Vehicle Control Reconfiguration After ECU Failure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing motor vehicle control systems fail to ensure safe execution of critical functions like braking and steering when a control device malfunctions, requiring additional resources and potentially increasing costs and complexity, especially in highly automated or autonomous vehicles.
Innovation Solution
Implementing an indirect signal transmission connection between control devices, where a higher-level control device generates an output signal to reconfigure an error-free control device to manage the faulty function, allowing for seamless transition without a reserve control device, thereby reducing space, weight, and costs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a reserve control device is provided for each control device, then reliability is improved, but device complexity and cost increase
Solution Approach 1:
The patent implements a universal reserve control device that can assume multiple different control functions depending on which control device fails. Instead of having dedicated reserve devices for each control function, a single reserve control device is configured to perform any control function through dynamic reconfiguration, thereby reducing overall system complexity while maintaining reliability.
Solution Approach 2:
The reserve control device acts as an intermediary that receives control tasks from failed control devices and executes them after reconfiguration. This mediator approach allows the system to handle failures without requiring direct one-to-one redundancy, simplifying the control architecture while ensuring continuous operation.
2Reliability
If a reserve control device is provided for each control device, then reliability is improved, but space and weight increase
Solution Approach 1:
The reserve control device is designed as a multi-functional unit that can perform various control tasks depending on system needs. This universal design eliminates the need for multiple specialized reserve devices, significantly reducing the overall weight of the control system while maintaining adequate reliability coverage.
3Manufacturing precision
If control devices are directly connected to actuators, then control precision is improved, but adaptability decreases
Solution Approach 1:
The reserve control device serves as a flexible intermediary between control functions and actuators. It can dynamically reconfigure signal transmission paths to route control signals through appropriate channels, maintaining precise control while adapting to different failure scenarios and operational requirements.
Solution Approach 2:
The control system implements dynamic reconfiguration capabilities where signal transmission connections can be changed in real-time based on operational conditions and failure states. This dynamic adaptability allows the system to maintain control precision across varying scenarios without being locked into fixed connection topologies.
4Adaptability or versatility
If indirect signal transmission connections are used, then adaptability is improved, but control precision may decrease
Solution Approach 1:
The reserve control device acts as an intelligent intermediary that maintains control precision despite indirect signal paths. It processes and forwards control signals through multiple hops while preserving signal integrity and control accuracy, eliminating the precision loss typically associated with indirect connections.
Data Source
AI summary
A control system for a motor vehicle, having a first control device for controlling a first function of the motor vehicle and a second control device for controlling a second function of the motor vehicle. The first and second control devices are each in a signal transmission connection with at least one sensor and/or at least one actuator. To ensure the proper execution of functions of a motor vehicle controlled by control devices even with a faulty control device with the least possible effort, it is provided that in dependence on the receipt of an error signal from the first control device or the second control device, the respective error-free control device is configured such that the function of the motor vehicle that corresponds to the faulty control device is controlled by the error-free control device.