METHOD AND APPARATUS FOR MONITORING PROCESSOR INTEGRITY IN A DISTRIBUTED CONTROL MODULE SYSTEM FOR A POWERTRAIN SYSTEM

• US 20090112392A1
• Filed: 10/03/2008
• Published: 04/30/2009
• Est. Priority Date: 10/27/2007
• Status: Active Grant

• Current Assignee: Bayerische Motoren Werke AG, Daimler AG (Mercedes-Benz Group AG), Chrysler Group LLC (Stellantis NV)
• Original Assignee: BMW AG (Bayerische Motoren Werke AG), GM Global Technology Operations Incorporated (General Motors Company), Daimler AG (Mercedes-Benz Group AG), Chrysler LLC (Stellantis NV)
• Inventors: KURNIK, JAMES T., TARBY, DAVID, BUUR, HANNE, WEST, STEPHEN T.
• Granted Patent: US 8,244,426 B2
• Time in Patent Office: Days
• US Class Current: 701/29
• CPC Class Codes: B60W 10/02 including control of driveline clutches
• CPC Class Codes: B60W 10/06 including control of combustion engines
• CPC Class Codes: B60W 10/08 including control of electric propulsion units, e.g. motors or generators
• CPC Class Codes: B60W 10/24 including control of energy storage means
• CPC Class Codes: B60W 20/00 Control systems specially adapted for hybrid vehicles hybrid vehicle design, B60K6/00; electric vehicles B60L
• CPC Class Codes: B60W 50/02 Ensuring safety in case of control system failures, e.g. by diagnosing, circumventing or fixing failures
• CPC Class Codes: B60W 50/045 Monitoring control system parameters
• CPC Class Codes: G05B 23/0256 injecting test signals and analyzing monitored process response, e.g. injecting the test signal while interrupting the normal operation of the monitored system; superimposing the test signal onto a control signal during normal operation of the monitored system
• CPC Class Codes: Y02T 10/62 Hybrid vehicles

Abstract

A method for monitoring a main control module operative to command first and second motor control processors of a hybrid powertrain system includes signally connecting a programmable logic device to the main control module and the first and second motor control processors, communicating a first seed signal from the programmable logic device to the main control module, and determining an invalid key signal in the main control module in response to the first seed signal. The invalid key signal is communicated to the programmable logic device.

Claims

1. A method for monitoring a main control module operative to command first and second motor control processors of a hybrid powertrain system, the method comprising:

signally connecting a programmable logic device to the main control module and the first and second motor control processors;

communicating a first seed signal from the programmable logic device to the main control module;

determining an invalid key signal in the main control module in response to the first seed signal; and

communicating the invalid key signal to the programmable logic device.

2. The method of claim 1, further comprising

communicating the first seed signal from the programmable logic device to the main control module during an immediately subsequent loop cycle;

determining a valid key signal in the main control module in response to the first seed signal; and

communicating the valid key signal to the programmable logic device.

3. The method of claim 2, further comprising:

determining a state of a discrete output in the programmable logic device based upon the key signal; and

relaying the state of the discrete output from the programmable logic device to the main control module and to each of the motor control processors.

4. A method for monitoring a main control module and first and second motor control processors operative to control first and second torque actuators of a hybrid powertrain system, the method comprising:

implementing a programmable logic device;

directly signally connecting a discrete output from the programmable logic device to the main control module and to each of the motor control processors;

signally connecting the main control module and the programmable logic device via a first communications bus;

signally connecting each of the main control module and the first motor control processor to a serial communications bus;

communicating a seed signal from the programmable logic device to the main control module via the first communications bus;

determining a key signal in the main control module based upon the seed signal;

communicating the key signal to the programmable logic device via the first communications bus;

determining a state of the discrete output in the programmable logic device based upon the key signal;

directly communicating the state of the discrete output from the programmable logic device to the main control module and to each of the motor control processors via electric cables; and

transmitting a signal determined based upon the state of the discrete output from the first motor control processor to the serial communications bus.

5. The method of claim 4, further comprising

communicating a first state of the discrete output from the programmable logic device to each of the motor control processors when the key signal corresponds to the seed signal;

and

communicating a second state of the discrete output from the programmable logic device to each of the motor control processors when the key signal does not correspond to the seed signal.

6. The method of claim 5, further comprising effecting communications between the main control module and the first and second motor control processors when the key signal corresponds to the seed signal.

7. The method of claim 5, further comprising the first and second motor control processors selectively disregarding communications from the main control module when the key signal does not correspond to the seed signal.

8. The method of claim 7, comprising commanding zero torque output from the first and second torque actuators.

9. The method of claim 4, further comprising

detecting a key-off event;

communicating a test in progress from the main control module to the first and second control modules via second and third communications buses;

communicating a seed signal from the programmable logic device to the main control module via the first communications bus;

communicating an invalid key signal from the main control module to the programmable logic device via the first communications bus;

determining and communicating a state of the discrete output in the programmable logic device based upon the invalid key signal to the main control module and to each of the motor control processors via the electric cables; and

transmitting a signal that is determined based upon the state of the discrete output from the first motor control module to the serial communications bus.

10. The method of claim 9, comprising transmitting a signal indicative of a passed test when the state of the discrete output in the programmable logic device indicates a fault.

11. A method for monitoring a control module system including a main control module and first and second motor control processors operative to control torque actuators of a hybrid powertrain system, the method comprising:

directly signally connecting a programmable logic device to a main control module;

detecting a key-off period for the hybrid powertrain system;

communicating a test in progress signal from the main control module to the first and second control modules;

communicating a valid seed signal from the programmable logic device to the main control module;

selecting and communicating an invalid key signal from the main control module to the programmable logic device in response to the valid seed signal;

determining and communicating a discrete state from the programmable logic device based upon the valid seed signal and the invalid key signal during the test in progress signal.

12. The method of claim 11, comprising identifying a fault in the main control module when the discrete state from the programmable logic device does not indicate a fault within a predetermined time period.