CONTROLLER WITH AN EARLY WARNING FUNCTION DESIGNED TO DETECT A SIGNAL REDUCTION PRESENT IN A HARDWARE COMPONENT

Abstract

A controller may have a plurality of self-diagnostic functions, each of which is configured for checking a function of an assigned hardware component of the controller. Each of the self-diagnostic functions may have at least one safety limit value, which is configured such that when the at least one safety limit value is exceeded the corresponding hardware component is switched off. Each of the self-diagnostic functions may have at least one quality limit value, the absolute value of which is smaller than an absolute value of the at least one safety limit value. The at least one quality limit value can be configured such that a quality-relevant state can be detected in the assigned hardware component when the at least one quality limit value is exceeded.

Claims

1.-15. (canceled)

16. A controller for steering of a motor vehicle with self-diagnostic functions each of which is configured for checking a function of an assigned hardware component of the controller, wherein each of the self-diagnostic functions has a safety limit value configured such that when the safety limit value is exceeded the assigned hardware component is switched off, wherein at least one of the self-diagnostic functions has a quality limit value whereby an absolute value of the quality limit value is less than an absolute value of the safety limit value, wherein the quality limit value is configured such that a quality-relevant state is detectable in the assigned hardware component when the quality limit value is exceeded.

17. The controller of claim 16 wherein the quality-relevant state is a reduced-quality electrical signal.

18. The controller of claim 16 comprising an evaluation unit configured to store a presence of the quality-relevant state as coding.

19. The controller of claim 18 wherein the evaluation unit is configured to evaluate the stored coding and forward a signal to a warning unit.

20. An electromechanical steering system for a motor vehicle, the electromechanical steering system comprising: an electric motor; a torque sensor configured to detect a torque applied by a driver; and an electronic control unit configured to calculate motor currents for operating the electric motor, the electronic control unit including a controller with self-diagnostic functions each of which is configured for checking a function of an assigned hardware component of the controller, wherein each of the self-diagnostic functions has a safety limit value configured such that when the safety limit value is exceeded the assigned hardware component is switched off, wherein at least one of the self-diagnostic functions has a quality limit value whereby an absolute value of the quality limit value is less than an absolute value of the safety limit value, wherein the quality limit value is configured such that a quality-relevant state is detectable in the assigned hardware component when the quality limit value is exceeded.

21. A motor vehicle comprising: the electromechanical steering system of claim 20; a warning unit configured to inform at least one of a driver or a motor vehicle workshop of a presence of the quality-relevant state.

22. A method for checking hardware components of a controller in an electromechanical steering system of a motor vehicle, wherein the controller comprises self-diagnostic functions each of which is configured to check a functionality of an assigned hardware component, wherein each self-diagnostic function includes a safety limit value, wherein at least one of the self-diagnostic functions includes a quality limit value whereby an absolute value of the quality limit value is less than an absolute value of the safety limit value assigned to the at least one of the self-diagnostic functions, the method comprising: outputting a value of a first of the self-diagnostic functions; checking whether the value exceeds a quality limit value for the first self-diagnostic function; detecting an exceedance of the quality limit value and thus a presence of a quality-relevant state; checking whether a safety limit value has been exceeded in the first self-diagnostic function or a second of the self-diagnostic functions; and detecting an exceedance of the safety limit value in the first or second self-diagnostic function and switching off the assigned hardware component for the first or second self-diagnostic function.

23. The method of claim 22 comprising storing a code assigned to the quality-relevant state.

24. The method of claim 22 wherein the quality-relevant state is a reduced-quality electrical signal in the assigned hardware component.

25. The method of claim 22 comprising outputting a reference to a countermeasure stored with respect to the quality-relevant state.

26. The method of claim 22 comprising: evaluating the quality-relevant state in an evaluation unit and forwarding the quality-relevant state to a warning unit; and outputting a warning signal with the warning unit whereby at least one of a driver or a motor vehicle workshop is informed of the presence of the quality-relevant state.

27. The method of claim 26 wherein the evaluation unit comprises at least one of a filter, a fault counter, or statistical measures that prevent unnecessary triggering of the warning signal in the warning unit.

28. The method of claim 27 wherein the fault counter includes a limit value, wherein only exceedance of the limit value triggers the forwarding of the quality-relevant state to the warning unit.

29. The method of claim 22 comprising storing a diagnostic trouble code assigned to the quality-relevant state.

30. The method of claim 22 wherein the quality-relevant state corresponds to a reduction of an insulation resistance of a circuit board by conductive anodic filament.

Description

[0029] In one preferred embodiment, the following further method step is provided: [0030] outputting a reference to a necessary countermeasure stored with respect to the quality-relevant state. In this way, the driver and/or the workshop directly arrive(s) at the information necessary for the repair of the control unit.

[0031] It is advantageous when the evaluation unit comprises a filter, fault counters, and/or statistical measures that prevent an unnecessary triggering of a warning signal in the warning unit. For the case in which a fault counter is utilized in the evaluation unit, the fault counter preferably has a limit value, wherein the forwarding of a quality-relevant state to the warning unit is triggered not before an exceedance of the limit value.

[0032] The code of the quality-relevant states is preferably a DTC.

[0033] Advantageously, the quality limit values are formed in such a way that a reduction of the insulation resistance of the circuit board by CAF is detected as a quality-relevant state.

[0034] One preferred embodiment of the invention is explained in greater detail in the following with reference to FIG. 1. FIG. 1 shows a schematic representation of an electromechanical motor vehicle steering system 1 with a steering wheel 2, which is coupled to an upper steering shaft 3 in a rotationally fixed manner. Via the steering wheel 2, the driver introduces an appropriate torque, as a steering command, into the steering shaft 3. The torque is then transmitted via the upper steering shaft 3 and the lower steering shaft 4 onto a steering pinion 5. The pinion 5 meshes, in a known way, with a toothed segment of a rack 6. The rack 6 is mounted in a steering housing in such a way as to be displaceable in the direction of its longitudinal axis. At its free end, the rack 6 is connected to tie rods 7 via ball-and-socket joints (not represented). The tie rods 7 themselves are connected, in a known way, via steering knuckles to a steered wheel 8 of the motor vehicle in each case. A turning of the steering wheel 2 results, via the connection of the steering shaft 3 and of the pinion 5, in a longitudinal displacement of the rack 6 and, thereby, to a swiveling of the steered wheels 8. The steered wheels 8 experience a reaction via a roadway 80, which counteracts the steering motion. Consequently, in order to swivel the wheels 8, a force is necessary, which makes an appropriate torque necessary at the steering wheel 2. An electric motor 9 of a servo unit 10 is provided, in order to assist the driver in this steering motion.

[0035] The upper steering shaft 3 and the lower steering shaft 4 are coupled to each other in a torsionally elastic manner via a torsion bar (not represented). A torque sensor unit 11 detects the twisting of the upper steering shaft 3 with respect to the lower steering shaft 4 as a measure of the torque manually applied at the steering shaft 3 or the steering wheel 2. Depending on the torque measured by the torque sensor unit 11, the servo unit 10 provides steering assistance for the driver. The servo unit 10, as the power assistance unit 10, 100, 101, can be coupled either to a steering shaft 3, the steering pinion 5, or the rack 6. The particular power assistance 10, 100, 101 introduces a servo-assisted torque into the steering shaft 3, the steering pinion 5, and/or into the rack 6, whereby the driver is assisted in the steering work. The three different power assistance units 10, 100, 101 represented in FIG. 1 show alternative positions for their arrangement. Usually, only one of the shown positions is occupied by a power assistance. The servo unit 10 comprises an electronic control unit with the controller (ECU) 12 for calculating the steering assistance.

[0036] The controller 12 comprises, within the scope of a safety concept, a plurality of self-diagnostic functions, each of which checks a functionality of an assigned hardware component of the controller 12. Each self-diagnostic function has safety limit values, wherein the hardware component is shut down (switched off) when the value of the self-diagnostic function is outside these safety limit values. In addition to the safety limit values, quality limit values are provided, which are more narrowly defined than the safety limit values, i.e., the absolute value of the safety limit values is greater than the absolute value of the quality limit values. The quality limit values are defined in such a way that an exceedance of the quality limit values indicates a reduced signal quality in the corresponding hardware component. A specific, quality-related coding (diagnostic trouble code, DTC) is provided for the exceedance of the quality limits, wherein a single, individual code is unambiguously assigned to an appropriate self-diagnostic function. If a quality limit is exceeded, the appropriate code is stored. It is preferably provided that at least one warning unit is arranged in the motor vehicle, which informs the driver of the vehicle and/or the motor vehicle workshop of the reduced signal quality in the ECU. The warning can take place acoustically, for example, via voice output, or optically, for example, via warning lights in the instrument panel or via warning messages on a screen, for example, via moving windows, so-called pop-up windows. The warning preferably takes place with reference to the particular DTC. It is also conceivable that the warning takes place independently of the specific DTC and the code and a possible reference to a countermeasure can first be read out with an external diagnostic device.

[0037] For the case that, due to CAF, there is a reduced insulation resistance between the voltage-conducting strip conductors on a circuit board of the ECU, a pair of the self-diagnostic functions known from the related art will detect the exceedance of their quality limits and inform the driver of the motor vehicle or the motor vehicle workshop or a mechanic thereof and, preferably, refer to necessary countermeasures. The functionality of the hardware is not stopped, since the safety limit values have not yet been exceeded. The driver or the mechanic therefore has sufficient time to initiate the countermeasure and avoid a failure of the steering.

[0038] Preferably, filters, fault counters, and/or statistical measures are provided, in order to prevent an unnecessary triggering of a signal in the warning unit.

[0039] The fault counter preferably has a limit value (debounce limit), wherein only an exceedance of the limit value triggers the detection of a loss of quality. The software necessary for triggering a warning signal can gather data for hours up to days before the warning unit actually triggers a signal.