Electronic Control Device and Method for Controlling the Operation of Motor Vehicle Components

• US 20080004765A1
• Filed: 04/08/2005
• Published: 01/03/2008
• Est. Priority Date: 04/27/2004
• Status: Active Grant

• Current Assignee: Vitesco Technologies GmbH (Continental AG)
• Original Assignee: Siemens AG
• Inventors: Maier, Thomas, Falter, Johann, Kick, Marco, Marenco, Norman, Forster, Ralf, Skotzek, Peter, Fisch, Alfons
• Granted Patent: US 7,596,436 B2
• Time in Patent Office: Days
• US Class Current: 701/29
• CPC Class Codes: B60R 16/023 for transmission of signals between vehicle parts or subsystems
• CPC Class Codes: B60W 50/023 Avoiding failures by using redundant parts
• CPC Class Codes: F02D 2041/2048 said control involving a limitation, e.g. applying current or voltage limits
• CPC Class Codes: F02D 2041/2051 using voltage control
• CPC Class Codes: F02D 2041/2089 detecting open circuits
• CPC Class Codes: F02D 2200/503 Battery correction, i.e. corrections as a function of the state of the battery, its output or its type
• CPC Class Codes: F02D 41/20 Output circuits, e.g. for controlling currents in command coils
• CPC Class Codes: F02D 41/221 relating to the failure of actuators or electrically driven elements
• CPC Class Codes: F02D 41/266 the computer being backed-up or assisted by another circuit, e.g. analogue
• CPC Class Codes: F02D 41/28 Interface circuits
• CPC Class Codes: H02H 3/202 for dc systems

Abstract

The operating voltage is monitored in a microcontroller having associated output stages which are used to control components. In the case of over-voltage, the output stage is disconnected. Two technology-related, voltage monitoring devices working in different operating voltage ranges are provided. Due to the combination thereof, a highly precise disconnection threshold and a greater area for the operating voltage, which is to be monitored, can be obtained. If a malfunction of an over-voltage occurs, the output stages can be disconnected in a reliable manner.

Claims

1-7. -7. (canceled)

8. An electronic control device for controlling an operation of motor vehicle components, comprising

a microcontroller for providing at least one control signal for controlling at least one component to be controlled during an operation of a motor vehicle, said microcontroller operating within a first permissible operating voltage range predefined for technology-related reasons;

at least one output stage connected to receive the control signal and configured to selectively activate and deactivate the component to be controlled based of the control signal;

a first voltage monitoring device operating, for technology-related reasons, in the first permissible operating voltage range, said first voltage monitoring device monitoring at least one particular operating voltage of the control device and placing said output stage in a predetermined fault event state if the at least one monitored operating voltage exceeds a predetermined first limit voltage, the first limit voltage being selected within the first permissible operating voltage range; and

a second voltage monitoring device operating, for technology-related reasons, in a second permissible operating voltage range extending beyond the first permissible operating voltage range, said second voltage monitoring device monitoring the at least one operating voltage and placing said output stage in the fault event state if the at least one monitored operating voltage exceeds a predetermined second limit voltage, the second limit voltage lying within the first permissible operating voltage range and being greater than the first limit voltage.

9. The control device according to claim 8 implemented as a control device for controlling components of an internal combustion engine.

10. The control device according to claim 8 implemented as a control device for controlling components of a transmission of a motor vehicle.

11. The control device according to claim 8, wherein at least one of said microcontroller and said monitoring device on one hand, and said output stage (14) on another hand are implemented as mutually separate integrated circuits.

12. The control device according to claim 8, wherein said first voltage monitoring device is incorporated in a monitoring device configured to monitor a proper operation of said microcontroller and wherein said monitoring device, upon detecting improper operation, places said output stage in the fault event state.

13. The control device according to claim 12, which comprises an enabling signal line running between said monitoring device and said output stage, said enabling signal line carrying a digital enabling signal to said output stage for signaling enabling and disabling the operation of said output stage, and wherein said output stage is placed in the fault event state by a predetermined signal state of the enabling signal.

14. The control device according to claim 13, wherein said second voltage monitoring device is connected to said enabling signal line and said second voltage monitoring device, in the event of the second limit voltage being exceeded, places said output stage in the fault event state by defining a particular signal state of the enabling signal.

15. The control device according to claim 8, wherein the second permissible operating voltage range is suitably implemented for a maximum expected voltage in the system as a whole.

16. A method of controlling an operation of motor vehicle components, the control device including:

a microcontroller for outputting at least one control signal for controlling at least one component to be controlled during an operation of a motor vehicle, the microcontroller operating in a first permissible operating voltage range predefined for technology-related reasons; and

at least one output stage connected to the microcontroller for selectively activating and deactivating the component to be controlled based on the control signal;

the method which comprises;

monitoring at least one particular operating voltage of the control device with a first voltage monitoring device operating, for technology-related reasons, in the first permissible operating voltage range and placing the output stage in a predetermined fault event state if the at least one monitored operating voltage exceeds a predetermined first limit voltage selected within the first permissible operating voltage range; and

monitoring the at least one operating voltage with a second voltage monitoring device operating, for technology-related reasons, in a second permissible operating voltage range extending beyond the first permissible operating voltage range and placing the output stage in the fault event state if the at least one monitored operating voltage exceeds a predetermined second limit voltage selected within the first permissible operating voltage range and greater than the first limit voltage.

17. The method according to claim 16, which comprises controlling components of an internal combustion engine.

18. The method according to claim 16, which comprises controlling a transmission of a motor vehicle.