Optimized Power Supply Architecture

A power supply architecture provides for the efficient distribution and failsafe monitoring of power in a microcontroller system. The power supply architecture incorporates various components with high integrity and diverse monitoring schemes that allow the associated control processors to operate with high safety standards. The various embodiments provide an integrated method or apparatus for an electronic module safety architecture which includes diversity, time and space independence for power supplies for the various microprocessors and control communication buses.

Control system for controlling operational modes of a DC-DC voltage converter

A control system for controlling operational modes of a DC-DC voltage converter is provided. The DC-DC voltage converter initially has an idle operational mode. The microcontroller having first and second operational mode applications. The first operational mode application determines a first encoded value based on the first operational mode value, and further determines first and second values based on the first encoded value. The second operational mode application determines a second encoded value based on the first operational mode value, and further determines third and fourth values based on the second encoded value. The first operational mode application induces the DC-DC voltage converter to transition to the first operational mode if the second value is equal to the third value.

Diagnostic system for a power supply

A diagnostic system for a power supply having first and second output terminals that output first and second reference voltages, respectively, is provided. The diagnostic system includes a microcontroller having an analog-to-digital converter with first and second banks of channels. The microcontroller samples the first reference voltage at a first sampling rate utilizing a first common channel in the first bank of channels to obtain a first predetermined number of voltage samples. The microcontroller determines a first number of voltage samples in the first predetermined number of voltage samples in which the first reference voltage was outside of a predetermined voltage range. The microcontroller sets a first power supply diagnostic flag equal to a first fault value if the first number of voltage samples is greater than a first threshold number of voltage samples.

Diagnostic system for a voltage regulator

A diagnostic system for a voltage regulator is provided. The diagnostic system includes a microcontroller having first and second analog-to-digital converters and first and second output ports. The first analog-to-digital converter outputs a first voltage value corresponding to the first voltage from the voltage regulator. The microcontroller executes a first diagnostic function to set a first voltage regulator diagnostic flag equal to a fault value indicating a voltage out of range condition, if the first voltage value is greater than a first threshold voltage value or the first voltage value is less than a second threshold voltage value. The microcontroller executes a second diagnostic function to stop generating first and second control signals to de-energize a contactor coil to open a contact of a contactor if the first voltage regulator diagnostic flag is equal to the fault value.

MULTI-CELL VOLTAGE SECURE DATA ENCODING IN HYBRID VEHICLES

Methods and systems are provided for encoding vehicle data comprising a first voltage pertaining to a first battery cell and a second voltage pertaining to a second battery cell is provided. A determination is made as to whether the first voltage is valid. In addition, a determination is made as to whether the second voltage is valid. One of a plurality of values is assigned to a validity measure based at least in part on whether the first voltage or the second voltage, or both, are valid. The plurality of values, in binary form, are at least two bit errors removed from one another. 1. A method of encoding vehicle data comprising a first voltage pertaining to a first battery cell and a second voltage pertaining to a second battery cell , the method comprising the steps of:determining whether the first voltage is valid;determining whether the second voltage is valid; andassigning one of a plurality of values to a validity measure based at least in part on whether the first voltage or the second voltage, or both, are valid;wherein the plurality of values, in binary form, are at least two bit errors removed from one another.2. The method of claim 1 , further comprising the step of:generating a message comprising the first voltage, the second voltage, and the validity measure.3. The method of claim 2 , further comprising the step of:transmitting the message.4. The method of claim 1 , wherein the vehicle data further comprises a third voltage pertaining to a third battery cell claim 1 , and the step of assigning one of the plurality of values to the validity measure comprises the steps of:assigning a first value of the plurality of values to the validity measure if the first voltage, the second voltage, and the third voltage each are valid;assigning a second value of the plurality of values to the validity measure if the first voltage and the second voltage each are valid and the third voltage is invalid;assigning a third value of the plurality of values to the validity ...

POWER SUPPLY DIAGNOSTIC STRATEGY

A power supply diagnostic strategy for discrete power supply diagnostic states is independent of the underlying memory structure. The values used in the associated algorithm are selected to ensure that random linked failures will be detected. This applies to planar memory structures with 1, 2, 4, 6, 8, 12, and 16 common lattices, or physical memory structures with individual bit dispersed memories with 1, 2, 4, 6, 8, 12, and 16 consecutive bit splices. Further, the strategy provides that the various monitored voltage tables remains distinct even with compiler optimization activated. 1. A method for diagnosing the status of an operating voltage comprising:(a) using a processor to read an operating voltage and to determine one of the following states: (1) “no” OV, “no” UV; (2) “no” OV, “yes” UV; (3) “yes” OV, “no” UV or (4) “yes” OV, “yes” UV;(b) assigning a distinct byte value for each of the states identified in step (a), wherein the distinct values are selected having a hamming distance of at least 4; and(c) storing an operating status value corresponding to the determined operating state in a designated memory location of the processor.2. The method of wherein each distinct byte value of step (b) includes a USNb and a LSNb claim 1 , and wherein all of the USNbs are distinct and are selected having a hamming distance of at least 2 claim 1 , and all the LSNbs are distinct and are selected having a hamming distance of at least 2.3. The method of wherein each of the USNbs and LSNbs are chosen from an unbalanced set of nibble values.4. The method of wherein each of the USNbs and LSNbs are chosen for each distinct value such that they are not complements of one another.5. The method of wherein the unbalanced set of nibbles include hex values 1 claim 3 , 2 claim 3 , 4 claim 3 , 7 claim 3 , 8 claim 3 , B claim 3 , D and E.6. The method of wherein the USNbs are selected from the group 7 claim 5 , B claim 5 , D and E and the LSNbs are selected from the group 1 claim 5 , 2 ...

Systems for determining a voltage out-of-range high condition and a voltage out-of-range low condition of a battery module

A system for determining a voltage out-of-range high condition of a battery module is provided. A microcontroller determines first, second, and third voltage values from first, second, and third voltage sensors, respectively, coupled to first, second, and third battery cells, respectively; and determines a battery module voltage value based on a fourth signal. The microcontroller sums the first, second, and third voltage values to obtain a battery module high voltage sum value. The microcontroller generates a first control signal to induce a contactor to transition to an open operational position to electrically decouple the battery module from an electrical load, if a difference between the battery module high voltage sum value and the battery module voltage value is greater than or equal to a battery module voltage out-of-range high error value.

VOLTAGE MONITORING SYSTEM UTILIZING A COMMON CHANNEL AND EXCHANGED ENCODED CHANNEL NUMBERS TO CONFIRM VALID VOLTAGE VALUES

A voltage monitoring system having a microcontroller with first and second monitoring applications and a hardware abstraction layer is provided. The hardware abstraction layer sends a second encoded channel number and a first measured voltage value to the first monitoring application. The first monitoring application sends the second encoded channel number to the second monitoring application. The hardware abstraction layer sends a fourth encoded channel number and a second measured voltage value to the second monitoring application. The second monitoring application stores the second measured voltage value in the memory device if the fourth encoded channel number is equal to a first expected encoded channel number, and the second encoded channel number is equal to a second expected encoded channel number. 1. A voltage monitoring system , comprising:a microcontroller having first and second applications, a hardware abstraction layer, and an analog-to-digital converter with a first bank of channels including a first common channel, and as second bank of channels including a first common channel electrically coupled to the first common channel of the first bank of channels;the first application sending a first request message to the hardware abstraction layer that requests a first voltage value from the first common channel of the first bank of channels, the first request message having a first encoded channel number associated with the first common channel of the first bank of channels;the hardware abstraction layer determining a first channel number based on the first encoded channel number, the first channel number being associated with the first common channel of the first bank of channels;the hardware abstraction layer sending a first response message having a second encoded channel number and a first voltage value associated with the first channel number to the first application;the first application sending a first exchanged message having the second encoded ...

Voltage monitoring system utilizing first and second banks of channels and exchanged encoded channel numbers for taking redundant safe action

A voltage monitoring system having a microcontroller with first and second monitoring applications and a hardware abstraction layer is provided. The hardware abstraction layer obtains a first measured voltage value associated with a first channel number. The hardware abstraction layer determines a second encoded channel number based on the first channel number. The hardware abstraction layer sends a first response message having the second encoded channel number and a first measured voltage value therein to the first monitoring application. The first monitoring application commands the microcontroller to generate first and second control signals to transition a contactor to an open operational state, if the second encoded channel number is not equal to a first expected encoded channel number

Voltage monitoring system

A voltage monitoring system having a microcontroller with an analog-to-digital converter with a first channel, and a memory device is provided. The microcontroller includes a monitoring application and a hardware abstraction layer. The monitoring application sends a first encoded channel number to the hardware abstraction layer. The hardware abstraction layer determines a first channel number based on the first encoded channel number, and obtains a measured voltage value associated with the first channel number. The hardware abstraction layer sends a second encoded channel number and the measured voltage value therein to the monitoring application. If the first encoded channel number is equal to the second encoded channel number, then the monitoring application stores the measured voltage value in the memory device.

DIAGNOSTIC SYSTEM FOR A DC-DC VOLTAGE CONVERTER

A diagnostic system for a DC-DC voltage converter is provided. An analog to digital converter measures a first low voltage level at a low voltage terminal of a DC-DC voltage converter and generates a first low voltage value based on the first low voltage level. A first buck mode monitoring application sets a first buck mode status flag equal to a first fault value when the first low voltage value is greater than a first maximum voltage value. A first buck mode diagnostic handler application transitions each of the high voltage switch and the low voltage switch to an open operational state when the first buck mode status flag is equal to the first fault value. 1. A diagnostic system for a DC-DC voltage converter operating in a buck operational mode , the DC-DC voltage converter having a high voltage switch , a low voltage switch , a DC-DC converter control circuit , a high voltage terminal , and a low voltage terminal; the DC-DC converter control circuit being electrically coupled between and to the high voltage switch and the low voltage switch , the high voltage switch being further electrically coupled to the high voltage terminal , the low voltage switch being further electrically coupled to the low voltage terminal , the diagnostic system comprising:a microcontroller having a microprocessor and an analog-to-digital converter, the microprocessor having a first buck mode monitoring application, a first buck mode diagnostic handler application, a second buck mode monitoring application, and a second buck mode diagnostic handler application;the analog to digital converter measuring a first low voltage level at the low voltage terminal of the DC-DC voltage converter and generating a first low voltage value based on the first low voltage level;the first buck mode monitoring application setting a first buck mode status flag equal to a first fault value when the first low voltage value is greater than a first maximum voltage value;the first buck mode diagnostic handler ...

Diagnostic system for a vehicle electrical system having a voltage regulator

A diagnostic system having first and second applications is provided. The first application multiplies a first voltage value associated with a voltage regulator by a first correction value to obtain a first corrected voltage value. The first application receives a second corrected voltage value from the second application. The first application sets a first voltage regulator status flag equal to a first fault value when a difference between the first and second corrected voltage values is greater than a threshold difference value. The first diagnostic handler application generates control signals if the first voltage regulator status flag is equal to the first fault value.

DIAGNOSTIC SYSTEM FOR A VEHICLE ELECTRICAL SYSTEM HAVING FIRST AND SECOND VOLTAGE REGULATORS

A diagnostic system for a vehicle electrical system having first and second voltage regulators outputting first and second voltages, respectively, is provided. The diagnostic system includes a microcontroller having an analog-to-digital converter, a first application, and a first diagnostic handler application. The first application sets a first analog-to-digital converter status flag equal to a first fault value when a difference between a first corrected voltage value and a second corrected voltage value is greater than a threshold difference value indicating that the analog-to-digital converter is malfunctioning. The first diagnostic handler application commanding a digital input-output device to generate control signals if the first analog-to-digital converter status flag is equal to the first fault value. 1. A diagnostic system for a vehicle electrical system having first and second voltage regulators outputting first and second voltages , respectively , comprising:a microcontroller having an analog-to-digital converter, a first application, and a first diagnostic handler application;a first voltage divider circuit electrically coupled between the first voltage regulator and a first channel of the analog-to-digital converter, such that the first channel receives a third voltage from the first voltage divider circuit;the analog-to-digital converter measuring the third voltage at a first time and generating a first voltage value based on the third voltage;the first application multiplying the first voltage value by a first correction value to obtain a first corrected voltage value;the first application setting a first analog-to-digital converter status flag equal to a first fault value when a difference between a first corrected voltage value and a second corrected voltage value is greater than a threshold difference value indicating that the analog-to-digital converter is malfunctioning; andthe first diagnostic handler application commanding a digital input- ...

SELF-DIAGNOSING BATTERY CELL MONITORING SYSTEM

A self-diagnosing battery cell monitoring system having a battery cell voltage monitoring IC with a digital voltage substrate, an analog differential voltage substrate, and an analog voltage substrate is provided. The first diagnostic handler application commands a digital input-output device to generate control signals to transition a contactor to an open operational state if the first diagnostic flag associated with the digital voltage substrate is equal to the first encoded fault value, or the second diagnostic flag associated with the analog differential voltage substrate is equal to the second encoded fault value, or the third diagnostic flag associated with the analog voltage substrate is equal to the third encoded fault value. 1. A self-diagnosing battery cell monitoring system , comprising:a battery cell voltage monitoring IC having a digital voltage substrate, an analog differential voltage substrate, and an analog voltage substrate therein having trenched electrical isolation therebetween;a microcontroller having a first memory buffer, first, second, and third applications, and a first diagnostic handler application;the first memory buffer having first, second, and third diagnostic bits associated with the digital voltage substrate, the analog differential voltage substrate, and the analog voltage substrate, respectively;the first application setting a first diagnostic flag to a first encoded fault value if the first diagnostic bit in the first memory buffer is equal to a first bit value indicating a fault condition in the digital voltage substrate;the second application setting a second diagnostic flag to a second encoded fault value if the second diagnostic bit in the first memory buffer is equal to the first bit value indicating a fault condition in the analog differential voltage substrate;the third application setting a third diagnostic flag to a third encoded fault value if the third diagnostic bit in the first memory buffer is equal to the first bit ...

DIAGNOSTIC SYSTEM FOR A DC-DC VOLTAGE CONVERTER

A diagnostic system for a DC-DC voltage converter is provided. A first temperature sensor generates a first temperature signal associated with a buck mode integrated circuit. A first analog multiplexer outputs the first temperature signal to a first analog-to-digital converter which generates a first temperature value. A second temperature sensor generates a second temperature signal associated with a boost mode integrated circuit. A second analog multiplexer outputs the second temperature signal to a second analog-to-digital converter which generates a second temperature value. A microcontroller generates control signals to command first and second bi-directional switches in the DC-DC voltage converter to each transition to an open operational state if the first temperature value is greater than a first threshold temperature value. 1. A diagnostic system for a DC-DC voltage converter , the DC-DC voltage converter having a first bi-directional switch , a second bi-directional switch , and a DC-DC converter control circuit; the DC-DC converter control circuit having a buck mode integrated circuit and a boost mode integrated circuit , the diagnostic system comprising:a microcontroller generating a first control signal that is received by the DC-DC converter control circuit to command the buck mode integrated circuit to activate, while the boost mode integrated circuit is de-activated;a first temperature sensor generating a first temperature signal indicative of a temperature level of the buck mode integrated circuit;a first analog multiplexer having an input port and an output port, the input port of the first analog multiplexer being electrically coupled to the first temperature sensor, the output port of the first analog multiplexer being electrically coupled to a first analog-to-digital converter of the microcontroller; the first analog multiplexer receiving the first temperature signal and outputting the first temperature signal to the first analog-to-digital ...

Watchdog monitoring system that utilizes a disable application to monitor operation of an enable application

A watchdog monitoring system having a watchdog integrated circuit and a microcontroller is provided. The microcontroller has a microprocessor, and a digital input/output device with an enable pin and a disable pin. A disable application in the microcontroller monitors the enable pin of the digital input-output device, and if the enable pin does not have a high logic state within a predetermined amount of time after a first time indicating that the microcontroller is malfunctioning, then the disable application generates a control message.

Self-diagnosing watchdog monitoring system

A self-diagnosing watchdog monitoring system having a watchdog IC and a microcontroller is provided. The microcontroller has a microprocessor, and a digital input/output device with an enable pin and a disable pin. An enable application in the microcontroller monitors the disable pin of the digital input-output device, and if the disable pin does not have a low logic state within a predetermined amount of time after a first time indicating that the disable application is malfunctioning, then the enable application generates a control message.

SELF-DIAGNOSING MICROCONTROLLER FOR READING CORRECT CHANNELS OF AN ANALOG-TO-DIGITAL CONVERTER

A self-diagnosing microcontroller includes a microprocessor having first and second applications, and a hardware abstraction layer. The microprocessor is operably coupled to an analog-to-digital converter. The hardware abstraction layer sequentially sets a first pre-check indicator to a first fault value for each encoded channel number of a second plurality of encoded channel numbers that does not have an identical and corresponding encoded channel number in a first plurality of encoded channel numbers indicating an incorrect channel was read from the analog-to-digital converter, and sends the first pre-check indicator to the first application. 1. A self-diagnosing microcontroller , comprising:a microprocessor having first and second applications, and a hardware abstraction layer; the microprocessor being operably coupled to a first analog-to-digital converter;the first application sequentially sending each encoded channel number of a first plurality of encoded channel numbers associated with the first analog-to-digital converter to the hardware abstraction layer;the hardware abstraction layer sequentially determining each channel number of a first plurality of channel numbers utilizing an associated encoded channel number of the first plurality of encoded channel numbers and sequentially reading associated voltages at a plurality of channels of the first analog-to-digital converter utilizing the first plurality of channel numbers;the hardware abstraction layer sequentially determining each encoded channel number of a second plurality of encoded channel numbers utilizing an associated channel number of the first plurality of channel numbers; andthe hardware abstraction layer sequentially setting a first pre-check indicator to a first fault value for each encoded channel number of the second plurality of encoded channel numbers that does not have an identical and corresponding encoded channel number in the first plurality of encoded channel numbers, and sending the ...

DIAGNOSTIC SYSTEM FOR A VEHICLE ELECTRICAL SYSTEM

A diagnostic system includes a microcontroller having a first A/D converter, first and second applications, and a first analog multiplexer electrically between a first voltage regulator and the first A/D converter. The first application sets a first overvoltage diagnostic flag to a first fault value if a first voltage of the first voltage regulator that is measured by the first A/D converter is greater than a first voltage, and in response further transitions a contactor to an open operational state. The second application sets a second overvoltage diagnostic flag to a second fault value if a second voltage of the first voltage regulator that is measured by the first A/D converter is greater than a second voltage, and in response further transitions the contactor to the open operational state.

BATTERY MANAGEMENT SYSTEM THAT DETECTS COMMUNICATION FAULTS

A battery management system includes a microcontroller having first and second applications. The first application transitions a contactor to an open operational position if a first CRC diagnostic flag is equal to a first encoded fault value. The second application transitions the contactor to the open operational position if a second CRC diagnostic flag is equal to a second encoded fault value. The first and second encoded fault values have a Hamming distance of at least four from one another 1. A battery management system , comprising:a microcontroller having first and second applications;a voltage monitoring IC operably coupled to the microcontroller utilizing a serial communication bus;the microcontroller sending a first message to the voltage monitoring IC, the first message having first binary command and a first CRC value;the voltage monitoring IC calculating a second CRC value based on the first binary command in the first message;the voltage monitoring IC setting a first CRC diagnostic bit equal to a fault value if the first CRC value is not equal to the second CRC value;the voltage monitoring IC sending a second message to the microcontroller having first binary voltage information and the first CRC diagnostic bit;the microcontroller saving second and third CRC diagnostic bits to first and second memory locations, respectively, that are identical to the first CRC diagnostic bit;the first application setting a first CRC diagnostic flag to a first encoded fault value if the second CRC diagnostic bit is equal to the fault value;the first application transitioning a contactor to an open operational position if the first CRC diagnostic flag is equal to the first encoded fault value;the second application setting a second CRC diagnostic flag to a second encoded fault value if the third CRC diagnostic bit is equal to the fault value; andthe second application transitioning the contactor to the open operational position if the second CRC diagnostic flag is equal ...

DIAGNOSTIC SYSTEM FOR A VEHICLE ELECTRICAL SYSTEM HAVING A DC-DC VOLTAGE CONVERTER AND A VOLTAGE REGULATOR

A diagnostic system is provided. A first monitoring application sets a first voltage regulator status flag equal to a first fault value when a first voltage value is greater than a first maximum voltage value. A first diagnostic handler application transitions each of a high voltage switch and a low voltage switch to an open operational state when the first voltage regulator status flag is equal to the first fault value. A second monitoring application sets a second voltage regulator status flag equal to a second fault value when the second voltage value is less than a first minimum voltage value. A second diagnostic handler application transitions the high voltage switch and the low voltage switch to the open operational state when the second voltage regulator status flag is equal to the second fault value. 1. A diagnostic system for a vehicle electrical system having a DC-DC voltage converter and a voltage regulator , the DC-DC voltage converter having a DC-DC voltage converter control circuit coupled between a high voltage switch and a low voltage switch , the voltage regulator having first and second output terminals outputting first and second voltages , respectively , comprising:a microcontroller having a microprocessor and a first analog-to-digital converter, the microprocessor having first and second voltage regulator monitoring applications and first and second diagnostic handler applications;the first analog-to-digital converter measuring the first voltage of the voltage regulator at a first time and generating a first voltage value based on the first voltage;the first voltage regulator monitoring application setting a first voltage regulator status flag equal to a first fault value when the first voltage value is greater than a first maximum voltage value;the first diagnostic handler application transitioning each of the high voltage switch and the low voltage switch to an open operational state when the first voltage regulator status flag is equal to the ...

BATTERY CELL MANAGEMENT SYSTEM

A battery cell management system includes a microcontroller having first and second applications and first and second memory buffers. The first and second memory buffers have first and second overvoltage fault bits, respectively, associated with a first battery cell. The first application sets a first encoded overvoltage fault indicator equal to a first fault value if the first overvoltage fault bit of the first memory buffer is equal to a first binary value. The first application receives a second encoded overvoltage fault indicator from the second application. The first application commands a digital input-output device to generate control signals to transition a contactor to an open operational state if either the first encoded overvoltage fault indicator is equal to the first fault value or the second encoded overvoltage fault indicator is equal to a second fault value. 1. A battery cell management system , comprising:a microcontroller having first and second applications and first and second memory buffers;the first memory buffer having a first overvoltage fault bit associated with a first battery cell;the second memory buffer having a second overvoltage fault bit associated with the first battery cell;the first application setting a first encoded overvoltage fault indicator equal to a first fault value if the first overvoltage fault bit of the first memory buffer is equal to a first binary value;the first application receiving a second encoded overvoltage fault indicator associated with the second overvoltage fault bit from the second application; andthe first application commanding a digital input-output device to generate control signals to transition a contactor to an open operational state if either the first encoded overvoltage fault indicator is equal to the first fault value or the second encoded overvoltage fault indicator is equal to a second fault value, the first fault value having a Hamming distance of at least four from the second fault value.2. ...

CONTROL SYSTEM FOR TRANSITIONING A DC-DC VOLTAGE CONVERTER FROM A BUCK OPERATIONAL MODE TO A SAFE OPERATIONAL MODE UTILIZING A TASK DEADLINE MONITORING APPLICATION

A control system for transitioning a DC-DC voltage converter from a buck operational mode to a safe operational mode is provided. A microcontroller performs a first scheduled task including executing first and second applications. The task deadline monitoring application sets a task deadline flag to a first fault value when a time interval associated with performing the first scheduled task is greater than a threshold time interval. The hardware abstraction layer inhibits operation of a disable pin of a watchdog IC when the task deadline flag is equal to the first fault value, which induces the watchdog IC to transition the DC-DC voltage converter to the safe operational mode. 1. A control system for transitioning a DC-DC voltage converter from a buck operational mode to a safe operational mode; the DC-DC voltage converter having a high side integrated circuit having a first plurality of FET switches , and a low side integrated circuit having a second plurality of FET switches therein , comprising:a watchdog IC having a first disable pin and an internal timer;a microcontroller having a digital input-output device with a second disable pin electrically coupled to the first disable pin; the microprocessor further having first and second applications, a task deadline monitoring application, and a hardware abstraction layer;the microcontroller performing a first scheduled task including the execution of the first and second applications;the task deadline monitoring application setting a task deadline flag to a first fault value when a time interval associated with performing the first scheduled task is greater than a threshold time interval; andthe hardware abstraction layer inhibiting operation of the second disable pin when the task deadline flag is equal to the first fault value, such that the internal timer continues to increment past a predetermined time which induces the watchdog IC to transition the DC-DC voltage converter to the safe operational mode.2. The ...

DIAGNOSTIC SYSTEM FOR A DC-DC VOLTAGE CONVERTER

A diagnostic system for a DC-DC voltage converter includes a microcontroller having a first diagnostic handler application and first and second applications. The first application sets a first non-recoverable diagnostic flag associated with the DC-DC voltage converter to a first encoded value having each nibble thereof selected from an odd Karnaugh set of binary values. The second application sets a second non-recoverable diagnostic flag to a second encoded value having each nibble thereof selected from an even Karnaugh set of binary values. The first diagnostic handler application sets a first master non-recoverable diagnostic flag to a first encoded fault value if the first non-recoverable diagnostic flag is equal to a second encoded fault value, or the second non-recoverable diagnostic flag is equal to a third encoded fault value. 1. A diagnostic system for a DC-DC voltage converter , comprising:a microcontroller having a first diagnostic handler application and first and second applications;the first application setting a first non-recoverable diagnostic flag associated with the DC-DC voltage converter to a first encoded value and sending the first non-recoverable diagnostic flag to the first diagnostic handler application; the first encoded value having each nibble thereof selected from an odd Karnaugh set of binary values;the second application setting a second non-recoverable diagnostic flag associated with the DC-DC voltage converter to a second encoded value and sending the second non-recoverable diagnostic flag to the first diagnostic handler application; the second encoded value having each nibble thereof selected from an even Karnaugh set of binary values; andthe first diagnostic handler application setting a first master non-recoverable diagnostic flag associated with the DC-DC voltage converter to a first encoded fault value if the first non-recoverable diagnostic flag is equal to a second encoded fault value, or the second non-recoverable diagnostic ...

Battery cell management system that detects data misalignment between battery cell voltage values and battery cell overvoltage flags

A battery management system having a microcontroller with first and second applications and first and second tables is provided. The first table has a first record with a first encoded channel index and a first battery cell voltage value associated with a first battery cell. The second table has a first record with a first encoded channel index and a first battery cell overvoltage flag associated with the first battery cell. The first application sends the first encoded channel index from the first table to the second application. The second application transitions a contactor to an open operational position, when the first encoded channel index from the first table is not equal to a first predetermined encoded channel index indicating a data misalignment of the first battery cell voltage value and the first battery cell overvoltage flag.

BATTERY MANAGEMENT SYSTEM

A battery management system includes a microcontroller having a first diagnostic handler application and first and second applications. The first application sets a first non-recoverable diagnostic flag to a first encoded value having each nibble thereof selected from an odd Karnaugh set of binary values. The second application sets a second non-recoverable diagnostic flag to a second encoded value having each nibble thereof selected from an even Karnaugh set of binary values. The first diagnostic handler application sets a first master non-recoverable diagnostic flag to a first encoded fault value if the first non-recoverable diagnostic flag is equal to a second encoded fault value, or the second non-recoverable diagnostic flag is equal to a third encoded fault value. 1. A battery management system , comprising:a microcontroller having a first diagnostic handler application and first and second applications;the first application setting a first non-recoverable diagnostic flag to a first encoded value and sending the first non-recoverable diagnostic flag to the first diagnostic handler application; the first encoded value having each nibble thereof selected from an odd Karnaugh set of binary values;the second application setting a second non-recoverable diagnostic flag to a second encoded value and sending the second non-recoverable diagnostic flag to the first diagnostic handler application; the second encoded value having each nibble thereof selected from an even Karnaugh set of binary values; andthe first diagnostic handler application setting a first master non-recoverable diagnostic flag to a first encoded fault value if the first non-recoverable diagnostic flag is equal to a second encoded fault value, or the second non-recoverable diagnostic flag is equal to a third encoded fault value.2. The battery management system of claim 1 , wherein:the microcontroller further includes a safe state application;the first diagnostic handler application sending the first ...

CONTROL SYSTEM FOR CONTROLLING OPERATIONAL MODES OF A DC-DC VOLTAGE CONVERTER

A control system for controlling operational modes of a DC-DC voltage converter is provided. The DC-DC voltage converter initially has an idle operational mode. The microcontroller having first and second operational mode applications. The first operational mode application determines a first encoded value based on the first operational mode value, and further determines first and second values based on the first encoded value. The second operational mode application determines a second encoded value based on the first operational mode value, and further determines third and fourth values based on the second encoded value. The first operational mode application induces the DC-DC voltage converter to transition to the first operational mode if the second value is equal to the third value. 1. A control system for controlling operational modes of a DC-DC voltage converter , the DC-DC voltage converter having a first bi-directional switch and a second bi-directional switch , the DC-DC voltage converter initially having an idle operational mode , the control system comprising:a microcontroller receiving a first operational mode message from a communication bus, the first operational mode message having a first operational mode value therein indicating that the DC-DC voltage converter is being commanded to transition to a first operational mode, the first operational mode not being the idle operational mode;the microcontroller having a first operational mode application and a second operational mode application;the first operational mode application determining a first encoded value based on the first operational mode value, and further determining first and second values based on the first encoded value;the second operational mode application determining a second encoded value based on the first operational mode value, and further determining third and fourth values based on the second encoded value; the second encoded value being different than the first encoded value; ...

CONTROL SYSTEM FOR TRANSITIONING A DC-DC VOLTAGE CONVERTER FROM A BUCK OPERATIONAL MODE TO A SAFE OPERATIONAL MODE

A control system for a DC-DC voltage converter includes a microcontroller having first and second applications. The first application commands the microcontroller to generate a first signal that is received at a first pin on a high side integrated circuit to transition a first plurality of FET switches to an open operational state, and that is received at a first pin on the low side integrated circuit to transition a second plurality of FET switches to the open operational state. The second application commands the microcontroller to generate a second signal that is received at a second pin on the high side integrated circuit to transition the first plurality of FET switches to the open operational state, and that is received at a second pin on the low side integrated circuit to transition the second plurality of FET switches to the open operational state. 1. A control system for transitioning a DC-DC voltage converter from a buck operational mode to a safe operational mode , the DC-DC voltage converter having a high voltage bi-directional switch , a pre-charge high voltage bi-directional switch , a low voltage bi-directional switch , a pre-charge low voltage bi-directional switch , a high side integrated circuit , and a low side integrated circuit; the low voltage bi-directional switch being electrically coupled in parallel to the pre-charge low voltage bi-directional switch between and to first and second electrical nodes; the high voltage bi-directional switch being electrically coupled in parallel to the pre-charge high voltage bi-directional switch between and to third and fourth electrical nodes; the high side integrated circuit being electrical coupled between the first electrical node and the fourth electrical node , the low side integrated circuit being electrically coupled between the first electrical node and the fourth electrical node , the high side integrated circuit having a first plurality of FET switches therein , the low side integrated circuit ...

CONTROL SYSTEM FOR TRANSITIONING A DC-DC VOLTAGE CONVERTER FROM A BOOST OPERATIONAL MODE TO A SAFE OPERATIONAL MODE

A control system for a DC-DC voltage converter includes a microcontroller having first and second applications. The first application commands the microcontroller to generate a first signal that is received at a first pin on a high side integrated circuit to transition a first plurality of FET switches to an open operational state, and that is received at a first pin on the low side integrated circuit to transition a second plurality of FET switches to the open operational state. The second application commands the microcontroller to generate a second signal that is received at a second pin on the high side integrated circuit to transition the first plurality of FET switches to the open operational state, and that is received at a second pin on the low side integrated circuit to transition the second plurality of FET switches to the open operational state. 1. A control system for transitioning a DC-DC voltage converter from a boost operational mode to a safe operational mode , the DC-DC voltage converter having a high voltage bi-directional switch , a pre-charge high voltage bi-directional switch , a low voltage bi-directional switch , a pre-charge low voltage bi-directional switch , a high side integrated circuit , and a low side integrated circuit; the low voltage bi-directional switch being electrically coupled in parallel to the pre-charge low voltage bi-directional switch between and to first and second electrical nodes; the high voltage bi-directional switch being electrically coupled in parallel to the pre-charge high voltage bi-directional switch between and to third and fourth electrical nodes; the high side integrated circuit being electrically coupled between the first electrical node and the fourth electrical node , the low side integrated circuit being electrically coupled between the first electrical node and the fourth electrical node , the high side integrated circuit having a first plurality of FET switches therein , the low side integrated circuit ...

Diagnostic system for a dc-dc voltage converter

A diagnostic system for a DC-DC voltage converter having a high voltage switch, a low voltage switch, and a DC-DC voltage converter control circuit is provided. The system includes first and second tri-state buffer ICs and a microcontroller. The first tri-state buffer IC receives a first shutdown indicator voltage from the DC-DC voltage converter control circuit indicating that a first plurality of FET switches in a high side FET IC and a second plurality of FET switches in a low side FET IC have been transitioned to an open operational state. The first tri-state buffer IC outputs a second shutdown indicator voltage to the microcontroller that indicates that the first and second plurality of FET switches have been transitioned to the open operational state.

Optimized Power Supply Architecture

A power supply architecture provides for the efficient distribution and failsafe monitoring of power in a microcontroller system. The power supply architecture incorporates various components with high integrity and diverse monitoring schemes that allow the associated control processors to operate with high safety standards. The various embodiments provide an integrated method or apparatus for an electronic module safety architecture which includes diversity, time and space independence for power supplies for the various microprocessors and control communication buses. 1. A circuit for providing redundant monitoring of an operating voltage V present at a predetermined point in an electrical system , the circuit comprising:a voltage divider connected between the predetermined point and a ground, the voltage divider defining a first intermediate node at a potential V1 less than the operating voltage V and a second intermediate node at a potential V2 less than the potential V1;a first monitor coupled to the first node and operable to detect a voltage fault or discrepancy in the level of the operating voltage V; anda second monitor coupled to the second node and operable to detect a voltage fault or discrepancy in the level of the operating voltage V.2. The circuit according to and further including a protection circuit connected between the first intermediate node and the ground for limiting the voltages at the first and second node within a predetermined safe operating range of the first and second monitors.3. The circuit according to and further including a third monitor coupled to one of the first and second nodes and operable to detect a voltage fault or discrepancy in the level of the operating voltage V.4. The circuit according to wherein each of the monitors is coupled to the respective first or second nodes via a low pass filter.5. A power supply architecture comprising:a first processor;a second processor;a first power supply for supplying a first group of ...

Diagnostic system for a vehicle electrical system

A diagnostic system for a vehicle electrical system is provided. The diagnostic system includes a microcontroller having microcontroller core components. A first diagnostic handler application sends a first index value to the microcontroller core component diagnostic safety application. The microcontroller core component diagnostic safety application accesses a microcontroller core component diagnostic flag in a first table in the RAM if the first index value is equal to a valid index value in a first table. The microcontroller core component diagnostic safety application sends the microcontroller core component diagnostic flag to the first diagnostic handler application

DIAGNOSTIC SYSTEM FOR A VEHICLE ELECTRICAL SYSTEM

A diagnostic system for a vehicle electrical system having a first and second diagnostic application is provided. The first diagnostic application commands a high side driver circuit and a low side driver circuit to transition a contactor to an open operational position when a first difference value is greater than a first threshold difference value indicating that at least one of the first and second analog multiplexers is malfunctioning. The second diagnostic application commanding the high side driver circuit and the low side driver circuit to transition the contactor to the open operational position when a second difference value is greater than the first threshold difference value indicating that at least one of the first and second analog multiplexers is malfunctioning. 1. A diagnostic system for a vehicle electrical system , the vehicle electrical system having a battery module , a contactor , a high side driver circuit , a low side driver circuit , and a voltage regulator; the voltage regulator outputting a first voltage , comprising:a voltage clamping circuit outputting a second voltage in response to the first voltagea first analog multiplexer having an input port receiving the second voltage from the voltage clamping circuit;a second analog multiplexer having an input port receiving the first voltage from the voltage regulator;an analog-to-digital converter being electrically coupled to an output port of the first analog multiplexer and an output port of the second analog multiplexer, the analog-to-digital converter being further electrically coupled to a microcontroller; the analog-to-digital converter receiving the first and second voltages at first and second times, respectively, and outputting first and second voltage values, respectively, based on the first and second voltages, respectively, that are received by a microcontroller;the microcontroller having a first diagnostic application and a second diagnostic application;the first diagnostic ...

DIAGNOSTIC SYSTEM FOR A VEHICLE ELECTRICAL SYSTEM

A diagnostic system for a vehicle electrical system includes a first voltage divider circuit that outputs a second voltage in response to a first voltage, and a second voltage divider circuit that outputs a third voltage in response to the first voltage. An analog-to-digital converter outputs first and second voltage values, respectively, based on the second and third voltages, respectively. A microcontroller determines a first compensated voltage value utilizing the first voltage value and a compensation value. The microcontroller determines a difference value based on the first compensated voltage value and the second voltage value. The microcontroller commands the high side driver circuit and the low side driver circuit to transition the contactor to an open operational position when the difference value is greater than a threshold difference value. 1. A diagnostic system for a vehicle electrical system , the vehicle electrical system having a battery module , a contactor , a high side driver circuit , a low side driver circuit , and a voltage regulator , the voltage regulator outputting a first voltage , comprising:a first voltage divider circuit receiving the first voltage and outputting a second voltage in response to the first voltage,a second voltage divider circuit receiving the first voltage and outputting a third voltage in response to the first voltage;a first analog multiplexer having an input port that receives the second voltage from the first voltage divider circuit;a second analog multiplexer having an input port that receives the third voltage from the second voltage divider circuit;an analog-to-digital converter being electrically coupled to an output port of the first analog multiplexer and an output port of the second analog multiplexer, the analog-to-digital converter receiving the second and third voltages at first and second times, respectively, and outputting first and second voltage values, respectively, based on the second and third ...

DIAGNOSTIC SYSTEM FOR A VEHICLE ELECTRICAL SYSTEM

A diagnostic having an analog-to-digital converter that is electrically coupled to an output port of a first analog multiplexer and an output port of a second analog multiplexer is provided. The analog-to-digital converter receives the high side voltage level signal and the low side current level signal at first and second times, respectively, and outputs a high side voltage value and a low side current value, respectively, based on the high side voltage level signal and the low side current level signal, respectively, that are received by a microcontroller. The microcontroller commands a high side driver circuit and a low side driver circuit to transition a contact of the contactor to an open operational position when the first analog multiplexer is malfunctioning based on the high side voltage value. 1. A diagnostic system for a vehicle electrical system , the vehicle electrical system having a battery module , a contactor , a high side driver circuit , and a low side driver circuit , comprising:a high side voltage measuring circuit being electrically coupled to the high side driver circuit and to a first input port of a first analog multiplexer; the high side voltage measuring circuit generating a high side voltage level signal corresponding to a high side voltage being applied to a contactor coil of the contactor, the high side voltage level signal being received by the first input port;a low side current measuring circuit being electrically coupled to the low side driver circuit, and further electrically coupled to a second input port of a second analog multiplexer; the low side current measuring circuit generating a low side current level signal corresponding to an amount of electrical current flowing through the contactor coil that is received by the second input port;an analog-to-digital converter being electrically coupled to an output port of the first analog multiplexer and an output port of the second analog multiplexer, the analog-to-digital converter ...

Diagnostic system for a battery management system

A diagnostic system for a battery management system is provided. The diagnostic system includes a microcontroller having application-specific components. A first BMS diagnostic handler application sends a first index value to an application-specific component diagnostic safety application. The application-specific component diagnostic safety application accesses an application-specific component diagnostic flag in a first table in a RAM if the first index value is equal to a valid index value in a first table. The application-specific component diagnostic safety application sends the application-specific component diagnostic flag to the first BMS diagnostic handler application.

Diagnostic system for a battery system

A diagnostic system for a battery system in accordance with an exemplary embodiment is provided. The battery system includes a battery module electrically coupled to a contactor. The diagnostic system includes a first microcontroller and a second microcontroller operably communicating with the first microcontroller. The second microcontroller is programmed to open the contactor electrically coupled to the battery module if either a first diagnostic indicator flag is equal to a first fault value or a second diagnostic indicator flag is equal to a second fault value. The second microcontroller is further programmed to open the contactor if either a third diagnostic indicator flag is equal to a third fault value or a fourth diagnostic indicator flag is equal to a fourth fault value.

System for controlling operation of first and second electric fans

A system for controlling operation of first and second electric fans is provided. The system includes a microcontroller that determines when first analog multiplexer is malfunctioning or a first channel of the first analog-to-digital converter is malfunctioning based on first values obtained from the first analog-to-digital converter. The first values are associated with at least one of a first speed signal associated with the first electric fan and a first driving voltage for the first electric fan that are received by the first analog multiplexer. The microcontroller modifies a control signal to induce the second electric fan to operate at a higher rotational speed when the first analog multiplexer is malfunctioning or the first channel of the first analog-to-digital converter is malfunctioning.

DIAGNOSTIC SYSTEM FOR A DC-DC VOLTAGE CONVERTER

A diagnostic system for a DC-DC voltage converter is provided. The DC-DC voltage converter has a high voltage bi-directional MOSFET switch. The high voltage bi-directional MOSFET switch has a first node and a second node. The microcontroller samples a first voltage at the first node at a first sampling rate utilizing a first common channel in a first bank of channels to obtain a first predetermined number of voltage samples. The microcontroller determines a first number of voltage samples in the first predetermined number of voltage samples in which the first voltage is less than a first threshold voltage. The microcontroller sets a first voltage diagnostic flag equal to a first fault value if the first number of voltage samples is greater than a first threshold number of voltage samples indicating a voltage out of range low fault condition for the analog-to-digital converter. 1. A diagnostic system for a DC-DC voltage converter , the DC-DC voltage converter having a high voltage bi-directional MOSFET switch , the high voltage bi-directional MOSFET switch having a first node and a second node , a first voltage being applied to the first node , a second voltage being output at the second node , comprising:a microcontroller having an analog-to-digital converter, the analog-to-digital converter having a first bank of channels and a second bank of channels; the first bank of channels including first and second common channels and at least first and second non-common channels, the second bank of channels including the first and second common channels and at least third and fourth non-common channels;the first common channel being electrically coupled to the first node of the high voltage bi-directional MOSFET switch for receiving the first voltage;the microcontroller being programmed to sample the first voltage at a first sampling rate utilizing the first common channel in the first bank of channels to obtain a first predetermined number of voltage samples;the ...

DIAGNOSTIC SYSTEM FOR A DC-DC VOLTAGE CONVERTER

A diagnostic system for a DC-DC voltage converter is provided. The diagnostic system includes a first temperature sensor generating a first output voltage indicating a temperature level of a high voltage bi-directional MOSFET switch. The diagnostic system includes a microcontroller that samples the first output voltage at a first sampling rate utilizing a first channel in a first bank of channels to obtain a first predetermined number of voltage samples. The microcontroller determines a first number of voltage samples in the first predetermined number of voltage samples in which the first output voltage is greater than a first threshold voltage. The microcontroller sets a first temperature diagnostic flag equal to a first fault value if the first number of voltage samples is greater than a first threshold number of voltage samples indicating the high voltage bi-directional MOSFET switch has an over-temperature condition. 1. A diagnostic system for a DC-DC voltage converter , the DC-DC voltage converter having a high voltage bi-directional MOSFET switch and a low voltage bi-directional MOSFET switch , comprising:a first temperature sensor generating a first output voltage indicating a temperature level of the high voltage bi-directional MOSFET switch;a second temperature sensor generating a second output voltage indicating a temperature level of the low voltage bi-directional MOSFET switch;a microcontroller having an analog-to-digital converter, the analog-to-digital converter having a first bank of channels and a second bank of channels; the first bank of channels including a first channel, the second bank of channels including a second channel;the first channel being electrically coupled to the first temperature sensor for receiving the first output voltage;the second channel being electrically coupled to the second temperature sensor for receiving the second output voltage;the microcontroller being programmed to sample the first output voltage at a first sampling ...

SYSTEM FOR CONTROLLING OPERATION OF A CONTACTOR USING A HIGH SIDE SENSE CIRCUIT AND A LOW SIDE SENSE CIRCUIT

A system for controlling operation of a contactor is provided. The system stops outputting a control signal to open the contactor, and then measures a low side sense signal from a low side sense circuit electrically coupled to a low side end of a contactor coil, or a high side sense signal from a high side sense circuit that is electrically coupled to a high side end of the contactor coil, to determine whether the contactor has a closed operational position, and if not, the system stops outputting another control signal to open the contactor. 1. A system for controlling operation of a contactor , the contactor having a contactor coil and a contact , comprising:a microcontroller having first and second analog-to-digital converters and first and second output ports; the first output port controlling whether a low side end of the contactor coil is electrically coupled to electrical ground, the second output port controlling whether a high side end of the contactor coil receives an energization voltage;a low side sense line being electrically coupled to and between the low side end of the contactor coil and a low side sense circuit; the low side sense circuit being further electrically coupled to the first analog-to-digital converter;a high side sense line being electrically coupled to and between the high side end of the contactor coil and a high side sense circuit; the high side sense circuit being further electrically coupled to the second analog-to-digital converter;the microcontroller being programmed to receive a command message to open the contact of the contactor, from an external controller;the microcontroller being further programmed to stop generating a first control signal on the first output port to de-energize the contactor coil to open the contact of the contactor, in response to the command message from the external controller;the low side sense circuit receiving a first signal from the low side sense line and outputting a low side sense signal ...

DIAGNOSTIC SYSTEM FOR A DC-DC VOLTAGE CONVERTER

A diagnostic system for a DC-DC voltage converter having a low voltage bi-directional MOSFET switch is provided. The low voltage bi-directional MOSFET switch has first and second nodes. The microcontroller samples a first voltage at the first node at a first sampling rate utilizing a first common channel in a first bank of channels to obtain a first predetermined number of voltage samples. The microcontroller determines a first number of voltage samples in the first predetermined number of voltage samples in which the first voltage is less than a first threshold voltage. The microcontroller sets a first voltage diagnostic flag equal to a first fault value if the first number of voltage samples is greater than a first threshold number of voltage samples indicating a voltage out of range low fault condition for the analog-to-digital converter. 1. A diagnostic system for a DC-DC voltage converter , the DC-DC voltage converter having a low voltage bi-directional MOSFET switch , the low voltage bi-directional MOSFET switch having a first node and a second node , a first voltage being output at the first node , a second voltage being input to the second node , comprising:a microcontroller having an analog-to-digital converter, the analog-to-digital converter having a first bank of channels and a second bank of channels; the first bank of channels including first and second common channels and at least first and second non-common channels, the second bank of channels including the first and second common channels and at least third and fourth non-common channels;the first common channel being electrically coupled to the first node of the low voltage bi-directional MOSFET switch for receiving the first voltage;the microcontroller being programmed to sample the first voltage at a first sampling rate utilizing the first common channel in the first bank of channels to obtain a first predetermined number of voltage samples;the microcontroller being further programmed to ...

Diagnostic system for a battery system

A diagnostic system for a battery system having a battery module electrically coupled to a contactor is provided. The battery module has first, second, and third battery cells. The diagnostic system includes a first microcontroller that transitions the contactor to an open operational state if the first battery cell analog overvoltage flag is equal to the first battery cell analog overvoltage flag value. The first microcontroller further transitions the contactor to the open operational state if the first battery cell comparator overvoltage flag is equal to the first battery cell comparator overvoltage flag value.

DIAGNOSTIC SYSTEM FOR A BATTERY SYSTEM

A diagnostic system for a battery system having a battery module electrically coupled to a contactor is provided. The battery module has first, second, and third battery cells. The diagnostic system includes a first microcontroller that transitions the contactor to an open operational state if a first battery cell analog overvoltage flag is equal to a first battery cell analog overvoltage flag value, or a battery module overvoltage flag is equal to a first battery module overvoltage flag value. 1. A diagnostic system for a battery system , the battery system having a battery module electrically coupled to a contactor , the battery module having first , second , and third battery cells , comprising:a first microcontroller obtaining a first initialization value and first, second, and third battery cell analog overvoltage flag values from a memory device; the first, second, and third analog overvoltage flag values being associated with the first, second, and third battery cells, respectively;the first microcontroller further obtaining a second initialization value, a first battery module overvoltage flag value, and a second battery module overvoltage flag value from the memory device; the first and second battery module overvoltage values being associated with the battery module;the first microcontroller initializing each of first, second, and third battery cell analog overvoltage flags to the first initialization value;the first microcontroller receiving first, second, and third output voltage values and a first battery module output voltage value from a second microcontroller; the first, second, and third output voltage values corresponding to first, second, and third output voltages, respectively, from the first, second, and third battery cells, respectively; the first battery module output voltage value being indicative of a measured battery module output voltage of the battery module;the first microcontroller setting the first battery cell analog overvoltage flag ...

Diagnostic system for a battery system

A diagnostic system for a battery system having a battery module electrically coupled to a contactor is provided. The battery module has first, second, and third battery cells. The diagnostic system includes a first microcontroller that transitions the contactor to an open operational state if a first battery cell comparator overvoltage flag is equal to a first battery cell analog overvoltage flag value, or a battery module fault line voltage flag is equal to a first battery module fault line voltage flag value.

Dual processor supervisory control system for a vehicle

Fahrzeugsteuermodul zum Steuern einer Aktuatoreinheit in Ansprechen auf eine Eingabe, das einen ersten Prozessor, eine erste Kommunikationsverbindung, die mit dem ersten Prozessor gekoppelt ist, und einen zweiten Prozessor, der mit dem ersten Prozessor über die erste Kommunikationsverbindung gekoppelt ist, umfasst. Der erste Prozessor ist ausgebildet, um einen ersten Wert auf der Grundlage der Eingabe zu erzeugen, den ersten Wert zu der Aktuatoreinheit zu übertragen, und einen zweiten Wert von der Aktuatoreinheit auf der Grundlage von Daten, die durch die Aktuatoreinheit von dem ersten Prozessor empfangen werden, zu empfangen. Die erste Kommunikationsverbindung ist ausgebildet, um die Eingabe und den zweiten Wert zu dem zweiten Prozessor zu transferieren. Der zweite Prozessor ist ausgebildet, um einen dritten Wert auf der Grundlage der Eingabe zu bestimmen und den ersten Wert auf der Grundlage eines Vergleichs des zweiten Werts mit dem dritten Wert zu verifizieren. A vehicle control module for controlling an actuator unit in response to an input comprising a first processor, a first communication link coupled to the first processor, and a second processor coupled to the first processor via the first communication link. The first processor is configured to generate a first value based on the input, transmit the first value to the actuator unit, and a second value from the actuator unit based on data received by the actuator unit from the first processor , to recieve. The first communication link is configured to transfer the input and the second value to the second processor. The second processor is configured to determine a third value based on the input and to verify the first value based on a comparison of the second value with the third value.

Control system for transitioning a DC-DC voltage converter from a buck operational mode to a safe operational mode

A control system for a DC-DC voltage converter includes a microcontroller having first and second applications. The first application commands the microcontroller to generate a first signal that is received at a first pin on a high side integrated circuit to transition a first plurality of FET switches to an open operational state, and that is received at a first pin on the low side integrated circuit to transition a second plurality of FET switches to the open operational state. The second application commands the microcontroller to generate a second signal that is received at a second pin on the high side integrated circuit to transition the first plurality of FET switches to the open operational state, and that is received at a second pin on the low side integrated circuit to transition the second plurality of FET switches to the open operational state.

Methods and systems for switching between multiple states using at least one ternary input and at least one discrete input

Beschrieben werden Systeme, Verfahren und Einrichtungen, um eine gesteuerte Einrichtung als Antwort auf die Stellung eines Stellglieds mit mehreren Stellungen in einen gewünschten Betriebszustand zu versetzen. Zwei oder mehr Schaltkontakte liefern Eingangssignale, die die Stellung des Stellgliedes repräsentieren. Eine Steuerlogik bestimmt dann, basierend auf den empfangenen Eingangssignalen, den gewünschten Zustand für die gesteuerte Einrichtung. Der gewünschte Betriebszustand wird aus einer beliebigen Anzahl von Betriebszuständen bestimmt, die durch die Eingabewerte definiert werden. In verschiedenen Ausführungsformen kann eine ternäre Schaltung in Kombination mit einer binären Schaltung genutzt werden, um Dreh- oder Linearschalter mit mehreren Zuständen effizient auszubilden, die sechs, zwölf, achtzehn oder irgendeine andere Anzahl schaltbarer Zustände identifizieren können. Disclosed are systems, methods, and devices for placing a controlled device in a desired operating state in response to the position of a multi-position actuator. Two or more switch contacts provide input signals representing the position of the actuator. Control logic then determines the desired state for the controlled device based on the received input signals. The desired operating state is determined from any number of operating states defined by the input values. In various embodiments, a ternary circuit in combination with a binary circuit may be utilized to efficiently form multi-state rotary or linear switches capable of identifying six, twelve, eighteen, or any other number of switchable states.

Diagnostic coordination control

An engine control system includes an ignition switch that selectively initiates an ignition signal and an operating mode of an engine. A powertrain relay selectively generates a PR load signal based on the ignition signal and the operating mode. A control module enables an ignition signal diagnostic system when the operating mode is a RUN mode, the ignition signal is generated and the PR load signal is generated.

Methods and systems for providing communications between a battery charger and a battery control unit for a hybrid vehicle

A method for communicating between a battery charger and a battery control unit in a hybrid vehicle includes the steps of forming a first message with at least a renewable energy storage system (RESS) command and a command security measure for the RESS command, transmitting the first message from the battery control unit to the battery charger, forming a second message in response to the first message with at least an RESS response and a response security measure for the RESS response, and transmitting the second message from the battery charger to the battery control unit.

System and method for identifying issues in current and voltage measurements

First and second reference voltages are applied to first and second terminals of a processor via voltage divider circuits. First and second signal conditioning circuits are coupled to third and fourth terminals of the processor, respectively, and voltage or current sensors are coupled to the first and second signal conditioning circuits. The processor measures the electrical characteristics at the third and fourth terminals and computes first and second ratiometric values of the electrical characteristics, wherein the first ratiometric value is based upon a measurement obtained from the third terminal and the first reference voltage and the second ratiometric value is based upon a measurement of obtained from the fourth terminal and the second reference voltage. The processor further identifies an issue if a ratio of the first ratiometric value to the second ratiometric value exceeds a ratio of the first reference value to the second reference value.

Idle Range Request Safety Control for Electronic Throttle Control (EDS)

Ein System zur elektronischen Drosselklappensteuerung (EDS-System), das die Leerlaufdrehzahl eines Motors steuert, umfasst ein Zusatzgerät, das eine Last des Motors erhöht, und eine Steuereinheit, die anhand der erhöhten Last ein Leerlaufanforderungssignal erzeugt. Die Steuereinheit vergleicht das Leerlaufanforderungssignal mit einem Maximalleerlaufsignal und setzt ein Leerlaufbefehlssignal gleich dem Leerlaufanforderungssignal, falls das Leerlaufanforderungssignal kleiner als das Maximalleerlaufsignal ist. Die Steuereinheit bestimmt das Leerlaufbefehlssignal anhand des Leerlaufanforderungssignals, eines früheren Leerlaufbefehlssignals und des Maximalleerlauferhöhungssignals, falls das Leerlaufanforderungssignal größer als das Maximalleerlaufsignal ist. An electronic throttle control (EDS) system that controls the idling speed of an engine includes an attachment that increases a load on the engine and a control unit that generates an idle request signal based on the increased load. The control unit compares the idle request signal with a maximum idle signal and sets an idle command signal equal to the idle request signal if the idle request signal is less than the maximum idle signal. The control unit determines the idle command signal based on the idle request signal, a prior idle command signal, and the maximum idle-up signal if the idle request signal is greater than the maximum idle signal.

Battery management system that detects communication faults

A battery management system includes a microcontroller having first and second applications. The first application transitions a contactor to an open operational position if a first CRC diagnostic flag is equal to a first encoded fault value. The second application transitions the contactor to the open operational position if a second CRC diagnostic flag is equal to a second encoded fault value. The first and second encoded fault values have a Hamming distance of at least four from one another.

Mechanical and electrical locking coordination security strategy for an active front steer system

A system as described herein relates generally to automotive active front steering control systems having a main processor and a redundant sub-processor. The system provides a way of controlling the electrical and mechanical locking of an actuator motor in a variable gear ratio active front steering system. The method enables the sub-processor to electrically lock the active front steer actuator motor via the main processor to reduce mechanical wear or damage to the variable gear ratio system if the main processor is unable to electrically lock the actuator motor before it mechanically locks the actuator motor. The system also provides an error detecting technique that is robust to false failures and allows the active front steering system to safely transition into a fail safe mode if an error occurs.

Control system for transitioning a dc-dc voltage converter from a buck operational mode to a safe operational mode

Vehicle state determination integrity

A vehicle includes a semi-active suspension including suspension dampers controllably adjustable in accordance with electronic stability control commands and ride and handling commands. Vehicle steering response states, turning direction states and vehicle dynamics states are binary coded in respective state variables and suspension control calibrations are binary coded in calibration words. Integrity and security of state variables and calibration words are ensured in efficient binary digit resource allocation schemes.

Vehicle parameter infrastructure security strategy

A method and apparatus is provided for improving integrity in data representing a plurality of condition states of a variable, including the steps of determining which condition states are operationally incompatible with one another, and generating an array of transformed integer values including a separate integer value for each condition state. The transformed integer value for each condition state in binary form is at least two bit errors removed from any transformed integer value for an identified incompatible condition state in binary form.

Methods and systems for securing vehicle data

A method for securing vehicle data that includes a plurality of data messages includes the steps of determining a sequence for the plurality of data messages, selecting a plurality of identifier values for the plurality of data messages such that each of the plurality of identifier values are at least two bit errors removed from another, and assigning one of the plurality of identifier values to each of the plurality of data messages, based at least in part on the sequence.

Secure data strategy for vehicle control systems

A method of providing secure data from vehicle operational variable data that includes a plurality of data message bits includes the steps of dividing the plurality of data message bits into a first group of data message bits and a second group of data message bits, encoding the first group of data message bits using a data map to generate a plurality of encoded data message bits, and generating the data message from the plurality of encoded data message bits and the second group of data message bits.

Control system for switching dc-to-dc voltage converter from boost operating mode to safe operating mode

Optimized power supply architecture

A power supply architecture provides for the efficient distribution and failsafe monitoring of power in a microcontroller system. The power supply architecture incorporates various components with high integrity and diverse monitoring schemes that allow the associated control processors to operate with high safety standards. The various embodiments provide an integrated method or apparatus for an electronic module safety architecture which includes diversity, time and space independence for power supplies for the various microprocessors and control communication buses.

Control system for switching dc-dc voltage converter from buck operation mode to safe operation mode

Position indicator based on PWM and variable frequency

Regelsystem, umfassend: eine Vorrichtung, die eine Position zwischen einer minimalen und einer maximalen Position einnimmt; einen ersten Positionssensor, der die Position der Vorrichtung erfasst und einen ersten Positionswert erzeugt; einen zweiten Positionssensor, der die Position der Vorrichtung erfasst und einen zweiten Positionswert erzeugt; ein Sensormodul, das mit den ersten und zweiten Positionssensoren kommuniziert und anhand der ersten und zweiten Positionswerte eine einzige Signalform erzeugt, wobei eine Frequenz der Signalform auf der Grundlage des ersten Positionswertes verändert wird und eine Impulsdauer der Signalform auf der Grundlage des zweiten Positionswertes verändert wird; einen Leiter, dessen erstes Ende mit dem Sensormodul und dessen zweites Ende mit einem Steuermodul verbunden ist, wobei das Sensormodul die Signalform über den Leiter an das Steuermodul überträgt und das Steuermodul die Signalform decodiert, um die ersten und zweiten Positionswerte zu bestimmen. Control system comprising: a device that occupies a position between a minimum and a maximum position; a first position sensor that detects the position of the device and generates a first position value; a second position sensor that detects the position of the device and generates a second position value; a sensor module that communicates with the first and second position sensors and generates a single waveform from the first and second position values, wherein a frequency of the waveform is changed based on the first position value and a pulse duration of the waveform is changed based on the second position value; a conductor whose first end is connected to the sensor module and whose second end is connected to a control module, wherein the sensor module transmits the waveform to the control module via the conductor and the control module decodes the waveform to determine the first and second position values.

A method and systems for providing communications between a battery charger and a battery control unit for a hybrid vehicle

Ein Verfahren zum Kommunizieren zwischen einem Batterieladegerät und einer Batteriesteuereinheit in einem Hybridfahrzeug umfasst die Schritte, dass eine erste Nachricht mit mindestens einem Befehl eines Speichersystems für regenerative Energie (RESS-Befehl) und einem Befehlssicherheitsmaß für den RESS-Befehl ausgebildet wird, die erste Nachricht von der Batteriesteuereinheit an das Batterieladegerät gesendet wird, eine zweite Nachricht in Ansprechen auf die erste Nachricht mit mindestens einer RESS-Antwort und einem Antwortsicherheitsmaß für die RESS-Antwort ausgebildet wird und die zweite Nachricht von dem Batterieladegerät an die Batteriesteuereinheit gesendet wird. A method of communicating between a battery charger and a battery control unit in a hybrid vehicle includes the steps of forming a first message having at least one command of a regenerative energy storage system (RESS command) and a command security measure for the RESS command, the first message of the battery control unit is sent to the battery charger, a second message is formed in response to the first message having at least one RESS response and an answer security measure for the RESS response, and the second message is sent from the battery charger to the battery control unit.

Method and apparatus for generating a single wire control in tristate logic

Signalkommunikationsvorrichtung mit einem Ausgang, der zwischen drei Zuständen (404, 406, 408) schaltbar ist, wobei die Signalkommunikationsvorrichtung umfasst: eine Eingabeeinrichtung mit drei Stellungen (102, 102A, 102B, 212), die einen ersten Anschluss aufweist, der mit einer ersten Referenzspannung (V ref , B+) gekoppelt ist, und einen zweiten Anschluss aufweist, der mit einer zweiten Referenzspannung gekoppelt ist, wobei die Eingabeeinrichtung mit drei Stellungen (102, 102A, 102B, 212) konfiguriert ist, um ein Schalterausgangssignal (106) aus der ersten Referenzspannung (V ref , B+, 404), der zweiten Referenzspannung und einem Zwischenzustand (406) auszuwählen, das an einem Ausgang der Eingabeeinrichtung abgreifbar ist, und einen Spannungsteilerschaltkreis (216), der mit der ersten (V ref , B+) und der zweiten Referenzspannung (408) gekoppelt ist und dazwischen einen gemeinsamen Knoten (218) aufweist, wobei der Spannungsteilerschaltkreis (216) konfiguriert ist, um das Schalterausgangssignal (106) über einen einzigen, einerseits unmittelbar mit dem Ausgang der Eingabeeinrichtung und andererseits unmittelbar mit dem gemeinsamen Knoten (218) des Spannungsteilerschaltkreises (216) verbundenen elektrischen...

Required displacement adjustment with throttle valve preload

Ein Motorsteuerungssystem und ein Motorsteuerungsverfahren überwachen eine Drehmomentzunahme während einer Zylinderabschaltung für einen Motor mit bedarfsabhängigem Hubraum. Bei einer Zylinderabschaltung wird ein Zeitglied gestartet. Ein Controller stellt eine Drosselklappenstellung ein und bestimmt, ob die Zylinderabschaltung innerhalb einer vorbestimmten Zeit abgeschlossen ist. Der Controller stellt eine Drosselklappenstellung auf der Grundlage des Status einer Freigabebedingung ein. Der Controller bestimmt, ob die Motordrehzahl und die Fahrzeugbeschleunigung jeweils innerhalb einer Schwelle liegen. Der Controller betätigt die Drosselklappe in einer Vorlastbetriebsart, wenn die Freigabebedingung erfüllt ist, und in einer normalen Betriebsart, wenn die Freigabebedingung nicht erfüllt ist. An engine control system and engine control method monitor torque increase during cylinder deactivation for an engine with demand displacement. A timer is started when the cylinder is deactivated. A controller sets a throttle position and determines whether the cylinder deactivation is completed within a predetermined time. The controller sets a throttle position based on the status of a release condition. The controller determines whether the engine speed and the vehicle acceleration are each within a threshold. The controller operates the throttle valve in a preload mode when the enable condition is met and in a normal mode when the enable condition is not met.

Diagnostic system for a vehicle electrical system

A diagnostic system includes a microcontroller having a first A/D converter, first and second applications, and a first analog multiplexer electrically between a first voltage regulator and the first A/D converter. The first application sets a first overvoltage diagnostic flag to a first fault value if a first voltage of the first voltage regulator that is measured by the first A/D converter is greater than a first voltage, and in response further transitions a contactor to an open operational state. The second application sets a second overvoltage diagnostic flag to a second fault value if a second voltage of the first voltage regulator that is measured by the first A/D converter is greater than a second voltage, and in response further transitions the contactor to the open operational state.

Elektronischer Steuerschalter für eine Kraftfahrzeug-Antriebsstrang-Anwendung und elektronisches Steuersystem

Elektronischer Steuerschalter für eine Kraftfahrzeug-Antriebsstrang-Anwendung, wobei der Steuerschalter umfasst:ein Steuermodul (42) zum Aktivieren/Deaktivieren einer Fahrzeug-Antriebsstrang-Anwendung, wobei das Steuermodul (42) umfasst:einen ersten Eingang (44), an dem entweder eine erste Referenzspannung oder eine zweite Referenzspannung anliegt;einen zweiten Eingang (46), an dem entweder die erste Referenzspannung oder die zweite Referenzspannung anliegt; undeinen Komparator (68), der an den ersten Eingang (44) und den zweiten Eingang (46) angeschlossen ist; undeinen Invers-Referenzspannungsoperator (48, 86), der sowohl an den ersten Eingang (44) als auch an den zweiten Eingang (46) angeschlossen ist, wobei der Inversoperator (48, 86) an den zweiten Eingang (46) die zweite Referenzspannung anlegt, wenn an dem ersten Eingang (44) die erste Referenzspannung anliegt, und an den zweiten Eingang (46) die erste Referenzspannung anlegt, wenn an dem ersten Eingang (44) die zweite Referenzspannung anliegt,wobei ein erster Ausfallzustand vorliegt, wenn der erste Eingang (44) und der zweite Eingang (46) die erste Referenzspannung empfangen,wobei ein Standard-AUS-Zustand vorliegt, wenn der erste Eingang (44) die zweite Referenzspannung empfängt und der zweite Eingang (46) die erste Referenzspannung empfängt,wobei ein Aktivierungszustand vorliegt, wenn der erste Eingang (44) die erste Referenzspannung empfängt und der zweite Eingang (46) die zweite Referenzspannung empfängt,wobei ein zweiter Ausfallzustand vorliegt, wenn der erste Eingang (44) und der zweite Eingang (46) die zweite Referenzspannung empfangen,wobei die erste Referenzspannung null Volt ist und die zweite Referenzspannung eine Batteriespannung ist,wobei der Komparator (68) derart konfiguriert ist, dass er einen Fehler an einem Eingang (44, 46) feststellt, wenn der Standard-AUS-Zustand in einen der Ausfallzustände von dem ersten Ausfallzustand oder dem zweiten Ausfallzustand wechselt, und wenn der ...

Układ sterujący do przełączania przetwornicy napięcia DC-DC z trybu pracy obniżania napięcia w bezpieczny tryb pracy

Control system for switching dc-dc voltage converter from buck operation mode to safe operation mode

Układ diagnostyczny do przetwornicy napięcia dc-dc

Układ sterujący do sterowania trybami pracy przetwornicy napięcia DC-DC

Verfahren für einen sicheren Regelungsmodusübergang für ein System einer aktiven Frontlenkung

Es werden ein System und ein Verfahren für sichere und beschränkte Übergänge zwischen Lenkungsregelungsmodi für ein Fahrzeug mit einer aktiven Frontlenkung offenbart. Mögliche Betriebsregelungsmodi umfassen einen Präzisionsmodus, einen Modus einer elektrischen Phasenverriegelung und einen Proportional-Integral-Differenzial-Modus (PID-Modus). Jeder Betriebsregelungsmodus wird überwacht, und der Betriebszustand der Modi wird hinsichtlich eines Übergehens geprüft. Für eine Sicherheit kann das System Übergänge von dem PID- zu dem Präzisionsregelungsmodus verhindern und den Modus einer elektrischen Phasenverriegelung darauf beschränken, nur zu einem Modus einer mechanischen Verriegelung überzugehen.

Sicherheitsstrategien für ein aktives Frontlenkungssystem

Ein aktives Frontlenkungssteuerungssystem (AFS-Steuerungssystem) eines Fahrzeugs ist in diesem Kontext beschrieben. Das AFS-System verwendet Methoden einer variablen Getriebeübersetzung und einer Lenkungsführungssteuerung. Das AFS-System verwendet unabhängige Steuerungssysteme und Steuerungsleitsysteme zur Steuerung der AFS-Systemparameter gemäß vorbestimmten Sicherheitsmetriken, um die Zeit zum Verriegeln des AFS-Systemwinkelaktuators in dem Falle zu verringern, dass die Sicherheitsmetriken nicht erfüllt sind, und um die Wahrscheinlichkeit von Ausfalldetektionsfehlern durch ein Überprüfen einer Differenz zwischen einem Straßenradzielwinkel und einem tatsächlichen Straßenradwinkel, die von einem ersten Steuerungspfad erhalten wurden, und für eine zusätzliche Sicherheit durch ein Überprüfen einer Differenz zwischen dem Straßenradzielwinkel und dem tatsächlichen Straßenradwinkel von einem zweiten Steuerungspfad als eine Funktion der Fahrzeuggeschwindigkeit zu verringern. Die in diesem Kontext beschriebenen Techniken können einen Wert eines AFS-Steuerungsparameters von dem ersten Steuerungspfad mit dem Wert des gleichen AFS-Steuerungsparameters von dem zweiten Steuerungspfad überprüfen.

Systeme und Verfahren für robustes Schalten mit Hilfe von Schaltkontakten mit mehreren Zuständen und einer gemeinsamen elektrischen Referenz

Es werden Systeme, Verfahren und Vorrichtungen für ein robustes Bestimmen eines gesuchten Betriebszustands einer gesteuerten Vorrichtung als Reaktion auf die Position eines Mehrpositions-Stellglieds beschrieben. Zwei oder mehr Schaltkontakte stellen Eingangssignale bereit, die die Position des Stellglieds repräsentieren und zwischen einem Referenzsignal und einem Zwischensignal gewählt sind. Eine Steuerlogik bestimmt dann den gesuchten Zustand für die gesteuerte Vorrichtung anhand der empfangenen Eingangssignale. Der gesuchte Betriebszustand wird aus einer beliebigen Anzahl von Betriebszuständen, die durch die Eingangssignale definiert sind, bestimmt.

Schleppmomentanforderungssicherheit für elektronische Drosselklappensteuerung (ETC)

Ein Verfahren zum Steuern einer Drosselklappe, das das Erzeugen einer Drosselklappenanforderung auf der Grundlage einer Schleppmomentanforderung und das Setzen eines Drosselklappenbefehls gleich der Drosselklappenanforderung, wenn die Drosselklappenanforderung kleiner als ein Drosselklappen-Leerlaufmaximum ist, umfasst. Es wird eine Erhöhung des Drosselklappenmaximums bestimmt, wenn die Drosselklappenanforderung größer als das Drosselklappen-Leerlaufmaximum ist, wobei der Drosselklappenbefehl auf der Grundlage der Erhöhung des Drosselklappenmaximums bestimmt wird. Die Drosselklappe wird auf der Grundlage des Drosselklappenbefehls gesteuert.

System und Verfahren zum Überwachen eines Zylinderabschaltvorgangs für einen Motor mit Zylinderdeaktivierung

Motorsteuerungssystem zum Überwachen eines Zylinderabschaltvorgangs für einen Motor (16) mit Zylinderdeaktivierung (DOD-Motor) der zugeschaltete und abgeschaltete Betriebsarten aufweist, umfassend: eine Drosselklappe (32), und einen Controller (12), der eine Vorlast der Drosselklappe (32) vor einem Zylinderabschaltvorgang einstellt und feststellt, ob während des Zylinderabschaltvorgangs ein DOD-Fehler vorhanden ist, dadurch gekennzeichnet , dass wenn der Fehler eine vorbestimmte Zeit lang vorhanden ist, der Controller (12) die Vorlast der Drosselklappe (32) aufhebt und entweder den Motor (16) gemäß einer Ausführungsform in der abgeschalteten Betriebsart betreibt oder den Motor (16) gemäß einer anderen Ausführungsform in die zugeschaltete Betriebsart zurückschaltet.

Verfahren und System zum Ausführen funktionsspezifischer Speicherüberprüfungen in einem fahrzeugbasierten Steuersystem

Verfahren zum schnellen Verifizieren der Datenintegrität eines Teilsystems, das in einem Speicherraum in Betrieb ist, der zu einem fahrzeugbasierten Steuersystem gehört, wobei das Verfahren die Schritte umfasst, dass zu Beginn eine Teilsystemprüfsumme und eine globale Prüfsumme berechnet werden, wobei die Teilsystemprüfsumme unter Verwendung einer Prüfsummenroutine basierend auf Daten berechnet wird, die sich in einem dem Teilsystem zugehörigen Abschnitt des Speicherraums befinden, und wobei die globale Prüfsumme basierend auf Daten berechnet wird, die zu einer wesentlichen Gesamtheit des Speicherraums gehören; die Teilsystemprüfsumme als eine erwartete Teilsystemprüfsumme gespeichert wird, wenn die globale Prüfsumme mit einem erwarteten Wert übereinstimmt; und nachfolgend verifiziert wird, dass eine unter Verwendung der Prüfsummenroutine basierend auf den Daten, die sich in dem dem Teilsystem zugehörigen Abschnitt des Speicherraums befinden, berechnete zweite Teilsystemprüfsumme mit der erwarteten Teilsystemprüfsumme übereinstimmt.

Method and system for testing address lines

Method and systems are described for testing an address line inter- coupling a processor and a memory. The contents of a first address in the memory are initially compared with the contents of a second address in the memory, wherein each of the first and second addresses are addressable in the memory by a different value applied on the address line. If the contents of the first and second addresses match, the contents of either one of the first and second addresses are changed, and a subsequent comparison of the contents of the first and second memory addresses is performed. If the second comparison determines that contents of the first and second memory address still match, then a fault condition associated with the address line is identified.

Verfahren und Vorrichtungen zum Einstellen von Frequenz- und/oder PWM-basierten Sensoren

Sensormodul-Einstellschaltung, umfassend: eine Vorrichtung, die eine Position zwischen einer minimalen und einer maximalen Position einnimmt; erste und zweite Positionssensoren, die die Position der Vorrichtung erfassen und erste bzw. zweite Positionswerte erzeugen; ein Sensormodul, das umfasst: ein erstes Signalumsetzungsmodul, das eine erste Signalform auf der Grundlage des ersten Positionswertes erzeugt, eine Frequenz der ersten Signalform auf der Grundlage des ersten Positionswertes verändert und ein erstes Verstärkungsmodul umfasst; ein zweites Signalumsetzungsmodul, das eine zweite Signalform auf der Grundlage des zweiten Positionswertes erzeugt, eine Impulsdauer der zweiten Signalform auf der Grundlage des zweiten Positionswertes verändert und ein zweites Verstärkungsmodul umfasst; und ein Verstärkungsamplitudenmodul, das mit den ersten und zweiten Verstärkungsmodulen kommuniziert und erste und zweite Signalverstärkungen der ersten bzw. zweiten Verstärkungsmodule bestimmt; und ein Signalvoreinstellmodul, das mit dem Verstärkungsamplitudenmodul kommuniziert und die ersten und zweiten Signalverstärkungen so einstellt, dass die ersten und zweiten Signalformen gleich ersten bzw. zweiten zuvor bestimmten Signalformen sind, wenn die Position der Vorrichtung fixiert ist.

Fahrzeugsteuersystem zum Detektieren eines Kurzschlusszustands zwischen redundanten Positionssensoren

Steuersystem, das umfasst: eine Einrichtung (54, 72, 84, 90) mit einer Position zwischen Minimal- und Maximalpositionen; erste und zweite Sensormodule (64, 66, 68, 70, 80, 82, 86, 88), die die Position der Einrichtung (54, 72, 84, 90) erfassen, und die erste bzw. zweite Positionswerte erzeugen; und ein Steuermodul (42), das die ersten bzw. zweiten Positionswerte empfängt und das erste bzw. zweite normierte Positionswerte berechnet, die einen Bruchteil eines Bereichs zwischen Minimal- und Maximalwerten des ersten Positionswerts bzw. zwischen Minimal- und Maximalwerten des zweiten Positionswerts darstellen, wobei das Steuermodul (42) einen Steuervorgang unterbricht, der auf dem ersten normierten Positionswert und/oder dem zweiten normierten Positionswert basiert, während eine Differenz zwischen den ersten und zweiten normierten Positionswerten größer oder gleich einem ersten vorbestimmten Wert ist, und während der erste normierte Positionswert und/oder der zweite normierte Positionswert kleiner oder gleich einem zweiten vorbestimmten Wert ist, wobei sich die ersten und zweiten Positionswerte erhöhen, wenn sich die Einrichtung (54, 72, 84, 90) von der Minimalposition zu der Maximalposition bewegt, und wobei das Steuersystem so ausgebildet ist, dass ein Minimalwert des ersten Positionswerts größer als ein Minimalwert des zweiten Positionswerts ist und ein Maximalwert des ersten Positionswerts größer als ein Maximalwert des zweiten Positionswerts ist und/oder dass sich die ersten und zweiten Positionswerte mit verschiedenen Raten erhöhen, wenn sich die Einrichtung (54, 72, 84, 90) von der Minimalposition zu der Maximalposition bewegt.

Transmission control module

An exemplary transmission system includes a plurality of sensors each configured to output a signal at least partially representative of a speed of at least one of a first transmission input shaft, a second transmission input shaft, a transmission output shaft, and an engine. A transmission control module is in communication with the plurality of sensors and is configured to identify at least one of the plurality of sensors as a failed sensor and another of the plurality of sensors as a working sensor. The transmission control module is further configured to estimate the signal of the failed sensor based on a predetermined relationship between an expected signal from the failed sensor and the signal received from the working sensor.

Diagnostic system for a battery system

A diagnostic system for a battery system in accordance with an exemplary embodiment is provided. The battery system includes a battery module electrically coupled to a contactor. The diagnostic system includes a first microcontroller and a second microcontroller operably communicating with the first microcontroller. The second microcontroller is programmed to open the contactor electrically coupled to the battery module if either a first diagnostic indicator flag is equal to a first fault value or a second diagnostic indicator flag is equal to a second fault value. The second microcontroller is further programmed to open the contactor if either a third diagnostic indicator flag is equal to a third fault value or a fourth diagnostic indicator flag is equal to a fourth fault value.

Diagnostic system for a DC-DC voltage converter

A diagnostic system for a DC-DC voltage converter is provided. The diagnostic system includes a first temperature sensor generating a first output voltage indicating a temperature level of a high voltage bi-directional MOSFET switch. The diagnostic system includes a microcontroller that samples the first output voltage at a first sampling rate utilizing a first channel in a first bank of channels to obtain a first predetermined number of voltage samples. The microcontroller determines a first number of voltage samples in the first predetermined number of voltage samples in which the first output voltage is greater than a first threshold voltage. The microcontroller sets a first temperature diagnostic flag equal to a first fault value if the first number of voltage samples is greater than a first threshold number of voltage samples indicating the high voltage bi-directional MOSFET switch has an over-temperature condition.