VALVE DEVICE FOR A SYSTEM, IN PARTICULAR FOR A VEHICLE AND SYSTEM, IN PARTICULAR BRAKING SYSTEM FOR A VEHICLE

Description

[0001] The present invention relates to a braking system for a vehicle, in particular an electronic braking system.

[0002] In the course of automated or autonomous driving of all types of vehicles, for example, redundancies must be created. These redundancies must be designed in such a way that the vehicle cannot enter a safety-critical or uncontrollable state. For example, there is a move to install systems such as the electric braking system EBS or ABS multiple times in the vehicle. Another option could be to supplement the system with similar subsystems that can replicate the functionality. In the event of a fault, the faulty system can be shut down, and the second fault-free system can take over the task, thus creating redundancy. For example, to be able to redundantly represent an electric braking system in commercial vehicles, the number of pressure control valves on each axle or a respective wheel would be doubled.

[0003] DE 10 2018 121 960 A1 relates to a device for decoupling and / or protecting against compensating currents for use when at least one electrical actuator is shared by a plurality of independently powered control units in redundant systems for autonomous driving. Each electrical actuator comprises a common connection, via which the electrical actuator can be coupled and switched to a common connection of other electrical actuators, and at least one dedicated connection, via which the at least one electrical actuator can be individually energized. A number of switching devices corresponding to the common connection and the number of dedicated connections of all electrical actuators is arranged to switch whether or not to apply a current to the at least one electrical actuator.At least one current flow blocking device is also provided, which is configured to prevent an undesired current flow to a non-active electronic control unit of the first and second control devices. DE 10 2018 103 605 A1 relates to an electropneumatic vehicle system comprising an electropneumatic parking brake device with an electropneumatic parking brake control device, wherein the electropneumatic parking brake control device is supplied with electrical energy by only two mutually independent electrical energy sources.

[0004] Against this background, the object of the present invention is to create an improved braking system for a vehicle.

[0005] This object is achieved by a braking system for a vehicle according to the main claim.

[0006] The invention relates to a braking system for a vehicle, wherein the braking system comprises a valve device, a first control unit and a second control unit, wherein the control units are electrically connected to the valve device, has the following features: a valve unit for adjusting a pressure of a working medium for the braking system, wherein the valve unit has at least one actuator for actuating the valve unit; a valve housing for accommodating the valve unit; and a fault protection module arranged outside the valve housing, wherein the fault protection module has a first supply connection for electrical connection to the first control unit, a second supply connection for electrical connection to the second control unit, a first main connection for electrical connection to the first control unit, a second main connection for electrical connection to the second control unit, a first connection connection electrically connected to the first supply connection and the second supply connection for electrical connection to the actuator,a second connection terminal electrically connected to the first main terminal and the second main terminal for electrical connection to the actuator, a first electrical protection circuit and a second electrical protection circuit, wherein the first protection circuit is electrically connected between the first supply terminal and the second supply terminal on the one hand and the first connection terminal on the other hand, wherein the second protection circuit is electrically connected between the second connection terminal on the one hand and the first main terminal and the second main terminal on the other hand, wherein at least one of the protection circuits has at least one electrical fuse device and at least one diode element, which are connected in series to the respective supply / main terminal, wherein the valve unit has at least one further actuator for actuating the valve unit,wherein the second connection terminal of the fault protection module is electrically connected to the further actuator, wherein the fault protection module has at least one third supply terminal for electrical connection to the first control unit, at least one fourth supply terminal for electrical connection to the second control unit, at least one further connection terminal electrically connected to the third supply terminal and the fourth supply terminal for electrical connection to the further actuator and at least one further protection circuit, wherein the further protection circuit is electrically connected between the third supply terminal and the fourth supply terminal on the one hand and the further connection terminal on the other hand.

[0007] The vehicle can be a motor vehicle, in particular a commercial vehicle, for example a truck or the like. The system can be designed as an electronic braking system or an electropneumatic braking system. The first control unit can be a primary control unit, and the second control unit can be a redundant control unit. The first control unit can be assigned to a first function or assistance function of the vehicle or the braking system, and the second control unit can be assigned to a second function or assistance function of the vehicle or the braking system. The device can be designed as a pressure control valve. The valve unit and thus the valve device can have at least one solenoid valve. The actuator can comprise a resistive inductance. The diode element can have a diode, a semiconductor diode, or the like.The safety device can comprise a fuse or other electrical fuse, for example, a self-resetting fuse or a multiple fuse. The fault protection module can be arranged adjacent to or near the valve unit to prevent interruption of the connecting connections. The actuator of the valve unit can, for example, be part of an inlet valve of the valve device, while the additional actuator can, for example, be part of an outlet valve of the valve device. This offers the advantage that any number of actuators of the valve device can be protected with minimal effort.

[0008] According to one embodiment, the actuator can be connected to a first electrical supply potential of the first control unit via the first supply connection and the first connection connection. In this case, the actuator can be connected to a second electrical supply potential of the second control unit via the second supply connection and the first connection connection. In this case, the actuator can be connected to a common electrical ground potential of the control units via the second connection connection and the first main connection or via the second connection connection and the second main connection. Such an embodiment offers the advantage that, despite the use of a common ground potential for the at least one actuator, redundant control of the valve device can be implemented in a manner protected against faults such as short circuits and the like.

[0009] A fuse device of the first protective circuit can also be connected between the first supply terminal and the first connection terminal. A diode element of the first protective circuit can be connected between the second supply terminal and the first connection terminal. A fuse device of the second protective circuit can be connected between the second connection terminal and the first main terminal. Furthermore, a diode element of the second protective circuit can be connected between the second connection terminal and the second main terminal. Such an embodiment offers the advantage of providing reliable protection against faults with a redundant design or control.

[0010] In particular, a forward direction of the diode element of the first protective circuit can extend from the second supply terminal to the first connection terminal. In this case, a forward direction of the diode element of the second protective circuit can extend from the second connection terminal to the second main terminal. Such an embodiment offers the advantage of enabling redundant operation by two control units in a safe and fault-protected manner.

[0011] In this case, a safety device of the further protective circuit can be connected between the third supply connection and the further connection connection. A diode element of the further protective circuit can be connected between the fourth supply connection and the further connection connection. A forward direction of the diode element of the further protective circuit can run from the fourth supply connection to the first connection connection. Such an embodiment offers the advantage of reliably protecting against faults for robust, redundant operation of a valve device with multiple actuators.

[0012] Furthermore, the additional actuator can be connected to the first electrical supply potential via the third supply connection and the additional connection connection. The additional actuator can be connected to the second electrical supply potential via the fourth supply connection and the additional connection connection. Such an embodiment offers the advantage that the additional actuator can also be integrated into the fuse protection system and thus protected with minimal effort.

[0013] Examples of the approach presented here are explained in more detail in the following description with reference to the figures. They show: Fig. 1 a schematic representation of a braking system as a system; Fig. 2 a schematic representation of a braking system as a system; Fig. 3 a schematic representation of a vehicle with a braking system according to an embodiment; and Fig. 4 a schematic representation of an embodiment of a valve device for a brake system.

[0014] Fig. 1 shows a schematic representation of a braking system 100 as a system. The braking system 100 includes, in particular, a first control unit or primary control unit ECU1, a second control unit or redundant control unit ECU2, and a plurality of pressure control valve (PCV) actuators 110. Several electronic control units, here the first control unit ECU1 and the second control unit ECU2, use common pressure control valves with the actuators 110 for braking control to provide redundancy in the braking system 100.

[0015] As an example, two pressure control valves with two actuators 110 each are shown.

[0016] Each of the actuators 110 is shown in the schematic diagram of Fig. 1 illustrated as an equivalent circuit diagram consisting of an inductance L and a resistor R. The first control unit ECU1 comprises terminals PCV1_IV, PCV1_OV, PCV2_IV, PCV2_OV, and GVR1 for electrical connection to the actuators 110, and terminals UB1 and GND1 for connection to a first electrical voltage source. The second control unit ECU2 comprises terminals PCV1_IV, PCV1_OV, PCV2_IV, PCV2_OV, and GVR1 for electrical connection to the actuators 110, and terminals UB2 and GND1 for connection to a second electrical voltage source.

[0017] As an example, a short circuit from UB1 to the shared actuator ground is also shown. In some fault cases, a state may arise in which neither the first control unit ECU1 nor the second control unit ECU2 can control the actuators 110. If UB1 or UB2 is short-circuited to the shared actuator ground, control is no longer possible. Another possible fault case is the short circuit of the control to UB1 or UB2. In this fault case, ABS control, for example, is therefore not possible from either the first control unit ECU1 or the second control unit ECU2. Redundancy of a primary braking system may therefore not be present under certain circumstances.

[0018] Fig. 2 shows a schematic representation of a braking system 200 as a system. The braking system 200 in Fig. 2 corresponds to the braking system from Fig. 1 with the exception that only one pressure control valve with two actuators 210 is provided, with a fuse F and a diode D additionally provided to protect the pressure control valve. Several electronic control units, here the first control unit ECU1 and the second control unit ECU2, use a common pressure control valve for brake control, which has the two actuators 210, in order to provide redundancy in the braking system 200. In the event of a short circuit from UB1 to the actuator ground GVR1 of the first control unit ECU1, the fuse F should trigger and thus disconnect the ground line GVR1, which is subject to a short circuit. The diode D should provide protection in the event of a short circuit from UB1 on the side of the second control unit of the ECU2.

[0019] Fig. 3 shows a schematic representation of a vehicle 300 with a braking system 305 as a system according to an embodiment. The braking system 305 can be the braking system of Fig. 2 The braking system 305 includes a first control unit 310, a second control unit 320, and a valve device 330. The control units 310 and 320 are electrically connected to the valve device 330. The valve device 330 will be discussed in more detail below.

[0020] Fig. 4 shows a schematic representation of an embodiment of a valve device 330 for a brake system as a system. The brake system corresponds to or is similar to the brake system from Fig. 3 . Thus, the braking system comprises a first control unit and a second control unit that are electrically connectable or connected to the valve device 330. The valve device 330 corresponds to or is similar to the valve device of Fig. 3 . In particular, the valve device 330 is designed as a pressure control valve (PCV) for the braking system.

[0021] The valve device 330 comprises a fault protection module 440, a valve unit 450, and a valve housing 435. The valve housing 435 is shaped to accommodate the valve unit 450. The valve unit 450 is designed to adjust a pressure of a working medium for the braking system. The valve unit 450 comprises at least one actuator 452 for actuating the valve unit 450. The valve unit 450 is arranged within the valve housing 435. The at least one actuator 452 comprises a resistive inductance, as shown in the illustration of Fig. 4 is illustrated by an equivalent circuit with an inductance L and a resistance R.

[0022] The fault protection module 440 is arranged outside the valve housing 435. The fault protection module 440 comprises a first supply connection 441, a second supply connection 442, a first main connection 445, a second main connection 446, a first connection connection 447, a second connection connection 448, a first electrical protection circuit 460, and a second electrical protection circuit 470.

[0023] The first supply connection 441 is used for the electrical connection to the first control unit of the braking system. The second supply connection 442 is used for the electrical connection to the second control unit of the braking system. The first main connection 445 is used for the electrical connection to the first control unit. The second main connection 446 is used for the electrical connection to the second control unit. The first connection connection 447 is electrically connected to the first supply connection 441 and the second supply connection 442 and is used for the electrical connection to the actuator 452. The second connection connection 448 is electrically connected to the first main connection 445 and the second main connection 446 and is used for the electrical connection to the actuator 452.

[0024] The first protection circuit 460 is electrically connected between the first supply terminal 441 and the second supply terminal 442, on the one hand, and the first connection terminal 447, on the other. The first protection circuit 460 comprises an electrical fuse device 462 and a diode element 464, which are connected in series with the respective supply / main terminal. The second protection circuit 470 is electrically connected between the second connection terminal 448, on the one hand, and the first main terminal 445 and the second main terminal 446, on the other hand. The second protection circuit 470 comprises an electrical fuse device 472 and a diode element 474, which are connected in series with the respective supply / main terminal. In particular, the fuse devices 462 and 472 are designed to trigger in the event of an electrical fault in the braking system, for example, in the event of a short circuit, and to prevent the fault from occurring.Furthermore, the diode elements 464 and 474 are designed to also prevent inadmissible current flow in such a fault situation.

[0025] According to one embodiment, the fuse device 462 of the first protection circuit 460 is connected between the first supply terminal 441 and the first connection terminal 447. The diode element 464 of the first protection circuit 460 is connected between the second supply terminal 442 and the first connection terminal 447. Furthermore, the fuse device 472 of the second protection circuit 470 is connected between the second connection terminal 448 and the first main terminal 445. The diode element 474 of the second protection circuit 470 is connected between the second connection terminal 448 and the second main terminal 446. For example, according to this embodiment, a forward direction of the diode element 464 of the first protection circuit 460 runs from the second supply terminal 442 to the first connection terminal 447.Also, a forward direction of the diode element 474 of the second protection circuit 470 runs, for example, from the second connection terminal 448 to the second main terminal 446.

[0026] In particular, the actuator 452 can be connected to a first electrical supply potential of the first control unit via the first supply connection 441 and the first connection connection 447. The actuator 452 can also be connected to a second electrical supply potential of the second control unit via the second supply connection 442 and the first connection connection 447. Furthermore, the actuator 452 can be connected to a common electrical ground potential of the control units via the second connection connection 448 and the first main connection 445 or via the second connection connection 448 and the second main connection 446.

[0027] According to the invention, the valve unit 450 comprises at least one further actuator 454 for actuating the valve unit 450. The second connection terminal 448 of the fault protection module 440 is electrically connected to the further actuator 454. Furthermore, according to this exemplary embodiment, the fault protection module 440 comprises at least one third supply terminal 443 for electrical connection to the first control unit, at least one fourth supply terminal 444 for electrical connection to the second control unit, at least one further connection terminal 449 electrically connected to the third supply terminal 443 and the fourth supply terminal 444 for electrical connection to the further actuator 454, and at least one further protection circuit 480.The further protection circuit 480 is electrically connected between the third supply connection 443 and the fourth supply connection 444, on the one hand, and the further connection connection 449, on the other. In particular, the fuse device 482 of the further protection circuit 480 is connected between the third supply connection 443 and the further connection connection 449. The diode element 484 of the further protection circuit 480 is connected between the fourth supply connection 444 and the further connection connection 449. For example, the further protection circuit 480 is identical to the first protection circuit 460 and / or the second protection circuit 470. For example, the further actuator 454 can be connected to the first electrical supply potential via the third supply connection 443 and the further connection connection 449.The additional actuator 454 can be connected to the second electrical supply potential via the fourth supply connection 444 and the additional connection connection 449. The additional actuator 454 can be connected to the common electrical ground potential of the control units via the second connection connection 448 and the first main connection 445 or via the second connection connection 448 and the second main connection 446.

[0028] The pressure control valve or valve device 330 comprises, for example, an inlet valve having the actuator 452 and an outlet valve having the further actuator 454. The actuators 452 and 454 are connectable or connected to a shared ground. Control lines or supply lines are routed separately from the control units via the fault protection module 440 to the actuators 452 and 454.

[0029] According to an exemplary embodiment not claimed, the fault protection module 440 is designed to be replaceable. Additionally or alternatively, the safety devices 462, 472, and optionally 482 of the protective circuits 460, 470, and optionally 480 are arranged in a replaceable manner in the protective circuits 460, 470, and optionally 480. Thus, the fault protection module 440 and / or each of the safety devices 462, 472, and optionally 482 can be individually replaced or renewed if necessary.

[0030] A diagonal arrangement of the safety devices 462, 472 and optionally 482 and diode elements 464, 474 and optionally 484 would also be conceivable, so that a safety device and a diode element are present in the circuit of each individual control unit, e.g., one safety device each at the first supply connection 441 and the second main connection 446 and one diode element each at the second supply connection 442 and the first main connection 445.

[0031] With reference to the figures described above, embodiments and advantages thereof are summarized and, in other words, briefly explained below.

[0032] Remedy with regard to, for example, the provisions of Fig. 1The aforementioned error source can thus be created by the protective circuits 460, 470 and optionally 480 in order to avoid further error sources. For example, the first control unit 310 (equivalent to the first control unit ECU1) can transfer control of the valve device 330 to the second control unit 320 (equivalent to the second control unit ECU2) without restriction. The first control unit 310 can use the valve device 330 or its actuator 452 or actuators 452 and 454 without restriction. The integration of the protective circuits 460, 470 and optionally 480 can thus also be incorporated into a control path for the valve device 330. The error protection module 440 comprises, for example, a Y-connector system with integrated diodes 464, 474, 484 and fuses 462, 472, 482 in a combined housing. All possible connector types can be used.In case of a defect, the fault protection module 440 can be easily replaced or individual fuses 462, 472, 482 can be replaced. LIST OF REFERENCE SYMBOLS

[0033] 100System; especially brake system 110Actuators GND1Common ground GVR1Main connection LInductance PCV1_IVSupply connection PCV1_OVSupply connection PCV2_IVSupply connection PCV2_OVSupply connection ECU1First control unit RResistor ECU2Second control unit UB1First supply potential UB2Second supply potential 200System; especially braking system 210Actuators DDiode FFuse 300Vehicle 305Brake system 310First control unit 320Second control unit 330Valve device 435Valve housing 440Fault protection module 441First supply connection 442Second supply connection 443Third supply connection 444Fourth supply connection 445First main connection 446Second main connection 447First connection connection 448Second connection connection 449Further connection connection 450Valve unit 452Actuator 454Further actuator 460First electrical protection circuit 462Electrical fuse device 464Diode element 470Second electrical protection circuit 472Electrical fuse device 474Diode element 480Further electrical protection circuit 482Electrical fuse device 484Diode element LInductance RIresistance

Claims

1. Braking system (305) for a vehicle (300), wherein the braking system (305) has a valve device (330), a first control unit (310) and a second control unit (320), wherein the control units (310, 320) are electrically connected to the valve device (330), wherein the valve device (330) has the following features: a valve unit (450) for setting a pressure of a working medium for the braking system (305), wherein the valve unit (450) has at least one actuator (452) for actuating the valve unit (450); a valve housing (435) for accommodating the valve unit (450); and an error protection module (440) which is arranged outside the valve housing (435), wherein the error protection module (440) has a first supply port (441) for the electrical attachment to the first control unit (310), a second supply port (442) for the electrical attachment to the second control unit (320), a first main port (445) for the electrical attachment to the first control unit (310), a second main port (446) for the electrical attachment to the second control unit (320), a first connection port (447), which is electrically connected to the first supply port (441) and to the second supply port (442), for the electrical connection to the actuator (452), a second connection port (448), which is electrically connected to the first main port (445) and to the second main port (446), for the electrical connection to the actuator (452), a first electric protective circuit (460) and a second electric protective circuit (470), wherein the first protective circuit (460) is electrically connected between the first supply port (441) and the second supply port (442) on one side and the first connection port (447) on the other side, characterized in that the second protective circuit (470) is electrically connected between the second connection port (448) on one side and the first main port (445) and the second main port (446) on the other side, wherein at least one of the protective circuits (460, 470) has at least one electrical fuse device (462, 472) and at least one diode element (464, 474) that are connected in series to the respective supply port (441, 442) or main port (445, 446), in that the valve unit (450) has at least one further actuator (454) for actuating the valve unit (450), wherein the second connection port (448) of the error protection module (440) is electrically connected to the further actuator (454), wherein the error protection module (440) has at least one third supply port (443) for the electrical attachment to the first control unit (310), at least one fourth supply port (444) for the electrical attachment to the second control unit (320), at least one further connection port (449), which is electrically connected to the third supply port (443) and the fourth supply port (444), for the electrical connection to the further actuator (454), and at least one further protective circuit (480), and in that the further protective circuit (480) is electrically connected between the third supply port (443) and the fourth supply port (444), on one side, and the further connection port (449), on the other side.

2. Braking system (305) according to claim 1, wherein the actuator (452) is attachable to a first electric supply potential of the first control unit (310) via the first supply port (441) and the first connection port (447), wherein the actuator (452) is attachable to a second electric supply potential of the second control unit (320) via the second supply port (442) and the first connection port (447), wherein the actuator (452) is attachable to a common electric ground potential of the control units (310, 320) via the second connection port (448) and the first main port (445) or via the second connection port (448) and the second main port (446).

3. Braking system (305) according to any one of the preceding claims, wherein a fuse device (462) of the first protective circuit (460) is connected between the first supply port (441) and the first connection port (447), wherein a diode element (464) of the first protective circuit (460) is connected between the second supply port (442) and the first connection port (447), wherein a fuse device (472) of the second protective circuit (470) is connected between the second connection port (448) and the first main port (445), wherein a diode element (474) of the second protective circuit (470) is connected between the second connection port (448) and the second main port (446).

4. Braking system (305) according to claim 3, wherein a forward direction of the diode element (464) of the first protective circuit (460) runs from the second supply port (442) to the first connection port (447), wherein a forward direction of the diode element (474) of the second protective circuit (470) runs from the second connection port (448) to the second main port (446).

5. Braking system (305) according to any one of the preceding claims, wherein a fuse device (482) of the further protective circuit (480) is connected between the third supply port (443) and the further connection port (449), wherein a diode element (484) of the further protective circuit (480) is connected between the fourth supply port (444) and the further connection port (449).

6. Braking system (305) according to claim 2, wherein the further actuator (454) is attachable to the first electric supply potential via the third supply port (443) and the further connection port (449), wherein the further actuator (454) is attachable to the second electric supply potential via the fourth supply port (444) and the further connection port (449).