Method for monitoring transitions of operating modes of a motor vehicle, on-board system for a motor vehicle, motor vehicle equipped with such a system

The method addresses the risk of dangerous unauthorized transitions in motor vehicle on-board systems by using a central electronic management unit to monitor and prevent such transitions, ensuring the vehicle safely transitions to a secure mode in case of failures.

FR3155791A1Active Publication Date: 2025-05-30AMPERE SAS
View PDF 4 Cites 0 Cited by

Patent Information

Application Number
FR2023013218
Authority / Receiving Office
FR · FR
Patent Type
Applications
Current Assignee / Owner
Filing Date
2023-11-28
Publication Date
2025-05-30
Estimated Expiration
2043-11-28

AI Technical Summary

Technical Problem

Existing on-board systems in motor vehicles can experience software or hardware failures, leading to unauthorized transitions between operating modes, which can result in dangerous situations.

Method used

Implementing a method that uses a central electronic management unit to monitor transition data and compare it to stored prohibited transition data, thereby detecting and preventing unauthorized transitions by commanding a transition to a safe operating mode.

Benefits of technology

Prevents dangerous situations by immediately detecting and mitigating prohibited transitions, ensuring the motor vehicle transitions to a safe operating mode in case of a software or hardware failure.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure 00000000_0000_ABST
    Figure 00000000_0000_ABST
Patent Text Reader

Abstract

Method for monitoring transitions of operating modes of a motor vehicle, on-board system for a motor vehicle, motor vehicle equipped with such a system The present invention relates to a method for monitoring transitions of operating modes of a motor vehicle, the motor vehicle being equipped with an on-board system, the on-board system based on a centralized electronic / electrical architecture and comprising a central electronic management unit (UC) controlling a plurality of operating modes (F) of the vehicle with transitions (T) from one operating mode to another as a function of events of the motor vehicle and at least one memory, called a prohibited transition memory (M), storing at least one data item representative of a prohibited transition (T).Such a method consists in monitoring the transition data in order to be able to detect a prohibited transition (T) by comparing each transition data item with the prohibited transition data item(s) stored in the prohibited transition memory (M), and consists in the case of detection of a prohibited transition: in controlling an authorized transition to a safe operating mode. It also relates to such an on-board system and such a motor vehicle. Figure to be published with the abstract: Single Fig.
Need to check novelty before this filing date? Find Prior Art

Description

Title of the invention: Method for monitoring transitions of operating modes of a motor vehicle, on-board system for a motor vehicle, motor vehicle equipped with such a system

[0001] The present invention relates to the field of motor vehicles and more particularly to systems embedded in these vehicles. Its subject is a method for monitoring transitions of the operating modes of a motor vehicle. It also relates to an embedded system for a motor vehicle and a motor vehicle equipped with such an embedded system.

[0002] In the present application, the term "motor vehicle" (or vehicle) means any motorized mobile machine or motorized land vehicle traveling on the ground and used for the transport of people and / or goods, other than those traveling on railways. Such a motor vehicle is equipped with a combustion engine, an electric motor or a hybrid engine.

[0003] In the motor vehicle industry, particularly to address safety, performance, comfort and communication issues, manufacturers have equipped the latter with on-board systems integrating more and more electronics and IT.

[0004] Such an on-board system makes it possible to manage functions linked to different areas of operation of the motor vehicle such as, for example, engine operation, cruise control, geographical positioning of the motor vehicle, driving assistance, battery charging (in the case of an electric motor vehicle) or even braking of the motor vehicle. The on-board system comprises numerous computers (generally known by the English acronym ECU "Electronic Control Unit") to manage these functions, a computer generally managing a function, actuators controlled by the computers to physically execute the or certain functions and sensors to control the operation of the actuators.To enable communication between the various components (calculators, sensors, actuators) of the embedded system, it also includes a communication network, generally a CAN bus (English acronym for “Controller Area Network”) or Ethernet type communication network, enabling high-speed communication between these components with a large amount of data. Such a calculator contains one or more electronic card(s) and the programs / software to be implemented to perform the corresponding functions, in particular depending on the data transmitted to it by the . sensors and / or other computers.

[0005] Furthermore, to control these functions as closely as possible in order, in particular, to reduce the number of electrical cables in the motor vehicle and to improve the data transmission speed, the on-board systems are based on a centralized electronic / electrical architecture and comprise a central electronic management unit making it possible to control several operating modes of the vehicle by implementing / executing instructions from one or more software programs (or computer programs). Such on-board systems are generally organized according to a zonal distribution, also comprising electronic interfaces connected to the central electronic unit and making it possible to manage a specific zone of the vehicle via one or more of said computers.

[0006] These operating modes are organized according to a succession by level of operating modes, generally between a basic level where the vehicle is in a low consumption operating mode up to a higher level where the vehicle is in an operating mode where it is running and moving. The transition (or the passage) from one operating mode to another is managed by the central electronic management unit according to the vehicle events.

[0007] However, with these embedded systems, a software and / or hardware problem can lead to a failure and a dangerous situation. Indeed, certain transitions, called prohibited transitions, which are not authorized, can nevertheless occur during such a software or hardware problem, and lead to such a dangerous situation, this is the case, for example, of a transition from an operating mode in which the vehicle is running and traveling / rolling to an operating mode in which the vehicle is immobilized by the parking brake or parking system.

[0008] The present invention aims to overcome these drawbacks.

[0009] To this end, the present invention relates to a method for monitoring transitions of the operating modes of a motor vehicle, the motor vehicle being equipped with an on-board system, the on-board system based on a centralized electronic / electrical architecture and comprising a central electronic management unit controlling a plurality of operating modes of the motor vehicle with transitions from one operating mode to another as a function of events in the motor vehicle and at least one memory, called a memory of prohibited transitions, storing at least one item of data representative of a prohibited transition, each transition from one operating mode to another in a succession by level of these operating modes being defined by a piece of transition data, characterized in that it consists of implementing the following steps by means of the central electronic management unit:

[0010] - monitor transition data to be able to detect a forbidden transition in comparing each transition data to the forbidden transition data or data stored in the forbidden transition memory,

[0011] - in the case of detection of a prohibited transition: command a transition authorized to a safe operating mode.

[0012] The present invention also relates to an on-board system for a motor vehicle, the on-board system based on a centralized electronic / electrical architecture and comprising a central electronic management unit making it possible to control a plurality of operating modes of the motor vehicle with transitions from one operating mode to another as a function of events in the motor vehicle, characterized in that it further comprises at least one memory, called a prohibited transition memory, storing at least one data item representative of a prohibited transition, each transition from one operating mode to another in a succession by level of these operating modes being defined by a transition data item and in that the central electronic management unit is configured:

[0013] - to monitor transition data so that a transition can be detected forbidden by comparing each transition data to the forbidden transition data or data stored in the forbidden transition memory

[0014] - in the case of detection of a prohibited transition: to command a authorized transition to a safe haven operating mode.

[0015] The present invention also relates to a motor vehicle equipped with an on-board system, the on-board system based on a centralized electronic / electrical architecture and comprising a central electronic management unit making it possible to control a plurality of operating modes of the motor vehicle with transitions from one operating mode to another depending on events in the motor vehicle, characterized in that the on-board system consists of an on-board system according to the present invention.

[0016] The invention will be better understood from the following description, which relates to a preferred embodiment, given as a non-limiting example, and explained with reference to the appended schematic drawings, in which:

[0017] [Single Fig.] is a partial schematic representation of an embedded system according to the present invention.

[0018] The single figure shows schematically and partially an on-board system according to the present invention based on a centralized electronic / electrical architecture and comprising a central electronic management unit UC making it possible to control a plurality of operating modes F of the motor vehicle with transitions T from one operating mode to another depending on the events of the motor vehicle.

[0019] These operating modes are organized according to a succession by level of the operating modes, for example, as can be seen in the single figure, according to the following succession by level, from a basic level where the motor vehicle is in low consumption up to a higher level where the vehicle is running and rolling:

[0020] - an operating mode called “LOW CONSUMPTION” (or "STAND BY" or "LOW POWER"), in which the motor vehicle is in low consumption, that is to say in a sort of "sleeping" state waiting to be "awakened",

[0021] - an operating mode called “PARKING” (or “PARK”), in which the driver is absent from the motor vehicle and the human machine interfaces (HMI) are switched off (not activated),

[0022] - an operating mode called “LIFE ON BOARD” (or in English “LIFE ON BOARD”), in which the driver is present in the motor vehicle and can activate various functions such as, for example, the HMI interface, namely, for example, the multimedia system (screen, operating system, GPS navigator and other multimedia functionalities) or the thermal system ensuring the thermal comfort of the motor vehicle,

[0023] - an operating mode called “DRIVING PREPARATION” mode or “POWER ON”, in which the driver is present and installed in the motor vehicle,

[0024] - an operating mode, called “DRIVING” or “MISSION” mode (or in English "TRACTION ON"), in which the parking brake or handbrake for immobilizing the motor vehicle when stationary is released (not activated) and the motor vehicle is running and moving.

[0025] We can also see in the figure an operating mode called “UPDATE” mode inserted between the “PARKING” and “LIFE ON BOARD” modes.

[0026] The present invention is obviously not limited to this example of operating modes and its organization in a succession by level as illustrated, nor to the terms given to each of these operating modes. The present invention can be implemented with other operating modes and / or organizations, or with operating modes added to or removed from those described previously and illustrated by the single figure.

[0027] To control a transition from one operating mode to another, the central electronic management unit UC executes, as a function of the data it receives (events in the motor vehicle), instructions for controlling a software or computer program stored in a memory of the on-board system. The command has the effect of controlling one or more function(s) of the vehicle at vehicle allowing the implementation of the operating mode in which the vehicle must be placed. Such an on-board system may further comprise (not shown in the attached figures):

[0028] - actuators for physically executing the controlled functions and calculators (not shown in the attached figures) connected to the central electronic management unit UC,

[0029] - sensors for controlling the operation of the actuators,

[0030] - a communication network, for example of the CAN bus type (English acronym for "Controller Area Network") or Ethernet, allowing, between the components (electronic central management unit, computers, actuators, sensors) of the embedded system, high speed communication with a large quantity of data.

[0031] Furthermore, to control these functions as closely as possible in order, in particular, to reduce the number of electrical cables in the motor vehicle and to improve the data transmission speed, the on-board system may comprise electronic management (or distribution) interfaces. These electronic management interfaces are generally known by the English acronym PIU "Physical Interface Unit" and connect each computer to the central electronic management unit UC. Each electronic management interface is dedicated to a specific area of ​​the motor vehicle, the functions of which it manages via one or more computers.

[0032] These components of such an on-board system are known to those skilled in the art and are not described in more detail in the present invention.

[0033] If we refer again to the single figure, we can see more particularly the transitions T managed by the electronic central unit UC, that is to say controlled by the latter, and in particular the authorized transitions T represented by continuous line arrows. We can also see prohibited transitions T represented by broken line arrows, that is to say transitions which must not be executed by the electronic central management unit UC because they can lead to dangerous situations. These prohibited transitions T can occur during a failure of the software (or at least one of the software) and / or the hardware of the embedded system.

[0034] To avoid these dangerous situations created by at least one prohibited transition which would nevertheless be executed due to such a failure problem, the embedded system according to the present invention makes a technical contribution by further comprising, in accordance with the present invention, at least one memory, called prohibited transition memory M, storing at least one data item representative of a prohibited transition, each transition T from one operating mode to another in a succession by level of these operating modes being defined by a transition data item. Furthermore, still in accordance with the present invention, the unit UC electronic management center is configured:

[0035] - to monitor transition data so that a transition can be detected prohibited by comparing each transition data to the prohibited transition data or data stored in the prohibited transition memory M,

[0036] - in the case of detection of a prohibited transition: to command a authorized transition to a safe haven operating mode.

[0037] A refuge operating mode is understood to mean an operating mode in which the motor vehicle is in a safe or secure state. Such a refuge operating mode is stored / recorded in a memory of the on-board system, in particular in a memory of the central electronic management unit UC.

[0038] It is understood that the control in the refuge operating mode is carried out instantly by the central electronic management unit upon detection of the prohibited transition in order to immediately secure the motor vehicle.

[0039] Thus, we can see, in the succession by level of the operating modes as illustrated, the following prohibited transitions:

[0040] - the transition from “DRIVING” mode to “PARKING” or “POWER” mode DAY ",

[0041] - the transition from “DRIVING” mode to “LOW” mode CONSUMPTION ".

[0042] If any of these three prohibited transitions illustrated in the single figure occurs, it will be immediately detected by the central electronic management unit UC which will instantly command, following this detection, the transition into the refuge operating mode.

[0043] In a preferred embodiment, the refuge operating mode may be the previous operating mode that can be reached by an authorized transition. Referring again to the single figure, it can be seen that, in the case where the motor vehicle is in the “DRIVING” mode, the previous operating mode that can be reached by an authorized transition may then be the “DRIVING PREPARATION” mode which is, in this illustrated case, that of the immediately lower level.

[0044] The present invention also relates to a method for monitoring transitions of the operating modes of a motor vehicle. The on-board system consists of such an on-board system, according to the present invention, as described previously. Such an on-board system according to the present invention allows the implementation of the method.

[0045] According to the present invention, such a method consists of implementing the following steps by means of the central electronic management unit UC:

[0046] - monitor transition data to be able to detect a forbidden T transition by comparing each transition data to the forbidden transition data or data stored in the forbidden transition memory M, and

[0047] - in the case of detection of a prohibited transition: command a transition authorized to a safe operating mode.

[0048] As seen previously, the refuge operating mode may be the previous operating mode authorized in a succession by level of the authorized operating modes, for example in the succession by level of the authorized operating modes illustrated in the single figure.

[0049] The present invention also relates to a motor vehicle equipped with an on-board system based on a centralized electronic / electrical architecture and comprising a central electronic management unit UC making it possible to control a plurality of operating modes F of the motor vehicle with transitions T from one operating mode to another depending on the events of the motor vehicle. In accordance with the present invention, the on-board system consists of an on-board system according to the present invention.

[0050] The present invention also relates to a computer program comprising instructions which, when the program is executed by a computer, cause the latter to implement the steps of the method according to the present invention. The computer is constituted by the central electronic management unit UC.

[0051] Of course, the invention is not limited to the embodiment described and shown in the attached drawings. Modifications remain possible, in particular from the point of view of the constitution of the various elements or by substitution of technical equivalents, without departing from the scope of protection of the invention.

Claims

Claims

1. Method for monitoring transitions of the operating modes of a motor vehicle, the motor vehicle being equipped with an on-board system, the on-board system based on a centralized electronic / electrical architecture and comprising a central electronic management unit (UC) controlling a plurality of operating modes (F) of the motor vehicle with transitions (T) from one operating mode to another as a function of the events of the motor vehicle and at least one memory, called a prohibited transition memory (M), storing at least one data item representative of a prohibited transition (T), each transition (T) from one operating mode to another in a succession by level of these operating modes being defined by a transition data item,characterized in that it consists of implementing the following steps by means of the central electronic management unit (UC): - monitoring the transition data to be able to detect a prohibited transition (T) by comparing each transition data item with the prohibited transition data item(s) stored in the prohibited transition memory (M), and - in the case of detection of a prohibited transition: commanding an authorized transition to a safe operating mode.,

2. Monitoring method according to claim 1, characterized in that the refuge operating mode is the previous operating mode which can be reached by an authorized transition.

3. Computer program comprising instructions which, when the program is executed by a computer, cause the latter to implement the steps of the method according to claim 1 or 2 and in that the computer is constituted by the electronic central management unit (UC).

4. On-board system for a motor vehicle, the on-board system based on a centralized electronic / electrical architecture and comprising a central electronic management unit (UC) making it possible to control a plurality of operating modes of the motor vehicle with transitions (T) from one operating mode to another depending on the events of the motor vehicle, characterized in that it further comprises at least one memory, called a forbidden transition memory (M), storing at least one data item representative of a prohibited transition, each transition (T) from one operating mode to another in a succession by level of these operating modes being defined by a transition data item and in that the central electronic management unit (UC) is configured: - to monitor the transition data so as to be able to detect a prohibited transition (T) by comparing each transition data with the prohibited transition data or data stored in the prohibited transition memory (M), - in the case of detection of a prohibited transition (T): to command an authorized transition (T) to a refuge operating mode.

5. Embedded system according to claim 4, characterized in that the refuge operating mode is the previous operating mode which can be reached by an authorized transition.

6. Motor vehicle equipped with an on-board system, the on-board system based on a centralized electronic / electrical architecture and comprising a central electronic management unit (UC) making it possible to control a plurality of operating modes of the motor vehicle with transitions (T) from one operating mode to another depending on the events of the motor vehicle, characterized in that the on-board system consists of an on-board system according to any one of claims 4 to 5.

Citation Information

Patent Citations

  • Automatic parking safety control method, apparatus and device, and storage medium

    CN112455432A

  • Event detection during the operation of a machine

    DE102014114446A1

  • Information processing device, method, non-transitory storage medium, and vehicle

    EP3995374A1

  • Method and device for determining whether an error condition is present in a motor vehicle

    US20160133064A1