DEPLOYMENT CIRCUIT FOR A PYROTECHNIC DEVICE, CORRESPONDING INTEGRATED CIRCUIT, VEHICLE AND METHOD

Abstract

A deployment circuit for a pyrotechnic device is provided. An example deployment circuit comprises a driver circuit, a monitoring circuit and a control circuit. The driver circuit energizes the pyrotechnic device by applying a voltage or current to a first terminal and second terminal. The monitoring circuit measures a voltage across the first terminal and second terminal, processes the measured voltage, and determines whether the processed voltage is greater than a threshold. In response to a processed voltage above the threshold, the monitoring circuit asserts a comparison signal. The control circuit receives a fire request signal and the comparison signal. In response to the fire request signal, the control circuit generates a control signal to energize the pyrotechnic device via the driver circuit and determines whether the comparison signal is asserted. In response to determining the comparison signal is de-asserted, the control circuit energizes again the pyrotechnic device.

Claims

1. A deployment circuit for a pyrotechnic device, comprising: a first terminal and a second terminal configured to be connected to the pyrotechnic device; a driver circuit configured to energize the pyrotechnic device by selectively applying a voltage or current to the first terminal and second terminal as a function of at least one control signal; a monitoring circuit configured to: measure a voltage across the first terminal and second terminal, process the measured voltage, determine whether the processed voltage is greater than a threshold, and in response to determining that the processed voltage is greater than the threshold, assert a comparison signal; and a control circuit configured to: receive a fire request signal and the comparison signal, in response to the fire request signal, generate the at least one control signal in order to energize the pyrotechnic device via the driver circuit, determine whether the comparison signal is asserted, in response to determining that the comparison signal is de-asserted, energize again the pyrotechnic device.

2. The deployment circuit of claim 1, wherein the driver circuit comprises: at least one electronic switch configured to selectively connect the first terminal and second terminal to a supply voltage as a function of the at least one control signal.

3. The deployment circuit of claim 2, wherein the driver circuit further comprises: a current limiter configured to limit the current provided to the first terminal and second terminal to a maximum value.

4. The deployment circuit of claim 3, wherein the maximum value is settable via the at least one control signal.

5. The deployment circuit of claim 1, wherein the control circuit is further configured to: in response to the fire request signal, start a timer, determine whether the timer reaches a time threshold, and in response to determining that the timer reaches the time threshold, stop an energization of the pyrotechnic device via the driver circuit.

6. The deployment circuit of claim 5, wherein the control circuit is further configured to determine whether the comparison signal is asserted, in response to determining that the timer reaches the time threshold.

7. The deployment circuit of claim 4, wherein the control circuit is further configured to: in response to the fire request signal, set the maximum value of the current limiter to a first value, in response to determining that a timer reaches a time threshold, set the maximum value of the current limiter to a second value, wherein the second value is smaller than the first value, and then determine whether the comparison signal is asserted.

8. The deployment circuit of claim 1, wherein to process the measured voltage comprises: generate the processed voltage by filtering the measured voltage with a low-pass filter or a band-pass filter; or generate the processed voltage by calculating an integral of the measured voltage.

9. The deployment circuit of claims 1, wherein to process the measured voltage comprises: generate the processed voltage by calculating an integral of the square of the measured voltage.

10. The deployment circuit of claim 1, wherein the monitoring circuit is further configured to measure the current provided via the first terminal and second terminal, and wherein to processing the measured voltage comprises: generate the processed voltage by calculating a ratio between the measured voltage and the measured current, whereby the processed voltage is indicative of a resistance of the pyrotechnic device.

11. The deployment circuit of claim 1: wherein the energizing again the pyrotechnic device comprises generating again the at least one control signal in order to energize the pyrotechnic device via the driver circuit; or wherein the deployment circuit comprises a further driver circuit configured to energize the pyrotechnic device by selectively applying a voltage or current to the first terminal and second terminal as a function of at least one further control signal, and wherein the energizing again the pyrotechnic device comprises generating the at least one further control signal in order to energize the pyrotechnic device via the further driver circuit.

12. An integrated circuit comprising a deployment circuit of claim 1.

13. A vehicle comprising a deployment circuit of claim 1.

14. A method of operating a deployment circuit of claim 1 comprising: providing a fire request signal to the deployment circuit, comprising: measuring, with the monitoring circuit, the voltage across the first terminal and second terminal, processing, with the monitoring circuit, the measured voltage, determining, with the monitoring circuit, whether the processed voltage is greater that a threshold, and in response to determining that the processed voltage is greater than the threshold, asserting, with the monitoring circuit, a comparison signal; and receiving, with the control circuit, the fire request signal and the comparison signal, in response to the fire request signal, generating, with the control circuit, the at least one control signal in order to energize the pyrotechnic device via the driver circuit, determining, with the control circuit, whether the comparison signal is asserted, in response to determining that the comparison signal is de-asserted, energizing, with the control circuit, again the pyrotechnic device.

Description

BRIEF DESCRIPTION OF THE DRAWINGS

[0022] Embodiments of the present disclosure will now be described with reference to the annexed drawings, which are provided purely by way of non-limiting example and in which:

[0023] FIG. 1 shows a first embodiment of circuit for deploying a pyrotechnic device according to the present disclosure;

[0024] FIG. 2 shows a second embodiment of circuit for deploying a pyrotechnic device according to the present disclosure;

[0025] FIG. 3 shows a flowchart representing an embodiment of a method for deploying a pyrotechnic device;

[0026] FIG. 4 shows exemplary waveforms when using the method of FIG. 3 during a first deployment cycle;

[0027] FIG. 5 shows exemplary waveforms when using the method of FIG. 3 during a second deployment cycle; and

[0028] FIG. 6 shows an exemplary embodiment of a system comprising two daisy-chained deployment circuits according to the present disclosure.

DETAILED DESCRIPTION

[0029] In the following description, numerous specific details are given to provide a thorough understanding of embodiments. The embodiments can be practiced without one or several specific details, or with other methods, components, materials, etc. In other instances, well-known structures, materials, or operations are not shown or described in detail to avoid obscuring aspects of the embodiments.

[0030] Reference throughout this specification to one embodiment or an embodiment means that a particular feature, structure, or characteristic described in connection with the embodiment is included in at least one embodiment. Thus, the appearances of the phrases in one embodiment or in an embodiment in various places throughout this specification are not necessarily all referring to the same embodiment. Furthermore, the particular features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

[0031] The headings provided herein are for convenience only and do not interpret the scope or meaning of the embodiments.

[0032] As mentioned before, various embodiments of the present disclosure provide solutions for deploying a pyrotechnic device.

[0033] FIG. 1 shows an embodiment of a deployment circuit 100 according to the present disclosure.

[0034] In the embodiment considered, the deployment circuit 100 comprises a first terminal 122a and a second terminal 122b configured to be connected to an electrically activated pyrotechnic device 101. For example, in various embodiments, the pyrotechnic device 101 may be an airbag squib, a seat belt pretensioner initiator, a pyro-switch or a pyro-fuse.

[0035] In the embodiments considered, the deployment circuit 100 comprises moreover a driver circuit configured to selectively energize the pyrotechnic device 101. Typically, the driver circuit is configured to apply a given voltage V.sub.PYRO to the terminals 122a and 122b or control a current I.sub.PYRO provided via the terminals 122a and 122b. In fact, from an electrical point of view, a pyrotechnic device 101 to be fired represents mainly a resistive load.

[0036] For example, in FIG. 1, the driver circuit is configured to selectively connect the terminals 122a and 122b to a supply voltage V.sub.IN. For this purpose, the driver circuit may comprise a first terminal 121 and a second terminal 123, e.g., representing a ground GND, configured to receive the supply voltage V.sub.IN. For example, the voltage V.sub.IN may be provided by a battery, e.g., of a vehicle comprising the pyrotechnic device 101, e.g., associated with respective airbags of the vehicle. Alternatively, the supply voltage V.sub.IN may be provided by one or more capacitances (not shown in FIG. 1). For example, such capacitance(s) may be charged by an additional electronic converter, such as a step-up or step-down converter.

[0037] Specifically, in the embodiment shown in FIG. 1, the driver circuit comprises a first electronic switch 104 configured to connect the terminal 122a to the terminal 121 as a function of a first drive signal 192a and/or a second electronic switch 103 configured to connect the terminal 122b to the terminal 123 as a function of a second drive signal 192b. For example, the switches 103 and 104 may be Field-Effect Transistors (FET), such as Metal-Oxide-Semiconductor Field-Effect Transistors (MOSFET). For example, each switch 103 and 104 may be a normally open switch, such as a depletion mode MOSFET, which is closed in response to the reception of an asserted driving signal (192b or 192a).

[0038] Accordingly, when the terminals 122a and 122b are connected to the supply voltage, e.g., when the electronic switches 103 and 104 are closed, the voltage V.sub.IN is also applied to the pyrotechnic device 101 (neglecting possible parasitic resistances, e.g., of cables), i.e., the voltage V.sub.PYRO at the pyrotechnic device 101 correspond to the voltage V.sub.IN, Whereby a current I.sub.PYRO flows through the pyrotechnic device 101.

[0039] Conversely, in FIG. 2, the driver circuit is configured to selectively apply a current to the terminals 122a and 122b. For example, in the embodiment considered, the driver circuit comprises a current source or current limiter 102 configured to set or limit, respectively, the current provided via the terminals 122a and 122b.

[0040] Specifically, in the embodiment shown in FIG. 2, the driver circuit comprises a current source or current limiter 102 connected between the terminal 122a and the terminal 121. In various embodiments, the current source or current limiter 102 may be configured to set the requested current or the maximum current, respectively, as a function of a reference signal 193. For example, the circuit 102 may be implemented with a field effect transistor (FET). For example, this FET may correspond to the output stage of a current mirror.

[0041] In various embodiments, the driver circuit may also comprise the first electronic switch 104 and/or the second electronic switch 103 shown in FIG. 1. For example, in FIG. 2, the driver circuit comprises the electronic switch 103 configured to connect the terminal 122b to the terminal 123 as a function of a second drive signal 192b. Accordingly, in the embodiment considered, the driver circuit is configured to regulate or at least limit the current I.sub.PYRO flowing through the pyrotechnic device 101.

[0042] For example, a current source 102 may be implemented by measuring the current I.sub.PYRO, such as the current flowing through the electronic switch 104 and/or 103 (see FIG. 1), wherein the driver circuit comprises a closed loop control circuit configured to regulate the measured current to a requested value by selectively connecting the terminals 122a and 122b to the voltage V.sub.IN or disconnecting the terminals 122a and 122b from the voltage V.sub.IN, e.g., via the electronic switches 104 and 103.

[0043] Conversely, the driver circuit may implement a current limiter 102 by connecting the terminals 122a and 122b to the voltage V.sub.IN when the measured current I.sub.PYRO is smaller than the maximum request value, and disconnecting the terminals 122a and 122b from the voltage V.sub.IN when the measured current I.sub.PYRO is greater than the maximum request value. In various embodiments, the comparison may also comprise a hysteresis, i.e., the driver circuit may be configured to disconnect the terminals 122a and 122b from the voltage V.sub.IN when the measured current I.sub.PYRO is greater than the maximum request value, and connect the terminals 122a and 122b to the voltage V.sub.IN when the measured current I.sub.PYRO is smaller than a minimum request value.

[0044] Accordingly, in various embodiments, the deployment circuit 100 comprises also a control circuit 114 configured to generate one or more of the signals 192a, 192b and 193 as a function of a fire or deployment request signal 191. In various embodiments, the signal 191 is generated by an external deployment control circuit.

[0045] For example, in the embodiment shown in FIG. 1, in response to detecting that the deployment request signal 191 indicates a request to fire, e.g., when the signal 191 is the control circuit 114 asserts the (high-side) driving signal 192a and the (low-side) driving signal 192b.

[0046] Conversely, in the embodiment shown in FIG. 2, in response to detecting that the deployment request signal 191 indicates a request to fire, e.g., when the signal 191 is asserted, the control circuit 114 asserts the (low-side) driving signal 192b. In case the current source or limiter 102 is configurable, the control circuit 114 may also generate the signal 193 in order to set the current I.sub.PYRO to a given requested value or limit the current I.sub.PYRO to a given maximum value. Alternatively, the control circuit 114 may be configured to measure the current I.sub.PYRO, and drive the electronic switches 103 and/or 104 as a function of the measured current, e.g., by implementing a closed loop control of the current I.sub.PYRO, or a comparison with one or more threshold values, such as a maximum and minimum current.

[0047] In various embodiments, the deployment circuit 100 is configured to monitor and analyze the voltage at the terminals 122a and 122b.

[0048] In various embodiments, the deployment circuit 100 comprises for this purpose an analog-to-digital converter (ADC) 110, connected to the terminals 122a and 122b of the pyrotechnic device 101, i.e., the ADC 110 is configured to receive the voltage at the terminals 122a and 122b, i.e., the voltage V.sub.PYRO across the pyrotechnic device 101, and generate a digital signal 194 being indicative of the voltage V.sub.PYRO. For example, the ADC 110 may be a sigma-delta converter, however alternative embodiments employing different ADC architectures, such as a flash ADC or a successive-approximation ADC, are possible.

[0049] In the embodiment considered, the digital signal 194 produced as output by the analog to digital converter 110 is received by a processing circuit 111 being configured to process the digital sample 194 of the voltage V.sub.PYRO. In general, instead of using a digital processing, the same operations may also be implemented via an analog processing circuit, i.e., the ADC 110 is purely optional. Accordingly, in general, the processing circuit 111 may be implemented with any analog or digital processing circuit, or a combination thereof.

[0050] In various embodiments, the processing circuit 111 is configured to analyze the analog value of the voltage V.sub.PYRO or the digital sample provided by the ADC 110, indicated in the following for simplicity just as signal 194, and generates a processed signal 195. Accordingly, also the processed signal 195 may be and analog or digital signal, respectively.

[0051] In various embodiments, a comparator 112 is configured to generate a deployment status signal 190a by comparing the processed signal 195 with a threshold 196. Specifically, in various embodiments, in response to determining that the processed signal 195 is greater than the threshold 196, the comparator 112 is configured to assert the deployment status signal 190a, e.g., set the signal 190a to high.

[0052] Accordingly, based on whether the processed signal 195 is analog or digital, also the comparator may be implemented with an analog or digital comparator, respectively. For example, in various embodiments, the circuit 100 comprises the ADC 110, a digital processing circuit 111 and a digital comparator 112, wherein the signal 113 is a digital threshold value 196, e.g., provided by a register 113. For example, in various embodiments, the processing circuit 111 and the comparator 112 may be implemented with same digital processing circuit, e.g., a microprocessor programmed via software instructions. For example, in this case, the ADC 110 and the microprocessor 111 and 112 may be implemented with a microcontroller. In various embodiments, also the control circuit 114 may me a digital control circuit and, e.g., implemented via software instructions executed by the microprocessor.

[0053] As mentioned before, in various embodiments, the processing circuit 111 is configured to process the signal 194 and generate a processed signal 195. For example, in various embodiments, the signal 195 may be indicative of the specific energy for unit resistance, i.sup.2t, supplied to the pyrotechnic device 101 and may be, for instance, a resistance, a voltage or a specific energy per unit resistance. Further details regarding the fashion according to which the acquired voltage 194 is processed into processed data 195 will be provided in the following.

[0054] Accordingly, in various embodiments, the deployment circuit 100 comprises a comparator circuit 112 configured to compare the signal 195 to a (e.g., programmable) deploy threshold 196, and produce as output a fire good signal 190a if the signal 195 is greater than (or equal to) the programmable deploy threshold 196. Further details regarding the physical quantities represented by the processed signal 195 will be provided in the following.

[0055] In various embodiments, the control circuit 114 is coupled to a timer circuit 115. In various embodiments, also the timer 115 may be implement via software instruction executed by a microprocessor implementing the control circuit 114 and/or the processing circuit 111.

[0056] Specifically, in various embodiments, in response to receiving a request to fire signal 191, the control circuit 114 resets the timer circuit 115 i.e., instructs the timer circuit 115 to reset its content and restart the time counting from zero, by sending a reset signal 187. The accumulated time may be stored in a register provided within the timer circuit 115 and is accessible by the control circuit. The control circuit 114 is further configured to repeatedly compare, during a deployment operation, the ongoing time 188 with a time threshold t.sub.TIMEOUT indicating a maximum time that a deployment operation can take. In response to determining that the time 188 exceeds the time threshold t.sub.TIMEOUT, the control circuit 114 interrupts the deployment of the pyrotechnic device. Accordingly, in various embodiments, the control circuit 114 is configured to, in response to a request to fire signal 191, drive the pyrotechnic device 101 for a given maximum time.

[0057] Similarly, as mentioned before, in the embodiment shown in FIG. 2, the driver circuit is configured to selectively apply a current to the terminals 122a and 122b. For example, in the embodiment considered, the driver circuit comprises a current source or current limiter 102 configured to set or limit, respectively, the current provided via the terminals 122a and 122b. In various embodiments, the current source or current limiter 102 may be configured to set the requested current or the maximum current, respectively, as a function of a reference signal 193.

[0058] Moreover, the driver circuit may comprise a first electronic switch 104 configured to connect the terminal 122a to the terminal 121 as a function of a first drive signal 192a and/or a second electronic switch 103 configured to connect the terminal 122b to the terminal 123 as a function of a second drive signal 192b.

[0059] Accordingly, in the embodiment shown in FIG. 2, the deployment circuit 100 comprises also a control circuit 114 configured to generate one or more of the signals 192a, 192b and 193 as a function of a fire or deployment request signal 191. For example, also FIG. 2 shows the additional timer circuit 115, which may be used to drive the pyrotechnic device 101 only for a given maximum time.

[0060] Accordingly, also in this embodiment, the deployment circuit 100 may monitor and analyze the voltage V.sub.PYRO at the terminals 122a and 122b. For example, in FIG. 2 are shown again the optional ADC 110, the processing circuit 111, the comparator 112 and the threshold signal generator 113.

[0061] With respect to FIG. 3 will now be described a possible embodiment of the operation of the deployment circuits 100 of FIGS. 1 and 2.

[0062] Specifically, FIG. 3 shows a start step 300, which is started when the deployment circuit 100, e.g., the control circuit 114, determines that the request to fire signal 191 is asserted.

[0063] As shown in FIGS. 1 and 2, the control circuit 114 may also receive an optional fire inhibit signal 190b. For example, such a fire inhibit signal 190b permits to implement a daisy chaining of two or more instances of pyrotechnic device deployment circuits 100, in order to allow configurations with redundant deployment circuits 100, i.e., the fire inhibit signal 190b may be received from another instance of a deployment circuit 100, as illustrated in FIG. 6. In such a way, it is possible to attempt the deployment with a primary/first deployment circuit 100a and, if the first deployment fails, to try a second deployment attempt by means of a backup/second deployment circuit 100b. Conversely, if the first deployment attempt is successful, the backup deployment circuit 100b does not fire, as the fire inhibit signal 190b received from the primary deployment circuit 100a is asserted. Further details concerning such configuration are provided in the following.

[0064] This is also shown in FIG. 3, wherein the deployment circuit 100, e.g., the control circuit 114, is configured to verify in a step 301 whether the fire inhibit signal 190b is asserted or de-asserted.

[0065] Specifically, in response to determining that the fire signal inhibit 190b is de-asserted (output Y the verification step 301), the deployment circuit 100, e.g., the control circuit 114, may proceed to a step 302 for starting a deployment cycle. Conversely, in response to determining that the fire inhibit signal 190b is asserted (output N of the verification step 301), the deployment circuit 100, e.g., the control circuit 114, may stop the deployment request at a stop step 310, whereby the method terminates.

[0066] Accordingly, in case the fire inhibit signal 190b and the respective verification step 301 is omitted, the method may directly proceed to the step 302.

[0067] Specifically, in various embodiments, the deployment circuit 100, e.g., the control circuit 114, is configured to drive the driver circuit in order to energize the pyrotechnic device 101, thereby starting a deployment cycle. In accordance with various embodiments, the pyrotechnic device 101 may be energized either by applying a deployment voltage V.sub.PYRO to the terminals 122a and 122b, as performed in the exemplary embodiment illustrated in FIG. 1, or by providing via the terminals 122a and 122b a deployment current I.sub.PYRO, as performed in the exemplary embodiment illustrated in FIG. 2.

[0068] Accordingly, in various embodiments, the deployment circuit 100, e.g., the control circuit 114, may generate one or more of the driving signals 192a and/or 192b for the switches 104 and 103, and/or the reference signal 193 for the current source or current limiter 102.

[0069] In various embodiments, such step 302 may be performed after a predetermined time delay t.sub.DELAY, which is to be counted by means of the timer circuit 115. In particular, configurations such as the system illustrated in FIG. 6 may require a non-null time delay t.sub.DELAY during the energization of the pyrotechnic device using a backup deployment circuit 100b. This time delay inherently allows a system, such as the one illustrated, to perform the first deployment attempt using the primary deployment circuit 100a as soon as a request to fire 191 is received and, in case of failure of the first deployment attempt, to perform the second deployment attempt using the backup deployment circuit 100b after the time delay t.sub.DELAY has elapsed. As specified in the foregoing, the backup driver 100b stops the execution of the deployment routine if it receives a fire inhibit signal 190b from the corresponding daisy-chained primary driver 100a, indicating that such primary driver has successfully deployed the pyrotechnic device 101 and thus a second deployment attempt is no longer required.

[0070] As mentioned before, in various embodiments the deployment circuit 100 limits the time of a deployment cycle to a given maximum time. For example, in various embodiments, the deployment circuit 100, e.g., the control circuit 114, starts in a step 303 the timer circuit 115, e.g., by programming a given initial value to the timer 115 and enabling the timer circuit 115. In general, the timer circuit 115 may be started immediately before or after, or in parallel with the step 302.

[0071] In a following step 304, the deployment circuit 100, e.g., the processing circuit 111, obtains the signal 194, i.e., the voltage V.sub.PYRO across the pyrotechnic device 101 or the respective digital sample provided by the ADC 110.

[0072] In a following step 305, the deployment circuit 100, e.g., the processing circuit 111, processed the voltage measurement 194 in order to generate a processed signal 195. In general, by processing the voltage V.sub.PYRO, the signal 195 may represent different physical quantities.

[0073] In this respect FIG. 4 shows the evolution in time of a current I.sub.PYRO, a voltage V.sub.PYRO and a resistance R.sub.PYRO of a pyrotechnic device 101 during a deployment cycle Starting at an instant t.sub.0 and ending at an instant t.sub.2. For example, as described before, the deployment cycle may be started at the step 302 (instant t.sub.0) and may end when the timer circuit 115 reaches a given maximum time (instant t.sub.2).

[0074] As described before, during the deployment cycle the driving circuit provides via the terminals 122a and 122b a voltage V.sub.PYRO and a current I.sub.PYRO to the pyrotechnic device 101, which is thus biased.

[0075] Specifically, due to parasitic inductances and/or capacitances, the voltage and current provided to the pyrotechnic device 101 usually does not increase with a step form, but rather increases gradually as shown in FIG. 4. Moreover, in the embodiment shown in FIG. 2, the current I.sub.PYRO may be limited to a given maximum value.

[0076] In this respect, as described in the foregoing, the pyrotechnic device 101 essentially represents a resistive load, whereby the voltage V.sub.PYRO and the current I.sub.PYRO are related based on the Ohm's law, i.e., V.sub.PYRO=I.sub.PYRO.Math.R.sub.PYRO, Where R.sub.PYRO corresponds to the resistance of the pyrotechnic device 101.

[0077] Specifically, during a deployment cycle, the resistance R.sub.PYRO remains initially substantially constant, typical of a non-deployed pyrotechnic device. During this time period the chemical reaction causing the firing of the pyrotechnic device is not triggered yet, indicating that there are no changes in the structure and composition of the pyrotechnic device initiator while the deployment current I.sub.PYRO flows through it.

[0078] Successively, at a time instant t.sub.1, the pyrotechnic device 101 starts to fire. Specifically, the inventors have observed that the firing causing a sudden increase of the resistance R.sub.PYRO. In turn, this increase of the resistance R.sub.PYRO results in a decrease of the deployment current I.sub.PYRO and an increase of the voltage V.sub.PYRO.

[0079] Finally, at a time instant t.sub.2, the firing of the pyrotechnic device 101 is completed. Consequently, the deployment current I.sub.PYRO stops to decrease and the resistance R.sub.PYRO settles to a higher value, typical of a successfully deployed pyrotechnic device. Accordingly, the voltage V.sub.PYRO increases to a higher value being closer to the supply voltage. Subsequently, the pyrotechnic device deployment circuit 100 detects a successful deployment of the pyrotechnic device and outputs an asserted fire good signal 190a.

[0080] Accordingly, the inventors have observed that a correct deployment may be detected by determining an increase of the resistance R.sub.PYRO.

[0081] Specifically, in order to measure the resistance R.sub.PYRO, the deployment circuit 100 may be configured to provide via the terminals 122a and 122b a (small) measurement current I.sub.MEAS and evaluate the value of the signal 194, e.g., via the processing circuit 111 and the comparator. In fact, when the pyrotechnic device 101 is in an undeployed condition, the resistance R.sub.PYRO should have a first value R.sub.PYRO1. Specifically, this first value R.sub.PYRO1 should be within a given predetermined range. For example, this behavior may be used to determine periodically, whether the pyrotechnic device 101 is connected correctly to the terminals 122a and 122b, i.e., in the absence of a fire request, the deployment circuit 100 may be configured to periodically: [0082] apply via the driving circuit a measurement current I.sub.MEAS to the terminals 122a and 122b; [0083] monitor via the processing circuit 112 the voltage V.sub.PYRO and determine a signal 195 being indicative of the resistance R.sub.PYRO; and [0084] determine via the comparator 112 whether the signal 195 is between a lower and an upper threshold.

[0085] For example, in this case, in response to determining that the signal 195 is not within the threshold, the deployment circuit 100 may signal a malfunction of the pyrotechnic device 101.

[0086] Accordingly, similarly, once having completed a deployment cycle, the deployment circuit 100 may be configured to perform a new measurement of the resistance R.sub.PYRO via the measurement current I.sub.MEAS, and determine whether the signal 195 is greater than the threshold 196. Specifically, in this case, the pyrotechnic device 101 has been deployed correctly when the signal 195 is greater than the threshold 196.

[0087] However, the inventors have also observed, that the (higher) deployment current I.sub.PYRO during a deployment cycle itself may be used to determine an increase of the resistance R.sub.PYRO. In this respect, as shown in FIG. 4, usually the current I.sub.PYRO is not constant during a deployment cycle. However, the inventors have observed that the voltage V.sub.PYRO exhibits a significant increase once the pyrotechnic device 101 deploys at the instant t.sub.2. Accordingly, in various embodiments, the deployment circuit 100 is configured to analyze the voltage V.sub.PYRO during the deployment cycle, i.e., simultaneously to the deployment of the pyrotechnic device 101, and optionally measure and take into account also the current I.sub.PYRO.

[0088] Specifically, in a first embodiment, the deployment circuit 100, e.g., the processing circuit 111 and the comparator 112, is configured to detect an increase of the voltage V.sub.PYRO, i.e., the signal 195 corresponds to the signal 194 indicative of (and preferably proportional to) the voltage V.sub.PYRO.

[0089] Specifically, in a second embodiment, the deployment circuit 100, e.g., the processing circuit 111, is configured to generate in the step 305 the signal 195 by filtering the signal 194, thereby generating a signal 195 being indicative of a filtered voltage V.sub.PYRO. Specifically, in various embodiments, the processing circuit 111 implements a low-pass or a band-bass filter. For example, this permits to avoid glitches and other undesirable effects caused by a transient spike or, more in general, electrical noise that could affect the voltage measurement. For example, in various embodiments, a digital processing circuit 111 may be configured as a digital low-pass filter, such as a finite impulse response (FIR) or infinite impulse response (IIR) filter, configured to receive the digital voltage measurement 194 and return a filtered voltage measurement value 195. For example, the suppression of disturbances affecting the voltage measurement may be performed by means of average filter or a moving average. In various embodiments, the filtering operation is started at the instant t.sub.0.

[0090] Instead of calculating explicitly an average value, in a third embodiment, the processing circuit 111 is configured to generate a signal 195 corresponding to the integral of the signal 194.

[0091] In a fourth embodiment, the processing circuit 111 is configured to generate a signal 195 corresponding to the integral of the square of the signal 194. Hence, in this embodiment, the processing circuit 111 produces as output processed data 195 containing a value E.sub.PYRO=.sub.0.sup.tV.sub.PYRO.sup.2dt.

[0092] In fifth embodiments, the processing circuit 111 may also measure the current I.sub.PYRO, e.g., by monitoring via the ADC 110 a voltage drop at a shunt resistor connected in series with the pyrotechnic device 101, or directly a voltage drop at the electronic switch 103 or 104. In this case, the processing circuit 111 may be configured to determine a signal 195 being indicative of (and preferably proportional to) the resistance R.sub.PYRO based on the Ohm's law, i.e., R.sub.PYRO=V.sub.PYRO/I.sub.PYRO.

[0093] Also in this case, instead of using the instantaneous value of the resistance R.sub.PYRO, the processing circuit 111 may further process the resistance R.sub.PYRO, e.g., by generating the signal 195 by applying a low-pass filtering to the resistance R.sub.PYRO or calculating the integral of the resistance R.sub.PYRO.

[0094] Accordingly, in a step 306, the deployment circuit 100, e.g., the comparator 112, is configured to compare the processed value 195 with the reference value 196 being indicative of a minimum threshold value, e.g., for the instantaneous, filtered or integrated value of the voltage V.sub.PYRO or the resistance R.sub.PYRO, indicative of a correct deployment of the pyrotechnic device 101. In various embodiments, the threshold value 196 is programmable or at least settable.

[0095] For example, the value 196 may be a voltage value V.sub.DEPLOY over which the pyrotechnic device is considered successfully deployed. Specifically, the voltage V.sub.DEPLOY represents a minimum threshold value that characterizes the voltage of a successfully deployed device, which is expected to be in the order of a supply voltage V.sub.IN provided by the power supply rail 121. As explained in the foregoing, the resistance of a successfully deployed pyrotechnic device is sensibly greater than the resistance of a non-deployed pyrotechnic device thus, accordingly, the voltage drop on a deployed device is expected to be greater than the voltage drop of a non-deployed device which, on the other hand, is characterized by a lower resistance. Thus, for example, if the voltage drop measured on a pyro-fuse is V.sub.PYRO=11.5 V and the minimum threshold value V.sub.DEPLOY is set at 6 V, namely half of a biasing voltage V.sub.IN=12 V, it can be assumed that such pyro-fuse is correctly deployed as V.sub.PYROV.sub.DEPLOY. Accordingly, in various embodiments, the threshold signal 196 may be selected or even determined automatically as a function of the value of the voltage V.sub.IN. For example, the threshold 196 may be selected in a range between 50% and 95% of the voltage V.sub.IN, preferably between 70% and 90% of the voltage V.sub.IN. For example, for this purpose, the deployment circuit 100 may also measure, e.g., via the ADC 110, the voltage V.sub.IN.

[0096] Alternatively, the value 196 may be a resistance value R.sub.DEPLOY over which the pyrotechnic device is considered successfully deployed. Specifically, the resistance R.sub.DEPLOY represents a minimum threshold value that characterizes the resistance of a successfully deployed device, which is expected to be substantially greater than the resistance of a non-deployed pyrotechnic device. Thus, for instance, if the resistance of a pyro-fuse R.sub.PYRO determined by a measurement is equal to 155 Ohm and the minimum resistance characteristic of a successful deployment declared by the pyro-fuse manufacturer R.sub.DEPLOY is equal to 100 Ohm, it can be assumed that such pyro-fuse is correctly deployed as R.sub.PYROR.sub.DEPLOY.

[0097] Accordingly, in response to determining that the signal 195 exceeds (or at least is equal to) the threshold (output Y of the verification step 306), the deployment circuit 100 may detect at a step 307 a correct deployment of the pyrotechnic device 101 and assert a fire good signal 190a, e.g., corresponding to the output signal of the comparator 112. Generally, once having detected a correct deployment, the deployment cycle may be terminated immediately by proceeding to a stop step 310, where the driving circuit is deactivated, or the deployment circuit 100 may in any case wait that the timer circuit 115 reaches the respective time threshold.

[0098] On the contrary, in response to determining that the signal 195 does not exceed the threshold (output N of the verification step 306), the deployment circuit 100 proceeds to a step 308. In step 308 the deployment circuit 100, e.g., the control circuit 114, verifies whether a timeout condition is met i.e., if the time t tracked by the timer circuit 115 is greater than or equal to a time limit t.sub.TIMEOUT.

[0099] In various embodiments, the time limit t.sub.TIMEOUT may be constant or settable, e.g., programmable. In various embodiments, the control circuit may also be configured to adapt a predetermined time limit t.sub.TIMEOUT based on a measurement of the value or evolution of the current I.sub.PYRO.

[0100] In response to determining that the maximum time t.sub.TIMEOUT has not been reached (output N of the verification step 308), the deployment circuit 100 returns to the step 304, thus performing a further measurement of the voltage V.sub.PYRO, and then proceeds with the execution of the following steps, as described in the foregoing.

[0101] Conversely, in response to determining that the maximum time t.sub.TIMEOUT has been reached (output Y of the verification step 308), the deployment circuit 100 may verify in an optional step 309 whether a further deployment cycle should be started. For example, the step 309 may be useful in order to execute up to a given maximum number of deployment cycle.

[0102] Accordingly, in the embodiment considered, when a deployment is detected at the step 307 before the time-out condition is reached, the deploy is considered successful. In this case, a possible backup deployment circuit may be inhibited from firing, e.g., by asserting the fire inhibit signal of the backup deployment circuit. Conversely, when the time-out condition is reached, another deployment cycle may be started with the same deployment circuit or the backup deployment circuit.

[0103] For example, in various embodiments, the deployment circuit 100, e.g., the control circuit 114, is configured to determine whether the ongoing deployment attempt is a first deployment attempt.

[0104] In response to determining that the ongoing deployment attempt is the first (output Y of the verification step 309), the deployment circuit 100 returns to the step 302, thus performing a second deployment attempt and the subsequent steps, following the order illustrated in the foregoing. For example, in step 302 the timer circuit 115 is restarted, and then the following steps are performed according to the aforementioned description. In various embodiments, instead of directly returning to the step 302, the deployment circuit 100 may first disable the driving circuit for a given time period.

[0105] On the contrary, in response to determining that the ongoing deployment attempt is not the first (output N of the verification step 309), the deployment circuit 100 stops further deployment attempts and the method terminates at the stop step 310 without asserting the fire good signal 190a, thus indicating that the deployment of the pyrotechnic device has failed.

[0106] Accordingly, in the embodiments considered, the step 309 enables the pyrotechnic device deployment circuit 100 to perform, in case a first deployment attempt fails, one or more further deployment attempt without the need of intervention from an external circuit, such as a microcontroller unit, thus providing a quicker and more robust solution.

[0107] For example, FIG. 5 shows a plot of the evolution in time of the current I.sub.PYRO, the voltage V.sub.PYRO and the resistance R.sub.PYRO of a pyrotechnic device 101 wherein two deployment cycles are executed.

[0108] Specifically, at a first time instant t.sub.0, a deployment operation is started. Accordingly, the pyrotechnic device 101 is biased by the deployment circuit 100, and consequently the deployment current I.sub.PYRO and the deployment voltage V.sub.PYRO start to increase, while the resistance R.sub.PYRO remains constant at its initial value, characteristic of a non-deployed pyrotechnic device. Similar to the example shown in FIG. 4, during this time period the chemical reaction causing the firing of the pyrotechnic device is not triggered yet as the resistance R.sub.PYRO is keeping a (substantially) constant value, indicating that there are no changes in the structure and composition of the pyrotechnic device initiator while the deployment current I.sub.PYRO flows through it.

[0109] Accordingly, differently from the example shown in FIG. 4, in this deployment attempt the pyrotechnic device initiator fails. In particular, the chemical reaction enabling the firing of the initiator may fail to trigger due to, for example, a not sufficient triggering temperature or a contaminated reagent. Accordingly, at the instant t.sub.2 is reached the timeout condition.

[0110] At a time instant t.sub.2, the pyrotechnic device deployment circuit 100 detects thus that the ongoing deployment attempt has failed and, consequently, interrupts the biasing of the pyrotechnic device. Accordingly, the voltage V.sub.PYRO and the current I.sub.PYRO decrease to zero. Then, the deployment circuit 100 schedules a second deployment attempt of the same pyrotechnic device.

[0111] After waiting a predetermined settling time, at a time instant t.sub.3 the second deployment attempt is started and, consequently, the pyrotechnic device 101 is newly biased.

[0112] At a time instant t.sub.4, the pyrotechnic device 101 fires causing a sudden increase of the resistance R.sub.PYRO and, contemporarily, a decrease of the current I.sub.PYRO. At this time instant, the chemical reaction enabling the firing of the pyrotechnic device initiator is successfully triggered, as indicated by the substantial increase of resistance R.sub.PYRO.

[0113] Finally, at a time instant t.sub.5, the firing of the pyrotechnic device 101 is completed. Consequently, the deployment current I.sub.PYRO stops to decrease and the resistance R.sub.PYRO settles to a higher value, typical of a successfully deployed pyrotechnic device. Accordingly, the voltage V.sub.PYRO increases to a higher value being closer to the supply voltage. Subsequently, the pyrotechnic device deployment circuit 100 detects a successful deployment of the pyrotechnic device and outputs an asserted fire good signal 190a.

[0114] In order to provide a deeper understanding of configurations employing more than one deployment circuit 100, a system 200 comprising two daisy-chained deployment circuits 100 is illustrated in FIG. 6.

[0115] Specifically, the system 200 comprises a battery pack 197, a load 198, a deployment control circuit 199, and two deployment circuits 100a and 100b respectively coupled to pyrotechnic devices 101. This system may represent, for instance, a scenario in which there is a battery pack powering one or more electric traction motors, e.g., provided in a battery electric vehicle (BEV).

[0116] When the system 200 is operating correctly, a load current I.sub.LOAD is drawn from the power source 197 and is absorbed by the load 198, while a voltage V.sub.LOAD is applied on said load 198. Moreover, the deployment control circuit 199 is, in general, configured to monitor that the load 198 is working properly and, in case of anomaly, assert a request to fire signal 191 in order to detach the battery pack 197 from the load 198.

[0117] In alternative embodiments, such deployment control circuit 199 may be connected to one or more external sensors such as, for example, an accelerometer, and may assert the request to fire signal 191 according to the readings obtained from the one or more external sensors. This could represent scenarios in which the pyrotechnic device to be deployed is, for instance, an airbag or a seat belt pretensioner.

[0118] In any case, the deployment control circuit 199 may assert the request to fire signal 191 when requested. Accordingly, the asserted request to fire signal 191 is received respectively by the primary deployment circuit 100a and by the backup deployment circuit 100b.

[0119] The primary deployment circuit 100a is configured to begin the deployment operation immediately and according to the teachings of the present solution e.g., according to the method. Conversely, the backup deployment circuit 100b is configured to begin the deployment operation after a predetermined time period t.sub.DELAY, unless it receives an asserted fire inhibit signal 190b originating from the primary deployment circuit 100a.

[0120] In particular, in this configuration the primary deployment circuit 100a performs the first deployment attempt and, subsequently, if this first attempt is not successful, the backup deployment circuit 100b is used for performing a second deployment attempt. In case the first deployment attempt, performed by the primary deployment circuit 100a, is successful, the primary deployment circuit 100a asserts a fire good signal 190a, which is subsequently received as input as a fire inhibit signal 190b by the backup deployment circuit 100b which, consequently, does not perform the second deployment attempt. On the contrary, if the backup deployment circuit 100b does not receive the fire inhibit signal 190b before the time threshold t.sub.DELAY is reached, the second deployment attempt is performed. Each deployment circuit 100a, 100b may be able to wait a predetermined amount of time before initiating a deployment attempt by means of the control circuit 114 and the timer circuit 115, which are provided various embodiments of the deployment circuit 100.

[0121] Thus, for example, if a deployment control circuit 199 in a system 200 detects an anomaly on the load 198, such as a short circuit, it asserts a request to fire signal 191. Accordingly, the primary deployment circuit 100a receives the request to fire 191 and starts the first deployment attempt. If the first deployment attempt is successful, the primary deployment circuit 100a asserts the fire good signal 190a, which is in turn received by the backup deployment circuit 100b as a fire inhibit signal 190b. Accordingly, the backup deployment circuit 100b does not initiate the second deployment attempt, as the confirmation of the first successful deployment is received.

[0122] Conversely, if the first deployment attempt is not successful, the primary deployment driver 100a does not assert the fire good signal 190a. Accordingly, the backup deployment circuit 100b waits the predetermined amount of time DELAY and subsequently starts the second deployment attempt. Finally, if the second deployment attempt is successful the backup deployment circuit 100b outputs an asserted fire good signal 190a to confirm the successful deployment of the pyrotechnic device.

[0123] It is evident that such a system 200 has the advantage of being able to schedule a second deployment attempt, in case a first attempt fails, without the need for an intervention of an external controller such as, for example, the deployment control circuit 199. Accordingly, by employing a system according to the solution here described, it is possible to reduce the delays that may occur during a deployment attempt of a pyrotechnic device, thus obtaining a system with a prompter response.

[0124] Accordingly, the embodiments disclosed herein relate to a new solution to drive a pyrotechnic device. The described solution performs the deployment of a given pyrotechnic device while, contemporarily, monitors the relevant figures of merit i.e., current, voltage, and resistance in order to determine whether the deployment is successful or not. Furthermore, if the deployment is not successful, the described solution can schedule a second deployment attempt of the same pyrotechnic device or, alternatively, can perform the deployment of a second pyrotechnic device as soon as the failure of the first deployment attempt if acknowledged, without the need of waiting the response of an external control circuit.

[0125] Of course, without prejudice to the principle of the present disclosure, the details of construction and the embodiments may vary widely with respect to what has been described and illustrated herein purely by way of example, without thereby departing from the scope of the present disclosure, as defined by the ensuing claims.