Method and arrangement for the mutual monitoring of control units

• US 6,628,993 B1
• Filed: 07/17/2000
• Issued: 09/30/2003
• Est. Priority Date: 07/15/1999
• Status: Expired due to Term

• Current Assignee: Robert Bosch GmbH
• Original Assignee: Robert Bosch GmbH
• Inventors: Bauer, Torsten
• Primary Examiner(s): PATEL, RAMESH B
• Application Number:
  US09/618,565
• Time in Patent Office: 1,170 Days
• Field of Search: 700/9, 700/82, 700/19-20, 700/18, 700/86-88, 318/563, 318/568.1, 318/560, 318/561, 340/506, 340/3.1, 340/511, 701/31, 701/101, 701/107, 701/102, 701/114, 701/108-110, 123/350, 123/396, 123/399, 123/339.15, 123/397
• US Class Current: 700/20
• CPC Class Codes: B60T 2260/04 Automatic transmission
• CPC Class Codes: B60T 2270/413 Plausibility monitoring, cross check, redundancy
• CPC Class Codes: B60T 8/885 using electrical circuitry
• CPC Class Codes: B60W 10/06 including control of combustion engines
• CPC Class Codes: B60W 10/10 including control of change-speed gearings
• CPC Class Codes: B60W 10/18 including control of braking systems
• CPC Class Codes: B60W 2050/0006 Digital architecture hierarchy
• CPC Class Codes: B60W 50/04 Monitoring the functioning of the control system
• CPC Class Codes: G05B 9/03 with multiple-channel loop, i.e. redundant control systems

Abstract

A method and an arrangement mutually monitor control units. The control units are built up of three program levels. A first level is for executing the control apparatus functions and a second level is provided for monitoring the control apparatus functions and a third level is for monitoring the programs of the second level. A first control unit sends out a selected question to a second control unit which answers the same in the context of a sequence control. The second control unit sends the formed answer back to the first control unit which then, on the basis of a comparison of the formed answer to the expected answer, determines the freedom from fault of the second control unit. Correspondingly, the first control unit is monitored by the second control unit via communication.

Claims

1. A method for mutual monitoring of at least first and second control units, said first and second control units each having first, second and third program levels (I, II, III);

and, the method comprising the steps of;

allocating a first program to said first program level (I) of each control unit for computing control functions;

allocating a second program to said second program level (II) of each control unit for monitoring the operability of said first program of said first program level (I);

allocating a third program to said third program level (III) for monitoring the operability of said second program;

said third program of said third program level (III) forming an answer based on a pregiven question with the aid of said second program in the context of a sequence control; and

,

causing one of said control units to receive the question of the other one of said control units and to output the answer to said other one of said control units.

2. The method of claim 1, wherein each one of said control units forms questions for the other one of said control units and said each one of said control units transmits answers to the other one of said control units.

3. The method of claim 1, wherein a question is formed by programs of the third level of the second control unit and is transmitted to the first control unit;

whereas, the answers are received by the second control unit and are evaluated thereby.

4. The method of claim 1, wherein programs of the third level of a control unit intervene in end stages in the manner of a switchoff or enablement of the other control unit.

5. The method of claim 1, wherein said first control unit is a control unit for controlling an internal combustion engine;

whereas, said second control unit carries out a control of at least one of the following;

driving behavior, wheel brakes and an automatic transmission.

6. An arrangement for mutual monitoring of at least first and second control units, said first and second control units each having first, second and third program levels (I, II, III);

and, the arrangement comprising;

means for allocating a first program to said first program level (I) of each control unit for carrying out control functions;

means for allocating a second program to said second program level (II) of each control unit for monitoring the operability of said first program of said first program level (I);

means for allocating third programs to said third program level (III) for monitoring the operability of said second program;

said third programs of said third program level (III) including a sequence control which forms an answer based on a pregiven question with the aid of said second program of said second program level (II); and

,

said one control unit including means for receiving the question of the other one of said control units and to output the answer to said other one of said control units.