Redundant Brake Control Units for Fail-Operational Braking

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing brake systems, particularly integrated dynamic brake systems, are prone to failure due to the presence of numerous electronic devices, which can lead to serious accidents when they become inoperable during vehicle operation.

Innovation Solution

A redundant control unit system is implemented, comprising a first control unit and a second control unit with identical structures, including microcontrollers, valve drivers, and motor drivers, to ensure continued operation of the brake system even if the primary control unit fails. This system includes separate ASIC chips for valve drivers, communication through CAN transceivers, and shared communication interfaces to maintain functionality.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If an integrated dynamic brake system with numerous electronic devices is used to provide various functions and improve stability, then the braking power and stability are enhanced, but the risk of system failure increases

Engineering Contradiction:
Improvebrake system stabilityVSAvoidnumber of electronic devices
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The control device is divided into multiple independent control units (first control unit, second control unit, third control unit), each capable of independently controlling the brake system. This segmentation allows the system to maintain functionality even when one control unit fails, thus improving reliability without requiring a complete system redesign.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements a redundant control unit architecture where backup control units are prepared in advance. When a failure is detected in the primary control unit, the system automatically switches to a backup unit, providing beforehand cushioning against system failure and maintaining brake system stability.

Inventive Principle:
Principle #11Beforehand cushioning (Prior cushioning)

2Reliability

If redundant control units are implemented to ensure continued operation during failure, then system stability is enhanced, but device complexity increases

Engineering Contradiction:
Improvesystem stability during failureVSAvoidcontrol unit structure
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

Multiple control units are merged into a single integrated control device structure, sharing common hardware resources such as the hydraulic control unit and sensor units. This merging approach allows redundant control functionality to be achieved while minimizing the increase in overall device complexity through resource sharing.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

Each control unit is designed with universal functionality to perform the same brake control operations. The control units can interchangeably execute the same control algorithms and communicate with the same sensors and actuators, allowing any unit to take over seamlessly, thus achieving reliability without requiring specialized complex architectures for each unit.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentEP3981658B1Control device of brake system
Publication Date: 2024.05.29 HL MANDO CORP
  • EP3981658B1 patent drawingFigure 1
  • EP3981658B1 patent drawingFigure 2
  • EP3981658B1 patent drawingFigure 3

AI summary

A control device of a brake system, according to the present invention, includes, as redundancy, a first control unit for controlling the valve, the motor and the like of a brake system by receiving a sensor unit input, and a second control unit capable of performing the same function as the first control unit when the first control unit malfunctions, and thus the present invention can control the brake system of a vehicle by using the second control unit in an emergency situation in which the first control unit does not normally operate.