Method for actuating a component of distributed security system

• US 20040011579A1
• Filed: 06/23/2003
• Published: 01/22/2004
• Est. Priority Date: 03/15/2001
• Status: Abandoned Application

• Current Assignee: Robert Bosch GmbH
• Original Assignee: Robert Bosch GmbH
• Inventors: Weiberle, Reinhard, Kesch, Bernd, Heckmann, Hans, Blessing, Peter
• Application Number:
  US10/276,285
• Publication Number:
  US 20040011579A1
• Time in Patent Office: Days
• US Class Current: 180/271
• CPC Class Codes: B60G 2600/042 Monitoring means
• CPC Class Codes: B60G 2600/08 Failure or malfunction detecting means
• CPC Class Codes: B60G 2800/80 Detection or control after a system or component failure
• CPC Class Codes: B60T 13/74 with electrical assistance or drive
• CPC Class Codes: B60T 13/741 acting on an ultimate actuator
• CPC Class Codes: B60T 2270/404 Brake-by-wire or X-by-wire failsafe
• CPC Class Codes: B60T 2270/82 Brake-by-Wire, EHB
• CPC Class Codes: B60T 7/042 by electrical means, e.g. using travel or force sensors
• CPC Class Codes: B60T 8/885 using electrical circuitry
• CPC Class Codes: B60W 2050/0005 Processor details or data handling, e.g. memory registers or chip architecture
• CPC Class Codes: B60W 2050/0045 using databus protocols
• CPC Class Codes: B60W 2050/021 Means for detecting failure or malfunction
• CPC Class Codes: B60W 2050/0292 Fail-safe or redundant systems, e.g. limp-home or backup systems
• CPC Class Codes: B60W 2050/041 Built in Test Equipment [BITE]
• CPC Class Codes: G05B 9/03 with multiple-channel loop, i.e. redundant control systems
• CPC Class Codes: G06F 11/1637 using additional compare functionality in one or some but not all of the redundant processing components
• CPC Class Codes: G06F 11/18 using passive fault-masking of the redundant circuits error detection by comparing the output of redundant processing systems with continued operation after detection of the error G06F11/165
• CPC Class Codes: G06F 11/182 based on mutual exchange of the output between redundant processing components

Abstract

A method of triggering a component in a distributed safety-related system, e.g., a component of an X-by-wire system in a motor vehicle, is described. The component is triggered by a first triggering module assigned to the component and including at least one first microcomputer system. To monitor the microcomputer system, a monitoring unit which is independent of the first microcomputer system is provided. In addition to the first microcomputer system, the distributed safety-related system includes at least one additional microcomputer system which is connected to the first microcomputer system for the purpose of data transfer, e.g., via a physical databus. The additional microcomputer systems assume the functions of the monitoring unit. Thus, it is possible to do without a separate monitoring unit.

Claims

10. The method of claim 9, wherein the component is a component of an X-by-wire system in a motor vehicle.

11. The method of claim 9, wherein the safety-related system includes at least one additional triggering module, and wherein the at least one additional microcomputer system is part of the at least one additional triggering module.

12. The method of claim 9, wherein step b) and step c) are executed by the at least one additional microcomputer system.

13. The method of claim 9, wherein the first microcomputer system is connected via a first communications controller to a physical bus system, step (b) is executed by the at least one additional microcomputer system, and step (c) is executed by the first communications controller.

14. The method of claim 9, wherein step (d) is executed by the at least one additional microcomputer system.

15. The method of claim 9, wherein the first microcomputer system is connected via a first communications controller to a physical bus system, and wherein step (d) is executed by the first communications controller.

16. A computer-readable memory medium for storing a program to be executed by a computer, the program comprising a plurality of codes for controlling triggering of a component in a distributed safety-related system, the component being triggered by a first triggering module assigned to the component, by performing:

(a) determining at least one triggering signal for the component by the first microcomputer system as a function of at least one input signal;

(b) determining at least one logic triggering signal at least partially by a monitoring arrangement that is independent of the first microcomputer system, as a function of the at least one input signal;

(c) comparing the at least one triggering signal with the at least one logic triggering signal;

(d) determining at least one enabling signal as a function of a result of the comparison in step (c); and

(e) relaying one of the at least one triggering signal and at least one signal that depends on the at least one triggering signal to the component when the at least one enabling signal has a selected value;

wherein the distributed safety-related system includes at least one additional microcomputer system that is connected to the first microcomputer system for data transfer, and wherein at least one of steps (b) through (d) is executed by the at least one additional microcomputer system.

17. The computer-readable memory medium of claim 16, wherein the memory includes a flash memory.