SYSTEM FOR AUTOMATICALLY MONITORED SIGNALLING OF A VEHICLE STATE AND METHOD FOR MONITORING A VEHICLE STATE-SIGNALLING DEVICE

Abstract

The invention relates to a system for the monitored signalling of a vehicle state, in particular for the monitored signalling of an activated, at least partially automated, driving operating state of a motor vehicle and to a method for the automatic monitoring of a vehicle state-signalling device. Specifically, the invention relates not only to the system and to the method but also to a monitoring device for carrying out the method, to a computer program which is configured to execute the method and to a vehicle state-signalling device and to a vehicle, in particular to a motor vehicle, equipped with the system. In the method, a first control signal, which is configured to change an assigned signal encoder of the vehicle state-signalling device into a deactivated state, is transferred to the vehicle state-signalling device. Testing of a current actual operating state of the signal encoder is then carried out. If the testing reveals that the signal encoder is in an activated operating state despite the transferred control signal, at least one predetermined fault remedying action which is assigned to this test result is triggered.

Claims

1. A method for the automated monitoring of a vehicle state-signalling device for signalling an activated, at least partially automated, driving operating state of a motor vehicle, the method comprising: transferring a first control signal to the vehicle state-signalling device which is configured to change an assigned signal encoder of the vehicle state-signalling device into a deactivated state; subsequently testing a current actual operating state of the signal encoder; and when the testing reveals that the signal encoder is in an activated state despite the transferred control signal, triggering of at least one predetermined fault remedying action which is assigned to this test result.

2. The method according to claim 1, wherein the fault remedying action comprises outputting a second control signal which is independent of the first control signal and is configured to trigger at least one of the following processes: changing the vehicle state-signalling device into a safe state; and outputting a fault message at a human-machine Interface.

3. The method according to claim 2, wherein the second control signal is configured to cause the vehicle state-signalling device to change into a safe state by means of self-deactivation overall or by means of selective deactivation of its affected signal encoder.

4. The method according to claim 1, wherein the method is carried out repeatedly or as a function of the vehicle state which is assigned to the vehicle state-signalling device overall or of a vehicle state which is assigned individually to the signal encoder.

5. The method according to claim 1, wherein the vehicle state-signalling device has a multiplicity of signal encoders which differ from one another, at least in one signalling aspect, and the method is selectively only carried out with respect to a first genuine subset of the signal encoders of the vehicle state-signalling device, individually per signal encoder or with respect to one or more predetermined combinations of signal encoders from the subset.

6. A monitoring device which is configured to carry out the method according to claim 1 with respect to a vehicle state-signalling device.

7. The monitoring device according to claim 6, comprising: at least one test device which is configured to test a test signal which is output at a test signal output of the vehicle state-signalling device, in order to determine a current operating state of the signal encoder of the vehicle state-signalling device on the basis of the test.

8. A computer program which is configured to carry out, when it is run on a monitoring device, the method according to claim 1.

9. A vehicle state-signalling device for signalling an activated, at least partially automated, driving operating state of a motor vehicle, comprising: a signal encoder which is configured to output a state signal for signalling a vehicle state assigned to the signal encoder; and a circuit for actuating the signal encoder in order to selectively activate or deactivate said encoder in reaction to at least one corresponding control signal, which is transferred by a monitoring device; wherein the circuit has a first switch and a second switch which are configured to be switched independently thereof, as well as at least one test signal output for making available a test signal for testing a current operating state of the signal encoder; and wherein the circuit is configured in such a way that, to activate the signal encoder, the first and second switches must together have a specific predetermined switched state combination, while switched state combinations of the switches which do not correspond to the specific switched state combination of the first and the second switch or do not contain the latter correspond to deactivation of the signal encoder.

10. The vehicle state-signalling device according to claim 9, wherein: the circuit has a voltage divider with two dipoles which are connected in series, and the test signal output starts from a circuit point which is located between the two dipoles, the first and the second switches are arranged in a first of the dipoles, and the signal encoder is arranged in the second of the dipoles, and the signal encoder is activated by an operating voltage applied via the voltage divider only when the first and second switches are each in the closed switched state at the same time.

11. The vehicle state-signalling device according to claim 9, wherein: the circuit has a voltage divider with two dipoles which are connected in series, and the test signal output starts from a circuit point which is located between the two dipoles, the first switch is arranged in a first of the dipoles, and the signal encoder and the second switch are arranged in the second of the dipoles, and the signal encoder is activated by an operating voltage applied via the voltage divider only when the first and second switches are each in the closed switched state at the same time.

12. The vehicle state-signalling device according to claim 11, wherein: in the second dipole the second switch is connected parallel to the signal encoder, and the signal encoder is activated by an operating voltage applied via the voltage divider only when the first switch is in the closed switched state and the second switch is in the opened switched state at the same time.

13. The vehicle state-signalling device according to claim 10, wherein the voltage divider is a loaded voltage divider in which the second dipole has a load which is connected parallel to the signal encoder.

14. A system for monitored vehicle state signalling of an activated, at least partially automated, driving operating state of a motor vehicle, the system comprising: a monitoring device comprising at least one test device which is configured to test a test signal which is output at a test signal output of the vehicle state-signalling device, in order to determine a current operating state of the signal encoder of the vehicle state-signalling device on the basis of the test a vehicle state-signalling device which has a signal-conducting connection thereto according to claim 9.

15. The system according to claim 14, wherein: the system is divided between two or more different apparatuses, the first switch and the second switch of the vehicle state-signalling device are arranged in two different apparatuses of the apparatuses, the test signal output of the vehicle state-signalling device is connected to at least two of the apparatuses, and the at least two apparatuses are each configured to carry out a method comprising: transferring a first control signal to the vehicle state-signalling device which is configured to change an assigned signal encoder of the vehicle state-signalling device into a deactivated state; subsequently testing a current actual operating state of the signal encoder; and when the testing reveals that the signal encoder is in an activated state despite the transferred control signal, triggering of at least one predetermined fault remedying action which is assigned to this test result, individually or together with respect to the vehicle state-signalling device of the system.

16. The system according to claim 14, wherein: the vehicle state-signalling device has a multiplicity of signal encoders which differ from one another at least in one signalling aspect; and the monitoring device is configured to carry out, with respect to the vehicle state-signalling device, the method selectively for each of the signal encoders.

17. The system according to claim 16, configured such that, in the case in which the testing with respect to one of the signal encoders reveals that this signal encoder is in an activated operating state despite the corresponding transferred control signal, said system deactivates this signal encoder selectively.

18. A vehicle having a system according to claim 14.

Description

[0039] In this context, FIGS. 1 to 7 are respectively schematic views of selected exemplary embodiments of a system according to the invention, wherein these individual embodiments differ from one another. In the figures, the same reference signs are used throughout for the same or corresponding elements of the invention.

[0040] FIG. 1 represents a first embodiment of a system 1 according to the invention which has a vehicle state-signalling device 2 and a monitoring device 3. The vehicle state-signalling device 2 contains a loaded voltage divider composed of two dipoles, A first of the dipoles contains a series circuit composed of two switches S1 and S2 and an ohmic load resistor R1. The second of the dipoles contains a signal encoder 4, for example a light-emitting diode (as illustrated), parallel to which a pulldown resistor R2 is connected, therefore making the voltage divider the loaded voltage divider.

[0041] The voltage divider has an operating voltage connection V.sub.SUP and an associated earth connection GND so that, while it is operating, an operating voltage can be applied via the voltage divider. A test signal output 5 for a test signal PS, which has a signal-conducting connection to the monitoring device 3, starts from a connecting point (switching point) between the two dipoles. The two switches S1 and S2 can be controlled individually by the monitoring device 3 by means of corresponding switching signals. The monitoring device 3 can have, in particular, one or more processors as well as a memory (respectively not illustrated) in which a computer program, by means of which the method according to the invention is implemented, is stored.

[0042] If a vehicle state which is assigned to the signal encoder is present, which state is to be signalled by the signal encoder 4, the vehicle state-signalling device 2 is changed into an active operating state in that the two switches S1 and S2 are actuated by the monitoring device 3 in such a way that they are closed. The voltage divider therefore becomes conductive, and a current flows which is defined, in particular, by means of the two resistors R1 and R2 and the resistor of the signal encoder 4 and by means of which the signal encoder is activated, that is to say, in the exemplary case, the light-emitting diode is illuminated. If, on the other hand, the vehicle state which is assigned to the signal encoder 4 is not present, the vehicle state-signalling device 2 is changed into a deactivated operating state in that the two switches S1 and S2 are actuated by the monitoring device 3 in such a way that they are both opened, as a result of which the flow of current is interrupted and the signal encoder 4 is deactivated in the fault-free case. The sensing of the vehicle state assigned to the signal encoder can be carried out, in particular, by means of a sensor system (not illustrated) which is associated with the monitoring device 3 itself. Additionally or alternatively, the monitoring device 3 can, as illustrated, have a vehicle state signal input 6 via which it can receive a state signal which characterizes the vehicle state, for example from a vehicle controller or a system-external sensor system.

[0043] At predefined, regular time intervals, in particular when the vehicle state-sensing device 2 is in its deactivated operating state, the vehicle state-signalling device 2 is, according to the method, changed into a diagnostic state in that the two switches S1 and S2 are actuated by the monitoring device 3 by means of at least one first control signal in such a way that one of the two switches is opened and the other is closed. In the fault-free case, the signal encoder 4 should therefore be deactivated, since the opened switch interrupts the flow of current. In order to test whether the signal encoder 4 is nevertheless actually activated incorrectly, the voltage potential at the test signal output 5 is tapped and evaluated by the monitoring device 3. The voltage potential corresponds here to the voltage drop across the signal encoder 4.

[0044] If the signal encoder 4, here the light-emitting diode, is activated incorrectly, which can be caused, in particular, by the fact that the switch which is actually opened according to its actuation continues to be incorrectly closed or has a short circuit, a known forward voltage which is typical of the operation of the signal encoder 4 drops across said signal encoder 4. During the evaluation in the monitoring device 3, the latter can be detected as such, the activated state of the signal encoder 4 can be inferred therefrom and a corresponding fault remedying action can be triggered by means of at least one second control signal. The latter can consist, in particular, in the fact that the vehicle state-signalling device 2 is actuated by the monitoring device 3 by means of the at least one second control signal in such a way that, as a result, that switch of the two switches which is initially still closed is opened, and therefore the vehicle state-signalling device 2 is changed into the safe, completely deactivated operating state. Additionally or alternatively, a warning signal can be output in the case of a fault at a human-machine interface 7 which has a signal-conducting connection to the monitoring device. In the alternative case, i.e. in the actual fault-free case, the potential at the point 5 is pulled to earth potential GND by the pulldown resistor, which permits easy differentiation with respect to the fault situation.

[0045] As an alternative to the voltage measurement, in particular a measurement of current can be carried out at the switching point 5, in order to be able to infer the actual operating state of the signal encoder 4 from the measured current. This diagnostic process can be carried out either only for one of the two switches S1 and S2 or else successively for both switches.

[0046] FIG. 2 shows a second alternative embodiment of the system 1, which differs from the embodiment illustrated in FIG. 1 in that the second switch S2 is now in the second dipole instead of being in the first dipole, and is connected in series with the signal encoder 4. With this circuit it is also the case that, in the fault-free situation, the signal encoder 4 is activated only when both switches S1 and S2 are closed. The operation of the circuit corresponds to that described above with respect to FIG. 1.

[0047] FIG. 3 shows a third alternative embodiment of the system 1, which differs from the embodiment illustrated in FIG. 2 in that, instead of being connected in series with the first signal encoder 4, the second switch S2 in the second dipole is now connected parallel to the signal encoder 4, instead of the resistor R2 (or in addition thereto). With this circuit it is also the case that, in the fault-free situation, the signal encoder 4 is activated only when the switch S1 is closed and the switch S2 is opened. The operation of the circuit corresponds otherwise to that described above with respect to FIG. 1.

[0048] According to the method, the vehicle state-signalling device 2 can correspondingly be changed into a diagnostic state if it is actuated by the monitoring device 3 in such a way that, in the fault-free situation, both switches S1 and S2 are opened. If the measurement at the signal test output in such a switch position reveals that the signal encoders 4 are nevertheless in the active state, this makes it possible to infer a malfunction of the switch S1 or of its actuation, for example a short circuit. Another diagnostic state of the vehicle state-signalling device 2 can consist in the fact that the monitoring device 3 actuates the vehicle state-signalling device 2 in such a way that, in the fault-free situation, both switches are closed. If the measurement at the signal test output 5 then reveals that the signal encoder 4 is nevertheless activated, this makes it possible to infer a malfunction of the switch S2 or of its actuation, for example a line break or some other type of interruption. This embodiment additionally has the advantage that, if the switch S2 is closed, any undesired voltages occurring at the signal encoder 4 are dissipated via the switch S2. This can be the case, in particular, if the signal encoding 4 is a light-emitting diode or some other semiconductor component with which intrinsically parasitic voltages can be generated under certain circumstances, in particular by externally inputting electromagnetic waves.

[0049] FIG. 4 shows a fourth, alternative embodiment of system 1, which corresponds largely to that in FIG. 1, but with the particular feature that the system 1 is constructed distributed between two different control apparatuses 2a and 2b. In this context, the control apparatus 2a at the same time constitutes the vehicle state-signalling device 2 of the system 1, while the monitoring device 3 is divided into two monitoring units 3a and 3b, wherein the monitoring unit 3a forms part of the control apparatus 2a, and the monitoring unit 3b forms part of the control apparatus 2b. Both monitoring units 3a, 3b are respectively connected to the test signal output 5 of the vehicle state-signalling device 2, in order to tap a test signal PS there. Each of the monitoring units 3a, 3b is configured to actuate that switch of the two switches S1 and S2 which is assigned to it, wherein each of the two control apparatuses 2a, 2b has one of the two switches S1 and S2 connected in series. The modular design composed of two control apparatuses 2a, 2b has, in particular, the advantage that, in the case of a defect, normally only one of the two control apparatuses 2a, 2b has to be exchanged. Furthermore, the testing by means of the test signal PS has a redundant design by virtue of the two monitoring units 3a, 3b so that a malfunction can be detected even if one of the two monk taring units 3a, 3b itself or its connection to the test signal output 5 is defective.

[0050] FIG. 5 shows a fifth, alternative embodiment of the system 1 which is derived from that from FIG. 4, but with the particular feature that a multiplicity of signal encoders 4R, 4G, 4B, each with corresponding wiring according to FIG. 4, are provided. However, the switch S2 is not embodied in respective separate fashion for each of the signal encoders 4R, 4G, 4B, but rather is implemented by a single switch which is jointly connected upstream of all of the signal encoders 4R, 4G, 4B. However, each signal encoder can be activated or deactivated individually by means of the respective individually provided other switch S1R, S1G or S1B if the switch S2 is closed. In analogous fashion to FIG. 4, respectively corresponding resistors R1R, R1G or R1B and R2R, R2G or R2B are provided for the individual wiring of the signal encoders 4R, 4G, 4B.

[0051] For each of the signal encoders 4R, 4G, 4B there is a corresponding individual test signal output 5R, 5G or 5B at which a corresponding test signal PSR, PSG or PSP can be tapped by the monitoring unit 3a. The various signal encoders 4R, 4G, 4B can be, in particular, lighting means, for example light-emitting diodes, which are combined in the same vehicle state-signalling device 2 and have different colours, as a result of which it is possible to form a display whose signalling comprises different colours or colour combinations depending on the associated vehicle state to be signalled. For example, a green light-emitting diode 4G could correspond to a highly automated driving state (i.e. driving mode) of a vehicle equipped with the system 1, a blue light-emitting diode 4B could correspond to a partially automated driving state, and a red light-emitting diode 4R could correspond to a manual driving state.

[0052] The test signals PSR, PSG and PSB can each be received as analogue signals and processed by the monitoring units 3a and 3b, Alternatively it is also conceivable to generate the test signals PSR, PSG and PSB as digital signals or to convert them into such signals and process them in a digital fashion in the monitoring units 3a and 3b. The latter can be carried out, in particular, by means of a diagnostic protocol, for example if the signal encoders are what are referred to as “smart LEDs”. During the signal processing, the testing, and if appropriate the triggering of a fault remedying measure, such as for example the opening of the associated switch S1R, S1G to S1B in order to bring about a respective safe state, can be carried out individually for each of the signal encoders.

[0053] FIG. 6 shows a sixth, alternative embodiment of the system 1, which is derived from that in FIG. 5, but with the particular feature that here all the test signal outputs 5R, 5G and 5B are connected to the monitoring unit 3a and digitized there, and only from there are test signals, which are combined optionally by multiplex, transferred to the second monitoring unit 3b in the control apparatus 2b. The processing of the detected test signals PSR, PSG and PSB in the diagnostic mode occurs in a corresponding digital fashion.

[0054] FIG. 7 finally shows a seventh, alternative embodiment of the system 1 which is derived from that in FIG. 6, but with the particular feature that the second switch S2 is now no longer embodied as a common switch but rather in each case individually by means of the switches S2R, S2G and S2B. This has the advantage that, in the case of a fault, each of the signal encoders 4R, 4G and 4B can be changed into a safe state individually by switching off by means of the corresponding switches S2R, S2G and S2B.

[0055] While at least one exemplary embodiment has been described above, it has to be noted that there are a large number of variations in this respect. It is also to be noted here that the described exemplary embodiments constitute only non-limiting examples and they are not intended to limit the scope, applicability or configuration of the devices and methods described here. Instead, the above description will provide a person skilled in the art with an indication for the implementation of at least one exemplary embodiment, with the understanding that various changes in the means of functioning and the arrangement of the elements described in an exemplary embodiment can be made without departing here from the subject matter which is respectively defined in the appended claims or its legal equivalents.

LIST OF REFERENCE SIGNS

[0056] 1 System for monitored vehicle state signalling [0057] 2 Vehicle state-signalling device [0058] 2a, b Control apparatuses [0059] 3 Monitoring device [0060] 3a, b Monitoring units [0061] 4, 4R, 4G, 4B Respective signal encoders [0062] 5, 5R, 5G, 5B Respective test signal output or connecting point of two dipoles [0063] 6 Vehicle state signal input [0064] 7 Human-machine interface [0065] S1, S1R, S1G, S1B Respective first switches [0066] S2, S2R, S2G, S2B Respective second switches [0067] R1,R1R, R1G, R1B Respective resistor, in particular for limiting the current through the assigned signal encoder [0068] R2,R2R, R2G, R2B Respective pulldown resistor [0069] Vsup Operating voltage connection [0070] GND Earth connection [0071] PS,PSR, PSG, PSB Test signals