Vehicle ECU Alternate Paths for Safety Signal Failover
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional CAN communication protocols in vehicles are susceptible to malfunctions, leading to potential failures in safety-critical systems like airbags and brakes, and hardwiring ECUs increases costs and complexity.
Innovation Solution
Implementing alternate communication paths via non-CAN networks like LIN or Ethernet buses for safety-critical signals, using a supervisory ECU to monitor and reroute signals during CAN malfunctions, ensuring robust transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If hardwired connections are provided between ECUs to ensure reliable communication, then communication reliability is improved, but system complexity and cost increase
Solution Approach 1:
The system dynamically switches between CAN bus communication and alternate communication paths based on detected malfunction conditions. The supervisory ECU monitors communication status and activates alternate paths only when needed, making the system adaptable rather than statically complex.
Solution Approach 2:
A supervisory ECU acts as an intermediary that monitors CAN bus communication and manages alternate communication paths. This intermediary coordinates the switching between communication modes, reducing the need for complex direct hardwired connections between all ECU pairs.
2Reliability
If hardwired connections are provided between ECUs to ensure reliable communication, then communication reliability is improved, but cost increases
Solution Approach 1:
The system uses dynamic path selection based on malfunction detection, allowing reliable communication to be achieved through software-controlled switching rather than expensive redundant hardwired connections for all possible failure modes.
Solution Approach 2:
The system creates virtual alternate communication paths through the LIN bus or other available networks, copying the safety signal transmission function over existing infrastructure rather than building entirely new physical communication channels.
3Device complexity
If conventional CAN communication protocols are used, then system simplicity is maintained, but communication reliability deteriorates due to susceptibility to malfunctions
Solution Approach 1:
The supervisory ECU pre-configures alternate communication paths and maintains a database of alternative routes before malfunctions occur. When a CAN bus failure is detected, the system can immediately activate pre-prepared alternate paths without complex real-time decision-making.
Solution Approach 2:
The supervisory ECU continuously monitors CAN bus communication status and provides feedback to trigger alternate communication paths when malfunctions are detected. This feedback mechanism maintains simplicity by using straightforward monitoring and response protocols.
Data Source
AI summary
Alternate path determination and communication techniques for a vehicle having a plurality of electronic control units (ECUs) on a controller area network (CAN) include providing a first non-CAN communication module associated with a first ECU of the plurality of ECUs, providing a second non-CAN communication module associated with a second ECU of the plurality of ECUs, the second ECU being configured to control a set of safety systems of the vehicle, maintaining a triggering logic database specifying a set of safety critical signals, triggering alternate communication from the first ECU to the second ECU of any of the set of signals matching the set of safety critical signals in response to a communication malfunction of the CAN therebetween, and controlling transmission of any safety critical signals from the first non-CAN communication module to the second non-CAN communication module.