Inertial sensor software architecture security method

• US 7,953,536 B2
• Filed: 07/27/2006
• Issued: 05/31/2011
• Est. Priority Date: 07/29/2005
• Status: Expired due to Fees

• Current Assignee: GM Global Technology Operations LLC (General Motors Company)
• Original Assignee: GM Global Technology Operations LLC (General Motors Company)
• Inventors: Katrak, Kerfegar K.
• Primary Examiner(s): Tran; Khoi
• Assistant Examiner(s): Sample; Jonathan L
• Application Number:
  US11/460,348
• Publication Number:
  US 20070027603A1
• Time in Patent Office: 1,769 Days
• Field of Search: None
• US Class Current: 701/70
• CPC Class Codes: G06F 11/1497 Details of time redundant execution on a single processing unit
• CPC Class Codes: G06F 11/1608 Error detection by comparing the output signals of redundant hardware G06F11/1629, G06F11/1666 take precedence; error detection or correction in information storage based on relative movement between record carrier and transducer G11B20/18; checking static stores for correct operation G11C29/00; for logic circuits H03K19/003, H03K19/007; for pulse counters or frequency dividers H03K21/40
• CPC Class Codes: H04L 1/0061 Error detection codes

Abstract

A method and apparatus is provided for validating a plurality of data, comprising transmitting one or more first values for a variable from a first source of values to a first processor, transmitting one or more second values for the variable from a second source of values to the first processor, transmitting one or more third values for the variable from the first source of values for to the second processor, transmitting one or more fourth values for the variable from the second source to the first processor, comparing the one or more first values for the variable with the one or more third values for the variable, comparing the one or more second values for the variable with the one or more third values for the variable, and comparing the one or more second values for the variable with the one or more fourth values for the variable.

Claims

1. A method of cross-checking values of data for at least one variable transmitted in a system comprising a first processor, a second processor, a first source of values for the variable, and a second source of values for the variable, the method comprising the steps of:

transmitting one or more first values for the variable from the first source of values for the variable to the first processor;

transmitting one or more second values for the variable from the second source of values for the variable to the first processor;

transmitting one or more third values for the variable from the first source of values for the variable to the second processor;

transmitting one or more fourth values for the variable from the second source of values for the variable to the first processor;

comparing the one or more first values for the variable with the one or more third values for the variable;

comparing the one or more second values for the variable with the one or more third values for the variable; and

comparing the one or more second values for the variable with the one or more fourth values for the variable.

2. The method of claim 1, further comprising the step of:

sending at least certain of the values for the variable from the first processor to the second processor for redundant processing.

3. The method of claim 1, further comprising the step of:

sending at least certain of the values for the variable from the second processor to the first processor for redundant processing.

4. The method of claim 1, wherein the data is also for at least an additional variable and the system further comprises a source of values for the additional variable, the method further comprising the steps of:

transmitting one or more first values for the additional variable from the first source of values for the additional variable to the first processor;

transmitting one or more second values for the additional variable from the second source of values for the additional variable to the first processor;

transmitting one or more third values for the additional variable from the first source of values for the additional variable to the second processor;

transmitting one or more fourth values for the additional variable from the second source of values for the additional variable to the first processor;

comparing the one or more first values for the additional variable with the one or more third values for the additional variable;

comparing the one or more second values for the additional variable with the one or more third values for the additional variable; and

comparing the one or more second values for the additional variable with the one or more fourth values for the additional variable.

5. the method of claim 4, wherein the data is also for at least a separate additional variable and the system further comprises a first source and a second source of values for the separate additional variable, the method further comprising the steps of:

transmitting one or more first values for the separate additional variable from the first source of values for the separate additional variable to the first processor;

transmitting one or more second values for the separate additional variable from the second source of values for the separate additional variable to the first processor; and

comparing the one or more first values for the separate additional variable with the one or more second values for the separate additional variable.

6. The method of claim 5, wherein at least one of the variable, the additional variable, and/or the separate additional variable is selected from the group consisting of:

yaw, lateral acceleration, and longitudinal acceleration.

7. The method of claim 6, wherein the variable, the additional variable, and the separate additional variable are each selected from the group consisting of:

yaw, lateral acceleration, and longitudinal acceleration.

8. A method of cross-checking values of variable data including at least a yaw rate variable, a lateral acceleration variable, and a longitudinal acceleration variable, transmitted in a system comprising a first processor, a second processor, a first yaw sensor and a second yaw sensor for measuring values for the yaw rate variable, a first lateral acceleration sensor and a second lateral acceleration sensor for measuring values for the lateral acceleration variable, and a longitudinal sensor for measuring values for the longitudinal variable, the method comprising the steps of:

transmitting one or more first yaw rate values from the first yaw sensor to the first processor;

transmitting one or more second yaw rate values from the second yaw sensor to the first processor;

transmitting one or more third yaw rate values from the first yaw sensor to the second processor;

transmitting one or more fourth yaw rate values from the second yaw sensor to the first processor;

transmitting one or more first lateral acceleration values from the first lateral acceleration sensor to the first processor;

transmitting one or more second lateral acceleration values from the second lateral acceleration sensor to the first processor;

transmitting one or more third lateral acceleration values from the first lateral acceleration sensor to the second processor;

transmitting one ore more fourth lateral acceleration values from the second lateral acceleration sensor to the first processor;

transmitting one or more first longitudinal values from the longitudinal sensor to the first processor;

transmitting one or more second longitudinal values from the longitudinal sensor to the first processor;

comparing the one or more first yaw rate values with the one or more third yaw rate values;

comparing the one or more second yaw rate values with the one or more third yaw rate values;

comparing the one or more second yaw rate values with the one or more fourth yaw rate values;

comparing the one or more first lateral acceleration values with the one or more third lateral acceleration values;

comparing the one or more second lateral acceleration values with the one or more third lateral acceleration values;

comparing the one or more second lateral acceleration values with the one or more fourth lateral acceleration values; and

comparing the one or more first longitudinal values with the one or more second longitudinal values.

9. The method of claim 8, further comprising the steps of:

generating a checksum from at least the one or more third yaw rate values, the one or more fourth yaw rate values, and the one or more fourth lateral acceleration values; and

generating a message comprising the checksum and the one or more first yaw rate values, the one or more second yaw rate values, and the one or more second lateral acceleration values.

10. The method of claim 8, further comprising the steps of:

calculating one or more first yaw acceleration values;

calculating one or more second yaw acceleration values;

generating a checksum from at least the one or more third lateral acceleration values, the one or more second longitudinal acceleration values, and the one or more second calculated yaw acceleration values; and

generating a message comprising the checksum and the one or more first lateral acceleration values, the one or more first longitudinal acceleration values, and the one or more first calculated yaw acceleration values.

11. The method of claim 10, wherein the one or more first and second yaw acceleration values are calculated from one or more of the first, second, third, and fourth yaw rate values.

12. The method of claim 8, further comprising the steps of:

calculating one or more first lateral jerk values;

calculating one or more second lateral jerk values;

generating a checksum from at least the one or more third lateral acceleration values, the one or more fourth lateral acceleration values, and the one or more second calculated lateral jerk values; and

generating a message comprising the checksum and the one or more first lateral acceleration values, the one or more second lateral acceleration values, and the one or more first calculated lateral jerk values.

13. The method of claim 12, wherein the one or more first and second lateral jerk values are calculated from one or more of the first, second, third, and fourth lateral acceleration values.

14. An apparatus for cross-checking values of variable data including at least a yaw rate variable, a lateral acceleration variable, and a longitudinal acceleration variable, transmitted in a system comprising a first processor, a second processor, a first yaw sensor and a second yaw sensor for measuring values for the yaw rate variable, a first lateral acceleration sensor and a second lateral acceleration sensor for measuring values for the lateral acceleration variable, and a longitudinal sensor for measuring values for the longitudinal variable, the apparatus comprising:

means for transmitting one or more first yaw rate values from the first yaw sensor to the first processor;

means for transmitting one or more second yaw rate values from the second yaw sensor to the first processor;

means for transmitting one or more third yaw rate values from the first yaw sensor to the second processor;

means for transmitting one or more fourth yaw rate values from the second yaw sensor to the first processor;

means for transmitting one or more first lateral acceleration values from the first lateral acceleration sensor to the first processor;

means for transmitting one or more second lateral acceleration values from the second lateral acceleration sensor to the first processor;

means for transmitting one or more third lateral acceleration values from the first lateral acceleration sensor to the second processor;

means for transmitting one ore more fourth lateral acceleration values from the second lateral acceleration sensor to the first processor;

means for transmitting one or more first longitudinal values from the longitudinal sensor to the first processor;

means for transmitting one or more second longitudinal values from the longitudinal sensor to the first processor;

means for comparing the one or more first yaw rate values with the one or more third yaw rate values;

means for comparing the one or more second yaw rate values with the one or more third yaw rate values;

means for comparing the one or more second yaw rate values with the one or more fourth yaw rate values;

means for comparing the one or more first lateral acceleration values with the one or more third lateral acceleration values;

means for comparing the one or more second lateral acceleration values with the one or more third lateral acceleration values;

means for comparing the one or more second lateral acceleration values with the one or more fourth lateral acceleration values; and

means for comparing the one or more first longitudinal values with the one or more second longitudinal values.

15. The apparatus of claim 14, further comprising:

means for generating a checksum from at least the one or more third yaw rate values, the one or more fourth yaw rate values, and the one or fourth lateral acceleration values; and

means for generating a message comprising the checksum and the one or more first yaw rate values, the one or more second yaw rate values, and the one or more second lateral acceleration values.

16. The apparatus of claim 14, further comprising:

means for calculating one or more first yaw acceleration values;

means for calculating one or more second yaw acceleration values;

means for generating a checksum from at least the one or more third lateral acceleration values, the one or more second longitudinal acceleration values, and the one or more second calculated yaw acceleration values; and

means for generating a message comprising the checksum and the one or more first lateral acceleration values, the one or more first longitudinal acceleration values, and the one or more first calculated yaw acceleration values.

17. The apparatus of claim 16, wherein the means for calculating the one or more first and second yaw acceleration values comprises:

means for calculating the one or more first and second yaw acceleration values from one or more of the first, second, third, and fourth yaw rate values.

18. The apparatus of claim 14, further comprising:

means for calculating one or more first lateral jerk values;

means for calculating one or more second lateral jerk values;

means for generating a checksum from at least the one or more third lateral acceleration values, the one or more fourth lateral acceleration values, and the one or more second calculated lateral jerk values; and

means for generating a message comprising the checksum and the one or more first lateral acceleration values, the one or more second lateral acceleration values, and the one or more first calculated lateral jerk values.

19. The apparatus of claim 18, wherein the means for calculating the one or more first and second lateral jerk values comprises:

means for calculating the one or more first and second lateral jerk values from one or more of the first, second, third, and fourth lateral acceleration values.

20. A method of cross-checking values of variable data including at least a yaw rate variable, a lateral acceleration variable, and a longitudinal acceleration variable, transmitted in a system comprising a first processor, a second processor, a first yaw sensor and a second yaw sensor for measuring values for the yaw rate variable, a first lateral acceleration sensor and a second lateral acceleration sensor for measuring values for the lateral acceleration variable, and a longitudinal sensor for measuring values for the longitudinal variable, the method comprising the steps of:

transmitting one or more first yaw rate values from the first yaw sensor to the first processor;

transmitting one or more second yaw rate values from the second yaw sensor to the first processor;

transmitting one or more third yaw rate values from the first yaw sensor to the second processor;

transmitting one or more fourth yaw rate values from the second yaw sensor to the second processor;

transmitting one or more first lateral acceleration values from the first lateral acceleration sensor to the first processor;

transmitting one or more second lateral acceleration values from the second lateral acceleration sensor to the first processor;

transmitting one or more third lateral acceleration values from the first lateral acceleration sensor to the second processor;

transmitting one ore more fourth lateral acceleration values from the second lateral acceleration sensor to the second processor;

transmitting one or more first longitudinal values from the longitudinal sensor to the first processor;

transmitting one or more second longitudinal values from the longitudinal sensor to the first processor;

comparing the one or more first yaw rate values with the one or more third yaw rate values;

comparing the one or more second yaw rate values with the one or more third yaw rate values;

comparing the one or more second yaw rate values with the one or more fourth yaw rate values;

comparing the one or more first lateral acceleration values with the one or more second lateral acceleration values;

comparing the one or more second lateral acceleration values with the one or more third lateral acceleration values;

comparing the one or more second lateral acceleration values with the one or more fourth lateral acceleration values; and

comparing the one or more first longitudinal values with the one or more second longitudinal values.