Shared Sensor ECU State Detection During IMC Failure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In dual ECU systems, Inter-Microcontroller Communication (IMC) failures can make it difficult for a first ECU to determine the state of a second ECU, as the failure does not distinguish between communication faults and ECU failures, especially when sensor signals are shared and powered by the second ECU.
Innovation Solution
A method and system where a first ECU determines the status of a second ECU by analyzing the pin state of a communications terminal connected to a sensor, using protocol checks and logic level conditions to differentiate between powered-on, powered-off, and non-responsive states, even in cases of IMC failure, by employing the Single Edge Nibble Transmission (SENT) protocol.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If IMC signals are used to determine ECU state, then communication between ECUs is established, but the system cannot distinguish between communication faults and ECU failures
Solution Approach 1:
The patent introduces a sensor as an intermediary element that both ECUs can access. The sensor provides a common reference point that allows the first ECU to indirectly assess the second ECU's operational state. By monitoring whether the sensor remains powered and responsive, the system can distinguish between ECU failures and communication faults, as the sensor's state reflects the second ECU's power and operational status independently of direct IMC signals.
2Adaptability or versatility
If sensor signals are shared between ECUs, then system integration is improved, but the first ECU cannot determine if the second ECU is non-responsive due to IMC failure
Solution Approach 1:
The patent implements a feedback mechanism where the first ECU monitors the sensor's output signal to determine the second ECU's operational state. The sensor continuously provides feedback about its power status and responsiveness. By analyzing this feedback signal, the first ECU can distinguish between a second ECU that is powered but non-responsive versus one that is completely failed, thereby resolving the detection difficulty while maintaining sensor sharing benefits.
Data Source
AI summary
Technical solutions are described for a system and method for determining status of an electronic control unit (ECU) in a dual-ECU system. The method includes: determining, by a first ECU, a pin state of an communications terminal connected to a sensor; powering the sensor by a second ECU; and determining, by the first ECU, a status of the second ECU based on the pin state of the communications terminal. The first ECU may determine the second ECU as being nonresponsive via a communications interface, and the first ECU may determine the status of the second ECU in response to determining the second ECU being nonresponsive via the communications interface. The first ECU may determine the status second ECU as being one of powered-on and non-responsive, powered-on and functioning, or powered-off, based on the pin state of the communications terminal.


