Two-Level ECU Circuit for Plausibility-Based Fault Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current fault detection systems in motor vehicles require complex and costly architectures for electronically controlled drive systems, leading to high development expenditures and inefficient security monitoring, particularly in ensuring compliance with ISO regulations for cross-linked systems.
Innovation Solution
A circuit arrangement in an electronic control unit structured into two levels, with a first function-controlling level and a second monitoring level, utilizing a plausibility block to detect faults by analyzing the relationship between the accelerator pedal position and desired longitudinal acceleration, and implementing fault detection programs to prevent unintended acceleration and wheel spinning.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a complex 3-level security concept is implemented for fault detection in each individual control unit, then reliability of fault detection is improved, but device complexity and development expenditures increase significantly
Solution Approach 1:
The system is segmented into two functional levels: a first level for function control and a second level for monitoring. This segmentation allows fault detection functionality to be distributed and integrated into existing control units without requiring a complete system redesign, thereby reducing overall device complexity while maintaining reliability.
Solution Approach 2:
The monitoring level is designed to universally monitor multiple drive functions across different control units through a standardized interface. Instead of implementing separate 3-level security concepts in each control unit, a single monitoring level provides multi-functional oversight, reducing device complexity and development expenditures.
2Measurement precision
If individual control units implement comprehensive self-diagnosis capabilities, then fault detection precision is improved, but development expenditures and programming costs increase
Solution Approach 1:
An intermediary monitoring level is introduced that receives signals from multiple control units and performs centralized fault analysis. This intermediary approach maintains high fault detection precision by dedicated monitoring logic while reducing development expenditures by avoiding duplication of complex diagnostic functionality across multiple control units.
3Reliability
If multiple monitoring levels and components are implemented across the drive system, then fault detection coverage is improved, but communication requirements and system integration complexity increase
Solution Approach 1:
Multiple monitoring functions are merged into a single monitoring level that oversees the entire drive system. This consolidation reduces communication architecture complexity by eliminating the need for separate communication channels between multiple independent monitoring components, while maintaining comprehensive fault detection coverage through centralized oversight.
Data Source
AI summary
In the case of a circuit arrangement in an electronic control unit of a motor vehicle for the detection of faults in an electronically controlled drive system, which is structured in at least two levels, a first function-controlling level and a second monitoring level, both levels acquire at least the accelerator pedal position as an input signal. The first level has a driver intention determination block for determining a quantity proportional to the desired longitudinal acceleration. The first level transmits this quantity as an input signal to a plausibility block of the second level. The plausibility block has at least one fault detection program, by which a fault can be detected when a defined correct relationship does not exist for a specified time period between the accelerator pedal position and/or the accelerator pedal position change with respect to the determined quantity proportional to the desired longitudinal acceleration—and this relationship is therefore implausible.