Method for controlling the operation of a vehicle and control device for its implementation

Abstract

Title: Method for controlling the operation of a vehicle and control apparatus for its implementation Method for controlling the operation of a vehicle (1) according to which - the engine (2) of the vehicle draws an energy carrier from a tank (3) of the vehicle for the operation of the engine, - the quantity of permitted energy carrier introduced into the tank is determined, - during the operation of the engine, the consumption of the energy carrier by the engine (2) is determined from the operating data of the vehicle (1), - by comparing the quantity of permitted energy carrier put into the tank (3) and the quantity of energy carrier consumed, the consumption is plausible, method characterized in that the operation of the vehicle (1) is limited if a discrepancy is found between the quantity of permitted energy carrier introduced and the quantity of energy carrier consumed. Figure 1

Description

Title of the invention: Method for controlling the operation of a vehicle and control apparatus for its implementation FIELD OF THE INVENTION

[0001] The present invention relates to a method of controlling the operation of a vehicle according to which

[0002] - the vehicle engine draws energy from a vehicle tank for the operation of the engine,

[0003] - the quantity of authorized energy support introduced into the tank is determined,

[0004] - during engine operation the consumption of the support is determined energy from the engine based on vehicle operating data,

[0005] - by comparing the amount of authorized energy support put into the tank and the amount of energy support consumed make the consumption plausible. STATE OF THE ART

[0006] According to document DE 10 2021 206 395 A1, a method for operating or managing a vehicle is known, according to which the calculated fuel consumption of the vehicle is compared to the fuel filling quantity with the calculated fuel consumption by the vehicle. Comparing these two quantities makes it possible to improve the determination of the fuel consumption of the vehicle.

[0007] DISCLOSURE AND ADVANTAGES OF THE INVENTION

[0008] The subject of the present invention is a method for controlling the operation of a vehicle as defined above, characterized in that the operation of the vehicle is limited if a difference is observed between the quantity of authorized energy support introduced and the quantity of energy support consumed.

[0009] The method for controlling the operation of a vehicle or the corresponding control device or the external computer as defined above makes it possible to verify that the vehicle is only operated with the permitted energy carrier. This makes it possible to ensure compliance with regulations concerning the operation of the vehicle using only a permitted energy carrier. These regulations can be defined, for example, by administrative rules or contractual conditions for the operation of the vehicle. This ensures reliable operation of the vehicle with only a predefined, permitted energy carrier.

[0010] According to another feature, then using a signature associated with the vehicle, a given quantity of authorized energy carrier is uniquely associated with a vehicle. This guarantees that the distributed quantity of authorized energy carrier would only be used by one vehicle. This method is guaranteed in particular if an external computer is used for transmitting the signature. But alternatively, this can also be done by direct communication between a dispensing device and the vehicle. To increase the accuracy of determining the vehicle's consumption, the filling level of the tank can also be used as an energy carrier. To the extent that the use of an unauthorized energy carrier is observed, the operation of the vehicle will be limited.This is done in a particularly advantageous manner by means which, although it is possible to continue using the vehicle, reduce the level of vehicle use. The process becomes particularly simple using a vehicle engine control unit. The process is particularly guaranteed if a control unit external to the vehicle is used, which is nevertheless connected to the vehicle. Brief description of the drawings

[0011] The present invention will be described below in more detail with the aid of an embodiment of a shown in the accompanying drawings in which:

[0012] [Fig. 1] diagram of a first exemplary embodiment of the invention,

[0013] [Fig.2] diagram of a second exemplary embodiment of the invention.

[0014] DESCRIPTION OF AN EMBODIMENT

[0015] [Fig.l] schematically shows a vehicle 1 and an energy carrier distribution device 5. The vehicle 1 is equipped with an engine 2 and a tank for the energy carrier 3. The vehicle 1 further has a computer or control device 4 for controlling the operation of the vehicle 1. The energy carrier distribution device also has a computer 6 for controlling the operations of the distribution device 5. The vehicle 1 is for example a conventional vehicle equipped with a thermal engine. Correspondingly, the energy carrier is a liquid fuel, for example gasoline or diesel. In this case, the engine 2 is a combustion engine and the tank 3 is a reservoir. Alternatively, the vehicle can also be an electric vehicle in which the engine 2 is an electric motor and the tank 3 is a battery.Correspondingly, the dispensing device 5 of the energy support is not a pump or a liquid fuel station but an electrical energy recharging station.

[0016] It must be ensured that the vehicle only operates with an authorized energy carrier. In the case of liquid fuel, this is, for example, a synthetic fuel, produced in a CO2-neutral manner or a biofuel with a high content of ethanol. The corresponding synthetic fuels are called E-fuel. In the case of electrical energy, the permitted energy source is, for example, electrical energy from fossil sources or wind turbines or solar energy.

[0017] For the simplification of the remainder of the description, it is assumed that it is a distributor column or a liquid fuel station as distributor device 5 and a heat engine 2 as well as a tank 3 constituting respectively the engine 2 and the tank 3.

[0018] To ensure that a vehicle 1 only operates with an authorized energy medium, the protocol is established each time the tank 3 is filled by a gas station 5 with the authorized fuel, which is compared to the actual consumption of the vehicle 1. If a lower consumption of fuel 1 is then observed, it is assumed that this is a filling with an unauthorized synthetic fuel and the operation of the vehicle 1 is limited. Thus, the operation of the vehicle 1 with unauthorized fuel is limited. To ensure that the tank of the vehicle 3 has only been filled with authorized fuel, a signature is generated each time the tank is filled in the gas station 5. This signature contains cryptographic, coded information concerning the reliability and the quantity of fuel burned. By encrypting, it is guaranteed that this information will not be falsified.The signature is transmitted to the control device 4 so that information is available in the vehicle concerning the quantity of authorized fuel introduced into the tank.

[0019] Furthermore, the control device 4 determines the quantity of fuel consumed by using the data of the vehicle 1. For this purpose, the operating data of the vehicle are taken into account, for example the signals supplied by the sensors such as the engine speed (engine rotational speed), the mass flow rate of the intake air, the supply pressure, the fuel pressure, the temperatures, the oxygen concentration in the exhaust gases, the vehicle speed, the weight of the vehicle, the position of the vehicle, the environmental conditions, the tank level), the control signals of the actuators (for example the injectors or the ignition coils or the calculated engine power or the calculated engine torque). Furthermore, the environmental data of the vehicle 1 can be taken into account, for example the information relating to the route (slope or descent, height above sea level) or meteorological data.This information, in particular weather data, can also be transmitted to the vehicle 1 via a communication link.

[0020] The signature of each tank filling operation can be transmitted in different ways by the station 5 to the vehicle 1. One possibility is that of a direct communication link, for example by WLAN or other radio link. Alternatively, an intermediate station, for example a telephone, can also be used. mobile of a vehicle user which receives the information from station 5 and then transmits it to vehicle 1. Another possibility is to send to the vehicle user 1 the signature by a corresponding code number which the driver manually enters into a distribution device.

[0021] It must also be ensured that the signature, i.e. the information which reflects the conformity of the fuel and the quantity of fuel, cannot be used several times on several vehicles. For this, the generic signature must be associated by the station 5 with the vehicle 1 in which the fuel fills the tank 3. Another method for associating the signature with a vehicle is described using [Fig.2].

[0022] [Fig. 2] shows a vehicle 1 and a gas station with the same elements and functions as [Fig. 1]. However, in addition, an external computer 7 is provided which can be in the form of a computer link as a server or as a Cloud. The computer 7 is in communication connection with the gas station 5 and the vehicle 1 and guarantees that the signature is only associated with one vehicle, namely the vehicle that has made the authorized fuel filling in the tank 3. This communication connection of the computer 7 with the vehicle 1 is usually guaranteed by a radio connection, for example by the mobile telephone network. The communication connection of the computer 7 with the gas station 5 can also be made by a radio connection or a cable connection; the association of the signature with the vehicle can be made in different ways.

[0023] According to a first possibility, the station 5 transmits a signature to the vehicle 1 and the vehicle 1 transfers this signature with the identity of the vehicle 1 to an external computer 7. The comparison between the quantity of fuel taken in accordance with the fuel consumption of the vehicle is then made in the external computer 7 which prohibits the same signature for several uses. Alternatively, it is also possible that the station 5 gives the signature only to the external computer 7 and the vehicle 1 receives from the station 5 only information allowing the signature to be called up in the external computer 7. The comparison between the quantity filled and the consumption of the vehicle is made in the engine control unit 4 of the vehicle 1. Depending on whether the comparison between the quantity filled and the quantity consumed by the vehicle is made in a more or less regular or continuous communication between the vehicle 1 and the external computer 7.

[0024] Furthermore, a signature can be associated with a vehicle 1 if the filling in the station 5 is the communication of a unique identity of the vehicle 1. The station 5 can then generate a signature which characterizes, in addition to the conformity of the fuel and the quantity, the identity of the vehicle. This signature can then only be used by the vehicle whose identity was used to generate the signature.

[0025] For the comparison of the filled quantity and the consumed quantity, a sliding evaluation of a predefined number N of filling operations is advantageously used. The algorithm stores or calculates the quantities relating to the last filling operation N; N is a sufficiently large fixed number, for example N = 20. The control device 4 recognizes a filling operation when the signature is transmitted with the information concerning the correct fuel quantity.

[0026] The quantities in memory are stored in ring memories of length N. During the first N filling operations after switching on the control device, the quantities are recorded with increasing indices; index 1 corresponds to the first filling operation; 2 to the second filling operation. From the operation of order N, index N corresponds to the last filling operation; N1 corresponds to the penultimate filling operation.

[0027] The algorithm will be described below for the operation of the N-order filling operation. The adaptation of the algorithm during the phase before the N-order filling operation is directly visible.

[0028] For the rest of the description we use the notation:

[0029] T denotes the filling level sensor T of the tank.

[0030] The following quantities are stored:

[0031] A(l), A(2), ..., A(N) represents the quantities of fuel corresponding to the various filling operations with authorized fuel (compliant fuel) in units of liters.

[0032] B(l), B(2), ..., B(N) denotes the quantities of fuel consumed, calculated, in the unit Liter; B(N) denotes the fuel consumption since the last filling operation, i.e. for engine operation with an increasing number; B(NI) represents the fuel consumption between filling operations Nl and N, B(N-2) the fuel consumption between filling operations N-2 and NL

[0033] T_VOR(1), T_VOR(2), ..., T_VOR(N): represents the reservoir levels directly before filling operations in the unit Liter, measured in the standing vehicle, with the help of the tank level sensor. It is assumed that at the time when the tank filling level is determined before filling the tank there is always at least one time (e.g., for 30s) with the engine switched off; this can be ensured in particular by the time-controlled locking of the tank cover. This can ensure that the fuel in the tank is no longer moving because any movement of the fuel influences the measurement data of the level sensor.

[0034] The quantities A(K), B(K), and T_VOR(K) (for K=1, ..., N) remain in memory when the control device is switched off. When the control device recognizes a filling operation, the quantities are updated or, for example, B(N) is initialized to 0.

[0035] The sums SA(K) of the quantities of fuel taken during the last filling operations K and the sums SB(K) of the last quantities of fuel K, calculated are calculated. These quantities are calculated according to the following rules:

[0036] SA(1) = A(N)

[0037] SA(K) = A(N-K+1) + ... + A(N) for K = 2, ...,N

[0038] SB(1) = B(N)

[0039] SB(K) = B(N-K+1) + ... + B(N) for K = 2, ...,N

[0040] If the calculated fuel quantities B(K) and the tank filling levels T(K) were correct, we should have for each instant, for each K = 1, ... ,N:

[0041] SB(K) = T_VOR(N-K+1) + SA(K) - T

[0042] When K = N, then T_VOR(1) indicates the tank level before the first of the N filling operations. This prevents the filling operation with a very small quantity from being erased by a number K or the filling of the tank with an unauthorized fuel from being erased. For normal user behavior when filling the tank, typically for a low tank filling level, the residual quantity T_VOR(1) is relatively small and negligible compared to the sum SB(N) and SA(N).

[0043] It must nevertheless be taken into account that both the determination of the tank level and the calculation of the fuel consumption are affected by vehicle tolerance. For the tank level, the determination in a vehicle in circulation is more imprecise than in a vehicle which has been stationary for a certain time and thus whose engine has been switched off for a certain time. Strictly speaking, the quantities A(K) measured by the supply units are affected by tolerance, but it is assumed below that these tolerances are negligible because they are significantly lower than those linked to the determination of the consumption by the control device 4.

[0044] To obtain the true filling level of the tank T_REAL in a vehicle which has been stationary for a certain time with the engine switched off, we typically have the following relationship:

[0045] T -DTU(T) < T_REAL < T + DTO(T) (2)

[0046] In this formula, the safety reductions or safety additions DTU(T) (low tank difference) and DTO(T) (high tank difference) of the functions of the filling level T, measured. Values for DTU(T) and DTO(T) are determined during vehicle development and are stored in memory accordingly.

[0047] For the real fuel consumption B_REAL, the interval is determined by SB(K) and the following relation is typically applied:

[0048] FU x SB(K) < B_REAL < FO x SB(K) if SB(K) > SB_MIN (3)

[0049] In this formula FU, FO and SB_MIN are values determined during the vehicle development and they are stored in memory. For safety coefficients FU < 1 and FO > 1, we have for example FU = 0.95 and FO + 1.05. For SB_MIN, for example the volume of the tank is a plausible quantity. We also guarantee a sufficient magnitude of the quantity calculated by SB_MIN.

[0050] In the case of a vehicle which has been at rest for some time with the engine switched off, an accurate measurement of the current level T of the tank can be made.

[0051] If SB(K) > SB_MIN we must have:

[0052] FU x SB(K) < T_VOR(N-k+l) + DTO(T_VOR(N-K+1)) + SA(K) - T + DTU(T) (4)

[0053] If the vehicle is moving, it is not possible to have a reliable measurement of the filling level T because the quantity of fuel can only be measured very imperfectly due to the movements of the vehicle. The current filling level T cannot therefore be taken into account. But for each case, it is necessary to have:

[0054] If SB(K) > SB_MIN:

[0055] FU x SB(K) < T-VOR(N-K+1) + DTO(T_VOR(N-K+1) + SA(K) (5)

[0056] For K=N the formulas are simplified as follows:

[0057] FU x SB(N) < T_VOR(1) + DTO(T_VOR(1)) + SA(N) - T +DTU(T) (4') and

[0058] FU x SB(N) < T_VOR(1) + DTO(T_VOR(1)) + SA(N) (5')

[0059] If it is then true that the quantity of the reservoir T_VOR(1) is small compared to the quantities which were taken during the operations of filling the reservoir K, we can neglect T_VOR(1) and thus the formulas are simplified as follows:

[0060] FU x SB(N) < SA(N) - T +DTU(T) (4”) and

[0061] FU x SB(N) < SA(N) (5”)

[0062] Formula (4”) simply means that the sum of the calculated fuel quantities multiplied by the safety reduction must be less than the sum of the fuel quantities filled in addition to the safety addition that is still in the tank.

[0063] The formula (5”) simply means that the sum of the calculated fuel quantities, multiplied with a safety coefficient must be less than the sum of the fuel quantities taken.

[0064] If, by using formulas 4 or 5, 4' or 5', 4” or 5” a plausible operation of the vehicle is found which is close to the use of unauthorized fuel, the use of the vehicle is limited. Before such a limitation it is possible proceed in a staged manner by issuing a warning or providing an indication and the vehicle user will be required to ensure normal operation. Depending on the degree of observed use of non-compliant fuel, escalating measures may then be taken, such as limiting engine power or vehicle speed or prohibiting engine restarting.

[0065] When the fuel consumption is checked for plausibility in the control unit 4, the vehicle usage limitations are removed by the control unit. If the plausibility check of the fuel consumption is carried out in an external computer 7, these measures will be triggered by the external computer 7, which accordingly informs the control unit 4 to apply the limitations. To neutralize the limitations on the use of the vehicle 1, the vehicle user must generally contact a responsible administration or the manager of the external computer 7. Typically, the usage limitations are triggered by the intake of non-compliant fuel. This can be removed by paying a fine and then the vehicle user receives a signature for neutralizing the usage limitation.The signature transmission can then also be done on the external computer 7. Another possible case is that of a corresponding signature by a workshop to eliminate the limitation by the vehicle 1.

Claims

Claims

1. Method for controlling the operation of a vehicle (1), according to which - the engine (2) of the vehicle draws an energy carrier from a tank (3) of the vehicle for the operation of the engine, - the quantity of permitted energy carrier introduced into the tank is determined, - during the operation of the engine, the consumption of the energy carrier by the engine (2) is determined from the operating data of the vehicle (1), - by comparing the quantity of permitted energy carrier put into the tank (3) and the quantity of consumed energy carrier, the consumption is plausible, method characterized in that - the operation of the vehicle (1) is limited if a discrepancy is found between the quantity of permitted energy carrier introduced and the quantity of consumed energy carrier.

2. Method according to claim 1, characterized in that when filling the tank (3) of the vehicle, a signature is associated with the vehicle (1), - the signature indicates the quantity of energy carrier and the conformity of the energy carrier, and - only the quantity of energy carrier authorized for the comparison is used.

3. Method according to claim 2, characterized in that the signature is generated with an energy support distribution device (5), - the signature is transmitted to an external computer (7) and it is associated with the vehicle by the external computer (7).

4. Method according to claim 2, characterized in that the signature is generated by the dispensing device (5) for the energy carrier, and - the signature is transmitted by direct communication between the dispensing device (5) and the vehicle (1) or by entering a vehicle input device to be transmitted to the vehicle and thus be associated with the vehicle.

5. Method according to claim 1, characterized in that to determine the deviation the filling level of the reservoir (2) is additionally used for the energy carrier.

6. Method according to one of the preceding claims, characterized in that as operating data of the vehicle (1) for determining the energy carrier consumption by the engine (2) sensor signals of the vehicle such as rotational speed, intake air mass flow, supply pressure, fuel pressure, temperatures, oxygen concentration in the exhaust gas, vehicle speed, vehicle weight, vehicle position, ambient conditions, filling level or other sensor signals are used.

7. Method according to one of the preceding claims, characterized in that as limitation of the operation of the vehicle (1) a limitation of the output torque of the engine (2), the starting of the engine (2), the speed of the vehicle, the power supplied by the engine (2) and / or the speed of the engine (2) is applied.

8. Method according to one of the preceding claims, characterized in that the method is applied by a control device (4) for controlling the motor.

9. Method according to one of the preceding claims, characterized in that the method is applied by an external computer (7) which is in communication connection with the engine control device (4).

10. Control apparatus (4) for controlling a vehicle comprising means for applying the method according to one of the preceding claims.

11. External computer (7) designed for communication with a vehicle comprising means for applying the method according to one of claims 1 to 9.

Images