Triple Redundancy Steering Failsafe via Domain Controller
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current steering systems in vehicles lack an additional layer of redundancy to ensure continuous operation beyond limited durations after a single point failure, which can lead to inconvenience or safety risks during extended journeys or repairs.
Innovation Solution
A triple redundancy failsafe system is implemented, where a primary ECU is backed up by a secondary ECU, and upon failure, the secondary ECU notifies a domain controller to assume backup operations, providing an additional layer of redundancy through the domain controller's involvement in steering system management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If dual redundancy (primary and backup ECU) is implemented, then reliability is improved, but the system cannot operate beyond limited duration after failure
Solution Approach 1:
The control system is segmented into three independent ECU units (primary, backup, and domain controller) that can independently assume control functions. This segmentation allows the system to maintain operation through sequential failover among multiple discrete units, extending operational duration beyond what dual redundancy provides.
Solution Approach 2:
The domain controller, which traditionally operates in a different functional dimension (overall vehicle management rather than dedicated steering control), is leveraged to provide an additional redundancy layer. This dimensional transition allows the system to extend operational duration by utilizing a controller from another control domain.
2Duration of action of moving object
If triple redundancy with domain controller involvement is implemented, then operation duration after failure is extended, but device complexity increases
Solution Approach 1:
The domain controller serves multiple functions: its primary vehicle management role and an additional steering control backup role. By making the domain controller universal and multi-functional, the system extends operational duration without adding a completely separate dedicated backup unit, thereby limiting the increase in device complexity.
Solution Approach 2:
The existing domain controller within the vehicle's control architecture provides steering backup functionality without requiring external or additional specialized components. The system utilizes already-present hardware resources, reducing the complexity increase that would result from adding entirely new redundant components.
Data Source
AI summary
One or more embodiments are described herein of a controller system in a steering system. The controller system includes a first electric control unit (ECU) that operates as a primary ECU of the controller system, the primary ECU sending a motor command to a motor to generate torque. The controller system further includes a second ECU that operates as a backup for the first ECU. The operation as the backup includes monitoring the first ECU for a failure. In response to detecting the failure at the first ECU, the second ECU operates as the primary ECU of the controller system, and initiates a domain controller to operate as the backup ECU.