Dual-ECU Redundant Brake Control for Driverless Reliability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing brake systems in highly automated vehicles lack redundancy and reliability, as they rely on a single electronic control circuit, leaving no means to substitute driver control in case of malfunction, especially when the driver is not present.
Innovation Solution
A redundant brake system design with dual electronic control units integrated into an air supply unit, each controlling service and park brake functions, ensuring that one unit can take over if the other fails, with integrated redundancy in power and communication systems to maintain effective braking.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a single electronic control circuit is used for brake control, then device complexity is reduced, but reliability deteriorates because there is no means to substitute control in case of malfunction
Solution Approach 1:
The brake control system is segmented into two independent electronic control units (ECU 1 and ECU 2), each capable of independently controlling brake functions. This segmentation allows one ECU to take over if the other fails, resolving the reliability issue while maintaining manageable complexity through modular design.
Solution Approach 2:
The system changes the operational parameters of the ECUs by enabling dynamic role switching. The first ECU can control both service and park brakes, while the second ECU can alternatively control both functions. This parameter change in control allocation ensures redundancy without permanently increasing structural complexity.
2Reliability
If dual electronic control units are implemented for redundancy, then reliability is improved, but device complexity increases
Solution Approach 1:
Both electronic control units are designed with universal functionality to control service brakes, park brakes, or both. This multi-functionality reduces the need for specialized components for each ECU, thereby limiting the increase in device complexity while achieving the desired reliability through redundancy.
Solution Approach 2:
The patent merges the control functions of service brakes and park brakes into a unified redundant control architecture where both ECUs can access and control all brake functions. This merging approach consolidates the system structure, preventing exponential complexity growth despite having dual control units.
3Ease of operation
If the driver interface is simplified or eliminated in highly automated vehicles, then ease of operation is improved, but reliability deteriorates as there is no driver backup for control malfunctions
Solution Approach 1:
The brake control system performs self-service through automated redundancy management. The electronic control units automatically detect failures and switch control functions without requiring driver intervention. This self-service capability eliminates the need for driver backup while maintaining reliability, thus resolving the contradiction between simplified interface and reliable control.
Data Source
AI summary
A brake system for a vehicle includes a first electronic control unit adapted for controlling service brake functionalities; a second electronic control unit adapted for controlling park brake functionalities; a first axle pressure modulator pneumatically connected to a service brake chamber associated with a first axle of the vehicle; a second axle pressure modulator pneumatically connected to a spring brake cylinder associated with a second axle of the vehicle; a park brake unit also pneumatically connected to spring brake cylinders associated with a second axle of the vehicle; and an air supply unit. The air supply unit is pneumatically connected to the first axle pressure modulator and the second axle pressure modulator. The first control unit is electronically connected to the first axle pressure modulator and the second axle pressure modulator. The second control unit is electronically connected to the first axle pressure modulator. The first electronic control unit and the second electronic control unit are integrated in the air supply unit.

