Braking system with enhanced operational safety

A dual-control unit braking system ensures continued safety and immobilization of vehicles by managing electric parking brakes independently, addressing the vulnerability of single-point failures in existing systems.

WO2025016876A1PCT designated stage expired Publication Date: 2025-01-23HITACHI ASTEMO FRANCE +1
View PDF 5 Cites 0 Cited by

Patent Information

Application Number
PCT/EP2024/069707
Authority / Receiving Office
WO · WO
Patent Type
Applications
Current Assignee / Owner
Priority Date
2023-07-17
Filing Date
2024-07-11
Publication Date
2025-01-23

AI Technical Summary

Technical Problem

Existing motor vehicle braking systems with electric parking brakes are vulnerable to operational failures due to single-point electronic control unit malfunctions, which can compromise safety, especially on slopes and in emergency situations.

Method used

A braking system with two independent electronic control units that communicate and can manage at least one electric parking brake each, allowing for seamless operation even if one control unit fails, with means to isolate faulty units and ensure continued vehicle immobilization.

Benefits of technology

Enhances operational safety by ensuring vehicle immobilization and maintaining safety functions even in the event of control unit failure, preventing accidents and requiring minimal user intervention for maintenance.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure EP2024069707_23012025_PF_FP_ABST
    Figure EP2024069707_23012025_PF_FP_ABST
Patent Text Reader

Abstract

Braking system for a motor vehicle, comprising: at least two electrically actuated parking brakes (FP1, FP2), each intended to be positioned at a wheel, control means for controlling the brakes of the parking brakes, at least two control units (ECU1, ECU2) for the parking brakes, each control unit (ECU1, ECU2) being configured to control at least one parking brake upon reception of an instruction by the control means and, in the event of the failure of one of the control units, to control the two parking brakes (FP1, FP2).
Need to check novelty before this filing date? Find Prior Art

Description

[0001] DESCRIPTION

[0002] BRAKING SYSTEM WITH ENHANCED OPERATIONAL SAFETY

[0003] TECHNICAL FIELD AND PRIOR ART

[0004] The present invention relates to the braking system of a motor vehicle with enhanced operational safety.

[0005] Motor vehicles are equipped with a braking system that includes a brake at each wheel.

[0006] The braking system provides service braking, which allows the vehicle to slow down and / or stop. Service braking is generally achieved by pressing a brake pedal. Service braking can be managed automatically by a control unit, for example in cases where automatic speed regulation is desired.

[0007] The braking system also provides parking braking, which is intended to immobilize the vehicle when parked. The parking brake can also be used as an emergency brake. In accordance with ECE R 13-H, the parking braking system must keep the loaded vehicle stationary on an 8% slope.

[0008] Typically, the braking system includes a parking brake on each rear wheel. The parking brake is usually integrated into the service brake.

[0009] Until recently, the parking brake was operated by the driver pulling a brake lever connected directly to the rear wheel brakes by a cable. The greater the traction, the greater the level of parking braking.

[0010] Increasingly, the parking brake is activated by pressing a button that sends a signal to the control unit, which activates electric motors located at the rear wheels. The electric motor presses the brake pads against a brake disc in the case of a disc brake, or the brake linings against a drum in the case of a drum brake. The state-of-the-art braking system includes an electronic control unit (ECU) incorporating a parking brake controller, which controls the two electric parking brakes.

[0011] If the electronic control unit malfunctions, the electric parking brakes can no longer be operated. The driver is alerted and must immediately take the vehicle to a garage for inspection.

[0012] STATEMENT OF THE INVENTION

[0013] It is therefore an aim of the present application to offer a braking system comprising at least two electric parking brakes having increased operational safety.

[0014] The above-stated aim is achieved by a braking system for a motor vehicle comprising at least two electric parking brakes and two electronic control units, each electronic control unit being configured to manage at least one electric parking brake in one operating mode.

[0015] In the present application, the term "manage" means the act of controlling the activation of the parking brake based on a control signal, for example provided by the actuation of a control button.

[0016] Thanks to the invention, in the event of failure of one of the electronic control units, the braking system comprises a functional electronic control unit for managing at least one of the electric parking brakes.

[0017] The invention offers an increased level of safety suitable for new vehicles. It results from the implementation of two electronic control units

[0018] In one embodiment, each control unit controls a single electric parking brake independently.

[0019] In another embodiment, each control unit is capable of managing both electric parking brakes in the event of failure of the other control unit. In one exemplary embodiment, in normal operation, each control unit manages one parking brake. In another exemplary embodiment, one of the control units manages both parking brakes in normal operation. Very advantageously, the two control units communicate with each other, which allows each control unit to know the operating state of the other control unit and thus allow the braking system to change operating mode to compensate for the malfunction of the other control unit.

[0020] Preferably, means are provided to isolate the faulty control unit and thus avoid the superposition of signals emitted by the faulty unit and the unit which manages the two parking brakes as a backup.

[0021] The present invention then relates to a braking system for a motor vehicle comprising at least two electrically actuated parking brakes intended to be positioned each at a wheel, means for controlling the parking brakes, at least two parking brake control units, each control unit being configured to control at least one parking brake following receipt of an instruction by the control means, and in the event of failure of the other control unit to control at least one of the parking brakes following receipt of an instruction by the control means.

[0022] In an exemplary embodiment, each control unit includes software for controlling a parking brake, the software of the two control units being identical.

[0023] Each control unit can be configured to control a single parking brake and the software environment can be configured so that instructions issued by each software are only transmitted to the associated parking brake.

[0024] Alternatively, each control unit is configured to control a single parking brake, and the software environment is configured so that the parking brake, which is not controlled by said software, is declared for said software as unavailable.

[0025] In another exemplary embodiment, each control unit is configured to control both parking brakes, said system comprising means of communication between the two control units, so that each of the control units is informed of the operating state of the other control unit.

[0026] Advantageously, the communication means are configured to establish the periodic sending of messages between the two control units.

[0027] The first control unit can be configured to control both parking brakes and the second control unit can be configured to control both parking brakes, when the first control unit is considered to be faulty.

[0028] Alternatively, the first control unit is configured to control one parking brake and the second control unit is configured to control the other parking brake, and each of the control units is configured to control both parking brakes when the other control unit is deemed to have failed.

[0029] For example, each control unit has a first electrical connection to one of the parking brakes that it controls in normal operation, and the braking system has switching means, so as to establish a second electrical connection between the non-faulty control unit and the electric parking brake normally controlled by the faulty control unit.

[0030] Preferably, the braking system includes means for isolating the faulty control unit.

[0031] The communication means may include a private multiplexing network such as LIN bus, CAN bus, SPI bus or I2C bus.

[0032] The present invention also relates to a method of operating a braking system according to the invention:

[0033] - in normal operation each control unit controls one parking brake, and an exchange of information is established between the first control unit and the second control unit so that each control unit is informed of the operating status of the other control unit, - in the event of failure of one of the control units, the other control unit controls both parking brakes.

[0034] The present invention also relates to a method of operating a braking system according to the invention, in which:

[0035] - in normal operation the first control unit controls both parking brakes, and an exchange of information is established between the first and second control units so that each control unit is informed of the operating status of the other control unit,

[0036] - in case of failure of the first control unit, the second control unit controls both parking brakes.

[0037] BRIEF DESCRIPTION OF THE FIGURES

[0038] The following description will be better understood with the help of the attached drawings, in which:

[0039] - figure 1 is a schematic representation of a motor vehicle equipped with a braking system,

[0040] - figure 2 is a schematic representation of an exemplary embodiment of the control part of the parking brake system according to the first embodiment,

[0041] - figure 3 is a schematic representation of another exemplary embodiment of the control part of the parking brake system according to the first embodiment,

[0042] - Figure 4 is a schematic representation of the connection between the control units and the parking brakes according to the second embodiment,

[0043] - figure 5 is a schematic representation of an exemplary embodiment of the control part of the parking brake system according to a second embodiment,

[0044] - Figure 6 is a schematic representation of another example of embodiment of the control part of the parking brake system according to the second embodiment.

[0045] DESCRIPTION OF DETAILS OF EMBODIMENTS In the following description, the activation of a parking brake and the activation of the parking brake actuator are synonymous.

[0046] In this application, "normal operation" or "normal state" of the braking system means a state in which both control units are functional and can safely control the parking brake(s).

[0047] A "failed operation" or "failed state" of a control unit means a condition in which a control unit is considered no longer capable of safely controlling the parking brake(s).

[0048] In Figure 1, we can see a vehicle V, represented schematically, comprising a braking system S comprising brakes F equipping each wheel.

[0049] Hydraulic brakes generally provide service braking. Alternatively, the service brake and parking brake are electric brakes. For example, an electric brake provides service and parking braking for at least one axle.

[0050] The braking system also comprises a parking brake device comprising at least a first parking brake FP1 at the right rear wheel and a second parking brake FP2 at the left rear wheel.

[0051] The FP1 and FP2 parking brakes are electric parking brakes.

[0052] Advantageously, the parking brake is integrated into the service brake.

[0053] Each electric parking brake comprises an actuator equipped with an electric motor and means for converting the rotational movement of the electric motor into a translational movement applying the brake pads against the brake disc or the brake linings against the drum.

[0054] The braking system advantageously includes an ABS and / or ESP (slip control and / or trajectory control) calculator.

[0055] According to the invention, the braking system comprises two electronic control units or ECUs (Electronic control unit in English terminology) ECU1 and ECU2, also called microcontrollers, intended in particular to control the actuation of the parking brakes FP1 and FP2. In an exemplary embodiment, the two control units may belong to a central control unit of the vehicle.

[0056] In Figure 2, an example according to a first embodiment of the control part of a parking braking system of an SI braking system can be seen.

[0057] The braking system SI also comprises means C providing information on the right rear wheel and on the left rear wheel, for example one or more sensors (WSS or Wheel speed sensor in English terminology), the signals of which are transmitted to the control units. In addition, it comprises means B for controlling the parking brakes. In one example, this is a button or lever in the passenger compartment operated by the user and by which the user sends an order to activate the parking and / or emergency braking. Activation is then controlled manually. In another example, activation is automatic and is controlled for example when the ignition is switched off.

[0058] Each ECUI, ECU2 control unit includes software for controlling and managing the parking brake actuators or controllers, designated SFW1, SFW2 respectively.

[0059] In addition, each ECUI, ECU2 control unit has an interface software SFW1', SFW2' which manages the parking brake application control information and transmits it to the software SFW1, SWF2 respectively.

[0060] According to the first embodiment, in normal operation each control unit ECUI, ECU2 manages a parking brake independently.

[0061] In this example, ECU1 control unit manages the parking brake of the right rear wheel and ECU2 control unit manages the parking brake of the left rear wheel.

[0062] In this example, the SFW1 and SFW2 control software are identical, and in this example, the SFW1 and SFW2 software are configured to activate the parking brake of the right and left rear wheel respectively.

[0063] Each SFW1 and SFW2 software includes several input ports and several output ports. In the example of Figure 2, each software has an input port INI that transmits information relating to the right wheel, an input port IN2 that transmits information relating to the left wheel. Each software also has an input port IN3 receiving the parking brake activation / deactivation instructions provided by the SFW1', SFW2' software, and an input port IN4 for information on the power consumption of the parking brake actuator motor of the right rear wheel and an input port IN5 for information on the power consumption of the parking brake actuator motor of the right rear wheel. It will be understood that the software may have other input ports.

[0064] Each software also has an output port OUT1 for controlling the right wheel parking brake actuator and an output port OUT2 for controlling the left wheel parking brake actuator, and an output port OUT3 for the activation status of the parking brake system.

[0065] In this embodiment, the input port IN5 and the output port OUT2 of the software SFW1 and SFW2 which are configured for controlling the right parking brake are disabled.

[0066] Furthermore, the SFW1 software receives the information on the right and left wheels supplied to the INI and IN2 ports and, from this information and the order to activate or deactivate the right parking brake supplied on the IN3 port, generates instructions to the right parking brake.

[0067] The SFW2 software is intended to control the left parking brake. In order for the SFW2 software to send correct instructions to the left parking brake, the information on the INI and IN2 inputs is swapped, so that it receives information about the left wheel on INI and information about the right wheel on IN2. The instructions thus generated will therefore be adapted to the left parking brake.

[0068] In this example, the SFW1 and SFW2 software programs are capable of managing both parking brakes but are only used for one parking brake. It is then possible to use existing software implemented in a control unit managing two parking brakes. Alternatively, the software programs are written to manage only one brake, in which case their size is reduced. An example of the operation of the SI braking system will now be described.

[0069] In normal operation, when the user applies a parking brake command, both electric parking brakes are actuated. For example, the user presses button B located in the passenger compartment and an order is sent to the two control units ECU1 and ECU2, this instruction via the software SFW1', SFW2' is sent to the IN3 input of each of the software SFW1 and SFW2. In addition, the software is fed at the INI and IN2 inputs with the information on the right and left wheels. From this data, an order is generated which is sent by each software to each brake actuator via the OUT2 output port.

[0070] Information on the value of the electric current in the motor of each actuator is sent to the software via the input port IN4 allowing the software to know whether the parking brake is applied or not. This information is returned via the output port OUT2 to the software SFW1', SFW2' which informs the user that the parking brake is active, for example by means of an indicator light.

[0071] When a parking brake command is sent to both control units and a fault occurs in ECU1, no instruction is sent to the right wheel parking brake. ECU2 operates normally and activates the left parking brake. Conversely, if ECU2 is faulty, the left parking brake is not activated. ECU1 operates normally and the right parking brake is activated.

[0072] According to an advantageous variant, the braking system SI comprises means of communication between the two control units so that each control unit is informed of the failure of the other control unit and the non-failing control unit can possibly adapt its control and the clamping force applied by the parking brake that it manages.

[0073] Each parking brake being configured to ensure the immobilization of the vehicle alone, according to this example, by activating a single parking brake the immobilization of the vehicle is ensured. Thanks to the invention, in the event of failure of one of the control units, the immobilization of the vehicle is ensured and the safety of the occupants of the vehicle and of the people around is ensured.

[0074] The user is unaware that only one of the parking brakes is activated and that one of the control units is faulty. A message about the fault of one of the control units can be sent to the user in the form of an alert signal requesting that a garage check be carried out. Alternatively, the vehicle can be immobilized until a garage check has taken place.

[0075] Alternatively and preferably, provision is made to check the operating status of the control units upon restart and if no fault is detected, the braking system is considered functional and the user can use his vehicle normally.

[0076] In Figure 3, another example of the control part of the parking brake system of a braking system S2 according to the first embodiment can be seen.

[0077] Both SFW1 and SFW2 control software are identical. They are configured to be able to control both parking brakes.

[0078] In this example, the SFW1 interface software, which cooperates with the SFW1 software controlling the right parking brake actuator, is configured to inform the SFW1 software that the left parking brake actuator is unavailable. This information, designated UNVL, is provided to the SFW1 software by an input port IN4. Thus, the SFW1 software only controls the right parking brake actuator.

[0079] Similarly, the SFW2' interface software, which cooperates with the SFW2 software controlling the left parking brake actuator, is configured to inform the SFW2 software that the right parking brake actuator is unavailable. This information, designated UNVR, is provided to the SFW2 software by an input port IN4. Thus, the SFW2 software only controls the left parking brake actuator. In this example, all the OUT1 and OUT2 outputs to the actuators are active, however, only the outputs corresponding to the brake declared as available by the SFW1' or SFW2' software are used.

[0080] The operation of the braking system is similar to that of the S2 system.

[0081] In this first embodiment, in the event of failure of one of the control units, only one of the parking brakes is activated. Each parking brake alone can ensure the immobilization of the vehicle on a slope of, for example, up to 8%. However, certain dynamic safety functions, which are only available when both parking brake actuators are functional, are not available.

[0082] The SI and S2 braking systems have the advantage of using the same software to control the parking brake actuators. However, a braking system in which each software is adapted to control either the left parking brake or the right parking brake would not go beyond the scope of the present invention.

[0083] Furthermore, since the control units are only intended to manage one parking brake, their computing power may be reduced compared to control units permanently managing two parking brakes.

[0084] Furthermore, since in normal operation each parking brake is controlled by its own control unit, there is no time lag between the start of the right parking brake motor and the left parking brake motor.

[0085] In Figure 4, a schematic representation of the connections between the control units and the parking brakes according to a second embodiment can be seen. In this second embodiment, the control units ECU1 and ECU2 are such that they can control both parking brakes simultaneously. The braking system according to the second embodiment has an H-shaped connection structure between the two control units and the two parking brakes, the connections being operational depending on the operating state of each of the control units. The parking brake system S3 further comprises communication means 2 between the two control units allowing each of the control units to know the operating state of the other control unit. Thus the control unit ECU2 is directly informed of a failure of the control unit ECU1 and can take over.

[0086] Conversely, if the ECU1 control unit is informed of a failure of the ECU2 control unit, it can issue a preventive alert signal.

[0087] The means of communication 2 between the two control units are for example a private multiplexing network of the local Interconnected network type or LIN bus (Local Interconnect Network in English terminology), a CAN bus (Control Area Network in English terminology), a synchronous serial data bus or SPI bus (Serial Peripheral Interface in English terminology) or an I2C bus (Inter-Integrated Circuit in English terminology).

[0088] The means of communication ensure a periodic exchange of messages between the control units allowing a periodic verification of the operating status of the two control units.

[0089] The braking system preferably comprises switching means 4 making it possible to short-circuit the faulty control unit and allow the other control unit to manage the actuators.

[0090] As for the first embodiment, the control software SFW1 and SFW2 are advantageously identical.

[0091] Preferably, the braking system according to the second embodiment comprises means 6 for isolating the faulty control unit and preventing instructions issued by the faulty control unit from overlapping the instructions issued by the control unit taking over. For example, the isolation means comprise an isolation switch, advantageously a transistor, and even more advantageously a MOSFET transistor. In Figure 5, an example of the control part of a parking braking system of a braking system S3 according to a second embodiment can be seen, also comprising two control units ECU1 and ECU2.

[0092] The S3 parking brake system is configured so that one of the ECU1 control units manages the parking brakes during normal operation, and if the ECU1 control unit fails, the ECU2 control unit takes over and manages both parking brakes. One of the control units thus forms a backup control unit.

[0093] An example of the operation of the S3 braking system will now be described.

[0094] In normal operation, the ECU1 control unit is considered to be working. When the user presses the parking brake button, the command is sent to the SFW1' interface software, which transmits the request to the SFW1 software controlling the left and right wheel brake actuators. The brake actuators are activated, feedback is given to the SFW1 software, which informs the SFW1' software, which sends a signal to the user, for example by lighting an indicator light.

[0095] In Figure 5, the cross symbolizes the fact that in normal operation only the ECU1 control unit controls the parking brakes.

[0096] Periodically, the two control units ECU1 and ECU2 communicate with each other, allowing each to know the operating status of the other control unit. This communication also takes place outside of braking phases.

[0097] If a fault occurs in the ECU1 control unit, the ECU2 control unit takes control and ensures the activation of both parking brake actuators and the ECU1 control unit is isolated to prevent signals from being sent to the actuators by both the ECU2 and ECU1 control unit.

[0098] This embodiment has the advantage of fully ensuring braking safety, since even in the event of a failure, parking braking by both parking brakes is ensured normally. However, it has a large number of connections due to the connection between each control unit and the two parking brakes and between the two control units.

[0099] An alert signal can be sent to the user informing the ECU1 unit of failure.

[0100] Preferably, upon restart if the failure of the ECU1 control unit is no longer detected, the braking system returns to its initial configuration, and it is the ECU1 control unit that controls the parking brake.

[0101] If the ECU1 control unit fault persists, an information message may be sent to the user requesting to schedule a brake system check.

[0102] In Figure 6, another example of the control part of a parking brake system of a braking system S4 according to the second embodiment can be seen, which differs from the system S3 in that in normal operating mode, each control unit ECUI, ECU2 controls one parking brake, and in failure mode of one of the control units ECUI, ECU2, the other unit controls both parking brakes.

[0103] In normal operation, both control units ECU1 and ECU2 operate normally. When the user presses the parking brake button, the command is sent to the SFW1' and SFW2' software, which transmit the request to the SFW1, SFW2 software controlling the left and right wheel brake actuators, respectively. The brake actuators are activated, feedback is given to the SFW1 and SFW2 software, which inform the SFW1' and SFW2' software, which in turn send a signal to the user, for example by lighting up an indicator light. The operation of the ECU1 and ECU2 control units without failure is similar to those in Figures 2 and 3. In Figure 6, crosses symbolize the fact that in normal operation the control units only control one brake.

[0104] Periodically, the two control units ECU1 and ECU2 exchange data with each other, allowing each to know the operating status of the other control unit, i.e., their available or unavailable status. This communication also takes place outside of braking phases. The information exchanges take place, for example, every 10 ms. For example, in the case of CAN communication between the control units, a data transfer rate of 500 kbps can be established.

[0105] If a fault occurs in either of the ECUI, ECU2 control units, the other control unit takes control of both brake actuators and manages the actuation of the parking brake actuators and the faulty control unit is isolated to prevent signals from being sent to the actuators by both the ECU2 and ECU1 control unit.

[0106] The S4 braking system has the advantage of ensuring complete braking safety, since even in the event of a failure, parking braking by both parking brakes is ensured normally. However, it has a large number of connections due to the connection between each control unit and the two parking brakes and between the two control units.

[0107] Furthermore, since in normal operation each parking brake is controlled by its own control unit in the S4 system, there is no time lag between the start of the right parking brake motor and the left parking brake motor.

[0108] The second embodiment has the advantage of being able to maintain all safety functions both static and dynamic, since both parking brakes are activated normally even in the event of failure of one of the control units. In addition, it has the advantage of avoiding immobilization of the vehicle since it allows the opening of the parking brakes even if one of the control units is faulty.

[0109] A braking system having four electric parking brakes is not outside the scope of the present invention. In one example, the braking system has two control units, each controlling and managing two electric parking brakes and in the event of failure of one of the control units, the braking system is configured so that the other control unit manages only two parking brakes in a manner similar to the first embodiment, or controls all four parking brakes in a manner similar to the second embodiment.

[0110] The present invention applies both to hydraulic service brakes equipped with an electric parking brake EPB (or electrical parking brake in English terminology) and to electric brakes providing service and / or parking braking EMB (or electro mechanical brake in English terminology).

[0111] In the case of autonomous vehicles, i.e. a motorized vehicle capable of moving without human intervention, information about the failure of one of the control units is sent to the vehicle's central controller, which will decide whether to issue a signal and / or immobilize the vehicle.

[0112] References

[0113] 2: means of communication

[0114] 4: switching means

[0115] 6: means of insulation

[0116] C: means of providing information

[0117] V: vehicle

[0118] S, SI, S2, S3, S4: braking systems

[0119] F: brakes

[0120] FP1: first parking brake

[0121] FP2: second parking brake

[0122] ECUI, ECU2: electronic control units

[0123] B: means of control

[0124] SFW1, SFW2: control and management software

[0125] SFW1', SFW2': interface software

[0126] INI, IN2, IN3, IN4, IN5: input ports

[0127] OUT1, OUT2, OUT3: output port

[0128] UNVL: ​​left parking brake unavailable information

[0129] UNVR: Right parking brake unavailable information

Claims

CLAIMS 1. Braking system for a motor vehicle comprising at least two electrically actuated parking brakes (FP1, FP2) each intended to be positioned at a wheel, means for controlling the parking brakes, at least two control units (ECUI, ECU2) for the parking brakes, each control unit (ECUI, ECU2) being configured to control at least one parking brake following receipt of an instruction by the control means, and in the event of failure of the other control unit to control at least one of the parking brakes following receipt of an instruction by the control means, in which each control unit (ECUI, ECU2) comprises control software (SFW1, SFW2) for a parking brake and in which the software (SFW1, SFW2) of the two control units (ECUI, ECU2) are identical.

2. Braking system according to claim 1, wherein each control unit (ECUI, ECU2) is configured to control a single parking brake (FP1, FP2), and wherein the software environment is configured so that the instructions issued by each software (SFW1, SFW2) are only transmitted to the associated parking brake.

3. Braking system according to claim 1, wherein each control unit (ECUI, ECU2) is configured to control a single parking brake (FP1, FP2), and wherein the software environment is configured so that the parking brake, which is not controlled by said software, is declared for said software as unavailable.

4. Braking system according to claim 1, wherein each control unit (ECUI, ECU2) is configured to control the two parking brakes (FP1, FP2), said system comprising communication means (2) between the two control units (ECUI, ECU2), so that each of the control units (ECUI, ECU2) is informed of the operating status of the other control unit (ECU2, ECU1).

5. Braking system according to the preceding claim, in which the communication means (2) are configured to establish the periodic sending of messages between the two control units (ECUI, ECU2).

6. Braking system according to claim 4 or 5, wherein the first control unit (ECUI, ECU2) is configured to control both parking brakes (FP1, FP2) and wherein the second control unit is configured to control both parking brakes, when the first control unit is considered to be faulty.

7. A braking system according to claim 4 and 5, wherein the first control unit is configured to control one parking brake and the second control unit is configured to control the other parking brake, and wherein each of the control units is configured to control both parking brakes when the other control unit is considered to be faulty.

8. Braking system according to claim 7, wherein each control unit comprises a first electrical connection to one of the parking brakes which it controls in normal operation, and wherein the braking system comprises switching means (4), so as to establish a second electrical connection between the non-faulty control unit and the electric parking brake normally controlled by the faulty control unit.

9. Braking system according to one of claims 4 to 8, in which the braking system comprises means for isolating the faulty control unit.

10. Braking system according to one of claims 4 to 9, in which the communication means (2) comprise a private multiplexing network of the LIN bus, CAN bus, SPI bus or I2C bus type.

11. Method of operating a braking system according to claim 7: - in normal operation each control unit controls a parking brake, and an exchange of information is established between the first control unit and the second control unit so that each control unit is informed of the operating status of the other control unit, - if one of the control units fails, the other control unit controls both parking brakes.

12. A method of operating a braking system according to claim 6, wherein: - in normal operation the first control unit controls both parking brakes, and an exchange of information is established between the first and second control units so that each control unit is informed of the operating status of the other control unit, - in case of failure of the first control unit, the second control unit controls both parking brakes.

Citation Information

Patent Citations

  • Brake redundancy backup system suitable for automatic driving, and brake method

    CN111942349A

  • Electron parking control system with redundant parking function

    CN207725389U

  • Parking system and vehicle

    CN210212351U

  • Distributed electric park brake control

    EP3741634A1

  • Parking brake system for a vehicle

    US20150203082A1