Vehicle Actuator Control with Redundant Signal Paths
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle control systems face challenges in maintaining continuous fail operational function due to communication errors between the command controller and the actuator driving controller, especially when only one signal path is provided, leading to potential actuator control failures even without failures in the control systems.
Innovation Solution
A vehicle control system configuration with multiple computation units and a diagnosis unit in the first controller, and an output unit in the second controller on the signal path, where multiple first control signals are supplied from the first controller to the second controller, allowing the second controller to output a second control signal based on the first control signals and diagnosis results, ensuring continued actuator control even with abnormality in one computation unit and enhancing survivability to communication errors.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple computation units are provided in the command controller to achieve fail operational function, then control continuity is improved when computation units fail, but the system becomes vulnerable to communication errors on the single signal path between command controller and actuator driving controller
Solution Approach 1:
The signal path is segmented into multiple independent communication channels between the command controller and actuator driving controller. Each computation unit has its own dedicated signal path, so that a communication error in one path does not affect other paths. This segmentation allows the system to maintain control continuity even when some signal paths experience communication errors.
Solution Approach 2:
The system transitions from a single-dimensional signal path architecture to a multi-dimensional redundant architecture. Multiple computation units and multiple signal paths are configured in parallel, creating additional dimensions of control channels. This dimensional expansion ensures that control can be maintained through alternative paths when communication errors occur in specific channels.
2Device complexity
If only one signal path is provided between command controller and actuator driving controller, then device complexity is reduced, but the fail operational function cannot be maintained when communication errors occur
Solution Approach 1:
The system pre-configures multiple computation units and multiple signal paths before any failure or communication error occurs. This preliminary redundancy preparation ensures that when a communication error happens, alternative computation units and signal paths are already available to maintain control, without requiring complex real-time reconfiguration.
Solution Approach 2:
The actuator driving controller serves as an intermediary that receives control signals from multiple computation units through multiple signal paths. It includes a selection unit that can choose from multiple incoming control signals based on their validity, acting as a mediator that ensures continuous control output even when some signal paths experience communication errors.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A first controller (300) includes a plurality of computation units (30) and a diagnosis unit (40). A second controller (400) is disposed on a signal path between the first controller (300) and an actuator (100), and includes an output unit (50). Each of the computation units (30) supplies a first control signal for controlling the actuator (100) to the output unit (50). The diagnosis unit (40) performs an abnormal diagnosis of each of the computation units (30). The output unit (50) outputs a second control signal for controlling the actuator (100) based on the first control signals supplied from the computation units (30) and diagnosis results of the computation units (30) obtained by the diagnosis unit (40).