one or more electrical or electronic device(s) of the vehicle is triggered, for example by signal transmission to a central deactivation device, a deactivation device of the respective device or a device group and / or the device itself. In this case, a deactivation of an electrical device comprises, in particular, a switching of the electrical device without current and / or voltage, for example by disconnecting a supply line, a selective disconnection or an active disconnection from the on-board power supply system of the vehicle, in order to avoid potential short circuits.The invention is based, among other things, on the concept of using a surroundings sensor system present in the vehicle, which is typically used for driver assistance systems, in order to detect or determine a potential accident or an imminent collision of the vehicle already before the occurrence. As a result, deactivation of electrical or electronic devices can already take place before deformation or damage as a result of the collision occurs. As a result, complicated triggering mechanisms for disconnecting an electrical connection and / or for switching the electrical component in a current-free or voltage-free manner can be dispensed with and / or a safety level of the vehicle can be improved by premature deactivation of accident-sensitive vehicle components.In some embodiments of the proposed method, at least one further criterion or a further condition can be determined in further steps, the occurrence of which can delay, trigger and / or influence the deactivation of the at least one device in some other manner, in particular as shown below. In this case, the various embodiments can be combined with one another, wherein different weights, prioritizations and / or sequences can be provided for determining the respective condition and / or a respective conditional deactivation. In addition, different conditions and / or criteria for different electrical devices can be predetermined and / or applied or apply.In one embodiment, the method comprises further steps of determining a probability for an occurrence of the imminent accident event and of deactivating the at least one electrical device as a function of the determined probability. A probability for the occurrence of the imminent accident event can be determined in particular on the basis of the sensor data of the environment sensor system or environment information of the vehicle. In this case, for example, a threshold value for a probability of the occurrence of an imminent accident can be established, wherein, if this probability threshold value is exceeded, deactivation can be triggered and at least one electrical device is deactivated. In addition, it can be provided that predetermined threshold values for accident probabilities are or are assigned to at least one individual device or groups of electrical devices of the vehicle and these electrical devices are switched off as a function of the threshold values being exceeded. As a result, different systems or vehicle components can be switched off earlier and / or later, for example, depending on their relevance and / or their risk potential, in order to improve the safety of the vehicle.In one embodiment, the method comprises further steps of determining a point in time of the imminent accident event and of deactivating the at least one electrical device as a function of the determined point in time. In this case, the accident time or a time period until the occurrence of the accident event can be determined on the basis of the captured environmental information, for example by means of the processing device.Depending on this specific time, a predetermined or a group of predetermined devices can be switched off or deactivated, for example, at a second time, which is before the specific time and thus before the accident occurs. The second time or the time of deactivation can be determined, for example, as a function of a device property and / or as a function of a predetermined minimum time period for deactivating the respective device before the occurrence of the accident event. As a result, for example, vehicle systems and / or components which are necessary for driving maneuvers can only be switched off promptly at the imminent accident event, whereas electrical devices whose relevance for driving maneuvers is lower or not present can already be deactivated or disconnected from the vehicle electrical system at an earlier point in time in order to improve a safety of the vehicle.In one embodiment, the method comprises further steps of assigning the imminent accident event to an accident category and of deactivating the at least one electrical device as a function of the accident category. In this case, an accident category can comprise, for example, criteria such as a vehicle speed, an in particular anticipated impact speed and / or a degree of deformation, in order to be able to determine and / or define a need or a need for a shutdown of electrical or electronic devices of the vehicle. Such an assignment to an accident category makes it possible to shut down fewer or other components in the event of a light accident or a tuschling, in contrast to a high-speed collision. For example, it may not be necessary to shut down the traction machine and / or the high-voltage accumulator in consideration of the assignment of the imminent accident event to a specific accident category and may therefore be omitted. This makes it possible to avoid unnecessary deactivation of vehicle components and an impairment of the vehicle caused thereby.In one embodiment, the method comprises further steps of determining an impact zone of the vehicle for the imminent accident event and deactivating the at least one electrical device depending on the impact zone of the vehicle. In this case, it is possible to determine on the basis of the at least one piece of environmental information in which region of the vehicle or of a vehicle body a collision will take place, and / or which effect such a collision will have, in particular, expected on the vehicle and its components. This can make it possible, for example, for only components which are arranged in an area or region of the vehicle affected by an impact to be switched off, electrical or electronic devices which are arranged outside the impact region or a deformation zone continuing to be operated.In one embodiment, the method comprises further steps of determining a reactivation criterion and reactivation of at least one electrical device as a function of the reactivation criterion. A reactivation criterion can be characterized, for example, by reaching an end position after the accident event and / or can be determined by means of environmental information of the vehicle. Furthermore, a reactivation criterion can be, for example, a functionality or a safety of at least one vehicle component or of an electrical device or a combination thereof, by means of which it is determined that reactivation or application of a current or a voltage is harmless for the component. As a result, a vehicle can be put into operation, in particular in the event that an accident impact on the vehicle fails slightly, so that it can be put into use again or at least components necessary for evacuation are available for operation.In one specific embodiment, the deactivation takes place as a function of a driving state of the vehicle. In this case, a driving state can be, for example, a current speed, a current acceleration, a normal driving, an uphill driving, a spinning and / or a driver-guided and / or an autonomous driving. By including the driving state of the vehicle, a specific deactivation can take place, in particular with regard to individual vehicle components or electrical devices, so that components or vehicle systems which are necessary for any avoidance maneuvers or other measures are not shut down and are still available for use.In one embodiment, the at least one electrical device is deactivated as a function of at least one device property. In this case, it can be determined, for example, that a device represents a vehicle component which is necessary for vehicle operation, a driving maneuver and / or an avoidance maneuver, with the result that these components are preferably only switched off promptly to the determined collision. On the other hand, it can be established by means of a device property that, for example, a high-voltage air-conditioning compressor is not necessary for such driving maneuvers, wherein it can be established that a shutdown at an earlier point in time can be permitted for such components.In one embodiment, the at least one electrical device is reversibly and / or irreversibly deactivated. In this case, it can be provided that some electrical devices are only temporarily disconnected from an on-board power supply system, it being possible to connect or restore a connection to the on-board power supply system. In other electrical devices, it can be provided that they are first switched off reversibly and, in particular, irreversibly when a certain condition prevails, such as, for example, a time and / or a probability of an accident. By means of irreversible deactivation or deactivation, safety for the vehicle and occupants of the vehicle in the event of a collision can be improved. At least temporary protection can be achieved by a reversible shutdown. Whether a reversible or irreversible deactivation takes place or is to take place in particular for a respective device can be associated, for example, with the fulfilment of a condition or a criterion such as the accident probability, the determined accident time, the accident category, the impact zone, a device property or a combination of the conditions described herein.According to a further aspect, a vehicle is proposed which is configured to carry out a method described herein and / or has a monitoring device described herein. By such a vehicle, the effects and advantages described herein can be utilized equally.Further advantages and possible applications of the invention will become apparent from the following description in conjunction with the figures. FIG. 1 shows a schematic illustration of an exemplary embodiment of a vehicle according to the invention having a monitoring device according to the invention for at least one electrical device of the vehicle. FIG. 2 shows a schematic flow diagram of an exemplary embodiment of a method according to the invention for safety shutdown of at least one electrical device of a vehicle.FIG. 1 shows a vehicle 10 according to an exemplary embodiment having a monitoring device 11 according to the invention for at least one electrical device 20 of the vehicle 10.The vehicle 10 has five electrical devices 20, 21, 22, 23, 24, for example, wherein a first electrical device 20 is a traction machine, a second electrical device 21 is an engine controller, a third electrical device 22 is a vehicle battery, a fourth electrical device 23 is an air conditioning system and a fifth electrical device 24 is an immobilizer and the devices 20, 21, 22, 23, 24 are components of an on-board power supply system 25, illustrated by way of example and therefore incompletely, of the vehicle 10.In addition, vehicle 10 or monitoring device 11 thereof has a surroundings sensor 13 ain the form of a radar sensor and a second surroundings sensor 13 bin the form of a camera, each of which is configured to record at least one piece of surroundings information relating to the surroundings of vehicle 11. A processing device 14 is coupled to the environment sensors 13 a, 13 band is configured to determine an imminent accident event on the basis of the at least one detected environmental information item. A deactivation device 15 is coupled to the processing device 14 and the electrical devices 20, 21, 22, 23, 24 and is configured to deactivate the electrical devices 20 of the vehicle 10 as a function of the determined accident event. In other exemplary embodiments, each or predetermined electrical devices 20, 21, 22, 23, 24 can have its own deactivation device 15, which can be caused by the processing device 14 to deactivate the respective device or devices 20, 21, 22, 23, 24.FIG. 2 shows a schematic flow diagram of an exemplary embodiment of a method 100 according to the invention for safety shutdown of at least one electrical device 20, 21, 22, 23, 24 of the exemplary vehicle 10 from FIG. 1.In a first step a, at least one piece of environmental information of vehicle 10 is detected by means of environment sensors 13 a, 13 bof vehicle 10. In a step b, an imminent accident event is determined on the basis of the at least one detected environmental information item, and in a step c, the electrical device 20, 21, 22, 23, 24 of the vehicle 10 is deactivated if an imminent accident event is determined. In this case, the deactivation can be effected, for example, by disconnection from the on-board power supply system 25 and / or switching the device 20, 21, 22, 23, 24 in a current-free and / or voltage-free manner and, in particular, reversibly and / or irreversibly. In addition, the deactivation can take place as a function of a driving state of the vehicle and / or at least one device property.In an optional step d, a probability of the imminent accident event occurring can be determined, and in step c, the electrical device 20, 21, 22, 23, 24 can be deactivated depending on the determined probability. In this case, for example, a threshold value for the probability for the traction machine 20 can be stored and this is deactivated or disconnected from the on-board power supply system 25 when the probability threshold value is exceeded in step c.In an optional step e, a point in time for the imminent accident event to occur can be determined, and in step c, the electrical device 20, 21, 22, 23, 24 can be deactivated as a function of the determined point in time. In this case, it can be stored for the engine controller 21, for example, that this should be deactivated 200 milliseconds before the time of the occurrence of the accident event and this should be deactivated or disconnected from the on-board power supply system 25 at this predetermined time in step c.In an optional step f, the imminent accident event can be assigned to an accident category, and in step c, the electrical device 20, 21, 22, 23, 24 can be deactivated depending on the accident category. In this case, it can be stored for the vehicle battery 22, for example, that it should be deactivated irreversibly and promptly in the event that the accident event is assigned to a high-risk category. Consequently, the vehicle battery 22 is deactivated or disconnected from the on-board power supply system 25 as a function of this condition in step c.In an optional step g, an impact zone of the vehicle 10 may be determined for the imminent accident event, and in step c, the electrical device 20, 21, 22, 23, 24 may be deactivated depending on the determined impact zone. In this case, it can be stored for the air conditioning system 23, for example, that it is to be deactivated in the event of a frontal impact, but not in the event of a lateral collision. Consequently, upon the occurrence of this condition, the vehicle battery 22 is deactivated or disconnected from the on-board power supply system 25 in step c.In a further optional step h, reactivation criterion can be determined and in a step i, the electrical device 20, 21, 22, 23, 24, which is in particular reversibly deactivated beforehand, can be reactivated as a function of the reactivation criterion. In this case, a reactivation criterion can be a manual release by means of an input device. As a result, the immobilizer 24 can be reactivated or connected to the on-board power supply system 25 in step i.LIST OF REFERENCE CHARACTERS10 Vehicle 11 Monitoring device 13 a Umfeldsensor sensor, radar sensor 13 b Umfeldsensor sensor, camera 14 Processing device 15 Deactivation device 20 Electrical device, 21 Electrical device, 22 Electrical device, 23 Electrical device, 24 Electrical device, 25 On-board power supply system 100 Method a-i Steps

Claims

Method (100) safety shutdown of at least one electrical device (20, 21, 22, 23, 24) of a vehicle (10), having the following steps: a) Detection of at least one piece of environmental information of the vehicle (10) by means of at least one environment sensor (13a, 13b) of the vehicle (10), b) Determination of an imminent accident event on the basis of the at least one piece of detected environmental information, and c) If an imminent accident event is determined, deactivation of the at least one electrical device (20, 21, 22, 23, 24) of the vehicle (10).Method (100) according to the preceding claim, comprising the further steps of: d) determining a probability for an occurrence of the imminent accident event, and c) deactivating the at least one electrical device (20, 21, 22, 23, 24) as a function of the determined probability.Method (100) according to one of the preceding claims, comprising the further steps: e) determining a point in time of the imminent accident event, and c) deactivating the at least one electrical device (20, 21, 22, 23, 24) as a function of the determined point in time.Method (100) according to one of the preceding claims, comprising the further steps: f) assigning the imminent accident event to an accident category, and c) deactivating the at least one electrical device (20, 21, 22, 23, 24) depending on the accident category.Method (100) according to one of the preceding claims, comprising the further steps: g) determining an impact zone of the vehicle (10) for the imminent accident event, and c) deactivating the at least one electrical device (20, 21, 22, 23, 24) depending on the impact zone of the vehicle (10).Method (100) according to one of the preceding claims, comprising the further steps: h) determining a reactivation criterion, and i) reactivation of at least one electrical device (20, 21, 22, 23, 24) as a function of the reactivation criterion.Method (100) according to one of the preceding claims, wherein the deactivation takes place as a function of a driving state of the vehicle (10).Method (100) according to one of the preceding claims, wherein the electrical device (20, 21, 22, 23, 24) is deactivated (20, 21, 22, 23, 24) as a function of at least one device property of the electrical device.Method (100) according to one of the preceding claims, wherein the at least one electrical device (20, 21, 22, 23, 24) is reversibly and / or irreversibly deactivated.Monitoring device (11) for at least one electrical device (20, 21, 22, 23, 24) of a vehicle (10), comprising: - at least one environment sensor (13a, 13b) which is configured to capture at least one item of environmental information of the vehicle (10), - a processing device (14) which is coupled to the at least one environment sensor (13a, 13b) and is configured to determine an imminent accident event on the basis of the at least one captured item of environmental information, and - a deactivation device (15) which is coupled to the processing device (14) and is configured to deactivate at least one electrical device (20, 21, 22, 23, 24) of the vehicle (10) on the basis of the determined accident event.Vehicle (10) having at least one electrical device (20, 21, 22, 23, 24), wherein the vehicle (10) is configured to carry out a method (100) according to one of Claims 1 to 9 and / or having a monitoring apparatus (11) according to Claim 10.

Images