Actuator Control Apparatus By-Wire Safety Prohibition
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing by-wire systems in vehicles lack sufficient safety measures during system abnormalities, such as noise-generated abnormal signals or source voltage lowering, as the actuator control is only prohibited after the monitor control circuit identifies issues, leading to potential unsafe conditions before detection.
Innovation Solution
An actuator control apparatus with a by-wire control circuit, a monitor circuit, a drive determination section, and a prohibition section, where the drive determination section and monitor circuit independently determine and enforce the prohibition of actuator driving, ensuring safety even when the by-wire control circuit is normal, and when vehicle speed exceeds a threshold to prevent malfunction.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the monitor control circuit monitors the by-wire system based on predetermined monitoring information, then the abnormality can be detected, but the actuator remains controllable before detection leading to insufficient safety
Solution Approach 1:
The control system is divided into two independent parts: the by-wire control circuit for normal actuator control and the monitor control circuit for safety monitoring. The prohibition section separates the permission-to-drive determination from the actuator control, creating an independent safety gate that prevents actuator operation when permission is not explicitly granted or when abnormalities are detected.
Solution Approach 2:
The drive determination section determines permission to drive the actuator in advance before the actuator actually operates. This preliminary determination of permission state creates a safety barrier that prevents actuator operation unless explicitly authorized, and the prohibition section maintains this prohibition until permission is clearly granted.
2Reliability
If the actuator control is prohibited only when abnormality is identified, then the system operates normally, but safety is insufficient during system abnormalities such as noise-generated abnormal signals
Solution Approach 1:
The prohibition section proactively prevents actuator operation by maintaining a default prohibition state until permission is explicitly granted by the drive determination section. This preliminary anti-action counteracts potential harmful effects of abnormal signals by ensuring the actuator cannot operate unless the permission state is clearly established, thereby preventing noise-generated false operations.
3Reliability
If the monitor circuit and drive determination section both enforce prohibition, then safety is improved, but the control system complexity increases
Solution Approach 1:
The monitor control circuit and by-wire control circuit share common components including the prohibition section and access to the permission state. The drive determination section serves both circuits by determining the permission state that both monitor and control functions rely upon, reducing overall system complexity while maintaining dual-function safety.
Data Source
AI summary
An actuator control apparatus including a by-wire control circuit, a monitor circuit, a drive determination section, and a prohibition section is provided. The by-wire control circuit electrically controls an actuator acting as a drive source of an on-board apparatus. The monitor circuit monitors whether or not the by-wire control circuit is normally operating. The monitor circuit is provided separately from the by-wire control circuit. The drive determination section determines prohibition and permission of driving the actuator. The prohibition section prohibits the actuator from being driven when the permission of driving the actuator is not determined by the drive determination section. The prohibition section also prohibits the actuator from being driven when the monitor circuit determines that the by-wire control circuit is not normally operating.