Safety system for a vehicle of a vehicle fleet

• US 10,479,303 B2
• Filed: 12/17/2015
• Issued: 11/19/2019
• Est. Priority Date: 12/18/2014
• Status: Active Grant

• Current Assignee: Robert Bosch GmbH
• Original Assignee: Robert Bosch GmbH
• Inventors: Koehler, Armin, Freienstein, Heiko
• Primary Examiner(s): Fleming, Faye M
• Application Number:
  US15/527,408
• Publication Number:
  US 20170349127A1
• Time in Patent Office: 1,433 Days
• CPC Class Codes: B60R 21/013 including means for detecting collisions, impending collisions or roll-over
• CPC Class Codes: B60R 21/0134 responsive to imminent contact with an obstacle , e.g. using radar systems
• CPC Class Codes: B60R 21/0136 responsive to actual contact with an obstacle , e.g. to vehicle deformation, bumper displacement or bumper velocity relative to the vehicle monitoring crash strength in combination with passenger seat detection B60R21/01558
• CPC Class Codes: B60R 21/0173 Diagnostic or recording means therefor
• CPC Class Codes: B60W 30/085 Taking automatic action to adjust vehicle attitude in preparation for collision, e.g. braking for nose dropping
• CPC Class Codes: G01S 13/93 for anti-collision purposes
• CPC Class Codes: G01S 17/93 for anti-collision purposes
• CPC Class Codes: G07C 5/008 communicating information to a remotely located station transmission systems for measured values G08C
• CPC Class Codes: G07C 5/085 using electronic data carriers
• CPC Class Codes: G08G 1/164 Centralised systems, e.g. external to vehicles
• CPC Class Codes: G08G 1/166 for active traffic, e.g. moving vehicles, pedestrians, bikes

Abstract

A pre-crash system has at least one dummy actuator and an adaptive pre-trigger function that is implemented with different parameter sets as a function of a current degree of validation, and evaluates the acquired physical quantities for pre-crash recognition in order to recognize an unavoidable crash, a first parameter set, which limits the pre-trigger function to a dummy operating mode in which the pre-trigger function produces at least one trigger signal for the dummy actuator if the evaluation of the physical quantities permits the inference of an unavoidable crash, being implemented until the current degree of validation satisfies a specified condition, the pre-trigger function comparing the triggering of the dummy actuator with the behavior of the evaluation and control unit, and, as a function of the comparison, rating the triggering of the dummy actuator as “correct” or as a “false positive.”

Claims

1. A safety system for a vehicle of a fleet of vehicles, comprising:

a personal protection device;

a contact sensor system for acquiring at least one impact-relevant physical quantity;

an environmental sensor system for acquiring at least one crash-relevant physical quantity in an environment surrounding the vehicle; and

an evaluation and control unit;

wherein;

the evaluation and control unit is configured to;

evaluate the at least one impact-relevant physical quantity acquired by the contact sensor system;

execute an adaptive pre-trigger function by which to;

evaluate the at least one crash-relevant physical quantity acquired by the environmental sensor system;

based on the evaluation of the at least one crash-relevant physical quantity acquired by the environmental sensor system, recognize that an unavoidable crash, which has not yet occurred, will occur; and

based on the recognition that the unavoidable crash will occur and only when the adaptive pre-trigger function is validated to be accurate, output a trigger signal that triggers deployment of the personal protection device prior to occurrence of the unavoidable crash; and

determine, for respective recognitions that the unavoidable crash will occur, whether a respective corresponding crash impact is recognized subsequent to the respective recognition that the unavoidable crash will occur, with a result of the determination impacting a rating indicating whether there is a threshold correspondence between the recognitions that the unavoidable crash will occur and the recognitions of crash impact; and

the adaptive pre-trigger function;

is initially installed without being validated to be accurate, prior to the rating indicating that there is the threshold correspondence, so that one or more recognitions that the unavoidable crash will occur is made by the execution of the adaptive pre-trigger function without the trigger signal being output to trigger the deployment of the personal protection device; and

is subsequently updated to be validated to be accurate in response to the rating being changed to indicate that there is the threshold correspondence so that in response to a subsequent recognition that the unavoidable crash will occur, the adaptive pre-trigger function causes deployment of the personal protection device prior to any corresponding crash impact being determined.

2. The safety system as recited in claim 1, further comprising a data recorder that stores the rating and sums operating hours.

3. The safety system as recited in claim 1, further comprising a first communication device via which the safety system is configured to transmit at least one of the rating and a sum of operating hours to a central unit.

4. The safety system as recited in claim 3, wherein the first communication device receives an update from the central unit by which the adaptive pre-trigger function is validated to be accurate, thereby enabling the output of the trigger signal that triggers the deployment of the personal protection device in response to the recognition that the unavoidable crash will occur.

11. The safety system as recited in claim 1, wherein, in response to the recognition that the unavoidable crash will occur prior to the validation of the adaptive pre-trigger function, the evaluation and control unit executing the adaptive pre-trigger function is configured to provide the trigger signal to a device that does not react to produce any output.

5. A system for validating a pre-trigger function for a safety system in vehicles of a fleet of vehicles, comprising:

a central unit that includes a computer system, a first communication device, and storage device, the computer system communicating with and exchanging data with the vehicles of the vehicle fleet via the first communication device;

wherein;

the safety system of the individual vehicles of the vehicle fleet includes;

a personal protection device;

a contact sensor system for acquiring at least one impact-relevant physical quantity;

an environmental sensor system for acquiring at least one crash-relevant physical quantity in an environment surrounding the vehicle; and

an evaluation and control unit;

the evaluation and control unit is configured to;

evaluate the at least one impact-relevant physical quantity acquired by the contact sensor system;

execute an adaptive pre-trigger function by which to;

evaluate the at least one crash-relevant physical quantity acquired by the environmental sensor system;

based on the evaluation of the at least one crash-relevant physical quantity acquired by the environmental sensor system, recognize that an unavoidable crash, which has not yet occurred, will occur; and

based on the recognition that the unavoidable crash will occur and only when the adaptive pre-trigger function is validated to be accurate, output a trigger signal that triggers deployment of the personal protection device prior to occurrence of the unavoidable crash; and

determine, for respective recognitions that the unavoidable crash will occur, whether a respective corresponding crash impact is recognized subsequent to the respective recognition that the unavoidable crash will occur, with a result of the determination impacting a respective rating of correspondence in the respective vehicle between the recognitions that the unavoidable crash will occur and the recognitions of crash impact, by which a determination is made of whether there is a threshold correspondence between the recognitions that the unavoidable crash will occur and the recognitions of crash impact;

the adaptive pre-trigger function;

is initially installed without being validated to be accurate, prior to the rating indicating that there is the threshold correspondence, so that one or more recognitions that the unavoidable crash will occur is made by the execution of the adaptive pre-trigger function without the trigger signal being output to trigger the deployment of the personal protection device; and

is subsequently updated to be validated to be accurate in response to the rating being changed to indicate that there is the threshold correspondence; and

the computer system;

receives data including one or both of (a) the respective ratings and (b) respective sums of operating hours of the adaptive pre-trigger function in the respective vehicles of the vehicle fleet;

stores the data in the storage device;

evaluates the data to determine whether the threshold correspondence is met; and

in response to determining that the threshold correspondence is met, transmits, to the vehicles of the vehicle fleet and via the first communication device, an update by which the adaptive pre-trigger function in the vehicles of the vehicle fleet is validated to be accurate, so that in response to a subsequent recognition that the unavoidable crash will occur, the adaptive pre-trigger function causes deployment of the personal protection device prior to any corresponding crash impact being determined.

6. The system as recited in claim 5, wherein the computer system:

ascertains a number of “

false positives”

of in which the execution of the adaptive pre-trigger function in the vehicles of the vehicle fleet resulted in a recognition that the unavoidable crash will occur without a corresponding impact recognition;

ascertains a sum of the operating hours of the vehicles of the vehicle fleet; and

calculates a current correspondence between the recognitions that the unavoidable crash will occur and the recognitions of impact as the number of “

false positives”

per unit of time.

7. The system as recited in claim 6, wherein the computer system determines whether the calculated current correspondence meets the threshold correspondence so that the update is transmitted when the number of “

false positives”

per unit of time is below a predefined threshold value.

8. The system as recited in claim 5, wherein the computer system communicates with second communication devices of the vehicles of the vehicle fleet via the first communication device directly or indirectly via a third communication device.

9. The system as recited in claim 8, wherein the third communication device is situated in a workshop and reads out respective data recorders of the vehicles of the vehicle fleet via the respective second communication devices during respective diagnoses.

10. The system as recited in claim 9, wherein the communication devices are IP nodes.