Method for monitoring transitions between operating modes of a motor vehicle, embedded system for motor vehicles, motor vehicle equipped with such a system

Abstract

Method for monitoring the transitions of operating modes of a motor vehicle, embedded system for motor vehicle, motor vehicle equipped with such a system. The present invention relates to a method for monitoring the transitions of operating modes of a motor vehicle, the motor vehicle being equipped with an embedded system, the embedded system being based on a centralized electronic / electrical architecture and comprising a central electronic management unit (CU) controlling a plurality of operating modes (F) of the vehicle with transitions (T) from one operating mode to another depending on the events of the motor vehicle and at least one memory, called forbidden transition memory (M), storing at least one data representative of a forbidden transition (T).Such a method involves monitoring transition data to detect a forbidden transition (T) by comparing each transition data point to the forbidden transition data point(s) stored in the forbidden transition memory (M). If a forbidden transition is detected, the method commands an authorized transition to a safe operating mode. It is also relevant to such an embedded system and such a motor vehicle. Figure to be published with the abbreviation: Single Fig.

Description

Title of the invention: Method for monitoring transitions between operating modes of a motor vehicle, embedded system for a motor vehicle, motor vehicle equipped with such a system

[0001] The present invention relates to the field of motor vehicles and more particularly to embedded systems in these vehicles. Its object is a method for monitoring the transitions between operating modes of a motor vehicle. It also relates to an embedded system for a motor vehicle and a motor vehicle equipped with such an embedded system.

[0002] For the purposes of this application, the term "motor vehicle" (or "vehicle") means any motorized mobile machine or motorized land vehicle that travels on the ground and is used for the transport of persons and / or goods, other than those that travel on railways. Such a motor vehicle is equipped with an internal combustion engine, an electric motor, or a hybrid engine.

[0003] In the automotive industry, particularly to address issues of safety, performance, comfort and communication, manufacturers have equipped their vehicles with embedded systems integrating more and more electronics and computer technology.

[0004] Such an embedded system manages functions related to various operating areas of the motor vehicle, such as, for example, engine operation, speed control, vehicle positioning, driver assistance systems, battery charging (in the case of an electric vehicle), and vehicle braking. The embedded system comprises numerous control units (generally known by the acronym ECU, "Electronic Control Unit") to manage these functions, with each control unit typically managing a single function. The system also includes actuators controlled by the control units to physically execute the function(s), and sensors to monitor the operation of the actuators.To enable communication between the various components (computers, sensors, actuators) of the embedded system, it also includes a communication network, generally a CAN bus (Controller Area Network) or Ethernet type network, allowing high-speed communication with large amounts of data between these components. Such a computer contains one or more electronic boards and the programs / software to be implemented to perform the corresponding functions, based in particular on the data transmitted to it by the sensors. sensors and / or other computers.

[0005] Furthermore, to closely control these functions, particularly to reduce the number of electrical cables in the motor vehicle and improve data transmission speed, embedded systems rely on a centralized electronic / electrical architecture and include a central electronic management unit that controls several vehicle operating modes by implementing / executing instructions from one or more software programs (or computer programs). Such embedded systems are generally organized according to a zonal distribution, also including electronic interfaces connected to the central electronic unit and allowing the management of a specific area of ​​the vehicle via one or more of these computers.

[0006] These operating modes are organized according to a succession by level of operating modes, generally from a basic level where the vehicle is in a low-consumption operating mode up to a higher level where the vehicle is in a running and driving operating mode. The transition (or switchover) from one operating mode to another is managed by the central electronic management unit according to vehicle events.

[0007] However, with these embedded systems, a software and / or hardware problem can lead to a failure and a dangerous situation. Indeed, certain transitions, known as prohibited transitions, which are not permitted, can nevertheless occur during such a software or hardware problem, and lead to such a dangerous situation; this is the case, for example, of a transition from an operating mode in which the vehicle is moving and traveling / rolling to an operating mode in which the vehicle is immobilized by the parking brake system.

[0008] The present invention aims to overcome these drawbacks.

[0009] To this end, the present invention relates to a method for monitoring the transitions of operating modes of a motor vehicle, the motor vehicle being equipped with an embedded system, the embedded system being based on a centralized electronic / electrical architecture and comprising a central electronic management unit controlling a plurality of operating modes of the motor vehicle with transitions from one operating mode to another depending on the events of the motor vehicle and at least one memory, called the forbidden transitions memory, storing at least one data point representing a forbidden transition, each transition from one operating mode to another in a succession by level of these operating modes being defined by a transition data point, characterized in that it consists of implementing the following steps by means of the central electronic management unit:

[0010] - monitor the transition data in order to be able to detect a forbidden transition in comparing each transition data point to the forbidden transition data point(s) stored in the forbidden transition memory,

[0011] - in the case of detection of a forbidden transition: trigger a transition authorized towards a refuge mode of operation.

[0012] The present invention also relates to an embedded system for a motor vehicle, the embedded system being based on a centralized electronic / electrical architecture and comprising a central electronic management unit enabling the control of a plurality of operating modes of the motor vehicle with transitions from one operating mode to another depending on events of the motor vehicle, characterized in that it further comprises at least one memory, called a forbidden transition memory, storing at least one data point representing a forbidden transition, each transition from one operating mode to another in a level-by-level succession of these operating modes being defined by a transition data point, and in that the central electronic management unit is configured:

[0013] - to monitor transition data so as to be able to detect a transition forbidden by comparing each transition data point to the forbidden transition data point(s) stored in the forbidden transition memory

[0014] - in the case of detection of a forbidden transition: to control a authorized transition to a safe operating mode.

[0015] The present invention also relates to a motor vehicle equipped with an embedded system, the embedded system being based on a centralized electronic / electrical architecture and comprising a central electronic management unit enabling the control of a plurality of operating modes of the motor vehicle with transitions from one operating mode to another depending on the events of the motor vehicle, characterized in that the embedded system consists of an embedded system according to the present invention.

[0016] The invention will be better understood from the following description, which relates to a preferred embodiment, given by way of non-limiting example, and explained with reference to the accompanying schematic drawings, in which:

[0017] [Single Fig.] is a partial schematic representation of an embedded system according to the present invention.

[0018] The single figure schematically and partially shows an embedded system according to the present invention based on a centralized electronic / electrical architecture and comprising a central electronic management unit UC enabling the control of a plurality of operating modes F of the motor vehicle with transitions T from one operating mode to another depending on the events of the motor vehicle.

[0019] These operating modes are organized according to a succession by level of operating modes, for example, as can be seen in the single figure, according to the following succession by level, from a basic level where the motor vehicle is in low consumption mode up to a higher level where the vehicle is running and moving:

[0020] - an operating mode called "LOW POWER CONSUMPTION" (or "STAND BY" or "LOW POWER"), in which the motor vehicle is in low consumption mode, that is to say, in a sort of "asleep" state awaiting "wake-up",

[0021] - an operating mode called "PARKING" (or "PARK"), in which the The driver is absent from the vehicle and the human-machine interfaces (HMI) are switched off (not activated).

[0022] - an operating mode called "LIFE ON BOARD" (or in English "LIFE ON BOARD") BOARD"), in which the driver is present in the motor vehicle and can activate various functions such as, for example, the HMI interface, namely, for example, the multimedia system (screen, operating system, GPS navigation and other multimedia features) or the thermal system ensuring the thermal comfort of the motor vehicle,

[0023] - an operating mode called "DRIVING PREPARATION" mode or "POWER ON" (or in English "POWER ON"), in which the driver is present and seated in the motor vehicle,

[0024] - an operating mode, called "DRIVING" or "MISSION" mode (or in English "TRACTION ON"), in which the parking brake or parking brake used to immobilize the motor vehicle at a standstill is released (not activated) and the motor vehicle is in motion and moving.

[0025] Figure also shows an operating mode called "UPDATE" mode inserted between the "PARKING" and "LIFE ON BOARD" modes.

[0026] The present invention is obviously not limited to this example of operating modes and its organization in a sequential order as illustrated, nor to the terms given to each of these operating modes. The present invention can be implemented with other operating modes and / or organizations, or with operating modes that are added to or subtracted from those described above and illustrated in the single figure.

[0027] To control a transition from one operating mode to another, the central electronic control unit (CPU) executes, based on the data it receives (events in the motor vehicle), control instructions from software or a computer program stored in the embedded system's memory. The command has the effect of controlling one or more vehicle functions. A vehicle enabling the implementation of the operating mode in which the vehicle must be placed. Such an on-board system may also include (not shown in the attached figures):

[0028] - actuators enabling the physical execution of the controlled functions and calculators (not shown in the attached figures) connected to the central electronic management unit UC,

[0029] - sensors to control the operation of the actuators,

[0030] - a communication network, for example of the CAN bus type (English acronym for "Controller Area Network") or Ethernet, allowing high-speed communication with a large amount of data between the components (electronic central management unit, computers, actuators, sensors) of the embedded system.

[0031] Furthermore, to control these functions more closely, in particular to reduce the number of electrical cables in the motor vehicle and improve data transmission speed, the embedded system may include electronic management (or distribution) interfaces. These electronic management interfaces are generally known by the English acronym PIU, "Physical Interface Unit," and connect each computer to the central electronic management unit (CMU). Each electronic management interface is dedicated to a specific area of ​​the motor vehicle, managing its functions via one or more computers.

[0032] These components of such an embedded system are known to a person skilled in the art and are not described in more detail in the present invention.

[0033] Referring again to the single figure, we can see more specifically the T transitions managed by the electronic central processing unit (CPU), that is, controlled by the latter, and in particular the allowed T transitions represented by solid arrows. We can also see forbidden T transitions represented by dashed arrows, that is, transitions that must not be executed by the electronic central processing unit (CPU) because they can lead to dangerous situations. These forbidden T transitions can occur during a failure of the software (or at least one of the software programs) and / or the hardware of the embedded system.

[0034] To avoid these dangerous situations created by at least one forbidden transition that would nevertheless be executed due to such a failure problem, the embedded system according to the present invention makes a technical contribution by further comprising, in accordance with the present invention, at least one memory, called forbidden transition memory M, storing at least one data point representing a forbidden transition, each transition T from one operating mode to another in a level-by-level succession of these operating modes being defined by a transition data point. Furthermore, also in accordance with the present invention, the unit The electronic control unit (UC) is configured:

[0035] - to monitor transition data so as to be able to detect a transition prohibited by comparing each transition data point to the prohibited transition data point(s) stored in the prohibited transition memory M,

[0036] - in the case of detection of a forbidden transition: to control a authorized transition to a safe operating mode.

[0037] A safe operating mode is defined as an operating mode in which the motor vehicle is in a safe or secure state. Such a safe operating mode is stored / recorded in a memory of the on-board system, in particular in a memory of the electronic control unit (ECU).

[0038] It is understood that the command in the refuge operating mode is carried out instantly by the central electronic management unit as soon as the prohibited transition is detected in order to immediately secure the motor vehicle.

[0039] Thus, in the level-by-level succession of operating modes as illustrated, the following prohibited transitions can be seen:

[0040] - the transition from "DRIVE" mode to "PARKING" or "PUT ON" mode DAY ",

[0041] - the transition from "DRIVE" mode to "LOW" mode CONSUMPTION ".

[0042] If any of these three prohibited transitions illustrated in the single figure occurs, it will be immediately detected by the central electronic management unit UC which will instantly command, following this detection, the transition into the refuge operating mode.

[0043] In a preferred embodiment, the fallback operating mode can be the previous operating mode that can be reached by an authorized transition. Referring again to the single figure, it can be seen that, when the motor vehicle is in "DRIVE" mode, the previous operating mode that can be reached by an authorized transition can then be the "DRIVE PREPARATION" mode, which, in this case illustrated, is that of the immediately lower level.

[0044] The present invention also relates to a method for monitoring the transitions between operating modes of a motor vehicle. The embedded system consists of such an embedded system, according to the present invention, as described above. Such an embedded system according to the present invention enables the implementation of the method.

[0045] According to the present invention, such a method consists of carrying out the following steps using the electronic central management unit UC:

[0046] - monitor the transition data in order to be able to detect a forbidden T transition by comparing each transition data point to the forbidden transition data point(s) stored in the forbidden transition memory M, and

[0047] - in the case of detection of a forbidden transition: trigger a transition authorized towards a refuge mode of operation.

[0048] As seen previously, the refuge operating mode can be the previous operating mode allowed in a level-by-level succession of allowed operating modes, for example in the level-by-level succession of allowed operating modes illustrated in the single figure.

[0049] The present invention further relates to a motor vehicle equipped with an embedded system based on a centralized electronic / electrical architecture and comprising a central electronic management unit (CU) enabling the control of a plurality of operating modes F of the motor vehicle with transitions T from one operating mode to another depending on events occurring in the motor vehicle. According to the present invention, the embedded system consists of an embedded system according to the present invention.

[0050] The present invention also relates to a computer program comprising instructions which, when the program is executed by a computer, cause the computer to carry out the steps of the process according to the present invention. The computer consists of the central electronic management unit (CMU).

[0051] Of course, the invention is not limited to the embodiment described and shown in the accompanying drawings. Modifications remain possible, particularly with regard to the composition of the various elements or by substitution of technical equivalents, without departing from the scope of protection of the invention.

Claims

Demands

1. A method for monitoring the transitions of operating modes of a motor vehicle, the motor vehicle being equipped with an on-board system, the on-board system being based on a centralized electronic / electrical architecture and comprising a central electronic management unit (CU) controlling a plurality of operating modes (F) of the motor vehicle with transitions (T) from one operating mode to another depending on the events of the motor vehicle and at least one memory, called forbidden transition memory (M), storing at least one data point representing a forbidden transition (T), each transition (T) from one operating mode to another in a level-by-level succession of these operating modes being defined by a transition data point,characterized in that it consists of implementing the following steps by means of the central electronic management unit (CU): - monitoring the transition data in order to detect a forbidden transition (T) by comparing each transition data point to the forbidden transition data point(s) stored in the forbidden transition memory (M), and - in the event of detection of a forbidden transition: commanding an authorized transition to a refuge operating mode.

2. A monitoring method according to claim 1, characterized in that the refuge operating mode is the previous operating mode that can be reached by an allowed transition.

3. Computer program comprising instructions which, when the program is executed by a computer, cause the computer to carry out the steps of the process according to claim 1 or 2 and in that the computer is constituted by the central electronic management unit (CU).

4. Embedded system for a motor vehicle, the embedded system being based on a centralized electronic / electrical architecture and comprising a central electronic management unit (CMU) enabling the control of a plurality of operating modes of the motor vehicle with transitions (T) from one operating mode to another depending on events of the motor vehicle, characterized in that it further comprises at least one memory, called a forbidden transition memory (M), storing at least one data point representative of a forbidden transition, each transition (T) from one operating mode to another in a level-by-level succession of these operating modes being defined by a transition data and in that the central electronic management unit (CU) is configured: - to monitor transition data so as to be able to detect a forbidden transition (T) by comparing each transition data point to the forbidden transition data point(s) stored in the forbidden transition memory (M), - in the case of detection of a prohibited transition (T): to command an authorized transition (T) to a refuge operating mode.

5. Embedded system according to claim 4, characterized in that the refuge operating mode is the previous operating mode that can be reached by an allowed transition.

6. Motor vehicle equipped with an embedded system, the embedded system being based on a centralized electronic / electrical architecture and comprising a central electronic management unit (CU) enabling control of a plurality of operating modes of the motor vehicle with transitions (T) from one operating mode to another depending on the events of the motor vehicle, characterized in that the embedded system consists of an embedded system according to any one of claims 4 to 5.

Images