CHECKING DEVICE FOR DATA PREPARATION UNIT

Abstract

A checking device for a data preparation unit, including a preparation element for preparing sensor data for a data transmission; and a comparator for comparing the sensor data with the prepared sensor data; a fault of the data preparation unit being detected in the event that the prepared sensor data do not match the sensor data.

Claims

1-10. (canceled)

11. A checking device for a data preparation unit, comprising: a preparation element to prepare sensor data from a sensor for a data transmission; and a comparator to compare the sensor data to the prepared sensor data; wherein a fault of the data preparation unit is detected if the prepared sensor data do not match the sensor data.

12. The checking device of claim 11, wherein the fault is signaled to a control unit.

13. The checking device of claim 11, wherein the comparator is configured to perform a bitwise comparison of the sensor data with the prepared data.

14. The checking device of claim 11, wherein a permanent or transient fault of the data preparation unit is detectable.

15. The checking device of claim 11, wherein the checking device is situated in the sensor or in a control unit.

16. The checking device of claim 11, wherein the data preparation unit prepares the data in accordance with the PSI5 protocol.

17. A method for checking a data preparation unit, the method comprising: preparing sensor data with the aid of a data preparation element; comparing the prepared data to the sensor data from a sensor with the aid of a comparator; and detecting, if the prepared data do not match the sensor data, a fault of the data preparation unit.

18. The method of claim 17, wherein the sensor data is prepared in accordance with the PSI5 protocol.

19. The method of claim 17, wherein a bitwise comparison of the sensor data and the prepared data is performed.

20. The method of claim 17, wherein the fault is signaled to a control unit.

Description

BRIEF DESCRIPTION OF THE DRAWINGS

[0019] FIG. 1 shows a block diagram of a specific embodiment of the checking device according to the invention.

[0020] FIG. 2 shows a basic sequence of one specific embodiment of the method according to the invention.

DETAILED DESCRIPTION

[0021] The PSI5 protocol defines a digital current interface, which uses a two-wire line for data transmission of sensor data (e.g. in a motor vehicle). Data transmissions via point-to-point configurations as well as bus configurations with asynchronous and synchronous communication are supported. All information is transmitted via the currents. Because of the relatively high electrical signal current of 26 mA and a bit encoding in Manchester code, it is possible to achieve a high noise immunity, as a result of which it is sufficient to use the cost-effective twisted two-wire line for wiring.

[0022] In highly safety-critical applications in motor vehicles such as defined, for example, in the ISO 26262 standard having an ASIL-D level (automotive safety integrity level), faults may result in an unintended triggering of the airbag, in braking or steering interventions or in other critical actions. Previous known concepts either perform no or only little monitoring of the PSI5 preparation unit, for example using watchdog mechanisms in the case of an implementation of the PSI5 preparation unit as a microcontroller system.

[0023] The present invention provides a comparison process which compares the PSI5-prepared data to the original data provided by the sensor and which, in the event of a fault, detects and signals the fault.

[0024] FIG. 1 shows a block diagram of one specific embodiment of a checking device 100 according to the invention with an exemplary scenario of an airbag sensor system of a motor vehicle. Original sensor data 30 (e.g. in the form of a data word) originating from a sensor (e.g. an airbag sensor) are supplied to a data preparation unit 10. The sensor data 30 are furthermore supplied to a multiplexer 12 of preparation unit 10. The original sensor data 30 are additionally also supplied to a comparator 20, comparator 20 also being supplied with an output signal of a preparation element 13 of data preparation unit 10.

[0025] Comparator 20 performs a bitwise comparison of the original sensor data 30 and the data prepared by preparation element 13, comparator 20 for this purpose first performing a corresponding back-encoding of the data.

[0026] In the event that comparator 20 does not detect a fault, the unadulterated sensor data 30 are supplied to multiplexer 12, upon which preparation element 13 prepares the sensor data 30 and transmits them as PSI5 data 40 to the control unit (not shown). The PSI5 data 40 are Manchester-encoded and are used by the control unit for appropriate actions.

[0027] In the event of a fault, which is signaled to multiplexer 12 by the output signal of comparator 20, fault codes of a fault encoder 11 are supplied to multiplexer 12. This is the case when the original sensor data 30 no longer match the data prepared by data preparation unit 10, as a result of which a proper functionality of data preparation unit 10 is no longer given.

[0028] In this case, comparator 20 detects a fault, as a consequence of which multiplexer 12 supplies a fault code of fault encoder 11 to preparation element 13. The case of the fault is furthermore signaled by comparator 20 to the control unit. Because of the signaling by comparator 20, the control unit is able to detect that the PSI5 data 40 prepared by data preparation element 13 are corrupt and point to a faulty functionality of data preparation unit 10. As a result, a corresponding action of the control unit is advantageously initiated or omitted.

[0029] For example, in the case of an acceleration value of an acceleration sensor situated in a bumper, which was incorrectly prepared by data preparation unit 10, it is possible to omit an activation of an airbag.

[0030] In this context, it is possible to detect both a systemic and a permanent fault of data preparation unit 10. Alternatively, it is also possible that the fault of data preparation unit 10 is of a transient nature, in which case comparator 20 ceases to signal the fault following the cessation of the fault case.

[0031] In the case of a detected fault, the control unit may attempt for example to remedy the fault by restarting or resetting the sensor.

[0032] The present invention may be used advantageously for any sensors in the automotive sector that are independently able to generate a fault remedy action. A technical implementation of the checking device of the present invention may occur for example in an additional electronic circuit or as an external separate microcontroller.

[0033] FIG. 2 shows a basic flow chart of an embodiment of the method according to the present invention.

[0034] In a step 200, sensor data 30 are prepared by a data preparation element 13.

[0035] In a step 210, a comparator 20 compares the prepared data to sensor data 30, a fault of data preparation unit 10 being detected in the event that the prepared data do not match sensor data 30.

[0036] In summary, the present invention provides a check of a data preparation unit, in particular a data preparation unit for a PSI5 data transmission protocol. Due to the fact that in sensor systems in the automotive sector either only valid data or only faulty data may be transmitted to associated control units, an efficient detection of a case of a fault is possible in this manner. Advantageously, it is thus possible to initiate a quick replacement of a faulty sensor system.

[0037] Although the present invention was described above with reference to concrete exemplary embodiments, it is not limited to these. One skilled in the art will thus also implement specific embodiments that are not described, or only partially described, above, without deviating from the core of the present invention.