PHY Transmission Blocker for Error Containment in Actuator Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Safety-critical systems in automotive and industrial applications face challenges in containing errors without completely deactivating actuator systems, especially when these systems involve multiple manufacturers or shared physical components, which can lead to uncontrolled vehicle behavior or system failures.
Innovation Solution
A turn-off device with a blocker integrated into the PHY interface or external circuitry that selectively prevents message transmission to the communication network, allowing for controlled error containment by blocking only the transmission path, while maintaining system operability and enabling reset or power supply management, and including a read-out device for monitoring and ensuring correct switching states.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the actuator system is completely deactivated in the event of an error, then the safety effect is maximized, but the system loses essential functionality and becomes un drivable
Solution Approach 1:
The patent segments the communication path into separate transmission and reception directions. The blocker selectively disables only the transmission path from the cognitive control unit to the actuator system, while leaving the reception path and other communication paths intact. This allows the system to maintain essential functionality through alternative communication routes while preventing harmful signals from triggering actuators.
Solution Approach 2:
The blocker acts as an intermediary element positioned in the transmission path between the cognitive control unit and the actuator system. It mediates the error containment by selectively preventing harmful transmission signals while allowing reception and other communication paths to remain operational, thus resolving the contradiction between safety and functionality.
2Reliability
If a turn-off path is added to the actuator system, then error containment is improved, but the device complexity increases and integration becomes difficult
Solution Approach 1:
The blocker is designed as a universal component that can be integrated into existing PHY interfaces without requiring changes to the actuator system itself. It provides multi-functional capability by simultaneously enabling error containment, maintaining communication functionality, and working with existing system architectures from different manufacturers.
Solution Approach 2:
The blocker serves as an intermediary device that adds error containment functionality without directly modifying the actuator system. By positioning itself in the communication path, it provides the needed safety function while leaving the existing actuator system architecture intact, thus avoiding increased device complexity.
3Reliability
If the PHY interface is completely disabled, then error propagation is prevented, but the ability to receive reset commands and maintain communication is lost
Solution Approach 1:
The patent segments the PHY interface functionality into separate transmission and reception paths. The blocker selectively disables only the transmission path while leaving the reception path operational. This segmentation allows the system to prevent error propagation through blocked transmission while maintaining communication capability through the open reception path, enabling reset commands to be received.
Data Source
AI summary
A turn-off device for a sensor, an actuator or a control unit for a vehicle or for an industrial facility, the sensor, the actuator or the control unit being connectable via a PHY interface to a communication network, via which the sensor, the actuator or the control unit is able to exchange messages with other units of the vehicle or of the industrial facility, the turn-off device including a blocker, which physically prevents the PHY interface from sending messages to the communication network. A sensor, an actuator or a control unit that includes the turn-off device, a method for functional checking, and an associated computer program are also described.