METHOD AND DEVICE FOR OPERATING A VEHICLE

Description

[0001] The invention relates to a method and a device for operating a vehicle.

[0002] As described in FR 3 098 481 A1, a method for alerting the driver of a motor vehicle to a hazard is known from the prior art. This method detects a hazardous situation that is likely to affect the vehicle. The driver's reaction is monitored. The transmission of a warning message corresponding to the detected hazardous situation is adapted according to the driver's reactions.

[0003] CN 112109542 A describes a control system for a power take-off of a commercial vehicle.

[0004] From EP 2 620 339 B1, a control system for a sailing mode for a hybrid vehicle with the combustion engine switched off is known.

[0005] US patent 2020 / 283008 A1 discloses a device for monitoring a vehicle for the occurrence of critical malfunctions. In the event of a vehicle coming to a standstill, the device checks whether a predefined response from the driver occurs. If no response is received, the vehicle is deactivated.

[0006] The invention is based on the objective of providing a method and a device for operating a vehicle that are improved compared to the prior art.

[0007] The problem is solved according to the invention by a method having the features of claim 1 and a device having the features of claim 6.

[0008] Advantageous embodiments of the invention are the subject of the dependent claims.

[0009] In an inventive method for operating a vehicle, the vehicle is monitored for the occurrence of predetermined critical malfunctions. These malfunctions necessitate deactivating the vehicle after it has come to a standstill and preventing its reactivation, unless at least one predetermined response from the driver is received. Upon detection of one of these predetermined critical malfunctions, the system verifies whether the vehicle has come to a standstill. If the vehicle is found to be stationary, a predetermined time interval is initiated. During this interval, the system checks whether the driver has responded to at least one predetermined response. If the driver has not responded to at least one predetermined response within the specified time interval, the vehicle is deactivated and / or its reactivation is prevented.From the start of the specified time period, information regarding the specified time period, the deactivation and / or prevention of reactivation of the vehicle after the specified time period has expired, and the required at least one specified reaction of the driver will be issued to the driver, in particular via at least one output unit of the vehicle.

[0010] A device according to the invention for operating the vehicle is designed and configured to carry out this method. In particular, the device has at least one processing unit which is designed and configured. for monitoring the vehicle for the occurrence of predefined critical malfunctions, which, without at least one predefined response from the driver, require deactivating the vehicle after it has come to a standstill and / or preventing its reactivation; for verifying, upon detection of one of these predefined critical malfunctions, whether the vehicle has come to a standstill; upon confirmation that the vehicle has come to a standstill, to start a predefined time period and to verify during this period whether the driver has responded at least once; to deactivate the vehicle and / or prevent its reactivation after the predefined time period has elapsed and the driver has not responded at least once during this period.and to generate the output of information to the driver regarding the specified time period, regarding the deactivation and / or prevention of reactivation of the vehicle after the specified time period has elapsed, and regarding the required at least one specified reaction from the driver from the start of the specified time period.

[0011] The device can also have several processing units, each designed and equipped to perform one or more of these tasks, with each of these tasks then being performed by at least one of the processing units.

[0012] The device further includes, in particular, at least one output unit for issuing information to the driver regarding the specified time period, regarding the deactivation and / or prevention of the reactivation of the vehicle after the specified time period has elapsed, and regarding the required at least one specified reaction from the driver.

[0013] The prescribed response of the driver is, in particular, an action that the driver must take to prevent the vehicle from being deactivated and / or the vehicle from being reactivated, for example, an action to rectify the malfunction or an action that makes it possible to operate the vehicle, at least to a limited extent, even with this malfunction, for example in an emergency operating mode in which, in particular, one or more vehicle functions are only available to a limited extent, and / or for a limited time and / or for a limited distance.Preventing the vehicle from being reactivated means, in particular, permanently shutting down the vehicle, for example, at least for a specified period during which the vehicle's condition can normalize due to the vehicle's inactivity, thereby eliminating the critical malfunction, and / or until one or more specified vehicle parameters are again within specified limits, and / or until a repair has been carried out, and / or until reactivation is authorized by an authorized body. This authorized body could be, for example, the vehicle manufacturer, a vehicle repair shop (especially one authorized by the manufacturer), a vehicle mechanic (especially one authorized by the manufacturer and / or the repair shop), and / or a vehicle dealer (especially one authorized by the manufacturer).

[0014] The vehicle is, for example, a commercial vehicle, especially a truck, or a passenger car. For example, the vehicle is an electric vehicle. It has, in particular, a high-voltage system with at least one electric drive motor to power the vehicle. Such a high-voltage system operates, for example, with a direct current voltage greater than 60 V and / or an alternating current voltage greater than 30 V. Compared to vehicles with internal combustion engines, such electric vehicles require the driver to have new knowledge of vehicle behavior and the interaction of individual components. In particular, electric vehicles and internal combustion engine vehicles can differ significantly in how critical malfunctions are handled.The solution according to the invention is particularly advantageous for electric vehicles, since during the operation of such vehicles with high-voltage systems, the critical malfunctions described above can occur while driving, in which it is advantageous or necessary, especially for safety reasons, to prevent a restart and thus further driving when the vehicle is switched off.

[0015] Without the solution according to the invention, the vehicle would not inform the driver that the detected critical malfunction is causing this behavior and that continuing to drive after coming to a standstill, particularly after reaching certain standstill conditions, is not possible. This behavior would therefore lead to a lack of understanding on the part of the driver. To obtain information about the vehicle's condition, the driver would then only have access to, for example, a very comprehensive operating manual, also known as a vehicle handbook. While the driver could, for instance, obtain information about possible critical malfunctions and corresponding courses of action from this manual, this would involve considerable effort, particularly in terms of time.Without the solution according to the invention, the lack of information on vehicle behavior and possible courses of action, particularly in a timely manner, would make it considerably more difficult to initiate countermeasures to prevent the vehicle from breaking down, especially in an unfavorable position.

[0016] The solution according to the invention solves this problem of insufficient information provision for the driver and, in particular, inadequate communication between the vehicle and the driver, for example by displaying to the driver on a display unit, such as an on-board display, a time horizon, i.e., the time until the final shutdown of the vehicle, i.e., until deactivation and / or prevention of reactivation, and the resulting consequences. In addition, the driver is shown recommendations for action by means of an automatic information output, in particular by automatic display on the display unit, which is designed, for example, as an on-board display, i.e., information on at least one required reaction of the driver, for example by displaying a corresponding page of the operating instructions.This enables the driver to take countermeasures, i.e., to execute at least one predetermined reaction. In this way, for example, the vehicle can be prevented from breaking down completely, or at least it can be prevented from coming to rest in an unfavorable position. Furthermore, the solution according to the invention clarifies the vehicle's behavior for the driver, making it plausible.

[0017] The solution according to the invention thus comprises, in particular, an intelligent output concept, especially a display concept, by means of which, in the event of a critical malfunction, the vehicle can be prevented from breaking down, especially in an unfavorable position. Through the solution according to the invention, and especially through the information provided thereby, the driver is aware of the consequences of the situation and is enabled, via the output of the information, especially via the display on the vehicle's on-board display, to take targeted countermeasures, i.e., to carry out the expected predetermined reaction, especially an action, before the vehicle is prevented from being reactivated. This gives the driver at least the option of choosing a parking location for their vehicle in a particularly convenient and safe place.

[0018] The solution according to the invention particularly improves the interaction between the vehicle and the driver when such a critical malfunction occurs. Through the output concept according to the invention, especially the display concept, particularly by displaying a running timer or countdown, the driver is aware of the vehicle's behavior and the consequences of the situation, and internal processes, for example in software that determines the sequence of actions, are made understandable to the driver. This prevents frustration with the vehicle, which can arise when processes are not understandable to the driver. The vehicle specifically supports the driver by automatically outputting, and in particular displaying, relevant information in the event of a malfunction.

[0019] In one possible embodiment of the method, the information is displayed on an output unit of the vehicle, designed as a display unit, for example, as mentioned above, on the vehicle's on-board display. Accordingly, in one possible embodiment of the device for carrying out the method, the output unit is designed as such a display unit. The display unit is, in particular, a multimedia display unit. For example, it also includes at least one loudspeaker. The information described above, which is displayed to the driver, can be shown on the display unit, for example, by means of text, numbers, images, and / or pictograms. In particular, it is provided that sections, for example, one or more pages, of the vehicle's operating manual can also be displayed.The time period can be displayed to the driver, for example, in the form of the aforementioned timer or countdown, i.e., a countdown to zero or a countup to a displayed end value, and / or graphically, for example, as a bar extending to an endpoint or decreasing to zero, or as a circle decreasing from a full circle to zero, or as a circle forming itself. This provides comprehensive information that is quick and easy for the driver to understand.

[0020] In one possible embodiment of the method, the information regarding the predetermined time period is thus provided to be output as a timer or countdown, for example, in the manner described above. Alternatively or additionally, in another possible embodiment of the method, the information regarding the required at least one predetermined reaction of the driver can be output by displaying a section of the vehicle's operating manual that describes this at least one predetermined reaction.

[0021] The vehicle's stationary status is verified, in particular, based on predefined stationary conditions. Specifically, the vehicle is only deemed stationary if all predefined stationary conditions are met. Specifically, the vehicle is only deemed stationary if the following predefined stationary conditions are met: the vehicle's current speed is 0 km / h, the vehicle's gear selector is in neutral or park, and the vehicle's parking brake is engaged. This prevents, in particular, the consequences described above, i.e.,The deactivation of the vehicle and / or the prevention of its reactivation, for example, while the vehicle is in motion or during a brief stop, such as due to traffic, may occur, particularly while the vehicle is still on a roadway. This prevents impairments to the safety of the vehicle, the driver, and other road users, especially due to the risk of collision.

[0022] These three conditions for a vehicle to be stationary are, at least with a very high probability, only met in combination if the vehicle is parked off the roadway or has to remain stationary on the roadway for a very long time due to traffic conditions, for example, in a traffic jam or at a traffic light with a very long red phase. Therefore, if these three conditions for a vehicle to be stationary are met, it can be assumed that the vehicle has been parked in a safe location where hazards, especially the risk of collision, for the driver and the vehicle as well as for other road users are minimized, or that other road users have at least noticed the vehicle parked in this way and are therefore not surprised by the stationary vehicle.The gear selector lever mentioned above is, for example, a selector lever for engaging a gear stage of a transmission in the vehicle's drivetrain and / or a selector lever for choosing a driving mode of the vehicle, in particular forward or reverse driving. In a neutral or park position, neither forward nor reverse driving of the vehicle is possible; in particular, no power transmission from the vehicle's drive motor(s) to the vehicle's wheels is possible.

[0023] In one possible embodiment of the device, the at least one processing unit and / or the output unit are connected to the vehicle's CAN (Controller Area Network), also known as a CAN bus. This allows, for example, the processing unit and / or the display unit to be notified of a critical malfunction, for instance, by transmitting a corresponding error code via the CAN, for example, from another component of the vehicle in which the critical malfunction occurred or which detected the critical malfunction. This component could, for example, be a control unit of the vehicle.

[0024] In one possible embodiment of the device, the at least one processing unit and the output unit are designed as a single, integrated unit. For example, the vehicle's on-board display, particularly a multimedia display, mentioned above, functions as both a display unit and a processing unit. This avoids the need to install numerous additional components in the vehicle to carry out the method; instead, the display unit alone, especially the on-board display, is sufficient. For instance, an on-board display already present in the vehicle can be used, or a conventional on-board display can be replaced by the display used for the method.

[0025] Exemplary embodiments of the invention are explained in more detail below with reference to a drawing.

[0026] This shows: Fig. 1 schematically shows a process for operating a vehicle.

[0027] Figure 1 shows a schematic representation of a procedure for operating a vehicle.

[0028] In a first step S1 of the procedure, the vehicle is monitored for the occurrence of predefined critical malfunctions, in which it is necessary to deactivate the vehicle after a standstill and / or to prevent the vehicle from being reactivated without at least one predefined reaction from a driver.

[0029] If the occurrence of one of these predefined critical malfunctions is detected, as in Figure 1In the first step, S1, a malfunction symbol schematically represents the initial step. In the second step, S2, it is checked whether the vehicle has come to a standstill. In the example shown, this involves verifying whether predefined standstill conditions are met. The vehicle is deemed to have come to a standstill if the predefined standstill conditions are: the vehicle's current speed v is 0 km / h, the vehicle's gear selector G is in neutral or park, and the vehicle's parking brake F is engaged.

[0030] If the vehicle is found to be stationary, in a third step S3 a predetermined time period is started, in particular a timer or countdown set to the predetermined time period, and during the predetermined time period it is checked whether at least one predetermined reaction of the driver takes place.

[0031] In a fourth step, starting from the beginning of the specified time period, information IZ regarding the specified time period, information IDV regarding the deactivation and / or prevention of reactivation of the vehicle after the specified time period has elapsed, and information IR regarding the required at least one specified reaction of the driver are output to the driver by means of an output unit 1.

[0032] This output unit 1 is designed, in particular, as a display unit, specifically as a multimedia output unit, and in particular as a multimedia on-board display of the vehicle. The information IZ regarding the specified time period is output, for example, as a timer or countdown, and is displayed, in particular, on the display unit. The information IR regarding the required at least one specified reaction of the driver is output, for example, by displaying a section of the vehicle's operating manual that describes this at least one specified reaction of the driver.

[0033] In a fifth step, S5, the vehicle is deactivated and / or reactivation is prevented after the specified time period if the driver has not performed at least one specified action within that period. This means that this fifth step, S5, only occurs in this case; it can therefore be avoided by the driver performing a specified action, specifically by carrying out a predefined action.

[0034] A device for operating the vehicle is designed and configured to carry out this procedure. It comprises, in particular, at least one processing unit for performing the described steps S1 to S5, wherein in the fourth step S4 at least the output of the above-described information IZ, IDV, IR is generated, and the output unit 1. For example, the at least one processing unit and the output unit 1 are designed as a single unit.

[0035] The described solution is, or rather comprises, in particular, a method for making the processes occurring in the vehicle transparent to the driver after reaching standstill conditions in the event of various critical malfunctions. This method specifies a remaining time horizon within which the driver can avoid the consequences that are clearly explained to him, and simultaneously presents him with suitable alternative courses of action, i.e., provides him with information about the expected reaction in order to avoid these consequences. This can, in particular, prevent the vehicle from becoming stranded in an unfavorable position. Furthermore, it avoids driver frustration with implausible vehicle behavior, as the described solution, especially the information output, makes the vehicle's behavior plausible to the driver.

[0036] For information output and interaction between the vehicle and the driver, output unit 1, in particular the multimedia on-board display, is provided, for example, as an additional interface in the vehicle. Specifically, it is intended that this output unit 1 can access the vehicle's CAN bus.

[0037] The procedure is summarized below. After the critical malfunction occurs and the defined standstill conditions are reached, the driver receives the following information on the output unit 1, which is designed primarily as a multimedia on-board display: Information IZ about the predetermined time period, specifically a countdown timer; Information IDV about the consequences, i.e., the deactivation and / or prevention of reactivation of the vehicle after the predetermined time period has elapsed; and Information IR about the required at least one predetermined response from the driver, specifically as suitable courses of action. This enables the driver to prevent the vehicle from being permanently shut down, i.e., deactivating and / or preventing its reactivation.

[0038] For example, if the specified critical malfunction occurs, a resulting error code is sent via the CAN, and then the presence of the standstill conditions is checked to determine whether the vehicle is stationary.

[0039] When the standstill conditions are met, a predetermined time period of, for example, 10 seconds begins. The expiration of this period initiates the final shutdown of the vehicle, i.e., its deactivation, thus preventing its restart, i.e., its reactivation. The driver is made aware of this through the described information output, specifically the display of the elapsed timer or countdown and the indication of the consequence, i.e., the deactivation and / or prevention of the vehicle's reactivation. To avoid this consequence, the driver is also shown information regarding their required predefined response, for example, in the form of alternative courses of action to enable them to take countermeasures. This is done, for example, by automatically displaying the relevant section, such as specific pages, in the operating manual.

Claims

1. A method for operating a vehicle in which: - the vehicle is monitored in respect of the occurrence of predefined critical malfunctions during which it is necessary, in the absence of at least one predefined reaction required of a vehicle driver, to deactivate the vehicle once it has come to a complete stop and / or to prevent the reactivation of the vehicle; - upon detection of one of these predefined critical malfunctions a check is carried out to ascertain whether the vehicle has come to complete stop; characterised in that - once it has been established that the vehicle has come to a complete stop a predefined period of time is started, and during this predefined period of time a check is carried out to ascertain whether the at least one predefined reaction of the driver takes place; - once the predetermined period of time has elapsed the vehicle is deactivated and / or the reactivation of the vehicle is prevented if the at least one predefined reaction of the vehicle driver has not taken place during the predefined period of time; - with effect from the start of the predefined period of time a message (IZ, IDV, IR) is output to the vehicle driver in relation to the predefined period of time, in relation to the occurrence of the deactivation and / or the prevention of the reactivation of the vehicle on expiry of the predefined period of time and in relation to the at least one predefined reaction required of the driver.

2. A method according to claim 1, characterised in that the message (IZ, IDV, IR) is output on a display unit (1) of the vehicle.

3. A method according to any one of the preceding claims, characterised in that the message (IZ) in relation to the predefined period of time is output in the form of a timer or a countdown.

4. A method according to any one of the preceding claims, characterised in that the message (IR) in relation to the at least one predetermined reaction required of the vehicle driver is output by displaying a section of an operating manual of the vehicle describing this at least one predefined reaction of the vehicle driver.

5. A method according to any one of the preceding claims, characterised in that the fact that the vehicle has come to a complete stop is established when the following predefined complete stop conditions have been met: - a current speed (v) of the vehicle is 0 km / h; - a gear selection lever (G) of the vehicle is located in a neutral position or a parking position; and - a parking brake (F) of the vehicle is activated.

6. A device for operating a vehicle, comprising at least one processing unit that is designed and configured: - to monitor the vehicle in respect of the occurrence of the predefined critical malfunctions during which it is necessary, in the absence of at least one predefined reaction required of a vehicle driver, to deactivate the vehicle once it has come to a complete stop and / or to prevent the reactivation of the vehicle; - to check whether the vehicle has come to a complete stop once the occurrence of one of these predefined critical malfunctions has been established; characterised in that the processing unit is further designed and configured: - to start a predefined period of time and to check during this predefined period of time whether the at least one predefined reaction of the vehicle driver takes place when it is established that the vehicle has come to complete stop; - to deactivate the vehicle and / or prevent the reactivation of the vehicle upon expiry of the predefined period of time and if the at least one predefined reaction of the vehicle driver has not taken place during the predefined period of time; - to generate the output of the message (IZ, IDV, IR) to the vehicle driver in relation to the predetermined period of time, in relation to the deactivation and / or prevention of the reactivation of the vehicle on expiry of the predefined period of time and in relation to the at least one predefined reaction required of the vehicle driver with effect from the start of the predefined period of time; and comprising an output unit (1) for outputting the message (IZ, IDV, IR) to the vehicle driver in relation to the predetermined period of time, in relation to the deactivation and / or prevention of the reactivation of the vehicle on expiry of the predefined period of time and in relation to the at least one predefined reaction required of the vehicle driver.

7. A device according to claim 6, characterised in that the output unit (1) is embodied as a display unit.

8. A device according to claim 6 or 7, characterised in that the at least one processing unit and / or the output unit is / are coupled to a CAN of the vehicle.

9. A device in accordance with any one of claims 6 to 8, characterised in that the at least one processing unit and the output unit (1) are embodied as one single unit.