Method and control system for carrying out a plausibility check of a first driver input sensor with regard to a second driver input sensor which is different from the first driver input sensor of a motor vehicle

Patent metadata

Field	Value
Publication number	US-9244750-B2
Application number	US-201313767529-A
Country	US
Kind code	B2
Filing date	Feb 14, 2013
Priority date	Feb 15, 2012
Publication date	Jan 26, 2016
Grant date	Jan 26, 2016

Abstract

A method for carrying out a plausibility check of a first driver input sensor with regard to a second driver input sensor which is different from the first driver input sensor of a motor vehicle includes the first and the second driver input sensors each monitoring interventions of a driver in a brake pedal or an accelerator pedal, or a steering wheel, or a selector lever of the motor vehicle, the measuring signals of the first and the second driver input sensors being detected and redundantly evaluated independently of one another in a first functional module and a second functional module which is independent of the first functional module, and the two evaluations being compared to one another.

First claim

What is claimed is:

1. A computer implemented method for carrying out a reliable plausibility check of sensors of a motor vehicle, the method comprising:
monitoring, by each of the first driver input sensor and the second driver input sensor, interventions of a driver in one of a brake pedal, an accelerator pedal, a steering wheel, or a selector lever of the motor vehicle, the second driver input sensor being different than the first driver input sensor;
detecting, by a computer processor, a measuring signal of each of the first driver input sensor and the second driver input sensor;
redundantly evaluating for plausibility, by the computer processor, both the measuring signal of the first driver input sensor and the measuring signal of the second driver input sensor in each of a first functional module and a second functional module, the second functional module being independent of the first functional module; and
comparing, by the computer processor, a plausibility evaluation of the first functional module to a plausibility evaluation of the second functional module; and
responsive to the comparison of the plausibility evaluation of the first functional module and the plausibility evaluation of the second functional module indicating a lack of plausibility, adjusting one of the detected measuring signals.

2. The method according to claim 1 , wherein additional boundary conditions which are relevant to the plausibility check are taken into account when evaluating the measuring signal of the first driver input sensor and the measuring signal of the second driver input sensor.

3. The method according to claim 1 , wherein the first driver input sensor monitors interventions of the driver in the brake pedal and the second driver input sensor monitors interventions of the driver in the accelerator pedal.

4. The method according to claim 3 , further comprising:
reducing a corresponding accelerator pedal value based on a detected lack of plausibility between the accelerator pedal and the brake pedal in the two evaluations.

5. The method according to claim 1 , wherein the comparing of the two evaluations is implemented with aid of a logical OR link between the first functional module and the second functional module.

6. The method according to claim 1 , further comprising:
in a case of the first functional module not detecting a lack of plausibility, directing by the second functional module a response request to the first functional module with regard to the lack of plausibility after a chronological debouncing, including a repeated check of the two evaluations.

7. The method according to claim 1 , further comprising:
eliminating a detected lack of plausibility and thus resetting the evaluation of the first functional module only after the second functional module confirms and eliminates the detected lack of plausibility, and after the evaluation of the second functional module is reset.

8. The method according to claim 7 , wherein the elimination of the detected lack of plausibility in the first functional module takes place instantaneously after the elimination of the detected lack of plausibility in the second functional module.

9. The method according to claim 1 , wherein system variables which are relevant to the plausibility check are taken into account when evaluating the measuring signal of the first driver input sensor and the measuring signal of the second driver input sensor, the system variable including at least one of a vehicle speed and a motor speed.

10. The method according to claim 3 , wherein the measuring signal of the first input driver sensor is a brake status, and wherein the measuring signal of the second input driver sensor is an accelerator pedal position.

11. The method according to claim 1 , wherein the redundant evaluation for plausibility is in part performed by an accelerator pedal brake plausibility check in the first functional module and an accelerator pedal brake plausibility check in the second functional module.

12. The method according to claim 7 , wherein an assistance status is generated as a result of the detected lack of plausibility, the assistance status creating a holding condition that may only be dismissed if the detected lack of plausibility is no longer valid.

13. A control system for carrying out a reliable plausibility check of sensors of a motor vehicle, the control system comprising:
the first driver input sensor and the second driver input sensor each configured to monitor interventions of a driver in one of a brake pedal, an accelerator pedal, a steering wheel, or a selector lever of the motor vehicle, the second driver input sensor being different than the first driver input sensor; and
a reception and memory unit configured to detect a measuring signal of each of the first driver input sensor and the second driver input sensor, a first functional module and a second functional module being in communication with the reception unit;
wherein the first functional module and the second functional module, which is independent of the first functional module, are configured to redundantly evaluate for plausibility both the measuring signal of the first driver input sensor and the measuring signal of the second driver input sensor in each of a first functional module and a second functional module,—and wherein the first functional module and the second functional module are configured to compare a plausibility evaluation of the first functional module to a plausibility evaluation of the second functional module; and
responsive to the comparison of the plausibility evaluation of the first functional module and the plausibility evaluation of the second functional module indicating a lack of plausibility, adjusting one of the detected measuring signals.

Assignees

• Kirsch Andreas
• Bosch Gmbh Robert

Inventors

• Kirsch Andreas

Classifications

• G06F11/008 Primary

  Reliability or availability analysis · CPC title

• B60W2050/021

  Means for detecting failure or malfunction · CPC title

• B60W50/0205 Primary

  Diagnosing or detecting failures; Failure detection models · CPC title

• B60W50/023

  Avoiding failures by using redundant parts · CPC title