Method and device for actuating two relays arranged in series

Abstract

A method for controlling two serially disposed relays that switch a load with two different safety levels depending on the driving situation in a vehicle includes querying state information that includes movement state information and/or coasting operation information of the vehicle, determining a safety level of the two different safety levels depending on the driving situation, using the state information, detecting a relay of the two serially disposed relays using a balancing rule when the safety level determined in step b) represents a lower safety level of the two safety levels, switching the selected relay into a non-conductive state and keeping the further relay in a conductive state when a first request signal for switching off the load is received, and switching the selected relay into a conductive state when a second request signal for switching on the load is received.

Claims

1. A method for controlling two serially disposed relays that switch a load with two different safety levels depending on a driving situation in a vehicle comprising: a) Querying state information that comprises at least one of a movement state information of the vehicle and a coasting operation information of the vehicle; b) Determining a safety level of the two different safety levels depending on the driving situation, using the state information; c) Selecting a relay of the two serially disposed relays using a balancing rule when the safety level determined in step b) represents a lower safety level of the two safety levels; d) Switching the selected relay into a non-conductive state and keeping the other relay in a conductive state when a first request signal for switching off the load is received; and e) Switching the selected relay into a conductive state when a second request signal for switching on the load is received.

2. The method according to claim 1, wherein in step b) of determining, when the movement state information represents a speed of the vehicle above a speed threshold value and at least one of when the coasting operation information represents a coasting operation of the vehicle and a possibility for a coasting operation of the vehicle.

3. The method according to claim 1, wherein in step b) of determining, the higher safety level is selected when the movement state information represents a stoppage of the vehicle or a speed of the vehicle below a speed threshold value.

4. The method according to claim 1, wherein the balancing rule alternately selects a relay of the two serially disposed relays.

5. The method according to claim 1, wherein the balancing rule evaluates a first number of the actuated switching operations for the first relay and a second number of the actuated switching operations for the second relay and correspondingly selects the relay of the two serially disposed relays that has a lower number of switching operations in comparison with each other in the number of switching operations of the two relays.

6. The method according to claim 1 further comprising: switching the two relays into a non-conductive state when a first request signal for switching off the load is received and when the safety level determined in step b) represents a higher safety level of the two safety levels.

7. The method according to claim 1, wherein in step e) of switching, both relays are switched into a conductive state when a second request signal for switching on the load is received and the step f) of switching has been performed.

8. A device for controlling two serially disposed relays that is configured to switch a load with two different safety levels depending on the driving situation in a vehicle, including the following devices: a) a device for reading a state information that comprises at least one of a movement state information of the vehicle and a coasting operation information of the vehicle; b) a device for determining a safety level of the two safety different safety levels, which differ depending on the driving situation, using the state information; c) a device for selecting a relay of the two serially disposed relays using a balancing rule when the safety level determined in step b) represents a lower safety level of the two safety levels; d) a device for switching the selected relay into a non-conductive state and keeping the further relay in a conductive state when a first request signal for switching off the load is received; and e) a device for switching the selected relay into a conductive state when a second request signal for switching on the load is received.

9. The device according to claim 8, wherein the two serially disposed relays to be switched are formed as a mono-stable relays that switch into an open position without an applied switching signal.

10. The device according to claim 8, wherein the first relay has diversity with respect to the second relay in order to inhomogeneously enable a redundancy provided by the serially disposed relays.

Description

DRAWINGS

(1) In order that the disclosure may be well understood, there will now be described various forms thereof, given by way of example, reference being made to the accompanying drawings, in which:

(2) FIG. 1 is a schematic illustration of two serially disposed relays that control a load in a vehicle with two different safety levels, depending on the driving situation, according to an exemplary form of the present disclosure;

(3) FIG. 2 is a flowchart of a method according to a first exemplary form of the present disclosure;

(4) FIG. 3 is a flowchart of a method according to a second exemplary form of the present disclosure;

(5) FIG. 4 is a flowchart of a method according to a third exemplary form of the present disclosure; and

(6) FIG. 5 is a schematic illustration of a device according to an exemplary form of the present disclosure.

(7) The drawings described herein are for illustration purposes only and are not intended to limit the scope of the present disclosure in any way.

DETAILED DESCRIPTION

(8) The following description is merely exemplary in nature and is not intended to limit the present disclosure, application, or uses. It should be understood that throughout the drawings, corresponding reference numerals indicate like or corresponding parts and features.

(9) FIG. 1 is a serial arrangement of two relays R1, R2 for switching a load that is represented here by the terminal 50 KL50. The first relay R1 is controlled via a first control input R1_AN; the second relay R2 is controlled via a second control input R2_AN. Only if both serially disposed relays R1, R2 are closed, i.e., are electrically conductively switched, the supply 10 is switched to the terminal KL50.

(10) In one exemplary form, the relays are designed to enable a switching frequency of 600,000 switching operations/switching cycles. This applies, for example, to a control system of a starter in a vehicle. Here it is the case that with a stationary vehicle an unintentional starting of the motor is to be precluded, since the vehicle could thereby jump forward and injure another road user. For this reason, two independently controlled relays are disposed in series. In a typical vehicle including an automatic start-stop system approximately 310,000 switching operations are expected during the vehicle service life. Thus, the system design is sufficient. However, if a coasting operation is now additionally provided, then the desired capability increases to 800,000 switching cycles, whereby the switching frequency of the relays used is exceeded. A solution possibility would be the use of expensive relays having an increased switching frequency. The exemplary forms depicted below show an approach for enabling the existing systems for this additional functionality. Thus, with serially connected relays that are independently controlled for safety reasons, the complete system of the relays can be loaded by an intelligent control system and the monitoring of the functional safety such that an increased start/stop capability is made possible to a certain extent.

(11) The solution is shown based on the example of terminal KL50 depicted here in FIG. 1 but is valid for all systems having this configuration or desired safety capability. The switching cycles mentioned are only mentioned as examples and for better clarity and differ depending on the implementation and application.

(12) As already shown, the example is based on the assumption that the safety goal is that the vehicle shall not move in an uncommanded manner, wherein the safety goal is to be used for a stationary vehicle (as a rule: motor off). In this case the safety goal means that the motor shall only start with corresponding controlling and not start due to a (hardware) fault alone. However, if the vehicle is in driving operation, it is already moving and therefore need not particularly protect the terminal KL50. Here the vehicle can be considered to be in motion starting from a speed above a threshold value. Alternatively, a control signal is received that the vehicle is in a driving situation suitable for coasting, coasting is initiated, or coasting has been initiated.

(13) Taking into account these assumptions, the additional switching frequency of 490,000 cycles can be distributed between the two relays in a manner such that none of the relays reaches the limits of its switching frequency. Furthermore, in normal start/stop mode, 310,000 cycles of the relays are used in order not to endanger the safe state. With coasting, which only comes into consideration when the vehicle moves, one of the two relays is permanently switched on or remains permanently switched on. In order to arrive at the lowest switching load, after a switching-on of both relays only one relay is disconnected when the security goal that the vehicle shall not move in an uncommanded manner is not to be considered due to the vehicle movement. Only if the vehicle has a speed below a speed limit value or is stationary, the second relay is also opened in order to again provide the higher safety level. In other words, in the case of a moving vehicle the safety goal of “no uncommanded vehicle movement” does not apply and one of the two relays remains off and is only switched on if a start is desired during coasting.

(14) In order to increase the yield of switching cycles from both relays, the AN cycle is constantly alternated. In one particular exemplary form, in the first driving cycle relay R1 is left (electrically conductive) and relay R2 is switched during coasting; in the next driving cycle relay R2 is left (electrically conductive) and relay R1 is switched during coasting.

(15) A suitable method, suitable software, or a suitable device can include the switched cycles of the relays and thus improve the yield of the two relays. Thus, per driving cycle a to-be-switched relay R1 or R2 can be selected, or these are always alternately controlled or the currently less-loaded relay R1 or R2 can be selected depending on the previous load.

(16) Optionally a diagnostic device is provided for monitoring the relays in the sense of “state of health,” wherein the transition resistance and/or the contact quality or other relevant parameters are monitored in order to select the “healthier” relay. Thus, instead of the pure switching frequency the less loaded relay is determined via a relay state and the relay is correspondingly selected.

(17) Due to the changed control system, as described here, existing relays can be capable of the desired new capabilities. Thus, a simple calculation shows that the relays with the assumptions made here of the load are configured to absorb the additional switching cycles.

(18) Due to the present disclosure, it is possible to realize increased start cycles with existing architecture and/or existing solutions. Only the control system is adapted, for example, by the body controller. New designs can advantageously be partially avoided.

(19) The algorithm is based on an alternating, permanent switching-on of a relay in driving operation with moving vehicle. In one exemplary form the number of driving cycles is monitored by a superordinate control unit. Also, for example, the number of switching cycles in a particular exemplary form is monitored by a superordinate control unit. Due to the monitoring a one-sided wearing of a relay with unequal driving cycles can be recognized and compensated for.

(20) In the following figures, FIG. 2 to FIG. 4 are variants of the inventive method for controlling two serially disposed relays, which switch a load with two safety levels depending on the driving situation in a vehicle.

(21) Here, FIG. 2 and FIG. 3 each show one schedule that differs in the manner of the controlling of the relays as the controlling of the relays R1, R2 changes. In the exemplary form depicted in FIG. 2, in a first step a) of the querying a state information of the vehicle is checked. The state information represents a movement state information of the vehicle and additionally or alternatively a coasting operation information of the vehicle. The step a) of querying is the basis for the following step b) of determining of the safety level, so that in FIG. 2 (and FIG. 3) these two steps are summarized. As already shown, the method is based on the differentiating between two different safety levels, wherein for the lower safety level a simple securing is desired, and for the higher safety level a redundant securing by two serially connected relays for controlling is desired. The safety levels are dependent on the state information of the vehicle. In one specific simple example the lower safety level is used with a moving vehicle and the higher safety level with a stationary vehicle. Thus, the state information is an indicator for the driving situation and the safety level can thus be determined using the state information.

(22) With a stationary vehicle, in the exemplary form depicted in FIG. 2, the method is left in or the method remains in an endless loop in step a) or in steps a) and b) until the vehicle is in motion.

(23) In the subsequent step c) of selecting, one of the two serially disposed relays R1, R2 is selected using a balancing rule in order to determine for the following step the relay R1 or R2 to be switched. The step c) of the selecting is performed when in step b) the lower safety level has been determined for the current driving state.

(24) A request signal for switching the load serves as the trigger signal in order to initiate the following steps, wherein the steps d) and e) are only performed when the vehicle is in a driving state wherein the lower safety level applies. This check is performed continuously with the steps a), b) and c). Thus, the schedule depicted is a simplified illustration depending on the implementation and does not show processes of the depicted method steps running in parallel. With a software implementation, information about queues can be exchanged in order, for example, to continuously monitor the currently valid safety level in the subsequent steps and continuously provide a change into the double securing (both relays are switched off) with a change into the higher safety level. With an implementing in a device this can be provided, for example, via status lines or permanently applied status signals. However, to graphically depict this here would greatly reduce the readability.

(25) When the vehicle is in a driving state of the lower safety level and a first request signal A1 for switching off the load is received, then in step d) of the switching the selected relay is switched into a non-conductive state and the further relay remains in a conductive state. The schedule in FIG. 2 shows a partial step d1) wherein the selected relay is set into the non-conductive state and a further partial step d2) wherein the further relay remains in the conductive state or is switched into the conductive state.

(26) When a second request signal A2 for switching on the load is received, in a step e) of switching the selected relay switches back into a conductive state. At this point the method is started again from the beginning.

(27) In order to show at least two variants of the proposed method, the flow diagram further includes a step s) and a further step d). Here the illustration in FIG. 3 differs. The step s) stands for a renewed command “start cycle off,” whereupon in the subsequent step d) the selected relay is switched off. This stands so to speak for the step d) depicted above, wherein the further relay need not be considered, since it remains permanently switched in this driving cycle. The command “start cycle off” is another way to describe the new receiving of a first request signal A1.

(28) In the exemplary form according to FIG. 2, for example, during a driving cycle, the same selected relays are always switched, while the further relay remains permanently switched on. In contrast to FIG. 2, FIG. 3 shows an alternative form wherein with each switching cycle the previously switched relay remains in its switching position and the previously permanently switched-on relay is now switched in order to achieve the desired balancing effect by the alternating controlling.

(29) FIG. 4 is a further variant of a flow plan of an inventive method for controlling two serially disposed relays, which switch a load with two safety levels depending on the driving situation in a vehicle, including the steps:

(30) a) querying state information that comprises movement state information of the vehicle and/or a coasting operation information of the vehicle;

(31) b) determining a safety level of the two different safety levels depending on the driving situation, using the state information;

(32) c) selecting a relay of the two serially disposed relays using a balancing rule when the safety level determined in step b) represents a lower safety level of the two safety levels;

(33) d) switching the selected relay into a non-conductive state and keeping the further relay in a conductive state when a first request signal for switching off the load is received; and

(34) e) switching the selected relay into a conductive state when a second request signal for switching on the load is received.

(35) In one exemplary form the lower safety level is selected in step b) of determining when the movement state information represents a speed of the vehicle above a speed threshold value and additionally or alternatively when the coasting operation information represents a coasting operation of the vehicle or a possibility for a coasting operation of the vehicle.

(36) In one exemplary form, in step b) of determining, the higher safety level is selected if the movement state information represents a stoppage of the vehicle or a speed of the vehicle below a speed threshold value.

(37) In one exemplary form the balancing rule alternately selects one relay of the two serially disposed relays. In one alternative exemplary form the balancing rule evaluates a first number of the actuated switching operations for the first relay and a second number of the actuated switching operations for the second relay, and in step c) of selecting, the relay of the two serially disposed relays is correspondingly selected that has a lower number of switching processes in the comparison of the number of switching operations of the two relays to each other.

(38) When the vehicle assumes a driving state for which the higher safety level applies, the method is usually terminated, and the controlling is assumed by a method not described in more detail here. When a first request signal A1 for switching off the load is received and when the safety level determined in step b) represents a higher safety level of the two safety levels, alternatively in an optional step f) of switching, both relays are switched into a non-conductive state. Furthermore, in step e) of switching, both relays are switched into a conductive state when a second request signal A2 for switching on the load is received and the step f) of switching has previously been performed.

(39) FIG. 5 shows a device 50 for controlling two serially disposed relays, which is configured to switch a load with two different safety levels depending on the driving situation in a vehicle. The device 50 comprises the following devices:

(40) a) Device 51 for querying state information that comprises movement state information of the vehicle and/or a coasting operation information of the vehicle;

(41) b) Device 52 for determining a safety level of the two safety different safety levels, which differ depending on the driving situation, using the state information;

(42) c) Device 53 for selecting a relay of the two serially disposed relays using a balancing rule when the safety level determined in step b) represents a lower safety level of the two safety levels;

(43) d) Device 54 for switching the selected relay into a non-conductive state and the further relay into a conductive state when a first request signal for switching off the load is received; and

(44) e) Device 55 for switching the selected relay into a conductive state when a second request signal for switching on the load is received.

(45) The device 50 depicted in FIG. 5 is configured to control a variant of an assembly of two serially disposed relays R1, R2 according to FIG. 1. Here in one particular exemplary form the relays are formed as monostable relays.

(46) In order to provide the safety during the higher safety level even in exceptional situations such as, for example, extreme heat, the relays R1, R2 have diversity in their technical design.

(47) In combination with a conventional control system of two serially disposed relays it is sufficient if the device 50 only comprises the device 52 for determining a safety level, device 53 for selecting, and device 54 for switching, since in particular the device 55 of switching would already be provided by the conventional control system. Finally, the safety level can also be provided from a separate device of a body controller (BCU) and thus be omitted here. However, the technical feasibility is only given in conjunction with the corresponding devices.

(48) Unless otherwise expressly indicated herein, all numerical values indicating mechanical/thermal properties, compositional percentages, dimensions and/or tolerances, or other characteristics are to be understood as modified by the word “about” or “approximately” in describing the scope of the present disclosure. This modification is desired for various reasons including industrial practice, manufacturing technology, and testing capability.

(49) As used herein, the phrase at least one of A, B, and C should be construed to mean a logical (A OR B OR C), using a non-exclusive logical OR, and should not be construed to mean “at least one of A, at least one of B, and at least one of C.”

(50) The description of the disclosure is merely exemplary in nature and, thus, variations that do not depart from the substance of the disclosure are intended to be within the scope of the disclosure. Such variations are not to be regarded as a departure from the spirit and scope of the disclosure.