Vehicle occupant safety system and method for operating the same

• US 5,359,515 A
• Filed: 02/28/1992
• Issued: 10/25/1994
• Est. Priority Date: 06/29/1989
• Status: Expired due to Term

• Current Assignee: Robert Bosch GmbH
• Original Assignee: Robert Bosch GmbH
• Inventors: Balzer, Knut, Weller, Hugo, Taufer, Peter, Burger, Wilfried
• Primary Examiner(s): Black, Thomas G.
• Assistant Examiner(s): PARK, COLLIN
• Application Number:
  US07/781,253
• Time in Patent Office: 970 Days
• Field of Search: 364/424.05, 180/271, 180/274, 180/281, 180/282, 280/728, 280/734, 280/735, 280/802, 307/10.1
• US Class Current: 701/45
• CPC Class Codes: B60R 2021/0119 Plausibility check
• CPC Class Codes: B60R 21/013 including means for detecting collisions, impending collisions or roll-over
• CPC Class Codes: B60R 21/0132 responsive to vehicle motion parameters , e.g. to vehicle longitudinal or transversal deceleration or speed value
• CPC Class Codes: G06F 11/0796 Safety measures, i.e. ensuring safe condition in the event of error, e.g. for controlling element
• CPC Class Codes: G06F 11/1497 Details of time redundant execution on a single processing unit

Abstract

A vehicle occupant safety system, in particular a restraining system such as an airbag, safety-belt tightener or the like, includes a sensor device having at least two sensors, a preprocessing device comprising at least two preprocessing circuits, for the sensor signals, a computing system and a trigger circuit including at least two stages, for a safety device. For providing a high degree of safety with relatively low costs, the computing system is constructed as a single-computer system in such a way that it processes the data of two preprocessing circuits in two programs with staggered timing with respect to one another.

Claims

1. A safety system for activating a restraining device of a vehicle, comprising:

at least two sensors, each sensor generating a respective sensor signal;

at least two preprocessing circuits, each preprocessing circuit coupled to a respective sensor for receiving the respective sensor signals and for generating respective preprocessing signals based thereon;

a computing system coupled to the preprocessing circuits for continuously processing the preprocessing signals in respective programs which are executed during respective time intervals which are staggered with respect to one another, and starting at times which are determined based on respective independent interrupts; and

at least two trigger circuit components coupled to the computing system for activating the restraining device.

2. The safety system as recited in claim 1, wherein the times at which execution of the respective programs start are n·

T and (2n+1)·

(T/2), respectively, n being positive integers, and T being a processing period.

3. The safety system as recited in claim 1, further comprising a watchdog circuit triggered by a trigger signal generated by the programs, and coupled to a reset input of the computing system.

4. The safety system as recited in claim 3, wherein the watchdog circuit is a window watchdog circuit.

5. The safety system as recited in claim 3, wherein each of the program generates half of the trigger signal.

6. The safety system as recited in claim 3, wherein the time at which execution of one program starts corresponds to the rising edge of the trigger signal, and the time at which execution of the other program starts corresponds to the trailing edge of the trigger signal.

7. The safety system as recited in claim 1, wherein the execution of each program ends before the execution of the other program begins.

8. The safety system as recited in claim 7, wherein each program tests for the end of the other program.

9. The safety system as recited in claim 8, wherein each program has an end identifier which is monitored by the other program.

10. The safety system as recited in claim 1, wherein the restraining device is activated only if the executions of the programs produce approximately identical results.

11. A method for activating a restraining device of a vehicle, comprising the steps of:

generating a respective sensor signal with each of at least two sensors;

preprocessing the sensor signals with respective preprocessing circuits coupled to each of the at least two sensors and generating respective preprocessing signals based thereon;

continuously processing with a computing system the preprocessing signals in respective programs which are executed during respective time intervals which are staggered with respect to one another, and starting at times which are determined based on respective independent interrupts; and

activating the restraining device using at least two trigger circuit components coupled to the computing system.

12. The method as recited in claim 11, wherein the times at which execution of the respective programs start are n . T and (2n+1)·

(T/2), respectively, n being positive integers, and T being a processing period.

13. The method as recited in claim 11, further comprising the steps of:

triggering a watchdog circuit with a trigger signal generated by the programs; and

resetting the computing system with the watchdog circuit if the programs fail to properly trigger the watchdog circuit.

14. The method as recited in claim 13, wherein the watchdog circuit is a window watchdog circuit.

15. The method as recited in claim 13, wherein each of the programs generates half of the trigger signal.

16. The method as recited in claim 13, wherein the time at which execution of one program starts corresponds to the rising edge of the trigger signal, and the time at which execution of the other program starts corresponds to the trailing edge of the trigger signal.

17. The method as recited in claim 11, wherein the execution of each program ends before the execution of the other program begins.

18. The method as recited in claim 17, wherein each program tests for the end of the other program.

19. The method as recited in claim 18, wherein each program has an end identifier which is monitored by the other program.

20. The method as recited in claim 11, wherein the activating step is performed only if the executions of the programs produce approximately identical results.