Method for monitoring transitions of the operating modes of a motor vehicle, on-board system for a motor vehicle, motor vehicle equipped with such a system

Abstract

The present invention relates to a method for monitoring transitions of the operating modes of a motor vehicle, the motor vehicle being equipped with an on-board system, the on-board system being based on a centralised electronic / electrical architecture and comprising an electronic central management unit (UC) controlling a plurality of operating modes (F) of the vehicle with transitions (T) from one operating mode to another depending on the events of the motor vehicle and at least one memory, referred to as the forbidden transition memory (M), storing at least one datum representative of a forbidden transition (T). Such a method consists in monitoring the transition data in order to be able to detect a forbidden transition (T) by comparing each transition datum with the one or more forbidden transition data stored in the forbidden transition memory (M), and consists, in the event that a forbidden transition is detected, in ordering an authorised transition to a fail-safe operating mode. The invention further relates to such an on-board system and to such a motor vehicle.

Description

Description Title of the invention: Method for monitoring transitions of operating modes of a motor vehicle, on-board system for a motor vehicle, motor vehicle equipped with such a system

[0001] [The present invention relates to the field of motor vehicles and more particularly to systems embedded in these vehicles. It relates to a method for monitoring transitions of operating modes of a motor vehicle. It also relates to an embedded system for a motor vehicle and a motor vehicle equipped with such an embedded system.

[0002] In this application, a motor vehicle (or vehicle) means any motorised mobile machine or motorised land vehicle travelling on the ground and used for the transport of persons and / or goods, other than those travelling on railways. Such a motor vehicle is equipped with a combustion engine, an electric motor or a hybrid engine.

[0003] In the automotive industry, particularly to address issues of safety, performance, comfort and communication, manufacturers have equipped vehicles with embedded systems incorporating more and more electronics and IT.

[0004] Such an embedded system makes it possible to manage functions related to different areas of operation of the motor vehicle such as, for example, engine operation, cruise control, geographical positioning of the motor vehicle, driving assistance, battery charging (in the case of an electric motor vehicle) or even braking of the motor vehicle. The embedded system includes numerous computers (generally known by the English acronym ECU "Electronic Control Unit") to manage these functions, a computer generally managing a function, actuators controlled by the computers to physically execute the or certain functions and sensors to control the operation of the actuators. To enable communication between the different components (calculators, sensors, actuators) of the embedded system, this also includes a communication network, generally a CAN bus type communication network (English acronym for “Controller Area Network”), or Ethernet, allowing, between these components, a high speed of communication with a large quantity of data. Such a calculator contains one or more electronic card(s) and the programs / software to be implemented to carry out the corresponding functions, in particular according to the data transmitted to it by the sensors and / or other calculators.

[0005] Furthermore, to control these functions as closely as possible in order, in particular, to reduce the number of electrical cables in the motor vehicle and to improve the data transmission speed, the on-board systems are based on a centralized electronic / electrical architecture and include a central electronic management unit for controlling several operating modes of the vehicle by implementing / executing instructions from one or more software programs (or computer programs). Such on-board systems are generally organized according to a zonal distribution, also including electronic interfaces connected to the central electronic unit and making it possible to manage a specific zone of the vehicle via one or more of said computers.

[0006] These operating modes are organized according to a succession by level of operating modes, generally between a basic level where the vehicle is in a low consumption operating mode up to a higher level where the vehicle is in an operating mode where it is running and moving. The transition (or change) from one operating mode to another is managed by the central electronic management unit according to vehicle events.

[0007] However, with these embedded systems, a software and / or hardware problem can lead to a failure and a dangerous situation. Indeed, certain transitions, called prohibited transitions, which are not authorized, can still occur during such a software or hardware problem, and lead to such a dangerous situation, this is the case, for example, of a transition from an operating mode in which the vehicle is running and traveling / rolling to a operating mode in which the vehicle is immobilized by the parking brake or parking system.

[0008] The present invention aims to overcome these drawbacks.

[0009] To this end, the present invention relates to a method for monitoring transitions of the operating modes of a motor vehicle, the motor vehicle being equipped with an on-board system, the on-board system based on a centralized electronic / electrical architecture and comprising a central electronic management unit controlling a plurality of operating modes of the motor vehicle with transitions from one operating mode to another as a function of events in the motor vehicle and at least one memory, called a memory of prohibited transitions, storing at least one data item representative of a prohibited transition, each transition from one operating mode to another in a succession by level of these operating modes being defined by a transition data item, characterized in that it consists of implementing the following steps by means of the central electronic management unit:

[0010] - monitoring the transition data to be able to detect a prohibited transition by comparing each transition data to the prohibited transition data or data stored in the prohibited transition memory,

[0011] - in the event of detection of a prohibited transition: order an authorized transition to a refuge operating mode.

[0012] The present invention also relates to an on-board system for a motor vehicle, the on-board system based on a centralized electronic / electrical architecture and comprising a central electronic management unit making it possible to control a plurality of operating modes of the motor vehicle with transitions from one operating mode to another as a function of events in the motor vehicle, characterized in that it further comprises at least one memory, called a prohibited transition memory, storing at least one item of data representative of a prohibited transition, each transition from one operating mode to another in a succession by level of these operating modes being defined by a piece of transition data and in that the central electronic management unit is configured:

[0013] - to monitor the transition data so that a prohibited transition can be detected by comparing each transition data to the prohibited transition data or data stored in the prohibited transition memory

[0014] - in the event of detection of a prohibited transition: to command an authorized transition to a refuge operating mode.

[0015] The present invention also relates to a motor vehicle equipped with an on-board system, the on-board system based on a centralized electronic / electrical architecture and comprising a central electronic management unit making it possible to control a plurality of operating modes of the motor vehicle with transitions from one operating mode to another depending on events in the motor vehicle, characterized in that the on-board system consists of an on-board system according to the present invention.

[0016] The invention will be better understood from the following description, which relates to a preferred embodiment, given as a non-limiting example, and explained with reference to the appended schematic drawings, in which:

[0017] [Single Fig.] is a partial schematic representation of an embedded system according to the present invention.

[0018] The single figure schematically and partially shows an on-board system according to the present invention based on a centralized electronic / electrical architecture and comprising a central electronic management unit UC making it possible to control a plurality of operating modes F of the motor vehicle with transitions T from one operating mode to another depending on the events of the motor vehicle.

[0019] These operating modes are organized according to a succession by level of operating modes, for example, as can be seen in the single figure, according to the following succession by level, from a basic level where the motor vehicle is in low consumption to a higher level where the vehicle is running and rolling:

[0020] - an operating mode called “LOW CONSUMPTION” (or “STAND BY” or “LOW POWER”), in which the motor vehicle is in low consumption, that is to say in a sort of "sleeping" state waiting to be "awakened",

[0021] - an operating mode called “PARKING” (or “PARK”), in which the driver is absent from the motor vehicle and the human machine interfaces (HMI) are switched off (not activated),

[0022] - an operating mode called “LIFE ON BOARD”, in which the driver is present in the motor vehicle and can activate various functions such as, for example, the HMI interface, namely, for example, the multimedia system (screen, operating system, GPS navigator and other multimedia functionalities) or the thermal system ensuring the thermal comfort of the motor vehicle,

[0023] - an operating mode called “DRIVING PREPARATION” or “POWER ON” mode, in which the driver is present and installed in the motor vehicle,

[0024] - an operating mode, called “DRIVING” or “MISSION” mode (or in English “TRACTION ON”), in which the parking brake or handbrake used to immobilize the motor vehicle when stationary is released (not activated) and the motor vehicle is running and moving.

[0025] We can also see in the figure an operating mode called “UPDATE” mode inserted between the “PARKING” and “LIFE ON BOARD” modes.

[0026] The present invention is obviously not limited to this example of operating modes and its organization in a succession by level as illustrated, nor to the terms given to each of these operating modes. The present invention can be implemented with other operating modes and / or organizations, or with operating modes added to or removed from those described previously and illustrated by the single figure.

[0027] To control a transition from one operating mode to another, the central electronic management unit UC executes, based on the data it receives (events in the motor vehicle), instructions control of software or a computer program stored in a memory of the on-board system. The control has the effect of controlling one or more functions of the motor vehicle allowing the implementation of the operating mode in which the vehicle must be placed. Such an on-board system may further comprise (not shown in the attached figures):

[0028] - actuators allowing the controlled functions to be physically executed and computers (not shown in the attached figures) connected to the central electronic management unit UC,

[0029] - sensors to control the operation of the actuators,

[0030] - a communication network, for example of the CAN bus type (English acronym for “Controller Area Network”) or Ethernet, allowing, between the components (electronic central management unit, computers, actuators, sensors) of the on-board system, high speed communication with a large quantity of data.

[0031] Furthermore, to control these functions as closely as possible in order, in particular, to reduce the number of electrical cables in the motor vehicle and to improve the data transmission speed, the on-board system may include electronic management (or distribution) interfaces. These electronic management interfaces are generally known by the English acronym PIU "Physical Interface Unit" and connect each computer to the central electronic management unit UC. Each electronic management interface is dedicated to a specific area of ​​the motor vehicle, the functions of which it manages via one or more computers.

[0032] These components of such an on-board system are known to those skilled in the art and are not described in more detail in the present invention.

[0033] If we refer again to the single figure, we can see more particularly the T transitions managed by the electronic central unit UC, that is to say controlled by the latter, and in particular the authorized T transitions represented by continuous line arrows. We can also see prohibited T transitions represented by broken line arrows, that is to say transitions which must not be executed by the central unit UC electronic management systems because they can lead to dangerous situations. These prohibited T transitions can occur during a failure of the software (or at least one of the software) and / or the hardware of the embedded system.

[0034] To avoid these dangerous situations created by at least one prohibited transition which would nevertheless be executed due to such a failure problem, the embedded system according to the present invention makes a technical contribution by further comprising, in accordance with the present invention, at least one memory, called prohibited transition memory M, storing at least one data item representative of a prohibited transition, each transition T from one operating mode to another in a succession by level of these operating modes being defined by a transition data item. Furthermore, still in accordance with the present invention, the central electronic management unit UC is configured:

[0035] - to monitor the transition data so as to be able to detect a prohibited transition by comparing each transition data with the prohibited transition data or data stored in the prohibited transition memory M,

[0036] - in the event of detection of a prohibited transition: to command an authorized transition to a refuge operating mode.

[0037] A refuge operating mode is understood to mean an operating mode in which the motor vehicle is in a safe or secure state. Such a refuge operating mode is stored / recorded in a memory of the on-board system, in particular in a memory of the central electronic management unit UC.

[0038] It is understood that the command in the refuge operating mode is carried out instantly by the central electronic management unit upon detection of the prohibited transition in order to immediately secure the motor vehicle.

[0039] Thus, we can see, in the succession by level of the operating modes as illustrated, the following prohibited transitions:

[0040] - the transition from “DRIVING” mode to “PARKING” or “UPDATE” mode,

[0041] - the transition from “DRIVING” mode to “LOW CONSUMPTION” mode.

[0042] If any of these three prohibited transitions illustrated in the single figure occurs, it will be immediately detected by the central electronic management unit UC which will instantly command, following this detection, the transition into the refuge operating mode.

[0043] In a preferred embodiment, the refuge operating mode may be the previous operating mode that can be reached by an authorized transition. Referring again to the single figure, it can be seen that, in the case where the motor vehicle is in the "DRIVING" mode, the previous operating mode that can be reached by an authorized transition may then be the "DRIVING PREPARATION" mode which is, in this illustrated case, that of the immediately lower level.

[0044] The present invention also relates to a method for monitoring transitions of the operating modes of a motor vehicle. The on-board system consists of such an on-board system, according to the present invention, as described previously. Such an on-board system according to the present invention allows the implementation of the method.

[0045] According to the present invention, such a method consists of implementing the following steps by means of the central electronic management unit UC:

[0046] - monitoring the transition data to be able to detect a forbidden transition T by comparing each transition data to the forbidden transition data or data stored in the forbidden transition memory M, and

[0047] - in the event of detection of a prohibited transition: order an authorized transition to a refuge operating mode.

[0048] As seen previously, the refuge operating mode can be the previous operating mode authorized in a succession by level of the permitted operating modes, for example in the level-based sequence of permitted operating modes illustrated in the single figure.

[0049] The present invention also relates to a motor vehicle equipped with an on-board system based on a centralized electronic / electrical architecture and comprising a central electronic management unit UC making it possible to control a plurality of operating modes F of the motor vehicle with transitions T from one operating mode to another depending on the events of the motor vehicle. In accordance with the present invention, the on-board system consists of an on-board system according to the present invention.

[0050] The present invention also relates to a computer program comprising instructions which, when the program is executed by a computer, cause the latter to implement the steps of the method according to the present invention. The computer is constituted by the central electronic management unit UC.

[0051] Of course, the invention is not limited to the embodiment described and shown in the attached drawings. Modifications remain possible, in particular from the point of view of the constitution of the various elements or by substitution of technical equivalents, without departing from the scope of protection of the invention.

Claims

Claims

1. [Method for monitoring transitions of the operating modes of a motor vehicle, the motor vehicle being equipped with an on-board system, the on-board system based on a centralized electronic / electrical architecture and comprising a central electronic management unit (UC) controlling a plurality of operating modes (F) of the motor vehicle with transitions (T) from one operating mode to another as a function of the events of the motor vehicle and at least one memory, called a prohibited transition memory (M), storing at least one data item representative of a prohibited transition (T), each transition (T) from one operating mode to another in a succession by level of these operating modes being defined by a transition data item, characterized in that it consists of implementing the following steps by means of the central electronic management unit (UC): - monitoring the transition data to be able to detect a forbidden transition (T) by comparing each transition data to the forbidden transition data or data stored in the forbidden transition memory (M), and - in the event of detection of a prohibited transition: order an authorized transition to a refuge operating mode.

2. Monitoring method according to claim 1, characterized in that the refuge operating mode is the previous operating mode which can be reached by an authorized transition.

3. A computer program comprising instructions which, when the program is executed by a computer, cause the latter to implement the steps of the method according to claim 1 or 2 and in that the computer is constituted by the electronic central management unit (UC).

4. On-board system for a motor vehicle, the on-board system based on a centralized electronic / electrical architecture and comprising a central electronic management unit (UC) making it possible to control a plurality of operating modes of the motor vehicle with transitions (T) from one operating mode to another depending on the events of the motor vehicle, characterized in that it further comprises at least one memory, called a prohibited transition memory (M), storing at least one data item representative of a prohibited transition, each transition (T) from one operating mode to another in a succession by level of these operating modes being defined by a transition data item and in that the central electronic management unit (UC) is configured: - to monitor the transition data so as to be able to detect a forbidden transition (T) by comparing each transition data with the forbidden transition data or data stored in the forbidden transition memory (M), - in the case of detection of a prohibited transition (T): to command an authorized transition (T) to a refuge operating mode.

5. Embedded system according to claim 4, characterized in that the refuge operating mode is the previous operating mode which can be reached by an authorized transition.

6. Motor vehicle equipped with an on-board system, the on-board system based on a centralized electronic / electrical architecture and comprising a central electronic management unit (UC) making it possible to control a plurality of operating modes of the motor vehicle with transitions (T) from one operating mode to another depending on the events of the motor vehicle, characterized in that the on-board system consists of an on-board system according to any one of claims 4 to 5.

Images