Brake System Sensor Redundancy via Asymmetric ECU Architecture
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing brake systems with three sensors fail to ensure redundancy when two sensors are in an abnormal state, as it is not possible to specify a normal detection signal without identifying the faulty sensor.
Innovation Solution
A brake system with four or more sensors, including a first electronic control unit connected to three sensors and a second electronic control unit connected to two sensors, which determines the normality of sensors and controls the brake circuit based on the operation amounts detected by functioning sensors.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If three sensors are used in the brake system, then the device complexity is reduced, but the reliability deteriorates because redundancy cannot be ensured when two sensors are abnormal
Solution Approach 1:
The patent applies asymmetry by creating an unbalanced sensor distribution between two electronic control units. The first ECU is connected to three sensors while the second ECU is connected to only two sensors. This asymmetric configuration allows the system to maintain reliability even when two sensors are abnormal, as the first ECU can still determine normal operation amounts using its three sensors. The asymmetric design resolves the contradiction by enabling redundancy without requiring a symmetric increase in total sensor数量.
Solution Approach 2:
The patent introduces a new dimension to the sensor system by dividing sensors into different groups connected to different ECUs. Instead of a single centralized sensor system, the patent creates a multi-dimensional architecture where sensors are distributed across multiple control units. This dimensional change allows the system to achieve redundancy through architectural diversity rather than simply increasing the total number of sensors linearly.
2Reliability
If four or more sensors are used in the brake system, then the reliability is improved by ensuring redundancy, but the device complexity increases
Solution Approach 1:
The patent applies segmentation by dividing the sensor system into distinct groups connected to different electronic control units. The four or more sensors are segmented such that three sensors connect to the first ECU and two sensors connect to the second ECU. This segmentation allows each ECU to independently evaluate sensor data, enabling the system to maintain reliability even with sensor failures. The segmentation strategy resolves the contradiction by organizing sensors into functional groups rather than a monolithic system.
Solution Approach 2:
The patent implements local quality by giving different sensor groups different roles and connection configurations. The first ECU with three sensors has the capability to determine normal operation amounts even when two sensors are abnormal, while the second ECU with two sensors serves as a backup or alternative control path. This local differentiation in sensor configuration and ECU capability allows the system to achieve overall reliability without uniformly increasing complexity across all system components.
3Reliability
If multiple electronic control units are used to process sensor data, then the reliability is improved through redundancy, but the device complexity increases
Solution Approach 1:
The patent segments the control function by dividing it across two electronic control units with different sensor connections. The first ECU processes data from three sensors and can determine normal operation amounts independently, while the second ECU processes data from two sensors. This segmentation of control functionality allows the system to achieve reliability through distributed control without requiring a single complex centralized control unit.
Solution Approach 2:
The patent applies partial action by having the first ECU with three sensors perform the primary function of determining normal operation amounts, while the second ECU with two sensors provides partial or backup control capability. The first ECU has excessive sensor input (three sensors) relative to what is minimally needed, which provides the redundancy necessary for reliable operation. This partial/excessive action strategy allows the system to achieve reliability control through asymmetric ECU capabilities rather than through symmetric duplication of all control functions.
Data Source
AI summary
To a first electronic control unit, three or more sensors excluding one predetermined sensor are connected. To a second electronic control unit, two sensors, which include one common sensor, of the three or more sensors, are connected. When the first electronic control unit does not determine that a sensor in a normal state is present among the three or more sensors, and the second electronic control unit determines that both of the two sensors are in the normal state, the electronic control unit controls the brake circuit based on the operation amount detected by at least one of the predetermined sensor or the common sensor.