Method and arrangement for suppressing incorrect messages in monitoring systems

• US 7,323,974 B2
• Filed: 06/01/2004
• Issued: 01/29/2008
• Est. Priority Date: 06/30/2003
• Status: Active Grant

• Current Assignee: Continental Automotive GmbH (Continental AG)
• Original Assignee: Siemens AG
• Inventors: Skorupa, Raphael, Schmid, Dietmar
• Primary Examiner(s): NGUYEN, HUNG T
• Application Number:
  US10/542,210
• Publication Number:
  US 20060125611A1
• Time in Patent Office: 1,337 Days
• Field of Search: 340/438, 340/439, 340/635, 340/441, 340/425.5, 235/375, 235/376, 235/380, 235/383, 701/46, 710/11, 710/14, 710/31, 710/33
• US Class Current: 340/438
• CPC Class Codes: B60W 2050/0215 Sensor drifts or sensor failures
• CPC Class Codes: G08B 29/185 Signal analysis techniques for reducing or preventing false alarms or for enhancing the reliability of the system
• CPC Class Codes: G08B 29/26 by updating and storing reference thresholds
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

The invention relates to a method and to an arrangement for eliminating false messages in monitoring systems for electronic devices, especially for sensor circuits in motor vehicles. According to the inventive method, error messages increment a counter and an alarm is triggered when a predetermined position on the counter is reached.

Claims

1. A method for suppressing incorrect messages in a monitoring system for sensor circuits for motor vehicles, including using a program running on a processor to perform the steps of:

monitoring at least one input variable and checking whether the at least one monitored input variable exceeds a limiting value defined for the at least one input variable;

deriving a fault message when the at least one input variable being monitored exceeds the limiting value defined for that at least one input variable;

incrementing a counter respectively associated with the at least one input variable in response to the fault message by a first predetermined number of counter steps;

checking the counter to determine whether at least one fault message is present for one of the at least one input variable;

decrementing the counter for the at least one input variable by a second predetermined number of counter steps when a time period elapses without the occurrence of a fault message for that at least one input variable;

performing the step of monitoring and checking for the one of the at least one input variable if it is determined that at least one fault message is present for the one of the at least one input variable in said step of checking the counter; and

triggering an alarm only if the counter reaches an alarm limit for the at least one input variable.

2. The method of claim 1, wherein the size of the increment and the value of the alarm limit are predefined for the at least one input variable.

3. The method of claim 2, wherein the size of the increment and the value of the alarm limit are read from a nonvolatile memory when the process is initiated.

4. The method of claim 1, wherein fault messages are derived for each one of the at least one input variables to be monitored, wherein the size of the increments, the value of the alarm limits, and the limiting values are preselected for the each one of the at least one input variables.

5. The method of claim 1, wherein the step of performing the step of monitoring and checking is performed according to a priority list if it is determined that a fault message is present for more than one of the at least one input variable.

6. An arrangement for suppressing incorrect messages in a monitoring system for sensor circuits for motor vehicles, comprising a microprocessor running a program for executing the steps of:

monitoring at least one input variable and checking whether the at least one monitored input variable exceeds a limiting value defined for the at least one input variable;

deriving a fault message when the at least one input variable being monitored exceeds the limiting value defined for that at least one input variable;

incrementing a counter respectively associated with the at least one input variable in response to the fault message by a first predetermined number of counter steps;

checking the counter to determine whether at least one fault message is present for one of the at least one input variable;

decrementing the counter for the at least one input variable by a second predetermined number of counter steps when a time period elapses without the occurrence of a fault message for that at least one input variable;

performing the step of monitoring and checking for the one of the at least one input variable if it is determined that at least one fault message is present for the one of the at least one input variable in said step of checking the counter; and

triggering an alarm only if the counter reaches an alarm limit for the at least one input variable.