Method and apparatus for monitoring processor integrity in a distributed control module system for a powertrain system

• US 8,244,426 B2
• Filed: 10/03/2008
• Issued: 08/14/2012
• Est. Priority Date: 10/27/2007
• Status: Expired due to Fees

• Current Assignee: Bayerische Motoren Werke AG, Daimler AG (Mercedes-Benz Group AG), Chrysler Group LLC (Stellantis NV)
• Original Assignee: Bayerische Motoren Werke AG, GM Global Technology Operations LLC (General Motors Company), Daimler AG (Mercedes-Benz Group AG), Chrysler Group LLC (Stellantis NV)
• Inventors: Buur, Hanne, Kurnik, James T., West, Stephen T., Tarby, David
• Primary Examiner(s): Vanaman, Frank
• Application Number:
  US12/244,835
• Publication Number:
  US 20090112392A1
• Time in Patent Office: 1,411 Days
• Field of Search: 701/29, 701/31, 701/32, 701/33, 701/34, 701/76, 180/65.1, 180/65.21, 340/3.1, 340/3.43, 340/10.5
• US Class Current: 701/29.2
• CPC Class Codes: B60W 10/02 including control of driveline clutches
• CPC Class Codes: B60W 10/06 including control of combustion engines
• CPC Class Codes: B60W 10/08 including control of electric propulsion units, e.g. motors or generators
• CPC Class Codes: B60W 10/24 including control of energy storage means
• CPC Class Codes: B60W 20/00 Control systems specially adapted for hybrid vehicles hybrid vehicle design, B60K6/00; electric vehicles B60L
• CPC Class Codes: B60W 50/02 Ensuring safety in case of control system failures, e.g. by diagnosing, circumventing or fixing failures
• CPC Class Codes: B60W 50/045 Monitoring control system parameters
• CPC Class Codes: G05B 23/0256 injecting test signals and analyzing monitored process response, e.g. injecting the test signal while interrupting the normal operation of the monitored system; superimposing the test signal onto a control signal during normal operation of the monitored system
• CPC Class Codes: Y02T 10/62 Hybrid vehicles

Abstract

A method for monitoring a main control module operative to command first and second motor control processors of a hybrid powertrain system includes signally connecting a programmable logic device to the main control module and the first and second motor control processors, communicating a first seed signal from the programmable logic device to the main control module, and determining an invalid key signal in the main control module in response to the first seed signal. The invalid key signal is communicated to the programmable logic device.

Claims

1. A method for monitoring a main control module and first and second motor control processors operative to control first and second torque actuators of a hybrid powertrain system, the method comprising:

implementing a programmable logic device;

directly signally connecting a discrete output from the programmable logic device to the main control module and to each of the motor control processors;

signally connecting the main control module and the programmable logic device via a first communications bus;

signally connecting each of the main control module and the first motor control processor to a serial communications bus;

communicating a seed signal from the programmable logic device to the main control module via the first communications bus;

determining a key signal in the main control module based upon the seed signal;

communicating the key signal to the programmable logic device via the first communications bus;

determining a state of the discrete output in the programmable logic device based upon the key signal;

directly communicating the state of the discrete output from the programmable logic device to the main control module and to each of the motor control processors via electric cables; and

transmitting a signal determined based upon the state of the discrete output from the first motor control processor to the serial communications bus.

2. The method of claim 1, further comprising

communicating a first state of the discrete output from the programmable logic device to each of the motor control processors when the key signal corresponds to the seed signal;

and

communicating a second state of the discrete output from the programmable logic device to each of the motor control processors when the key signal does not correspond to the seed signal.

3. The method of claim 2, further comprising effecting communications between the main control module and the first and second motor control processors when the key signal corresponds to the seed signal.

4. The method of claim 2, further comprising the first and second motor control processors selectively disregarding communications from the main control module when the key signal does not correspond to the seed signal.

5. The method of claim 4, comprising commanding zero torque output from the first and second torque actuators.

6. The method of claim 1, further comprising detecting a key-off event;

communicating a test in progress from the main control module to the first and second first and second motor control processors via second and third communications buses;

communicating a seed signal from the programmable logic device to the main control module via the first communications bus;

communicating an invalid key signal from the main control module to the programmable logic device via the first communications bus;

determining and communicating a state of the discrete output in the programmable logic device based upon the invalid key signal to the main control module and to each of the motor control processors via the electric cables; and

transmitting a signal that is determined based upon the state of the discrete output from the first motor control processor to the serial communications bus.

7. The method of claim 6, comprising transmitting a signal indicative of a passed test when the state of the discrete output in the programmable logic device indicates a fault.