METHOD AND DEVICE FOR THE PLAUSIBILITY CHECK OF SAFETY-RELEVANT VARIABLES

• US 20160347182A1
• Filed: 05/27/2016
• Published: 12/01/2016
• Est. Priority Date: 05/29/2015
• Status: Active Grant

• Current Assignee: Valeo Siemens Eautomotive Germany GmbH (Valeo SE)
• Original Assignee: Siemens AG
• Inventors: Adam, Alexander, Bohllnder, Marco, Bgel, Bjrn, Llorente lvarez, Esther, Lu, Caroline
• Granted Patent: US 10,493,850 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: B60L 3/00 Electric devices on electrically-propelled vehicles for safety purposes; Monitoring operating variables, e.g. speed, deceleration or energy consumption methods or circuit arrangements for monitoring or controlling batteries or fuel cells B60L58/00
• CPC Class Codes: B60L 3/0061 relating to electrical machines
• CPC Class Codes: B60L 3/12 Recording operating variables ; Monitoring of operating variables
• CPC Class Codes: G07C 5/0808 Diagnosing performance data testing of vehicles G01M17/00; testing of electrical installation on vehicles G01R31/005
• CPC Class Codes: Y10S 903/904 Component specially adapted for hev

Abstract

A method for a plausibility check of safety-relevant variables, wherein a first safety-relevant variable and a further safety-relevant variable are dependent on one another and are each provided to be raised from a lower safety level to a higher safety level. The plausibility check of the first safety-relevant variable is performed in a first time interval of a cycle of a clock by implementing a first plausibility rule, and upon a successful plausibility check during the first time interval, is raised from the lower safety level to the higher safety level for the safety-relevant variable. The plausibility check of the further safety-relevant variable is performed in a second time interval of the cycle of the clock by implementing a further plausibility rule, and upon a successful plausibility check during the second time interval, is raised from the lower safety level to the higher safety level for the further safety-relevant variable.

Claims

1. A method for checking a plausibility of safety-relevant variables comprising:

providing a first safety-relevant variable and at least one further safety-relevant variable, wherein the first safety-relevant variable and the further safety-relevant variable are dependent on one another and are each configured to be raised from a lower safety-level to a higher safety level;

performing a first plausibility check of the first safety-relevant variable in a first time interval of a cycle of a clock by implementing a first plausibility rule, wherein the first safety-relevant variable is raised from the lower safety level to the higher safety level for the first safety-relevant variable upon a successful first plausibility check during the first time interval of the cycle of the clock; and

performing a second plausibility check of the further safety-relevant variable in a second time interval of a cycle of a clock by implementing a further plausibility rule, wherein the further safety-relevant variable is raised from the lower safety level to the higher safety level for the further safety-relevant variable upon a successful second plausibility check during the second time interval of the cycle of the clock.

2. The method of claim 1, wherein the plausibility rules each have a calculation function configured to perform the plausibility checks of the safety-relevant variables at the higher safety level.

3. The method of claim 2, wherein in addition to the safety-relevant variables, at least one additional calculation variable is included in the calculation function of the plausibility rules.

4. The method of claim 1, wherein the method is repeatedly performed by repeating the cycle of the clock.

5. The method of claim 1, wherein a cycle duration of the cycle of the clock, within which the plausibility checks of the first safety-relevant variable and the further safety-relevant variable and the raising from the lower safety level to the higher safety level is performed, does not exceed a latency time for a safety event to be monitored.

6. The method of claim 5, wherein the first time interval of the cycle of the clock and the second time interval of the cycle of the clock have a same duration.

7. The method of claim 5, wherein the first time interval of the cycle of the clock and the second time interval of the cycle of the clock do not have a same duration.

8. The method of claim 1, wherein the first plausibility rule and/or the further plausibility rule includes a comparison operation for determining success of the plausibility check, configured to compare the safety-relevant variables, which are to be raised from the lower safety level to the higher safety level, with the safety-relevant variables which are provided but not yet plausibility checked by the plausibility rules.

9. A data processing unit, comprising:

a first input for receiving a first safety-relevant variable;

at least one further input for receiving at least one further safety-relevant variable;

at least one additional input for receiving at least one additional calculation variable;

a first output for outputting the first safety-relevant variable, said first output being plausibility checked and raised to a higher safety level; and

at least one further output for outputting the further safety-relevant variable, said at least one further output being plausibility checked and raised to the higher safety level.

10. An electrical converter for an electric or hybrid vehicle, said electrical converter comprising a data processing unit including a first input for receiving a first safety-relevant variable, at least one further input for receiving at least one further safety-relevant variable, at least one additional input for receiving at least one additional calculation variable, a first output for outputting the first safety-relevant variable, said first output being plausibility checked and raised to a higher safety level, and at least one further output for outputting the further safety-relevant variable, said at least one further output being plausibility checked and raised to the higher safety level.

11. The electrical converter of claim 10, wherein the electrical converter comprises a DC voltage converter for converting DC voltages between a high voltage DC voltage circuit and a low voltage DC voltage circuit.

12. The electrical converter of claim 10, wherein the electrical converter comprises a traction converter for operating an electrical machine.

13. The electrical converter of claim 12, wherein the traction converter includes a DC voltage converter for converting DC voltages between a high voltage DC voltage circuit and a low voltage DC voltage circuit.