Vehicle Zone Controller Redundancy via Cross-Zone Serial Links

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Zone-oriented vehicle architectures face challenges in maintaining safety and reliability while minimizing complexity and harnesses, as the failure of a single zone controller can impact multiple vehicle functions, necessitating a balance between redundancy and efficiency.

Innovation Solution

A control system with a vehicle network that includes zone controllers equipped with microcontrollers, master and slave control units, and redundant communication links via serial buses, allowing data exchange and fail-safe operations even when individual zone controllers malfunction.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If zone controllers are used to manage vehicle functions in specific zones, then device complexity and wiring harnesses are reduced, but reliability deteriorates because a single zone controller failure can impact multiple vehicle functions

Engineering Contradiction:
Improvewiring harness complexityVSAvoidsystem reliability
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The system divides vehicle control into multiple independent zone controllers, each managing specific zones. This segmentation allows failure isolation where a malfunction in one zone controller does not propagate to other zones, thereby maintaining reliability while keeping wiring harnesses compact and manageable within each zone.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system implements preliminary diagnostic actions by continuously monitoring zone controller health status and detecting malfunctions before they propagate. This allows the central controller to preemptively reassign functions or activate backup controllers, maintaining system reliability while preserving the simplified zonal architecture.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If redundant communication links are added to maintain reliability, then system reliability improves, but device complexity increases

Engineering Contradiction:
Improvecommunication reliabilityVSAvoidcontrol system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The central controller serves as an intermediary that manages communication between zone controllers and the vehicle network. It implements redundant communication pathways by routing messages through alternative zone controllers when primary paths fail, thereby ensuring communication reliability without requiring each zone controller to have complex built-in redundancy.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

Zone controllers are designed with multi-functionality to serve both their primary zone management role and as backup communication pathways for other zones. This universality allows the same hardware to provide redundant communication capabilities without adding dedicated backup components, thus improving reliability while minimizing complexity increase.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentEP4637087A1Zone oriented control system for a vehicle and corresponding control method
Publication Date: 2025.10.22 MARELLI EURO SPA
  • EP4637087A1 patent drawingFigure 1
  • EP4637087A1 patent drawingFigure 2
  • EP4637087A1 patent drawingFigure 3

AI summary

A control system for a vehicle comprising a vehicle network (30) which is configured to exchange data with a plurality of zone controllers (40a, 40b) configured to control respective modules, in particular sensors (47) and/or actuators (76), operating in respective zones of said vehicle, wherein each zone controller (40) comprises: - a microcontroller (41), - a master control unit (42), and/or - a slave control unit (43), wherein at least a first zone controller (40a) in said plurality of zone controllers (40a, 40b) comprises a respective master control unit (42) coupled by means of a communication link, in particular a serial bus (32), to a slave control unit (43) of a second zone controller (40b) in said plurality of zone controllers (40a, 40b), and it is configured to send instructions from said first zone controller (40a), in particular data read/write requests, to said second zone controller (40b) on said communication link, in particular serial bus, (32), wherein the second zone controller (40b) is configured to receive and execute said instructions, in particular data read/write requests, by means of the respective slave control unit (43).