METHOD FOR DETECTING A MALFUNCTION OF A SENSOR OF A VEHICLE SAFETY DEVICE

Abstract

A method for detecting a malfunction or defect of a sensor of a vehicle safety device uses a control unit of the vehicle safety device and at least one self-testing sensor which is separate from the control unit and transmits measuring values to the control unit. The following steps are performed: a) The sensor performs the self-test of the sensor, wherein the measuring section of the sensor is activated in a simulated manner in order to generate a test measuring value in response to the simulated activation, b) a signal is transmitted to the control unit which includes at least one of: a ratio of test measuring value to intensity of the simulated activation, a deviation of the test measuring value from the simulated activation and a test measuring value, c) it is checked by means of the control unit whether at least one of the ratio, the deviation and the measuring value is plausible, d) the control unit determines that the sensor has malfunctioned or is defective if at least one on the ratio, the deviation and the test measuring value is considered to be non-plausible.

Claims

1. A method for detecting a malfunction or defect of a sensor of a vehicle safety device by means of a control unit of said vehicle safety device and at least one self-testing sensor which is separate from said control unit and transmits measuring values to said control unit, comprising the following steps: a) performing said self-test of the sensor, wherein said measuring section of said sensor is activated in a simulated manner in order to generate a test measuring value in response to a simulated activation, b) transmitting a signal to said control unit which includes at least one of a ratio of test measuring value to intensity of said simulated activation, a deviation of said test measuring value from said simulated activation and a test measuring value, c) checking, by means of said control unit, whether at least one of said ratio, said deviation and said test measuring value is plausible, d) determining that said sensor has malfunctioned or is defective if at least one of said ratio, said deviation and said test measuring value is considered by said control unit to be non-plausible.

2. Method as claimed in claim 1, wherein said sensor comprises one of an MEMS element and an MOEMS element which includes said measuring section.

3. Method as claimed in claim 1, wherein said sensor is an acceleration sensor which measures in particular one of a longitudinal acceleration, a transverse acceleration and an acceleration about a vertical axis of said vehicle.

4. Method as claimed in claim 1, wherein said sensor generates said simulated activation itself.

5. Method as claimed in claim 1, wherein said signal is supplied to an integrator for checking plausibility in said control unit, wherein at least one of said ratio, said deviation and said test measuring value is considered by said control unit to be non-plausible when said output value of said integrator passes a predetermined threshold.

6. Method as claimed in claim 5, wherein said signal in said control unit initially passes through a low-pass filter before it is supplied to said integrator.

7. Method as claimed in claim 1, wherein said control unit counts how often at least one of said ratio, said deviation and said test measuring value falls below or exceeds a predetermined threshold, wherein at least one of said ratio, said deviation and said test measuring value is considered by said control unit to be non-plausible when said number determined by said control unit in a predetermined time interval is higher than a predetermined maximum value.

8. Method as claimed in claim 1, wherein said simulated activation of said measuring section of said sensor is performed in at least two ways, in particular by two test frequencies, and for each type of activation a signal is transmitted to said control unit, said signal including at least one of said ratio of test measuring value to intensity of said simulated activation of said corresponding type of activation, said deviation of said test measuring value from said simulated activation of said corresponding type of activation and said test measuring value, wherein said control unit checks, in relation to each type of activation, whether at least one of said ratio, said deviation and said test measuring value is plausible, and wherein said control unit determines that said sensor has malfunctioned or is defective when at least one of said ratio, said deviation and said test measuring value for each type of activation is considered by said control unit to be non-plausible and in addition said product of said individual signals of said corresponding types of activation is positive.

9. Method as claimed in claim 1, wherein said vehicle safety device is at least one of an airbag system and a vehicle dynamics control.

Description

BRIEF DESCRIPTION OF THE DRAWINGS

[0028] FIG. 1 schematically shows a method for detecting a malfunction or defect of a sensor from the prior art,

[0029] FIG. 2 shows a schematic diagram of the different components for performing the method in accordance with the invention,

[0030] FIG. 3 schematically shows a block diagram of the method in accordance with the invention for detecting a malfunction or a defect of a sensor, and

[0031] FIG. 4 shows a flowchart for implementing the method in accordance with the invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT

[0032] FIG. 2 schematically illustrates a vehicle safety device 10 which includes a self-testing sensor 12, a control unit 14 and a safety component 16.

[0033] The vehicle safety device 10 is, for example, an airbag system or vehicle dynamic control, also referred to as ESP, ESC etc. In that case, the safety component 16 is, for example, an airbag or a brake accordingly.

[0034] The control unit 14 controls the vehicle safety device 10 and thus the safety component 16. Also, the control unit 14 can be integrated in a central control unit of the vehicle.

[0035] The sensor 12 comprises a measuring section 18 and a sensor controller 20 which are electrically connected to each other. The measuring section 18 and the sensor controller 20 are located within the sensor 12, which is installed as a finished unit.

[0036] The measuring section 18 is a microsystem, such as a micro-electro-mechanical system (MEMS) or a micro-opto-electro-mechanical system (MOEMS) and is used to capture a particular measuring value.

[0037] For example, the sensor 12 is an acceleration sensor of a vehicle. In this case, the measuring section 18 is designed as a MEMS element which generates a signal in dependence upon the occurring acceleration. In this respect, mobile measuring electrodes are used for example, which generate a measuring value in dependence upon their deflection.

[0038] The sensor 12 can be arranged such that it can measure the longitudinal acceleration, the transverse acceleration or the acceleration of the vehicle about its vertical axis. Typically, a sensor 12 is provided for measuring the acceleration in each of these directions.

[0039] The sensor controller 20 controls the measuring section 18, receives the signals of the measuring section 18 and forwards the determined measuring value to the control unit 14 of the vehicle safety device 10.

[0040] The control unit 14 of the vehicle safety device 10 is separate from the sensor 12 and thus from the sensor controller 20.

[0041] The sensor 12 is designed as a self-testing sensor, i.e. the sensor controller 20 can activate the measuring section 18 in a simulated manner. By way of this simulated activation, the measuring section 18 generates a test measuring value which is measured by the sensor controller 20 (step A). The activation can be performed in various ways.

[0042] For example, in the case of an acceleration sensor, the sensor controller 20 can apply an alternating voltage with one or more test frequencies to the measuring electrodes of the measuring section 18, these test frequencies causing the measuring electrodes to vibrate, i.e. be activated in various ways. The measuring section 18 then generates test measuring values with the frequency of these vibrations.

[0043] The sensor controller 20 can determine, using the test measuring value and the information relating thereto, how greatly it has activated the measuring section 18 in a simulated manner, the ratio of test measuring value to intensity of the simulated activation and/or the deviation of the test measuring value from the simulated activation.

[0044] As can be seen in FIGS. 3 and 4, a signal 22 is transmitted from the sensor 12, or to be more precise from the sensor controller 20, to the control unit 14 of the vehicle safety device 10 (step B).

[0045] The signal 22 includes the ratio of test measuring value to intensity of the simulated activation, the deviation of the test measuring value from the simulated activation and/or the test measuring value itself. In the drawings, these three items of information are designated together with the reference sign T, wherein reference sign T indicates an individual item of these items of information or any combination of these items of information.

[0046] The signal 22 with the ratio, deviation and/or test measuring value T is received by the control unit 14 and is checked for plausibility (step C). If the plausibility check by the control unit 14 shows that the ratio, deviation and/or test measuring value are non-plausible, then the control unit 14 determines that the sensor has malfunctioned or is defective (step D).

[0047] If the sensor 12 has been classified as having malfunctioned or as being defective, the control unit 14 no longer uses the measuring value of this sensor 12 to control the safety components 16 but rather relies on replacement measuring values. However, if it is determined that the sensor has not malfunctioned or is not defective, the measuring value of this sensor 12 is used, as usual, by the control unit 14 to control the safety components 16.

[0048] In the process illustrated in FIG. 4 for determining whether the ratio, deviation and/or test measuring value T is plausible, initially two different ratios, deviations and/or test measuring values T1, T2 are generated by the sensor 12.

[0049] This occurs by virtue of the fact that the sensor controller 20 influences the measuring section 18 with two different types of simulated activation, e.g. in the event that the sensor 12 is an acceleration sensor, this is activated by the sensor controller 20 with electrical signals 22 of different test frequencies.

[0050] The sensor controller 20 thus receives two different test measuring values and determines, on the basis of the different test measuring values, separately for each type of activation, e.g. for each test frequency, the deviation of the test measuring value from the simulated activation and/or the ratio of test measuring value to intensity of the simulated activation.

[0051] For each type of activation, e.g. for each test frequency, a signal 22 is transmitted by the sensor controller 20 to the control unit 14, which signal includes the ratio of test measuring value to intensity of the simulated activation, the deviation of the test measuring value from the simulated activation and/or the test measuring value for this type of activation T1, T2. For example, the sensor controller 20 outputs the deviation of the test measuring value from the simulated activation as a percentage in the range of −100% to +100%.

[0052] These signals 22 are received by the control unit 14 and initially checked for plausibility individually.

[0053] The check for plausibility is the same for each signal 22 and therefore the check will only be described once hereinafter.

[0054] Furthermore, in the embodiment shown in FIG. 4, two checking methods are performed for checking the plausibility of each signal 22, i.e. for each type of activation, which methods will be discussed separately hereinafter.

[0055] In the first checking method, the signal 22 initially passes through a low-pass filter 24 in order to remove undesired noise from the signal 22.

[0056] Then, the signal 22 is supplied to an integrator 26.

[0057] The integrator 26 sums the signal 22 and outputs an integrated signal as an output value 28. The output value corresponds, for example, to a signal 22 integrated over 2000 ms.

[0058] The signal is then compared with a predetermined threshold Si, e.g. 40000 (reference sign 30) and is considered to be non-plausible when the output value 28 has passed the threshold Si. “Pass” is intended to mean that the output value 28 has exceeded the threshold Si when the desired value of the output value 28 lies below the threshold Si, and that the output value 28 falls below the threshold Si when the desired value of the output value 28 lies above the threshold Si.

[0059] In this manner, a check is made as to whether one of the signals 22 or the ratio, deviation or test measuring value for one type of activation (T1 or T2), e.g. for one test frequency, is plausible.

[0060] The same method is also performed with the other signal 22 of the other type of activation, e.g. of the other test frequency. Therefore, for each type of activation, in this case test frequencies, the ratio, deviation or the test measuring value T1 and T2 are checked as to plausibility.

[0061] In addition, the two signals 22 are multiplied together and a check is made as to whether the result is positive (step 32).

[0062] The control unit 14 now determines that the sensor has malfunctioned or is defective when the checking method has determined that the ratio, deviation and/or test measuring value T1 and T2 for each type of activation, e.g. for each test frequency, is non-plausible and additionally the product of the individual signals 22 for the individual types of activation, e.g. for the different test frequencies, is positive (step 34).

[0063] In the second checking method used in the embodiment of FIG. 4, the signals 22 are each supplied to a counting unit 36 of the control unit 14. This counts how often the ratio, deviation and/or test measuring value T1 or T2 falls below or exceeds a predetermined threshold Sz. Whether the times the variable falls below or exceeds the threshold Sz are counted depends upon the type and the desired value of the variable being considered.

[0064] For example, the threshold Sz for the absolute deviation of the test measuring value from the intensity of the simulated activation is at 60%, wherein the number of times this threshold Sz is exceeded is counted.

[0065] If now the variable is counted as exceeding or falling below the threshold Sz a greater number of times than a predetermined maximum value, e.g. 60, within a predetermined time interval, e.g. 2 seconds, or directly one after the ether, then the ratio, deviation and/or test measuring value T1 or T2 is considered by the control unit 14 to be non-plausible.

[0066] As in the first checking method, in this checking method the control unit 14 determines that the sensor 12 has malfunctioned or is defective when the ratio, deviation and/or test measuring value T1, T2 for each type of activation, e.g. for each test frequency, is non-plausible and in addition the product determined in step 32 is positive (step 38).

[0067] If the two checking methods are used simultaneously, it is sufficient for a determination to be made in one of the checking methods (step 34 or step 38) that the sensor has malfunctioned or is defective, in order for the control unit 14 to classify the sensor 12 as being faulty and for the measuring values of this sensor 12 to no longer be used to control the safety components 16 (step 40).

[0068] Of course, it is possible that the sensor 12 generates more than two signals 22 for different types of activation and transmits same to the control unit 14 which proceeds as per the embodiment of FIG. 4.

[0069] Likewise, it is feasible for the sensor 12 to generate only one signal 22 corresponding to one type of activation. In this case, the method shown in FIG. 4 is simplified because there is no need to multiply the signals 22 (step 32).

[0070] It is also feasible for only one of the two checking methods shown in FIG. 4 to be used in each case, in order to reduce the complexity of the method.