Method for monitoring an on-board network, vehicle, computer program product, computer-readable medium and data carrier signal

Abstract

The present invention relates to a method for monitoring an on-board electrical system (100) of a vehicle (200). The on-board electrical system (100) comprises a power source (10) for providing electrical energy, at least one electrical component (51), and at least one electrical current path (31) for electrically connecting the power source (10) to the at least one electrical component (51).Furthermore, the procedure comprises as steps a provision (320) of target information of the at least one electrical component (51), a determination (340) of actual information of at least one first electrical state variable of the at least one electrical current path (31), and a detection (360) of a fulfillment of a violation criterion based at least on the provided target information of the at least one electrical component (51) and the determined actual information of the at least one first electrical state variable of the at least one electrical current path (31), wherein a control signal (81) is output as a reaction (380).

Description

[0001] The present invention relates to a method for monitoring an on-board network, a vehicle, a computer program product, a computer-readable medium and a data carrier signal.

[0002] A steady increase in electrical components and the growing complexity of vehicle electrical systems can place high demands on the functional reliability of a vehicle. Functional reliability refers in particular to ensuring the proper functioning of the systems and components within the vehicle.

[0003] Consequently, the concept of a secure power supply has been developed to ensure a reliable supply, particularly a reliable power supply, to all systems and components in many situations. For example, specific requirements are placed on the power supply of safety-relevant components such as the braking system, steering, high-voltage battery unit, exterior lighting, and certain control units.

[0004] Furthermore, many of the functions implemented in vehicles may be subject to industrial standards. One such standard is the International Organization for Standardization ISO 26262. This standard defines a safety assessment that is carried out in four levels (ASIL ratings). The ASIL ratings (Automotive Safety Integrity Levels) are a risk assessment method according to ISO 26262 for the functional safety of electronic systems in vehicles. Overall, ISO 26262 requires that the power supply in the vehicle be reliable and safe in order to minimize potential hazards to the occupants, other road users, and the environment.

[0005] Furthermore, electrical components and their behavior can change over time, which can also affect the guarantee of a secure energy supply.

[0006] It is an object of the present invention to at least partially overcome the disadvantages described above. In particular, it is an object of the present invention to provide a method for monitoring and controlling an on-board electrical system, a vehicle, a computer program product, a computer-readable medium, or a data carrier signal, by means of which a fault in the on-board electrical system can be detected particularly reliably and / or easily, and / or the on-board electrical system can be designed particularly simply and / or operated particularly reliably.

[0007] The foregoing problem is solved by a method having the features of claim 1 and a vehicle having the features of claim 8, as well as a computer program product, a computer-readable medium, and a data carrier signal having the features of claims 9, 10, and 11, respectively. Further features and details of the invention will become apparent from the dependent claims, the description, and the drawings. Features and details described in connection with the method according to the invention naturally also apply in connection with the vehicle and / or computer program product and / or computer-readable medium and / or data carrier signal according to the invention, and vice versa, so that the disclosure of the individual aspects of the invention always makes, or can make, reciprocal references.

[0008] According to a first aspect, the present invention discloses a method for monitoring the electrical system of a vehicle, wherein the electrical system comprises at least one energy source for providing electrical energy, at least one electrical component, and at least one electrical current path for electrically connecting the energy source to the at least one electrical component. The method comprises, as a step, providing target information for the at least one electrical component. Furthermore, the method comprises, as a step, determining actual information for at least one electrical state variable of the at least one electrical current path, in particular determining actual information for at least one electrical state variable of the at least one electrical component.Furthermore, the procedure includes, as a step, the detection of the fulfillment of a violation criterion based at least on the provided target information of the at least one electrical component and the determined actual information of the at least one first electrical state variable of the at least one electrical current path, whereby a control signal is output in response.

[0009] The process steps described above and below can be carried out individually, together, simply, multiple times, in parallel and / or sequentially in any order, provided this is technically feasible. The method according to the invention can also be applied to at least one further electrical component of the vehicle electrical system, wherein the further electrical component of the vehicle electrical system is electrically connected to the energy source via a further electrical current path.

[0010] The energy source for providing electrical energy can be, for example, an electrochemical energy storage system and / or a fuel cell system.

[0011] The at least one electrical component is in particular an electrical consumer component, especially an electrical consumer component of a safety-relevant component of the vehicle electrical system.

[0012] The at least one electrical current path can be formed at least section by (rigid or flexible) electrical conductors, in particular conductor tracks, and / or at least section by (rigid or flexible) electrical lines or cables.

[0013] The target information of at least one electrical component or at least one other electrical component of the vehicle electrical system can be stored on a storage unit of the electrical system, in particular a storage unit of a monitoring unit of the electrical system, and in particular stored non-volatilely. The target information of the at least one electrical component of the vehicle electrical system is, in particular, target information of the at least one electrical component that relates to electrical state variables of the at least one electrical component. For example, the target information of the at least one electrical component can include a target current and / or a target voltage and / or a target power, in particular a maximum target power, of the at least one electrical component.Details, features, advantages and / or explanations disclosed preceding or following at least one electrical component of the vehicle electrical system may also be applied to at least one further electrical component of the vehicle electrical system, and vice versa.

[0014] The actual electrical state variables of at least one electrical current path can be determined, and in particular calculated, as actual information. This information includes the actual current of the at least one electrical current path or the at least one electrical component, and / or the actual voltage of the at least one electrical current path or the at least one electrical component, and / or the actual power of the at least one electrical current path or the at least one electrical component. For example, an electrical voltage applied to the at least one electrical component can be determined using a voltage sensing unit of an electronic fuse (eFuse) electrically arranged in the at least one electrical current path, taking into account voltage tolerances and / or voltage losses across the electrical current path.The voltage tolerances and / or voltage losses across the electrical current path can be determined in advance and stored in a storage unit of the vehicle electrical system, particularly a storage unit of a monitoring unit of the vehicle electrical system. Alternatively or additionally, a current sensing unit of an electronic fuse electrically arranged in the at least one electrical current path can be used to determine the current in the at least one electrical current path, and thus in the at least one electrical component, taking current tolerances into account. The current tolerances can be determined in advance and stored in a storage unit of the vehicle electrical system, particularly a storage unit of a monitoring unit of the vehicle electrical system. The actual (electrical) power of the at least one electrical current path or...The state of at least one electrical component can be determined, for example, from the measured actual voltage and current, and in particular, calculated. Furthermore, it is conceivable that, for determining actual information about the at least one first electrical state variable or several electrical state variables of the at least one electrical current path, one or more state variables indicative of the electrical state variable or the several electrical state variables of the at least one electrical current path are recorded.

[0015] To detect whether the violation criterion has been met, a comparison can be made between the target information of the at least one electrical component and the determined actual information of the at least first electrical state variable of the at least one electrical current path, particularly taking into account voltage tolerances and / or current tolerances and / or voltage losses. For example, a target current of the at least one electrical component can be compared with an actual current of the at least one electrical component, and / or a target power of the at least one electrical component can be compared with an actual power of the at least one electrical component, whereby the control signal is output or not based on the comparison result. If, for example, the actual power of the at least one electrical component is greater than the target power of the at least one electrical component, a fault, e.g.,An unwanted electrical current flow may be present in the vehicle electrical system, and this may affect the safe operation of other electrical components of the electrical system. With the method according to the invention, a fault, e.g., an unwanted current flow and / or an unwanted increase in resistance, and / or a change in the (electrical) behavior of at least one electrical component in the electrical system, can thus be detected particularly reliably and / or easily, and / or the electrical system can be designed particularly simply and / or operated particularly safely.

[0016] In a method according to the invention, it can be advantageous that at least a target current for the at least one electrical component is provided as target information, and furthermore, at least actual current information for the at least one electrical current path is determined. Based on at least the provided target current and the determined actual current information for the at least one electrical current path, compliance with the violation criterion is recognized. This ensures that the current consumption of the at least one electrical component remains within the intended limits, thus enabling the safe operation of the vehicle electrical system and other potentially safety-relevant components of the vehicle electrical system. Excessive current consumption of the at least one electrical component outside the intended limits could, for example,This can lead to an excessively low supply voltage for other electrical components of the vehicle electrical system, thus impacting the reliable power supply.

[0017] In a method according to the invention, it can be advantageous that at least one electrical component's target power is provided as target information, and furthermore, actual information of a current of the at least one electrical current path and an electrical voltage applied to the at least one electrical component is determined, wherein, based on the provided target power and the determined actual information of the current of the at least one electrical current path and the electrical voltage applied to the at least one electrical component, the fulfillment of the violation criterion is recognized, in particular taking into account voltage tolerances and / or current tolerances and / or voltage losses.This ensures that the power consumption of at least one electrical component remains within specified limits, thus enabling the safe operation of the vehicle's electrical system and any other potentially safety-relevant components. The actual (electrical) power consumption of at least one electrical current path or component can be determined, and in particular calculated, from the measured actual voltage and current.

[0018] In a method according to the invention, it can be advantageous for the vehicle electrical system to have an auxiliary electrical component, wherein the detection of compliance with the violation criterion is based not only on the provided target information of the at least one electrical component and the determined actual information of the at least one first electrical state variable of the at least one electrical current path, but also on an operating state of the auxiliary electrical component, taking into account, in particular, a latency time, and / or that, for determining the actual information of the at least one first electrical state variable of the at least one electrical current path, the auxiliary electrical component is or is at least temporarily switched to a defined state, in particular to an off state. The auxiliary component can also be understood as an auxiliary load.The operating state of the electrical auxiliary component can include an activation status. This allows the current draw of the electrical auxiliary component to be considered for detecting whether a violation criterion has been met. Consequently, a fault, such as an unwanted current flow and / or an unwanted increase in resistance, and / or a change in the (electrical) behavior of at least one electrical component in the vehicle electrical system, can be detected particularly reliably and / or easily, and / or the vehicle electrical system can be operated more safely. The electrical auxiliary component can, for example, be arranged electrically in parallel to the at least one electrical component in the vehicle electrical system.

[0019] By temporarily transferring the electrical auxiliary component into a defined state, in particular into an off state, preferably a currentless off state, the actual information of the at least one first electrical state variable of the at least one electrical current path can be determined particularly advantageously and easily, since, for example, the current consumption of the electrical auxiliary component in the defined state is stored on a storage unit or is negligible or does not need to be taken into account.

[0020] In a method according to the invention, it can be advantageous for the output control signal to contain at least one indicator message to show that the violation criterion has been met. In particular, the control signal, including the indicator message to show that the violation criterion has been met, can be sent to a visual display device of the vehicle's electrical system, e.g., a screen. This allows a vehicle occupant to be alerted and warned of a fault and / or a change in the (electrical) behavior of at least one electrical component in the vehicle's electrical system.

[0021] In a method according to the invention, it can be advantageous for the output control signal to be received by a control device of the vehicle electrical system, and for the control device to monitor, in particular control and / or regulate, the vehicle electrical system, especially the at least one electrical component, based at least on the control signal. For example, if it is detected that the actual current of the at least one electrical component of the vehicle electrical system and / or the actual power of the at least one electrical component is too high, the at least one electrical component can be degraded and / or other electrical components of the vehicle electrical system can be degraded. Thus, the vehicle electrical system can continue to be operated in a particularly safe manner.

[0022] In a method according to the invention, it can be advantageous that a switchable fuse is at least partially formed in the at least one electrical current path, wherein the actual information of the at least one first electrical state variable of the at least one electrical current path is determined by means of a voltage sensing unit and / or a current sensing unit. Advantageously, actual (electrical) information of the at least one electrical component can thus be determined, e.g., an actual current of the at least one electrical component and / or an actual voltage applied to the at least one electrical component and / or an actual power of the at least one electrical component. The switchable fuse can comprise a controllable relay, in particular a controllable electromechanical relay.Alternatively or additionally, the switchable fuse can comprise or be an electronic fuse with at least one controllable semiconductor switch, whereby the actual information of at least one electrical state variable of at least one electrical current path can be determined particularly easily using a voltage sensing unit of the electronic fuse and / or a current sensing unit of the electronic fuse. The switchable fuse can also be understood as a switchable disconnecting element.

[0023] According to a second aspect, the present invention shows a vehicle with an on-board network designed according to the invention, wherein the vehicle is configured to carry out a method according to the invention.

[0024] The vehicle can be a motor vehicle, in particular a passenger car or a truck, or a motorcycle. The vehicle can have a fuel cell system.

[0025] The vehicle electrical system can include a monitoring unit for monitoring at least one electrical component. The monitoring unit can include a storage unit for providing the target information of the at least one electrical component and / or a determination unit for determining, in particular calculating, actual information of the at least one first electrical state variable of the at least one electrical current path and / or a detection unit for recognizing whether the violation criterion has been met. Furthermore, the monitoring unit can be configured to output the control signal in response to the detection of whether the violation criterion has been met. The monitoring unit can be a central monitoring unit and monitor several electrical components of the vehicle electrical system, e.g.,...The system centrally monitors at least one electrical component and another electrical component of the vehicle electrical system and, upon detecting that at least one violation criterion of a respective violation criterion has been met, outputs at least one control signal, in particular, each a separate control signal. Alternatively, it is also conceivable that the at least one electrical component and the other electrical component each have their own monitoring unit, in particular, each an integrated monitoring unit. In other words, the at least one electrical component and the other electrical component of the vehicle electrical system can each have their own monitoring unit.

[0026] The vehicle according to the second aspect of the invention thus has the same advantages as those already described for the method according to the first aspect of the invention.

[0027] According to further aspects, the present invention discloses a computer program product, a computer-readable medium and a data carrier signal, wherein the computer program product, the computer-readable medium and the data carrier signal have the same advantages as have already been described for the method according to the first aspect of the invention, the vehicle according to the second aspect of the invention, the computer program product, the computer-readable medium and the data carrier signal according to the further aspects of the invention.

[0028] The computer program product comprises commands, in particular instructions, wherein the commands, in particular instructions, cause a vehicle according to the invention to execute a method according to the invention. The computer program product can be implemented as computer-readable instruction code in any suitable programming language, such as Java, C++, etc., wherein, in particular, the instruction code of the computer program product can program a computer or other programmable devices, such as a monitoring unit of a vehicle according to the invention or its on-board network, in such a way that the desired functions are executed.

[0029] The monitoring unit can be at least one control unit. Furthermore, the monitoring unit can be understood or configured as a single control unit or as a plurality of control units interconnected via communication technology.

[0030] The computer program product can be realized either by means of instruction code, i.e., software (computer program), or by means of one or more special electronic circuits, i.e., in hardware, or in any hybrid form, i.e., by means of software components and hardware components.

[0031] The computer program product can be stored on a computer-readable storage medium, e.g., volatile or non-volatile memory and / or a processor of the monitoring unit.

[0032] Furthermore, the computer program product can be provided in a network such as the Internet, from which it can be downloaded by a user when needed, wherein, in particular, the data carrier signal transmits the computer program product according to the invention when downloading the computer program product.

[0033] Further improvements to the invention will become apparent from the following description of some exemplary embodiments of the invention, which are schematically illustrated in the figures. All features and / or advantages arising from the claims, the description, or the drawings, including design details, spatial arrangements, and process steps, can be essential to the invention, both individually and in various combinations. It should be noted that the figures are for descriptive purposes only and are not intended to limit the invention in any way.

[0034] They show schematically: Fig. 1. an on-board electrical system, Fig. 2 a vehicle, and Fig. 3 a procedure.

[0035] In the following figures, identical reference numerals are used for the same technical features even for different embodiments.

[0036] Fig. Figure 1 schematically reveals a vehicle electrical system (100) and Fig. 2 Schematically, a vehicle (200) with such an on-board electrical system (100), wherein the on-board electrical system (100) comprises an energy source (10) for providing electrical energy, at least one electrical component (51), and at least one electrical current path (31) for electrically connecting the energy source (10) to the at least one electrical component (51). Furthermore, the on-board electrical system additionally includes a monitoring unit (80).The monitoring unit (80) can comprise a storage unit for providing target information of the at least one electrical component (51), a determination unit for determining, in particular calculating, actual information of the at least one first electrical state variable of the at least one electrical current path (31), and a detection unit for recognizing the fulfillment of the violation criterion. Furthermore, the monitoring unit (80) can be configured to output a control signal (81) in response to the recognition of the fulfillment of the violation criterion, wherein the control signal (81) in particular contains at least some indication information. Fig. 1. In the at least one electrical current path (31), a switchable fuse (40) is at least partially formed, wherein the actual information of the at least one first electrical state variable or several electrical state variables of the at least one electrical current path (31) can be determined (340) using a voltage sensing unit (41) and / or a current sensing unit (42) and, if necessary, provided to the monitoring unit (80) (see dashed-dotted lines). The switchable fuse (40), e.g., an electronic fuse (40), can comprise a controllable (see dashed-dotted line) semiconductor switch or a relay. Furthermore, by way of example, an optional auxiliary electrical component (52) is arranged electrically in parallel to the at least one electrical component in the vehicle electrical system (100).Furthermore, the vehicle electrical system (100) comprises a control device (90), wherein the output control signal (81) is received or can be received by the control device (90) of the vehicle electrical system (100), and wherein the control device (90) is configured to control the vehicle electrical system (100), in particular the at least one electrical component (51), based at least on the control signal (81) (see dashed-dotted line), in particular to control and / or regulate it. Alternatively or additionally to controlling the at least one electrical component (51), it is also conceivable that the control device (90) is further configured to control the switchable fuse (40) based at least on the control signal (81), in particular to activate it, e.g., to trip it. Furthermore, the vehicle electrical system (100) and / or the vehicle (200) is configured to operate a method according to the invention, such as that described, for example, in... Fig. 3 is to be carried out.

[0037] Fig. Figure 3 schematically discloses a method for monitoring an on-board network (100) of a vehicle (200), as is used, for example, in Fig. 1 and / or Fig. 2 is described. The method comprises, as a step, providing (320) target information of the at least one electrical component (51). Furthermore, the method comprises, as a step, determining (340) actual information of at least one first electrical state variable of the at least one electrical current path (31). Finally, the method comprises, as a step, detecting (360) whether a violation criterion has been met, based at least on the provided target information of the at least one electrical component (51) and the determined actual information of the at least one first electrical state variable of the at least one electrical current path (31), and issuing a control signal (81) in response (380).

[0038] It can happen in or to the Fig. The method described in 3 is advantageous in that at least one target current of the at least one electrical component (51) is provided as target information (321) and furthermore at least actual information of a current of the at least one electrical current path (31) is determined (341), wherein the fulfillment of the violation criterion is recognized based at least on the provided target current and the determined actual information of the current of the at least one electrical current path (31) (360).

[0039] It can happen in or to the Fig. The method described in 3 is further advantageous in that at least one electrical component (51) is provided as target information (322) and actual information of a current of the at least one electrical current path (31) and an electrical voltage applied to the at least one electrical component (51) is determined (342), wherein, based on the provided target power and the determined actual information of the current of the at least one electrical current path (31) and the electrical voltage applied to the at least one electrical component (51), the fulfillment of the violation criterion is recognized (360).

[0040] It can happen in or to the Fig. It may also be advantageous in the method described in section 3 that the vehicle electrical system (100) has an auxiliary electrical component (52), wherein the recognition of the fulfillment of the violation criterion is carried out not only on the basis of the provided target information of the at least one electrical component (51) and the determined actual information of the at least one first electrical state variable of the at least one electrical current path (31), but also on the basis of an operating state of the auxiliary electrical component (52), and / or that for the determination (340) of the actual information of the at least one first electrical state variable of the at least one electrical current path (31), the auxiliary electrical component (52) is at least temporarily switched to a defined state, in particular to an off state.

[0041] It can happen in or to the Fig. The method described in section 3 is further advantageous in that the output control signal (81) is received by a control device (90) of the vehicle electrical system (100), and wherein the control device (90) controls the vehicle electrical system (100), in particular the at least one electrical component (51), based at least on the control signal (81) (400).

[0042] It can happen in or to the Fig. 3 described method further advantageous is that an electronic fuse (40) is at least partially formed in the at least one electrical current path (31), wherein the actual information of the at least one first electrical state variable of the at least one electrical current path (31) is determined using a voltage sensing unit (41) of the electronic fuse (40) and / or a current sensing unit (42) of the electronic fuse (340). Reference symbol list 10 Energy source 31 electrical current path 32 electrical bypass path 40 electronic fuse 41 Voltage detection unit 42 Current sensing unit 51 which includes at least one electrical component 52 electrical auxiliary components 80 monitoring units 81 Control signal 90 Control device 100 On-board power supply 200 vehicles 320 Providing target information for at least one electrical component 321 Provide the required current for at least one electrical component 322 Provide the target power of at least one electrical component 340 Determining actual information of at least one first electrical state variable of at least one electrical current path 341 Determine actual information of a current strength of at least one electric current path 342 Determine actual information of a current strength of at least one electrical current path and of an electrical voltage applied to at least one electrical component 360 Detect fulfillment of an injury criterion 380 Outputting a control signal 400 Checking the vehicle electrical system

Claims

Method for monitoring an on-board electrical system (100) of a vehicle (200), wherein the on-board electrical system (100) comprises: - an energy source (10) for providing electrical energy, - at least one electrical component (51), - at least one electrical current path (31) for electrically connecting the energy source (10) to the at least one electrical component (51), and wherein the method comprises: - providing (320) target information of the at least one electrical component (51), - determining (340) actual information of at least one first electrical state variable of the at least one electrical current path (31), - detecting (360) a fulfillment of a violation criterion based at least on the provided target information of the at least one electrical component (51) and the determined actual information of the at least one first electrical state variable of the at least one electrical current path (31),whereupon a control signal (81) is output in response (380). Method according to claim 1, characterized in that at least a target current of the at least one electrical component (51) is provided as target information (321) and furthermore at least actual information of a current of the at least one electrical current path (31) is determined (341), wherein the fulfillment of the violation criterion is recognized based at least on the provided target current and the determined actual information of the current of the at least one electrical current path (31) (360). Method according to one of the preceding claims, characterized in that at least one target power of the at least one electrical component (51) is provided as target information (322) and furthermore actual information of a current of the at least one electrical current path (31) and an electrical voltage applied to the at least one electrical component (51) is determined (342), wherein, based on the provided target power and the determined actual information of the current of the at least one electrical current path (31) and the electrical voltage applied to the at least one electrical component (51), the fulfillment of the violation criterion is recognized (360). Method according to one of the preceding claims, characterized in that the on-board network (100) has an electrical auxiliary component (52), wherein the recognition of the fulfillment of the violation criterion is carried out, in addition to the provided target information of the at least one electrical component (51) and the determined actual information of the at least one first electrical state variable of the at least one electrical current path (31), also based on an operating state of the electrical auxiliary component (52) and / or that, for the determination (340) of the actual information of the at least one first electrical state variable of the at least one electrical current path (31), the electrical auxiliary component (52) is at least temporarily switched to a defined state, in particular to an off state. Method according to one of the preceding claims, characterized in that the output control signal (81) includes at least one indication information. Method according to one of the preceding claims, characterized in that the output control signal (81) is received by a control device (90) of the vehicle electrical system (100), and wherein the control device (90) controls the vehicle electrical system (100), in particular the at least one electrical component (51) and / or a switchable fuse (40), based at least on the control signal (81) (400). Method according to one of the preceding claims, characterized in that a switchable fuse (40), in particular an electronic fuse (40), is at least partially formed in the at least one electrical current path (31), wherein the actual information of the at least one first electrical state variable of the at least one electrical current path (31) is determined by means of a voltage detection unit (41) and / or a current detection unit (42) (340). Vehicle (200) with an on-board network (100) according to one of the preceding claims, wherein the vehicle (200) is configured to perform a method according to one of the preceding claims. Computer program product, wherein the computer program product comprises commands, wherein the commands cause a vehicle (200) configured according to claim 8 to execute a method according to any one of claims 1 to 7. Computer-readable medium, wherein the computer program product according to claim 9 is stored on the computer-readable medium. Data carrier signal, wherein the data carrier signal transmits the computer program product according to claim 9.

Images