Proactive health-based transition to redundant subsystems

• US 10,501,092 B2
• Filed: 10/05/2017
• Issued: 12/10/2019
• Est. Priority Date: 10/05/2017
• Status: Active Grant

• Current Assignee: GM Global Technology Operations LLC (General Motors Company)
• Original Assignee: GM Global Technology Operations LLC (General Motors Company)
• Inventors: Huang, Xiaoyu, Lin, Wen-Chiao, Jiang, Shengbing, Duan, Shiming, Ghoneim, Youssef A., Holland, Steven W., Zhang, Yilu
• Primary Examiner(s): Holloway, Jason
• Application Number:
  US15/725,930
• Publication Number:
  US 20190106115A1
• Time in Patent Office: 796 Days
• CPC Class Codes: B60R 16/0232 for measuring vehicle parameters and indicating critical, abnormal or dangerous conditions
• CPC Class Codes: B60W 10/18 including control of braking systems
• CPC Class Codes: B60W 10/20 including control of steering systems
• CPC Class Codes: B60W 2050/0297 Control Giving priority to different actuators or systems
• CPC Class Codes: B60W 30/18136 Engine braking
• CPC Class Codes: B60W 50/0098 Details of control systems ensuring comfort, safety or stability not otherwise provided for
• CPC Class Codes: B60W 50/023 Avoiding failures by using redundant parts
• CPC Class Codes: B60W 50/029 Adapting to failures or work around with other constraints, e.g. circumvention by avoiding use of failed parts
• CPC Class Codes: G05D 1/0077 using redundant signals or controls

Abstract

A method proactively transitions performance of a functional operation from a primary subsystem to a secondary subsystem within a vehicle or other system having an electronic control unit (ECU). The method includes receiving health management information via the ECU when the primary subsystem is actively performing the functional operation within the system and the secondary subsystem operates in a standby mode, wherein the health information is indicative of a numeric state of health (SOH) of the primary subsystem. The method also includes comparing the numeric SOH to a calibrated non-zero threshold SOH, and then commanding, via the ECU, a transition of the performance of the functional operation to the secondary subsystem and placing the primary subsystem in the standby mode when the numeric SOH is less than the calibrated non-zero threshold SOH. A vehicle executes the method via the ECU.

Claims

1. A method for proactively transitioning performance of a functional operation from a primary subsystem to a secondary subsystem within a system having an electronic control unit (ECU) and the primary and secondary subsystems, the method comprising:

receiving health management information via the ECU when the primary subsystem is actively performing the functional operation within the system and the secondary subsystem operates in a standby mode, wherein the health information is indicative of a numeric state of health (SOH) of the primary subsystem;

comparing the numeric SOH to a calibrated non-zero threshold SOH; and

commanding, via the ECU, a transition of the performance of the functional operation to the secondary subsystem and placing the primary subsystem in the standby mode when the numeric SOH is less than the calibrated non-zero threshold SOH.

2. The method of claim 1, further comprising:

commanding a transition of the performance of the functional operation back to the primary subsystem and placing the secondary subsystem back in the standby mode in response to a predetermined condition.

3. The method of claim 2, wherein the predetermined condition is a calibrated interval.

4. The method of claim 2, further comprising measuring a temperature of the primary subsystem using a temperature sensor, wherein the predetermined condition is the measured temperature of the primary subsystem.

5. The method of claim 2, wherein the primary and secondary subsystems are both steering subsystems, braking subsystems, or controllers.

6. The method of claim 1, wherein the primary subsystem and the secondary subsystem are a steering subsystem and a braking subsystem, respectively.

7. The method of claim 6, further comprising recording a diagnostic code indicative of a failed primary subsystem in response to the transition to the secondary subsystem.

8. The method of claim 1, wherein the system is a vehicle having an internal combustion engine, wherein the primary subsystem is a braking subsystem, the secondary subsystem is the engine, and commanding the transition of the performance of the functional operation to the secondary subsystem includes commanding engine braking.

9. The method of claim 1, wherein the calibrated non-zero threshold SOH is greater than about 0.2.

10. The method of claim 9, wherein the calibrated non-zero threshold SOH is about 0.6-0.8.

11. A vehicle comprising:

a primary subsystem;

a redundant secondary subsystem; and

an ECU in communication with the primary and secondary subsystems, wherein the ECU is configured to;

receive health management information when the primary subsystem is actively performing a functional operation within the vehicle and the secondary subsystem operates in a standby mode, the health information being indicative of a numeric state of health (SOH) of the primary subsystem;

compare the numeric SOH to a calibrated non-zero threshold SOH;

command a transition of the performance of the functional operation to the secondary subsystem and place the primary subsystem in the standby mode when the numeric SOH is less than the calibrated non-zero threshold SOH.

12. The vehicle of claim 11, wherein the ECU is further configured to command a transition of the performance of the functional operation back to the primary subsystem and place the secondary subsystem back in the standby mode in response to a predetermined condition.

13. The vehicle of claim 11, wherein the predetermined condition is a calibrated interval.

14. The vehicle of claim 11, further comprising a temperature sensor configured to measure a temperature of the primary subsystem, wherein the predetermined condition is the measured temperature of the primary subsystem.

15. The vehicle of claim 11, wherein the primary and secondary subsystems are both steering subsystems.

16. The vehicle of claim 11, wherein the primary and secondary subsystems are both braking subsystems.

17. The vehicle of claim 11, wherein the primary and secondary subsystems are both controllers.

18. The vehicle of claim 11, wherein the primary subsystem and the secondary subsystem are a steering subsystem and a braking subsystem, respectively, and wherein the ECU is further configured to record a diagnostic code indicative of a failure mode of the steering subsystem in response to the transition to the braking subsystem.

19. The vehicle of claim 11, wherein the vehicle includes an internal combustion engine, the primary subsystem is a braking subsystem, the secondary subsystem is the engine, and the ECU is configured to command the transition of the performance of the functional operation to the engine by commanding engine braking.

20. The vehicle of claim 11, wherein the ECU is configured to determine a degradation trajectory for the numeric SOH of the primary subsystems, and to time the commanded transition in real-time using the degradation trajectory.