ANALYSIS OF THE FUNCTIONS OF ASSOCIATED DIAGNOSTIC MODULES AND ORGAN CONTROL COMPUTER(S) TO BE INSTALLED IN A VEHICLE

Abstract

A process analyzes the operation of first and second diagnostic modules of a future vehicle, delivering first and second diagnostic information representative of the result of the operation, in a control device, of a control strategy for piloting an element of this vehicle, and of a control computer delivering an order to place an organ in a state based on this first and second diagnostic information.This process includes a step (10-30) in which the element is operated to implement the control strategy in this control device, then the first and second diagnostic information delivered is analyzed to provide state information representative of the operating states of the first and second diagnostic modules in the presence of the result of the parallel application of this control strategy, and a first placement information representative of this placement order is provided. Figure 2.

Description

Title of the invention: ANALYSIS OF THE FUNCTIONS OF ASSOCIATED DIAGNOSTIC MODULES AND COMPUTER FOR CONTROLLING COMPONENTS TO BE EQUIPPED IN A VEHICLE Technical field of the invention

[0001] The invention relates to vehicles comprising associated diagnostic modules and a component control computer, and more specifically to the automated analysis of the operations of such associated diagnostic modules and component control computer before they are fitted to vehicles. State of the art

[0002] Certain vehicles, possibly of the automobile type, include:

[0003] - first and second diagnostic modules associated and capable of delivering respec tively first and second diagnostic information which are representative of an operating result, in a vehicle control device, of at least one control strategy for the piloting of an element of the vehicle, and

[0004] - a control computer capable of delivering an order to place at least one on-board organ in a state depending on these first and second diagnostic information.

[0005] It will be noted that the vehicle element can be either a device or an implemented strategy (or application).

[0006] For example, the first diagnostic module (sometimes called "level 1") may have the purpose of detecting at a first level any faults and / or failures in the control strategy for driving an on-board device or an implemented strategy, and the second diagnostic module (sometimes called "level 2") may have the purpose of verifying the diagnosis delivered by the first diagnostic module and of overcoming the possibility that the latter diagnosis is not able to detect a fault and / or a failure present by also detecting at a second level any faults and / or failures in this same control strategy.

[0007] Also for example, the on-board organ can be a motor machine forming part of the powertrain (or GMP) of a vehicle and the operation of which is controlled by a machine computer. In this case, the control computer decides, depending on the seriousness of the fault or failure detected, either to no longer use the component declared faulty (replacement of the information returned by a sensor by a fault value or putting the component in the safety position (by example an actuator), either to order the stopping of the prime mover (or the GMP), or to generate a message requiring the driver of the vehicle to have it checked quickly by an after-sales service, or to reset the machine computer.

[0008] Generally, the first and second diagnostic modules are developed independently and meet requirements which, sometimes, may differ in terms of calibration. It is therefore important to ensure good consistency between the first and second diagnostic modules, but also the robustness and calibration of the diagnostic strategies constituting these first and second diagnostic modules before they equip similar vehicles if we want to guarantee the proper functioning of these vehicles and the safety of the users of these vehicles.

[0009] Indeed, in the absence of sufficient robustness concerning the respective calibrations of the first and second diagnostic modules, certain faults (or certain failures) could not be detected (“false negatives”) and endanger the users of the vehicle, or could be detected incorrectly (“false positives”) and cause the application of an inappropriate reconfiguration mode, or even one that is highly penalizing for the users, such as, for example, stopping the powertrain and therefore prohibiting them from using the vehicle.

[0010] Similarly, in the absence of consistency between the first and second diagnostic modules, a severe reconfiguration (resetting of a computer controlling a component or stopping the operation of at least one component (or “STOP”) may be decided if a fault (or a failure) is detected and confirmed by the first diagnostic module after this same fault has been detected by the second diagnostic module.

[0011] It will therefore be understood that when the pooling of the strategies of the first and second diagnostic modules occurs very late in the process of developing the command control of a future vehicle, it happens relatively frequently that one is confronted with various interaction problems during the driving phases of the vehicles concerned, due to the lack of validations during the integration of the first and second diagnostic modules in a supervision computer of this future vehicle. However, such interaction problems (whether in terms of calibration, robustness or consistency in the application of the reconfiguration modes) can delay the start of the marketing of a future vehicle, or even prevent it.

[0012] The invention therefore aims in particular to improve the situation. Presentation of the invention

[0013] It proposes in particular for this purpose an analysis method intended to be implemented in an analysis calculator to analyze the operation:

[0014] - first and second diagnostic modules intended to equip a vehicle and suitable for respectively delivering first and second diagnostic information representative of an operating result, in a control device intended to equip this vehicle, of at least one control strategy for piloting an element intended to equip this vehicle, and

[0015] - a control computer intended to equip this vehicle and capable of delivering a order of placement of at least one component intended to equip this vehicle in a state depending on this first and second diagnostic information.

[0016] This analysis method is characterized by the fact that it comprises a step in which:

[0017] - the element is operated to operate the control strategy in the control device, then

[0018] - the first and second diagnostic information delivered are analyzed in order to deliver status information representative of operating states of the first and second diagnostic modules in the presence of a result of a parallel application of this control strategy, and

[0019] - a first placement information representative of the order of placement issued.

[0020] Thanks to the invention, it is now possible to ensure the proper functioning and proper interaction of the first and second diagnostic modules, which makes it possible to detect as early as possible any problems in the development and / or calibration of the diagnostic strategies and to avoid any problems and / or any suspension in the development of the command control software and / or the validation missions during the driving phase.

[0021] The analysis method according to the invention may include other characteristics which may be taken separately or in combination, and in particular:

[0022] - in its step, the first diagnostic information can be representative of a absence of a malfunction or a malfunction, and the second diagnostic information may be representative of an absence of a malfunction or a malfunction present for at least a first duration. In this case, in its step, the first diagnostic information may be analyzed after having transformed it into a third diagnostic information which is representative of an absence of a malfunction or a malfunction present for at least a second duration strictly less than this first duration;

[0023] - in its step, one can analyze the placement order delivered in order to determine whether it is adapted to the first and second diagnostic information, and a first investment information which is representative of a result of this determination;

[0024] - in its step, in the presence of a service indicator light and a stop indicator light intended to equip the vehicle and suitable for being selectively placed in an on or off state depending on the placement order delivered, a second placement information item can be delivered representing the states in which these service indicator lights and stop indicator lights have been placed respectively;

[0025] - in the presence of the last option, in its step, we can analyze the states in which the service indicator and stop indicator have been placed respectively, in order to determine whether they are suitable for the placement order issued, and a third placement information representative of a result of this determination can be issued;

[0026] - in its step, we can deliver the state information and each information of placement within a report. Alternatively, in its step, the status information and each placement information can be delivered within at least one graph.

[0027] The invention also proposes a computer program product comprising a set of instructions which, when executed by processing means, is capable of implementing an analysis method of the type presented above in an analysis computer for analyzing the operation, on the one hand, of first and second diagnostic modules intended to equip a vehicle and capable of delivering respectively first and second diagnostic information representative of an operating result, in a control device intended to equip this vehicle, of at least one control strategy for controlling a control of an element intended to equip this vehicle, and, on the other hand, of a control computer intended to equip this vehicle and capable of delivering an order for placing at least one member intended to equip this vehicle in a state depending on the first and second diagnostic information.

[0028] The invention also proposes an analysis device intended to equip an analysis computer to analyze the operation:

[0029] - first and second diagnostic modules intended to equip a vehicle and suitable for respectively delivering first and second diagnostic information representative of an operating result, in a control device intended to equip this vehicle, of at least one control strategy for piloting an element intended to equip this vehicle, and

[0030] - a control computer intended to equip this vehicle and capable of delivering a order of placement of at least one component intended to equip this vehicle in a state depending on this first and second diagnostic information.

[0031] This analysis device is characterized by the fact that it comprises at least one processor and at least one memory arranged to carry out the operations consisting of:

[0032] - triggering an operation of the element to operate the strategy of control in the control device, then

[0033] - to analyze the first and second diagnostic information delivered in order to delivering status information representative of operating states of the first and second diagnostic modules in the presence of a result of a parallel application of the control strategy, and

[0034] - to deliver a first placement information representative of the order of placement issued.

[0035] The invention also proposes an analysis calculator:

[0036] - suitable for equipping computer equipment coupled, on the one hand, to first and second diagnostic modules intended to equip a vehicle and capable of respectively delivering first and second diagnostic information representative of an operating result, in a control device intended to equip this vehicle, of at least one control strategy for piloting an element intended to equip this vehicle, and, on the other hand, to a control computer intended to equip this vehicle and capable of delivering an order to place at least one member intended to equip this vehicle in a state depending on the first and second diagnostic information, and

[0037] - comprising an analysis device of the type presented above. Brief description of the figures

[0038] Other characteristics and advantages of the invention will appear on examining the detailed description below, and the appended drawings, in which:

[0039] [Fig. 1] schematically and functionally illustrates an example of computer equipment comprising an example of an analysis computer comprising an example of an embodiment of an analysis device according to the invention, and coupled to an example of an embodiment of a control computer intended to equip a vehicle, itself coupled to members, service indicator light and stop indicator light intended to equip this vehicle,

[0040] [Fig.2] schematically illustrates an example of an algorithm implementing an analysis method according to the invention, and

[0041] [Fig.3] schematically illustrates within a diagram examples of temporal evolutions of a temperature measurement (mt), of a first diagnostic information (idl), of a third diagnostic information (id3), of a second diagnostic information (id2), and of a first placement information (ipl). Detailed description of the invention

[0042] The invention aims in particular to propose an analysis method, and an associated analysis device DA, intended to allow the automated analysis of the operations of first MD1 and second MD2 associated diagnostic modules and of a computer of CC control, responsible for controlling at least one O component, before they are fitted to vehicles.

[0043] In the following, it is considered, by way of non-limiting example, that the vehicles are of the automobile type. These are, for example, cars. But the invention is not limited to this type of vehicle. It relates in fact to any type of vehicle comprising first and second associated diagnostic modules and a control computer responsible for controlling at least one component. Thus, it relates to land vehicles (utility vehicles, camper vans, minibuses, coaches, trucks, motorcycles, road machinery, construction machinery, agricultural machinery, leisure machinery (snowmobile, kart), tracked vehicles, trains and trams, for example), aircraft and boats.

[0044] Furthermore, it is considered in the following, by way of non-limiting example, that the member O is a motor machine which may possibly be electric and possibly associated with a fuel cell (to be supplied with electrical energy), and which must be part of the powertrain (or GMP) of a vehicle. But the invention relates to any member intended to equip a vehicle and which can be placed in at least two states by a control computer as a function of first and second diagnostic information determined and delivered respectively by first and second diagnostic modules.

[0045] As mentioned above, the invention proposes in particular an analysis method intended to allow the automated analysis of the operations of the first MD1 and second MD2 diagnostic modules and of the CC control computer before they are fitted to a vehicle.

[0046] This (monitoring) method can be implemented at least partially by the analysis device DA (illustrated in [Fig.l]) which comprises for this purpose at least one processor PR1, for example a digital signal processor (or DSP ("Digital Signal Processor")), and at least one memory MD. This analysis device DA can therefore be produced in the form of a combination of electrical or electronic circuits or components (or "hardware") and software modules (or "software"). For example, it can be a microcontroller.

[0047] As illustrated non-limitingly in [Fig.l], the analysis device DA is part of an analysis calculator CA which equips a first computer equipment EU, such as for example a fixed or portable computer or an electronic tablet. But in a variant not illustrated, the analysis device DA could comprise its own calculator, and in this case the latter equips a computer equipment.

[0048] The memory MD is RAM in order to store instructions for the implementation by the processor PR1 of at least part of the monitoring method. The processor PR1 may comprise integrated (or printed) circuits, or several integrated (or printed) circuits connected by wired or wireless connections. By integrated (or printed) circuit any type of device capable of performing at least one electrical or electronic operation.

[0049] In the example illustrated non-limitingly in [Fig. 1], the first computer equipment EU comprises the analysis computer CA, which comprises the analysis device DA according to the invention, and is coupled to first MD1 and second MD2 diagnostic modules, a control device DC and a control computer CC, itself coupled to an element DV and a member O (here a driving machine of a GMP). It is important to note that these first MD1 and second MD2 diagnostic modules, this control device DC, this control computer CC, this element DV and this member O are all intended to equip the same vehicle.

[0050] It will also be noted that in the example illustrated non-limitingly in [Fig.l] the CC control computer comprises not only the DC control device, but also the first MD1 and second MD2 diagnostic modules. But this is not an obligation. Indeed, the first MD1 and second MD2 diagnostic modules could be external to the CC control computer, while being coupled to the latter (CC), or the first MD1 and second MD2 diagnostic modules could be part of the DC control device.

[0051] The control device DC is responsible for implementing at least one control strategy sc for driving the DV element.

[0052] It will be noted that the DV element of the vehicle can be either a device or a strategy (or application) intended to be implemented in the vehicle and relating to at least one member (or equipment or apparatus or on-board device). As an illustrative example, when the DV element is a device, it can be a sensor periodically delivering a temperature measurement mt. But the DV element could be an electronic component (or group of components) or an electronic circuit or an apparatus (or equipment or member) having at least two states, such as for example an actuator.

[0053] The first MD1 and second MD2 diagnostic modules are capable of respectively delivering first id1 and second id2 diagnostic information which is representative of the operating result, in the control device DC, of ​​at least the control strategy sc of the control of the element DV.

[0054] For example, the first diagnostic module (called level 1) may have the purpose of detecting at a first level (or level 1) any possible faults and / or failures of the control strategy sc (here) implemented by the control device DC. It will be understood that each first diagnostic information idl is the result of a diagnosis of the operation of the control strategy sc, and therefore is representative of the absence or presence of a fault and / or failure of the control strategy sc. For example, each first diagnostic information idl may present in the form of an index (for example a standardized numerical value) specifying the status of the diagnosis made. But this is not obligatory. Thus, it could be a Boolean, for example.

[0055] Also for example, the second diagnostic module (called level 2) may have the purpose of verifying the diagnosis delivered by the first diagnostic module MD1 and of overcoming the possibility that the latter diagnosis is not able to detect a fault and / or a failure present by detecting at a second level (or level 2) the possible faults and / or failures of this same control strategy sc. For example, each second diagnostic information id2 may be in the form of a boolean. But this is not obligatory.

[0056] The control computer CC is capable of delivering an order to place at least one member O in a state depending on the first idl and second id2 diagnostic information.

[0057] For example, when the component O is a prime mover of a GMP, the control computer CC can be arranged so as to decide, once on board a vehicle, either to order the stopping of the prime mover O (or of the GMP), which constitutes the most degraded reconfiguration mode, or to generate a message requesting the driver of the vehicle to quickly have the latter checked in an after-sales service with possibly a reduction in the power or speed of the vehicle, which constitutes an intermediate degraded reconfiguration mode, or even to reset the machine computer which controls the prime mover, which constitutes a light degraded reconfiguration mode, depending on the seriousness of the fault or failure detected from the contents of the first idl and second id2 diagnostic information.

[0058] As illustrated non-limitingly in [Fig.2], the (monitoring) method, according to the invention, comprises a step 10-30 which is implemented each time that it is desired to analyze the operations of first MD1 and second MD2 diagnostic modules and of a CC control computer intended to equip a vehicle.

[0059] Step 10-30 of the method comprises a sub-step 10 in which one begins by operating (for example the analysis device DA begins by triggering the operation of) the element DV to operate the control strategy sc in the control device DC and in parallel one (for example a technician) applies this same control strategy sc. It will be understood that the operation of the control strategy sc results from the subjection (here) of the device DV to a chosen real test (and therefore by operating it in a chosen way), and that one applies in parallel this same control strategy sc to the successive results of this real test. It will also be understood that the result of the operation of the control strategy sc is supplied to the first MD1 and second MD2 diagnostic modules (possibly with the successive results of the actual test) so that they respectively deliver the first idl and second id2 diagnostic information, for example in a sub-step 20 of step 10-30 of the method, as illustrated non-limitingly in [Fig.2].

[0060] Then, step 10-30 of the method comprises a sub-step 30 in which one (for example the analysis device DA) analyzes the first id1 and second id2 delivered diagnostic information, in order to deliver state information ie which is representative of operating states of the first MD1 and second MD2 diagnostic modules in the presence of the result ra of the parallel application of the control strategy sc. For example, this result ra can be provided by the technician who supervises the analysis and tests the element DV by applying to the result of this test the same control strategy sc as that which is implemented by the control device DC. For example, and as illustrated non-limitingly in [Fig.l], this result ra can be provided to the analysis device DA by means of a second computer equipment EI2 (such as for example a fixed or portable computer or an electronic tablet), controlled by the technician.

[0061] In this sub-step 30 one (for example the analysis device DA) also delivers a first placement information ipl (k = 1) which is representative of the placement order op which was delivered by the control computer CC due to the first idl and second id2 diagnostic information delivered.

[0062] Thus, it is now possible to ensure the proper functioning (in terms of compliance with the requirements linked to the regulations but also calibration robustness) and the proper interaction of the first MD1 and second MD2 diagnostic modules. This makes it possible, on the one hand, to detect as early as possible any problems in the development and / or calibration of the diagnostic strategies (confirmation time of the present fault, poor coordination of the application of the degraded reconfiguration modes, for example), and, on the other hand, to avoid any problem and / or any suspension in the development of the command control software and / or the validation missions during the driving phase.It is thus possible to correct these detected faults and / or failures downstream in order to provide for the future vehicle a command control software containing a pooled, compatible, coherent and robust version of the two diagnostic strategies of the first MD1 and second MD2 diagnostic modules and able to connect to the latter (MD1 and MD2), without risk of problems once installed.

[0063] For example, in sub-step 20 of step 10-30 the first diagnostic information id1 may be representative of an absence of operating fault or of an operating fault detected from the start of its occurrence, and the second diagnostic information id2 may be representative of an absence of operating fault or of an operating fault which has been present for at least one first duration dl. In this case, in sub-step 30 one (for example the analysis device DA) can analyze the first diagnostic information idl after having transformed it into a third diagnostic information id3 which is representative of an absence of operating fault or of an operating fault present for at least a second duration d2 which is strictly less than the first duration dl (i.e. d2 < dl).

[0064] This option makes it possible to avoid taking into account initial idl diagnostic information resulting from initial test results that are very occasionally erroneous or from a very occasional operating problem with the first MD1 diagnostic module.

[0065] Also for example, in sub-step 30 of step 10-30 one (for example the analysis device DA) can analyze the delivered placement order op, in order to determine if it is adapted to the first idl (or third id3) and second id2 diagnostic information. In this case, one (for example the analysis device DA) can deliver a first ipl placement information which is representative of the result of this determination. It will be understood that this first ipl placement information then completes the overall result of the analysis. This option in fact makes it possible to know instantly if the decision taken by the control computer CC as a function of the first idl (or third id3) and second id2 diagnostic information, is consistent with the latter (idl (or id3) and id2).

[0066] It will also be noted, as illustrated non-limitingly in [Fig.l], that the control computer CC can also be coupled to service indicator lights VV1 and stop indicator lights VV2 intended to equip the vehicle and capable of being selectively placed in an on or off state according to the placement order op delivered. The service indicator light VV1 is intended (when placed in its on state) to alert the driver of the future vehicle to the fact that he must quickly have the latter checked in an after-sales service. In particular, it must be lit when the control computer CC decides to reconfigure the machine computer controlling the prime mover O. The stop indicator light (or "stop") VV2 is intended (when placed in its on state) to alert the driver of the future vehicle to the fact that he must immediately stop the latter and no longer use it.In particular, it must be lit when the CC control computer decides to order the stopping of the prime mover (or the GMP). In this case, in sub-step 30 of step 10-30 one (for example the DA analysis device) can deliver a second placement information ip2 (k = 2) which is representative of the states in which the service indicator lamp VV1 and stop indicator lamp VV2 have been placed respectively.

[0067] It will be understood that this second ip2 placement information also completes the overall result of the analysis. This option allows, in fact, by comparing the second ip2 placement information with op placement order, delivered by the CC control computer according to the first idl (or third id3) and second id2 diagnostic information, to determine if there is consistency.

[0068] It will also be noted that in sub-step 30 of step 10-30 one (for example the analysis device DA) can analyze the states in which the service indicator VV1 and stop indicator VV2 have been placed respectively in order to determine whether they are adapted to the placement order op delivered. In this case, in sub-step 30 of step 10-30 one (for example the analysis device DA) can deliver a third placement information ip3 (k = 3) which is representative of the result of this determination. It will be understood that this third placement information ip3 also completes the overall result of the analysis. This option in fact makes it possible to know instantly (without comparison) whether the second placement information ip2 is consistent with the placement order op, delivered by the control computer CC as a function of the first idl (or third id3) and second id2 diagnostic information.

[0069] It will also be noted that in sub-step 30 of step 10-30 one (for example the analysis device DA) can deliver the status information ie and each placement information ipk (k = 1 to 3) within a report. Here, the term "report" means a written (or textual) report of the analysis carried out following the triggering of the test of the DV element.

[0070] In an alternative embodiment, in sub-step 30 of step 10-30 one (for example the analysis device DA) can deliver the state information ie and each placement information ipk (k = 1 to 3) within at least one graph. Here, the term "graph" is understood to mean a report by at least one drawing of the analysis carried out following the triggering of the test of the element DV. An example of a graphic report is illustrated in [Fig. 3]. It corresponds to a test carried out by means of an element DV constituting a sensor periodically delivering a temperature measurement mt which is taken into account to control the operation of a member O, here constituting an electric motor of a GMP, and the service indicator lamp VV1 and stop indicator lamp VV2.Here the control strategy sc is intended to determine whether the temperature measurement mt delivered by the sensor DV is greater than a first threshold si used by the first diagnostic module MD1) or a second threshold s2 (with s2 < si) used by the second diagnostic module MD2).

[0071] On [Fig.3]:

[0072] - the first diagram (the uppermost) concerns the temporal evolution (t (s)) of the mt temperature measurement,

[0073] - the second diagram (placed below the first diagram) concerns the time evolution (t (s)) of the first idl diagnostic information,

[0074] - the third diagram (placed below the second diagram) concerns the time evolution (t (s)) of the third diagnostic information id3,

[0075] - the fourth diagram (placed below the third diagram) concerns the time evolution (t (s)) of the second diagnostic information id2, and

[0076] - the fifth diagram (placed below the fourth diagram) concerns the time evolution (t (s)) of the first placement information ipl (the value vl is representative of an order of placement of the electric motor O in a first state corresponding, for example, to a stop (most degraded reconfiguration mode).

[0077] In this example, the temperature problem (passage of mt below the thresholds si and s2) is correctly detected (or diagnosed) by the first MD1 and second MD2 diagnostic modules, which proves that they have been correctly calibrated and that their diagnostics are robust. In addition, the placement information of the electric motor O ipl (at vl) is consistent with the third id3 and second id2 diagnostic information.

[0078] In the presence of the same first and fourth diagrams but second and third diagrams comprising a constant (or flat) level straight line, it would be deduced that the first diagnostic module has not been correctly calibrated and / or that its first diagnosis is not sufficiently robust. In this case, the fifth diagram could for example comprise a first ipl placement information equal to the value v2, for example representative of a reset order of the machine computer controlling the electric motor O (light degraded reconfiguration mode).

[0079] It will also be noted that the analysis device DA could also, possibly, deliver at least one of the following information, so that the robustness of the launching of the two diagnostic strategies by the first MD1 and second MD2 diagnostic modules can be ensured, and the consistency between these two diagnostic strategies:

[0080] - information on the current implementation of a fault relating to a level diagnosis 1 performed by the first diagnostic module MD1,

[0081] - information on the current implementation of a fault relating to a level diagnosis 2 performed by the second diagnostic module MD2,

[0082] - confirmation of a fault relating to a level 1 diagnosis, present and validated after a duration that can be calibrated within the DA analysis device and defined individually for each diagnosis (level 1 or 2) by regulations in force and / or by a diagnostic policy, for example from the manufacturer of the vehicles concerned,

[0083] - confirmation of a fault relating to a level 2 diagnosis, present and validated.

[0084] It should also be noted that all information resulting from an analysis can be transmitted by the first computer equipment EU (which here includes the analysis device DA) to a third computer equipment EI3 (such as for example a fixed or portable computer or an electronic tablet), used by a person responsible, for example, for supervising a set of analyses and / or finding solutions to remedy the problems detected during the analyses.

[0085] It will also be noted that the technician who supervises the analysis and / or the user of the results of the analysis may possibly have access to all of the information transmitted but also calculated by the DA analysis device and carry out post-processing of this information himself if necessary.

[0086] The automated analysis carried out using the invention therefore makes it possible to provide information on:

[0087] - possible design errors in the diagnostic strategies of one or more less than the first MD1 and second MD2 diagnostic modules,

[0088] - the quality of the calibration proposed for the diagnostic strategies of one or more less than the first MD1 and second MD2 diagnostic modules, in particular in terms of confirmation time and detection threshold (if for example a generated fault is not detected by the level 1 diagnostic strategy),

[0089] - the correct definition of the reconfigurations and inhibitions applied (limitation of the side effects in the event of incorrect application of a forgotten or inappropriate reconfiguration mode on a command control strategy).

[0090] It will also be noted, as illustrated non-limitingly in [Fig.l], that the analysis computer CA (or the computer of the analysis device DA) can also comprise a mass memory MM1, in particular for storing the first idl and second id2 diagnostic information, the status information ie, the placement order op, and any results of the tests of the element DV, as well as any intermediate data involved in all its calculations and processing.Furthermore, this analysis calculator CA (or the calculator of the analysis device DA) may also comprise an input interface IE for receiving at least the first idl and second id2 diagnostic information, the status information ie, the placement order op, and any results of the tests of the DV element for use in calculations or processing, possibly after having been formatted and / or demodulated and / or amplified, in a manner known per se, by means of a digital signal processor PR2. Furthermore, this analysis calculator CA (or the calculator of the analysis device DA) may also comprise an output interface IS, in particular for delivering a message containing the result of an analysis.

[0091] It will also be noted that the invention also provides a computer program product (or computer program) comprising a set of instructions which, when executed by processing means of the electronic circuit type (or hardware), such as for example the PR1 processor, is capable of implementing the analysis method described above to analyze the operations of the first MD1 and second MD2 diagnostic modules and the CC control computer intended to equip a vehicle.

Claims

Claims

1. Method for analyzing the operation of i) first (MD1) and second (MD2) diagnostic modules intended to equip a vehicle and capable of delivering respectively first and second diagnostic information representative of an operating result, in a control device (DC) intended to equip said vehicle, of at least one control strategy for controlling a control of an element (DV) intended to equip said vehicle, and ii) of a control computer (CC) intended to equip said vehicle and capable of delivering an order for placing at least one member (0) intended to equip said vehicle in a state depending on said first and second diagnostic information, characterized in that it comprises a step (10-30) in which a) said element (DV) is operated to operate said control strategy in said control device (DC),then b) analyzing said first and second delivered diagnostic information in order to deliver state information representative of operating states of said first (MD1) and second (MD2) diagnostic modules in the presence of a result of a parallel application of said control strategy, and c) delivering first placement information representative of said delivered placement order.,

2. Method according to claim 1, characterized in that in said step (10-30) said first diagnostic information is representative of an absence of operating fault or of an operating fault, said second diagnostic information is representative of an absence of operating fault or of an operating fault present for at least a first duration, and in that in said step (10-30) said first diagnostic information is analyzed after having transformed it into a third diagnostic information representative of an absence of operating fault or of an operating fault present for at least a second duration strictly less than said first duration.

3. Method according to claim 1 or 2, characterized in that in said step (10-30) said placement order delivered is analyzed in order to determine whether it is adapted to said first and second diagnostic information, and first placement information representative of a result of this determination is delivered.

4. Method according to one of claims 1 to 3, characterized in that in said step (10-30), in the presence of a service indicator light (VV1) and a stop indicator light (VV2) intended to equip said vehicle and suitable for being selectively placed in an on or off state according to said placement order delivered, a second placement information item is delivered representing said states in which said service indicator light (VV1) and stop indicator light (VV2) have been placed respectively.

5. Method according to claim 4, characterized in that in said step (10-30) said states in which said service indicator (VV1) and stop indicator (VV2) have been placed respectively are analyzed in order to determine whether they are adapted to said placement order delivered, and a third placement information representative of a result of this determination is delivered.

6. Method according to claim 1 or 3 or 4 or 5, characterized in that in said step (10-30) said status information and each placement information are delivered within a report.

7. Method according to claim 1 or 3 or 4 or 5, characterized in that in said step (10-30) said state information and each placement information within at least one graph are delivered.

8. Computer program product comprising a set of instructions which, when executed by processing means, is capable of implementing the analysis method according to one of claims 1 to 7 in an analysis computer (CA) for analyzing the operation i) of first (MD1) and second (MD2) diagnostic modules intended to equip a vehicle and capable of delivering respectively first and second diagnostic information representative of an operating result, in a control device (DC) intended to equip said vehicle, of at least one control strategy for piloting an element (DV) intended to equip said vehicle, and ii) of a control computer (CC) intended to equip said vehicle and capable of delivering an order for placing at least one member (O) intended to equip said vehicle in a state depending on said first and second diagnostic information.

9. Analysis device (DA) for analyzing the operation i) of first (MD1) and second (MD2) diagnostic modules intended to equip a vehicle and capable of respectively delivering first and second diagnostic information representative of an operating result, in a control device (DC) intended to equip said vehicle, of at least one control strategy for piloting a element (DV) intended to equip said vehicle, and ii) a control computer (CC) intended to equip said vehicle and capable of delivering an order to place at least one member (O) intended to equip said vehicle in a state depending on said first and second diagnostic information, characterized in that it comprises at least one processor (PR1) and at least one memory (MD) arranged to carry out the operations consisting of a) triggering an operation of said element (DV) to operate said control strategy in said control device (DC), then b) analyzing said first and second diagnostic information delivered in order to deliver state information representative of operating states of said first (MD1) and second (MD2) diagnostic modules in the presence of a result of a parallel application of said control strategy,and (c) to deliver a first placement information representative of said placement order delivered.,

10. Analysis computer (CA), characterized in that it is suitable for equipping computer equipment (EU) coupled i) to first (MD1) and second (MD2) diagnostic modules intended to equip a vehicle and suitable for respectively delivering first and second diagnostic information representative of an operating result, in a control device (DC) intended to equip said vehicle, of at least one control strategy for piloting an element (DV) intended to equip said vehicle, and ii) to a control computer (CC) intended to equip said vehicle and suitable for delivering an order for placing at least one member (O) intended to equip said vehicle in a state depending on said first and second diagnostic information, and in that it comprises an analysis device (DA) according to claim 9.

Images