Method for operating a rotational speed sensor in a vehicle, and sensor assembly

Disclosed is a method for operating a rotational speed sensor comprising a sensor element in a vehicle, wherein the sensor element interacts with a magnet wheel on a wheel of the vehicle and an effective parameter generated by the interaction of the magnet wheel with the sensor element is evaluated in the form of a measurand in an evaluation module and, depending on the measurand, an output variable characterizing the rotational speed of the wheel is output, wherein the sensor element is supplied via the evaluation module with a sensor voltage influencing the measurand. A sensor assembly is also disclosed.

CROSS-REFERENCE TO RELATED APPLICATIONS

This application is the National Stage of International Application No. PCT/EP2018/060061, filed on 19 Apr. 2018, which claims priority to and all advantages of German Patent Application No. 10 2017 005 071.6, filed on 27 May 2017, the con-tents of which are hereby incorporated by reference.

FIELD OF THE INVENTION

The invention generally relates to a method for operating a rotational speed sensor in a vehicle, and a to sensor assembly having at least one rotational speed sensor for carrying out the method.

BACKGROUND OF THE INVENTION

Rotational speed sensors in a vehicle, in particular a utility vehicle, are used to detect the rotation behavior of a wheel and the measured rotation speeds are used for a driving dynamics control system, for example, an anti-lock braking system (ABS) or a traction control system (TCS). This allows instabilities in the vehicle to be avoided if this type of monitoring of the rotation speeds can take place, for example, on each wheel of the vehicle and braking can be applied to individual wheels in accordance with the monitoring result.

Such a rotational speed sensor can be operated inductively or actively. An inductive rotational speed sensor has, for example, a coil winding as the sensor element and an active speed sensor has, for example, a Hall sensor as the sensor element. A magnet wheel, having magnetic teeth and magnet gaps, that co-rotates with the wheel induces or generates in the respective sensor element a different effective voltage or a variable effective current depending on the distance, each of which can be processed by an evaluation module of the rotational speed sensor and output in an appropriate form to be able to determine the rotation speed of the wheel via a calibration.

In this arrangement, depending on the effective parameter generated in the respective sensor element, the evaluation module firstly outputs an analog measurand, e.g. a measured voltage, and secondly a comparator voltage output. The analog measured voltage is substantially proportional to the effective parameter generated in the sensor element and the comparator voltage is output in the form of a square-wave voltage, which indicates whether the measuring voltage deviates above or below a certain threshold, i.e., whether a certain measuring voltage is generated by a possible movement of the magnet wheel. If a deviation by more than the threshold value is present, a voltage pulse is generated and output via the comparator voltage. From the square-wave voltage it is thus possible to deduce the rotation speed of the wheel, if the number of magnetized teeth of the magnet wheel is known. Such a mode of operation is shown in EP 0 883 536 B1, for example.

With the analog measured voltage, for example, a plausibility check or monitoring of the function of the rotational speed sensor can be carried out, for example by checking whether an amplitude or a voltage value of the analog measured voltage at least tends to agree with the level of the rotation speed determined from the comparator voltage.

The energy supply of the rotational speed sensor in the vehicle is conventionally provided by the evaluation module, which is connected, for example, to an energy source of the vehicle, for example to a vehicle battery or an alternator, and provides a sensor voltage required for the measurement and evaluation, in particular to supply the respective sensor element.

To ensure a secure and reliable ABS or TCS control using such rotational speed sensor in what may be a purely electronically controlled braking system (EBS), an electrical operability of all speed sensors must be provided. This is why, for example, the plausibility check of the two voltages or signals takes place, as described above. If a failure or a malfunction has been detected, in the context of the driving dynamics control, however, an adequate response to a specific instability can no longer be ensured. To avoid this, a redundant rotational speed sensor can be provided on each wheel with a redundant energy source and redundant evaluation module, so that upon detection of a failure or a malfunction, the failed rotational speed sensor or sensors can be replaced and the wheel rotation speeds can therefore continue to be accessed.

A disadvantage of this is that such a redundancy is very expensive and takes up a large amount of space to the wheels or axes of the vehicle. Also, in the event of a failure the power supply of the respective rotational speed sensor or the evaluation module, recourse to a different speed sensor is not absolutely necessary.

BRIEF SUMMARY OF THE INVENTION

Disclosed is a method for operating a rotational speed sensor comprising a sensor element in a vehicle, wherein the sensor element interacts with a magnet wheel on a wheel of the vehicle. The method comprises evaluating an effective parameter generated by the interaction of the magnet wheel with the sensor element in the form of a measurand in an evaluation module and, depending on the measurand, outputting an output variable characterizing the rotational speed of the wheel. The sensor element is supplied via the evaluation module with a sensor voltage influencing the measurand. The method further comprises monitoring the functional capability of the evaluation module to establish whether the sensor element is or can be supplied from the evaluation module with the sensor voltage, wherein, in the event of a malfunction of the evaluation module as a result of which the sensor element no longer is or can be supplied with the sensor voltage from the evaluation module, a redundancy sensor voltage is provided by a redundancy module independent of the evaluation module, the sensor element instead being supplied with the voltage so as to form a redundant voltage supply of the sensor element.

DETAILED DESCRIPTION

The method of the invention monitors the functionality of an evaluation module as to whether a sensor element of a rotational speed sensor is or can be supplied with a sensor voltage by the evaluation module. In the event of a malfunction of the evaluation module, as a result of which the sensor element no longer is or can be supplied with the sensor voltage by the evaluation module and therefore a reliable evaluation of the rotation behavior of the wheel can no longer be ensured, a redundancy sensor voltage is provided by a redundancy module independent of the evaluation module, with which the sensor element is supplied instead.

According to the invention it is thus already detected that in a sensor assembly having one or more speed sensors, the sensor elements of which are supplied with a sensor voltage in the normal operation of the evaluation module, in the event of a malfunction in the evaluation module it is not necessary to rely on redundant sensor elements or to suspend the operation of the speed sensor, but instead an independent redundant power supply to the sensor elements can be provided so that the operation of the speed sensor can be continued redundantly. Therefore, cost and space savings can be made and the rotation behaviour of the wheel can continue to be used, for example, for a driving assistance control, for example, a brake slippage control and/or traction control system.

In specific embodiments, in the event of a malfunction of the evaluation module, as a result of which the sensor element no longer is or can be supplied with the sensor voltage by the evaluation module, an effective parameter, for example an induced effective voltage or a controlled effective current, generated by an interaction of a magnet wheel connected to the wheel with the sensor element, is evaluated in the form of a redundancy measurand in the redundancy module. Depending on the redundancy measurand, the redundancy module can output a redundancy output variable characterizing the rotation speed of the wheel.

Advantageously, this enables a redundant evaluation to be achieved, since the redundancy module can also evaluate the recorded measurands and output them, processed accordingly, independently of the evaluation module. The redundancy module therefore automatically assumes the full function of the evaluation module in the event of a malfunction, since after the malfunction is detected it must be assumed that not only has the supply of the sensor elements with the sensor voltage failed, but processing of the measurands can also no longer take place.

In various embodiments, upon detection of a malfunction the redundancy sensor voltage can be provided by the redundancy module in such a way that redundancy supply points of the redundancy module are electrically conductively connected to the sensor element via redundancy lines, in such a way that the sensor element can be supplied with the redundancy sensor voltage provided via the redundancy supply points. If there is no malfunction, the redundancy supply points, on the other hand, are electrically isolated from the sensor element.

This will advantageously ensure that the redundancy sensor voltage provided independently of the sensor voltage is only applied to the sensor elements when needed, so that in normal operation, i.e. without a malfunction present, the evaluation is not significantly affected by the operation of the redundancy module.

To connect and disconnect the redundancy supply points to or from the sensor element when required, electrical switches are generally provided, which can be opened or closed under electrical control depending on the functionality of the evaluation module. This specifies a simple way of enabling the redundant intervention, wherein the electrical switches are controlled, for example, by a redundancy monitoring module in the redundancy module which performs the monitoring of the evaluation module function.

In certain embodiments, the redundancy module monitors a diagnostic signal output by the evaluation module, wherein the diagnostic signal indicates whether the sensor element is or can be supplied with the sensor voltage via the evaluation module. The diagnostic signal can be determined in a self-diagnosis in the evaluation module and continuously transmitted to the redundancy module. This provides a simple way of monitoring, as a result of which it is decided whether the redundancy module has to intervene redundantly.

In accordance with an alternative or supplementary embodiment, further sensor elements of a sensor assembly are incorporated to monitor the functioning of the evaluation module. To do so, at least the following steps are carried out in the redundancy module:

Firstly, a redundancy measurand appearing in the redundancy module can be detected, wherein the redundancy measurand results from the interaction of the magnet wheel with the sensor element, which is supplied with a certain sensor voltage. It can subsequently be determined whether this redundancy measurand indicates that the sensor element is supplied with a sensor voltage, which corresponds to a ground potential within a fault tolerance.

It can thus first be detected in a simple way, whether for at least one sensor module in the redundancy module, a redundancy measurand is detected that indicates a lack of power supply to the relevant sensor element via the evaluation module. In order to distinguish whether this is caused by a sensor defect or by the fact that a sensor voltage is no longer being provided by the evaluation module, it is typically also provided, for additional sensor elements of other rotational speed sensor of the same sensor assembly that are also supplied with the sensor voltage by the same evaluation module and are also monitored by the redundancy module for a malfunction, to test whether the redundancy measurands associated with the other sensor elements also indicate a sensor voltage that corresponds to a ground potential within the fault tolerance. Only if this is the case is a malfunction of the evaluation module concluded, as a result of which the sensor element no longer is or can be supplied with the sensor voltage by the evaluation module.

As a result, by recourse to other sensor elements it is determined whether the power supply to these is also lacking or impaired and from this a corresponding malfunction of the evaluation module is concluded, as a result of which the redundancy module redundantly intervenes to provide the supply and evaluation.

In specific embodiments, if a stationary state of the wheel is detected it is additionally determined whether the redundancy measurand corresponds to a median voltage and/or a median current, which appears when the wheel is stationary due to supplying the sensor element with the sensor voltage without any interaction of the sensor element with the magnet wheel. Thus, even in the stationary condition of the wheel an evaluation can advantageously be carried out as to whether the presence of the sensor voltage causes a corresponding measurand or redundancy measurand to be generated, which disappears without the presence of the sensor voltage.

Furthermore, after the detection the redundancy measurand can be first plausibility-checked, wherein to do so, in a redundancy comparator module of the redundancy module a redundancy comparator voltage or a redundancy comparator signal are generated as an output variable, which specify whether, as a result of an interaction of the sensor element with a magnet wheel tooth of the magnet wheel, the redundancy measurand deviates by more than a threshold from the median voltage or the median current. From a comparison of the redundancy measurand with the redundancy comparator voltage or the redundancy comparator signal it is possible to determine inconsistencies in the recorded redundancy measurand and therefore the rotation speed based thereon. Thus, the monitoring can be already aborted, for example, if an implausible or reasonable rotation speed is derived from the redundancy measurand or the redundancy comparator voltage/signal.

Therefore, during the normal monitoring operation the redundancy module is first in a passive operating mode, in which the effective parameter of the respective sensor element is merely “observed” via the respective redundancy measurand, and no supply of the respective sensor element takes place via the redundancy module. The evaluation module, on the other hand, is in an active operating mode in which both an observation of the respective effective parameter takes place via the respective measuring voltage and a supply of the respective sensor element via the sensor voltage. Once a malfunction is detected according to the above designs, the redundancy module becomes active and the evaluation module becomes passive.

The respective measurands or redundancy measurands can take the form of a voltage or a current, depending on the type of sensor element. For example, if an inductive sensor element is provided, an induced effective voltage is specified as the effective parameter, which when superimposed on the median voltage is processed as a measured voltage in the evaluation module or as a redundant measured voltage in the redundancy module. In the case of an active sensor element, such as a Hall sensor element, an effective current is specified as the effective parameter, which when superimposed on the median current is processed as a measured current or redundancy measured current in the evaluation module or the redundancy module, respectively.

A sensor assembly for a vehicle is also provided by the invention, particular for a utility vehicle, which is suitable in particular for carrying out the method described above for operating a rotation speed sensor, wherein the sensor assembly has at least one rotational speed sensor each with one sensor element and the sensor element can interact with a magnet wheel that can be fixed to a wheel, so that an effective parameter is generated in the sensor element, which characterizes the rotation speed of the wheel. The processing module can supply all rotational speed sensor of the sensor assembly with the sensor voltage in normal operation and evaluate the effective parameter, which is generated as a result of the interaction between the at least one sensor element that is supplied with the sensor voltage and the magnet wheel in the form of the measurand. As a function thereof, an output variable characterizing the rotation speed of the respective wheel can be output by the evaluation module, so that an open-loop and/or closed-loop control can thereby be carried out.

Furthermore, the redundancy module is part of the sensor assembly, which as described above can monitor the functional capacity of the evaluation module and, if necessary, also assumes the function of the evaluation module so as to ensure the supply of the sensor elements and thereupon can also perform the evaluation of the detected effective parameters. The evaluation module in this case is designed substantially identically to the redundancy module, wherein the redundancy module has additional electrical switches, which upon detecting a malfunction and with a view to performing the task redundantly, ensure that the sensor element is supplied with the redundancy sensor voltage.

To ensure a reliable operation, the evaluation module and the redundancy module are connected to different energy sources that are independent of one another. This can advantageously ensure that, in the event of a failure of the energy source of the evaluation module, as a result of which the sensor voltage can no longer be provided and possibly an evaluation can no longer be performed, the redundancy module can continue to intervene redundantly.

With reference to the specific embodiment of the Figures, wherein like numerals generally indicate like parts throughout the several views,FIG.1ashows an inductive speed sensor1a.i, which is assigned to a particular wheel2.iof a vehicle100and is designed to output an output variable SK.i, UK.i characterizing the rotation speed D.i of the wheel2.i. The index i indicates that in the vehicle100further inductive speed sensors1a.ican be present on other wheels2.i, which can be operated in exactly the same way as described in the following:

A magnetic, for example ferromagnetic, magnet wheel4.iis therefore provided, which co-rotates with the respective wheel2.i, having magnetic teeth4aand pole gaps4b, which moves at a distance apart from an inductive sensor element5.iof the respective rotational speed sensor1a.iand is therefore located at different distances A from the inductive sensor element5.idepending on the rotation angle.

The inductive sensor element5.ihas a magnetic core5aand a coil winding5bat least partially surrounding the core5a, which is connected to two sensor cables6a,6bso that an inductive component is formed, in which an effective voltage UW.i—or else induction voltage—can be induced depending on the distance A from the ferromagnetic magnet wheel4.i. Due to a movement of the magnet wheel4.ia magnetic tooth4aand a pole gap4bis alternately introduced into the magnetic field, which induces a voltage in the coil winding5bof the inductive sensor element5.i. The greater the speed of the magnet wheel4.i, the greater the frequency and the amplitude of the induced voltage. Thus, upon rotation of the magnet wheel4.ior of the wheel2.ian oscillating effective voltage UW.i is generated, which characterizes the speed D of the wheel2.i.

The effective voltage UW.i is superimposed on a median voltage UM and fed via the sensor cables6a,6bto an evaluation module20, wherein in the evaluation module20, a voltage composed of the effective voltage UW.i and the median voltage UM—hereafter referred to as the measured voltage U.i—is transmitted, processed and evaluated. The active voltage in the evaluation module20is thus referred to as the measured voltage U.i. An example of the measured voltage U.i for a rotational speed sensor1a.1is shown inFIG.1b.

The median voltage UM is generated by the fact that the first sensor cable6a, connected to the coil winding5bin accordance withFIG.1a, is connected via a first load resistor R1to a first supply point P1which is at ground potential M. The second sensor cable6b, also connected to the coil winding5b, is connected via a second load resistor R2to a second supply point P2, to which a certain sensor supply voltage Usens of, for example, 5V is connected. The sensor voltage USens is provided via an appropriate limiting of the supply voltage supplied by a first energy source15a. As a result, both sensor cables6a,6b, and thus also the coil5b, are always at a non-negative potential, which leads to a raising of the effective voltage UW.i by the median voltage UM.

On the basis of the applied median voltage UM, even without a rotation of the magnet wheel4.i, i.e. if the respective wheel2.iis at a standstill or is blocked, and therefore without an effective voltage UW.i induced in the coil winding5b, in the evaluation module20a measured voltage U.i can already be measured, which in normal operation, i.e. without a malfunction of the evaluation module20, corresponds approximately to the median voltage UM. The median voltage UM in this exemplary embodiment is slightly less than half of the sensor voltage Usens.

To evaluate the measuring voltage U.i, within the evaluation module20a comparator module7.iis provided, which has two comparator inputs7a,7band two comparator outputs7c,7d. The comparator inputs7a,7bare each connected to one of the sensor cables6a,6b, so that the measured voltage U.i is fed to the comparator module7.iand can be processed thereby.

The comparator module7.iin the evaluation module20is used to generate an output variable SK.i, UK.i, which in accordance withFIG.1bis given by a square-wave voltage which is output as a comparator voltage UK.i via a comparator output7cof the comparator module7.i, wherein the square-wave voltage characterizes the rotation speed D.i of the magnet wheel4.iand thus also the rotational behavior of the wheel2.i. Alternatively, the comparator module7.ican also output a comparator signal SK.i, which in a manner comparable with that of the square-wave voltage characterizes the rotation speed D.i of the magnet wheel4.i, for example, in the form of a binary number string.

The comparator voltage UK.i or else the comparator signal SK.i as output variables of the comparator module7.iand also of the evaluation module20can be accepted, for example, by a driving assistance control module40, which is designed to respond to a case of brake slippage or a case of drive slippage with a braking intervention, so as to perform an appropriate open-loop and/or closed-loop control. The driving assistance control module40can be integrated directly on the vehicle axle in or on one of the axle modulators (not shown), or separately in a central module that controls a braking system (not shown).

The comparator voltage UK.i is compared inFIG.1bwith the measured voltage U.i as an example. The comparator voltage UK.i in this case is generated as follows: an electronic component arranged in the comparator module7.i, such as one or more comparators or a comparable control electronics, first receives the oscillating measured voltage U.i and compares this continuously with a voltage threshold value U_th, which points away from the median voltage UM in both voltage directions. If there is a positive deviation from the median voltage UM by more than the voltage threshold value U_th, the comparator module7.igenerates a voltage level US until in the further course of the oscillating measured voltage U.i a negative deviation from the median voltage UM by more than the voltage threshold U_th also exists. Then, the comparator voltage UK.i is switched back to the output value until the U.i measuring voltage again deviates positively from the median voltage UM by more than the voltage threshold U_th.

This generates a square-wave voltage in which a voltage level US occurs whenever a magnet tooth4apasses the inductive sensor element5.iand therefore an effective voltage UW.i is induced, which gives rise to a sufficient deviation of the measured voltage U.i from the median voltage UM. From the temporal response of the square-wave voltage and/or the comparator voltage UK.i, having knowledge of the number of magnet teeth4aof the magnet wheel4.i, the rotational behavior or the rotation speed D.i of the respective wheel2.ican be deduced. In a similar way the comparator signal SK.i can also be generated.

At an analog output7dof the comparator module7.ithe measured voltage U.i is output essentially unchanged as an analog voltage or as an analog measurement signal. The measured voltage U.i or the measurement signal can be used to monitor the functioning of the inductive rotational speed sensor1a.iby comparing the measured voltage U.i or the measurement signal, for example in a monitoring module8, with the comparator voltage UK.i or with the comparator signal SK.i and using this for a plausibility check of the comparator voltage UK.i or the comparator signal SK.i or the resulting rotation speed D.i. Furthermore, it can be verified whether the median voltage UM can be measured with the wheel2.iat a standstill.

To provide a filtering of the measured voltage U.i, a filter arrangement9can be additionally provided in front of the comparator module7.iin the evaluation module20, which filters out unwanted fluctuations or effects.

If more than one inductive rotational speed sensor1a.1is provided, i.e. for i>1, in a corresponding way sensor cables6a,6bmust be routed to the processing module20for each inductive sensor element5.i, wherein to evaluate the effective voltage UW.i each inductive sensor element5.iis also assigned a comparator module7.i, to which the corresponding measured voltage U.i is fed, as described. A supply with the sensor voltage Usens is provided for all inductive sensor elements5.i, however, originating from the same supply points P1, P2in the evaluation module20(seeFIG.2a), wherein each sensor element5.ifor each supply point P1, P2is assigned a load resistor R1, R2to achieve a decoupling of the two supply circuits.

In the embodiment according toFIGS.2a,2ba sensor assembly200according to the invention is implemented, which has two of the inductive rotational speed sensor1a.1,1a.2shown inFIG.1a, i.e. i=2. The two rotational speed sensor1a.1,1a.2here share the same evaluation module20, i.e. the two inductive sensor elements5.1,5.2are supplied by the evaluation module20in normal operation with a sensor voltage Usens from the same supply points P1, P2via the load resistors R1, R2assigned to the respective inductive sensor element5.1,5.2and a measured voltage U.1, U2assigned to the respective inductive sensor element5.1,5.2can be evaluated for each inductive sensor element5.1,5.2separately in a comparator module7.1,7.2assigned to the respective inductive sensor element5.1,5.2. In the respective comparator module7.1,7.2, a comparator voltage UK.1, UK.2assigned to the respective inductive sensor element5.1,5.2or a comparator signal SK.1, SK.2is determined as an output variable as described above and output for further use. In an analogous way, more than two inductive sensor elements5.1,5.2can also be provided in the sensor assembly200.

A plausibility check is carried out in accordance with this exemplary embodiment in a joint monitoring module8, which monitors the output variables UK.1, UK.2, SK.1, SK.2of both comparator modules7.1,7.2, wherein to do so these can in particular be compared with the respective measured voltage U.1, U.2as described above.

In addition, in the sensor assembly200in parallel with the evaluation module20a redundancy module21is provided, which in accordance withFIGS.2a,2bis designed essentially identically to the evaluation module20and can also perform the same function, namely via a redundancy comparator module27.1,27.2assigned to the respective inductive sensor element5.1,5.2to generate a redundancy comparator voltage UKr.1, UKr.1in the form of a square-wave voltage or a corresponding redundancy comparator signal SKr.1, SKr.2, which result from a redundancy measured voltage Ur.1, Ur.2which is present in the redundancy module21, by comparison with a voltage threshold U_th. The inputs and outputs of the respective redundancy comparator module27.1,27.2are identical to the comparator module7.1shown inFIG.1a.

From the respective redundancy comparator voltage UKr.1, UKr.2or the respective redundancy comparator signal SKr.1, SKr.2the rotation speed D.i of each wheel2.ican also be derived, so that the driving assistance control module40can also use this to perform its open-loop and/or closed-loop control. If more than two or even just one inductive sensor element5.iis provided, the redundancy module21will need to be adjusted in a corresponding way to the evaluation module20.

In order to feed the redundancy measured voltage Ur.1, Ur.2, which essentially corresponds to the prevailing measured voltage U.1, U.2in the evaluation module20, to the redundancy module21, for each of the inductive sensor elements5.1,5.2redundancy lines26a,26bare provided, which as shown inFIG.2a,2bare connected identically to the sensor cables6a,6b(seeFIG.1a) and thus transmit the same voltage. Thus, the respective effective voltages UW.i of the respective inductive sensor element5.1,5.2superimposed on the median voltage UM are also transmitted via the redundancy lines26a,26bto the redundancy module21or the respective redundancy comparator module27.1,27.2located therein as a redundancy measured voltage Ur.1, Ur.2, to be able to process them accordingly. The median voltage UM is supplied in normal operation by the sensor voltage Usens provided in the evaluation module20, as described above.

In order not to affect significantly the prevailing measured voltage U.1, U.2in the evaluation module20in normal operation by the operation of the redundancy module21, redundancy supply points P1r, P2rpresent in the redundancy module21, via which a redundancy sensor voltage Usens_r can be defined as required via redundancy load resistors Rr1, Rr2for supplying the inductive sensor elements5.1,5.2, are isolated from the respective redundancy line26a,26bby electrical switches25a,25bbeing opened accordingly. As a result, the redundancy lines26a,26b, are not connected to a potential in addition to the supply points P1, P2in the evaluation module20. This allows a double supply of the two inductive sensor elements5.1,5.2, and thus a mutual electrical interaction, to be avoided.

In normal operation, the redundancy module21is therefore first in a passive operating mode, in which the effective parameter UW.i of the respective inductive sensor element5.iis merely “observed” via the respective redundancy measurand Ur.i, and no supply of the respective inductive sensor element5.itakes place via the redundancy module21. The evaluation module20, on the other hand, is in an active operating mode in which both an observation of the respective effective voltage UW.i takes place via the respective measuring voltage U.i and a supply of the respective inductive sensor element5.itakes place via the sensor voltage Usens.

In order to ensure a supply of the inductive sensor element5.iwith a voltage in the operation of the respective inductive rotational speed sensor1a.iand also to enable an evaluation of the effective voltage UW.i and thus a detection and further processing of the rotation speed D.i of each wheel2.i, via the redundancy module21, typically via a redundancy monitoring module28integrated in the redundancy module21, a monitoring of the functioning of the evaluation module20takes place, an example of which is illustrated in the flow chart in accordance withFIG.4:

after the system has been initialized in an initial step St0, in the redundancy monitoring module28according to one design the analog redundancy measured voltage Ur.i output from one of the comparator modules27.i, and the redundancy comparator voltage UKr.i—or the redundancy comparator signal SKr.i—can initially be monitored for a specific inductive sensor element5.i, wherein to do so a plausibility check can firstly be performed in a first step St1. In other words, it is first determined whether the redundancy measured voltage Ur.i matches the output redundancy comparator voltage UKr.i of the respective inductive sensor element5.i.

To this end different criteria may be applied, for example, whether a voltage value of the analog redundancy measured voltage Ur.i matches the rotation speed D.i determined from the redundancy comparator voltage Ukr.i, wherein at a higher speed D.i a higher voltage value of the analog redundancy measured voltage Ur.i is to be expected. This relationship can be stored, for example, in a characteristic curve in the redundancy monitoring module28. It can also be checked whether plausible redundancy voltages Ur.i, UKr.i are output at all, i.e. whether a plausible or reasonable rotation speed D.i can be determined for the respective inductive sensor element5.iat all.

If this is the case, it can be assumed that the respective inductive rotational speed sensor1a.ior the respective inductive sensor element5.iis being supplied with a sensor voltage Usens and is therefore functioning correctly (St3a).

If, however, in the second step St2—or even already in the first step St1—it is found that the mean value of the redundancy measured voltage Ur.i corresponds to the ground potential M within a fault tolerance T of, for example, 500 mV, in a third step St3ba fault case F is concluded.

In order to intervene appropriately, in the following steps it is assessed whether the respective inductive sensor element5.ieither has a sensor fault or is no longer being supplied with the sensor voltage Usens by the evaluation module20, because, for example, the evaluation module20has a defect or malfunction, wherein in accordance with this design other inductive sensor elements5.iare used for this purpose.

In order to be able to distinguish whether a sensor fault or a missing sensor voltage Usens is present, in a fourth step St4for at least one other inductive sensor element5.iof the sensor assembly200, which as described and shown inFIG.2a,2bis also connected to the redundancy module21and which should also supplied with a sensor voltage Usens by the evaluation module20, it is checked by the redundancy monitoring module28whether the redundancy measured voltage Ur.i associated to this inductive sensor element5.icorresponds to the ground potential M within the tolerance T.

Thus, for example, if in the third step St3ba fault case F is detected, because the detected redundancy measured voltage Ur.1assigned to the one inductive sensor element5.1inFIG.2acorresponds to the ground potential M within the tolerance T, in the fourth step St4it is checked whether the redundancy measured voltage Ur.2assigned to the other inductive sensor element5.2inFIG.2aalso corresponds to the ground potential M within the tolerance T.

If this is the case for all inductive sensor elements5.isupplied with the sensor voltage Usens by the evaluation module20and for all those connected to the redundancy module21at the same time, in a fifth step St5bit is concluded that a failure of the supply of the individual inductive sensor elements5.iwith the sensor voltage Usens may be present. In other words, it is found that due to any malfunction of the evaluation module20the sensor voltage Usens cannot be transmitted via the sensor cables6a,6bto all inductive sensor elements5.iof the sensor assembly200.

If, on the other hand, only some individual inductive sensor elements5.ithat are all supplied with the sensor voltage Usens by the same evaluation module20are affected, then in an alternative fifth step St5aa different malfunction is concluded, possibly a sensor defect, and a corresponding warning is output. If the one redundancy measured voltage Ur.1corresponds to the ground potential M inFIG.2aand the other redundancy measured voltage Ur.2does not correspond to the ground potential M within the tolerance T but, for example, to the median voltage UM, then it is highly likely that no malfunction of the evaluation module20is present with regard to supplying the sensor voltage Usens. In this alternative, in the context of the method according to the invention, no fallback level is implemented.

In order nevertheless to ensure a continued operation of the inductive speed sensor or sensors1a.1in the event of a high probability of failure of the power supply of the individual inductive sensor elements5.ivia the sensor voltage Usens provided by the evaluation module20, in a sixth step St6as shown inFIG.2bthe electrical switches25a,25bare closed and the redundancy supply points P1r, P2rare connected to the redundancy lines26a,26b, so that for each of the individual inductive sensor elements5.ia redundancy sensor voltage Usens_r is provided. The opening of the switches25a,25bin this case can take place, for example, by the redundancy monitoring module28, which can electrically control the electrical switches25a,25b.

In the case, the redundancy module21thus performs the full function (supply and processing) of the evaluation module20found to be defective and the redundancy comparator voltage UKr.i output by the redundancy module21for the respective inductive sensor element5.ican be used for the open-loop and/or closed-loop control in the driving assistance control module40. Other features of the evaluation module20, for example additional diagnostic functions, can be performed by the redundancy module21due to its almost identical construction and virtually identical operating principle.

Thus, in this design using further inductive sensor elements5.iof the sensor assembly200a functional capacity of the evaluation module20can be deduced. With only one inductive sensor element5.ithis monitoring is therefore not possible. In fact, at least two inductive sensor elements5.iare typically utilized.

Alternatively or in addition, however, it can also be provided in one design that the functions are already taken over by the redundancy module21in step St6when the evaluation module20is changed into a fault mode, without the previous steps St1to St5needing to be carried out. This can be carried out if in a self-diagnosis the processing module20detects that a fault or a malfunction is present and as a result, a connection to the first energy source15ais switched off automatically, in order to change over into the passive operating mode as indicated inFIG.2bby a supply switch19. This variant is represented by the parallel path inFIG.4, i.e. parallel to the steps St1to St5the diagnostic signal SD can also always be read out and evaluated.

In this case, the evaluation module20can signal to the redundancy module21via a diagnostic signal SD that a malfunction has occurred and that the evaluation module20is transferring into the passive operating mode in which, consequently, no sensor voltage Usens is output either. In this case, a monitoring of the functional capacity of the evaluation module20therefore also takes place via the diagnostic signal SD and by switching over the electrical switches25a,25b, the redundancy module21can assume the supply and evaluation tasks and therefore the whole operation of the inductive speed sensor(s)1a.i. In this case, in the sensor assembly200any number of inductive sensor elements5.iwith i>=1 may be present, i.e. even only one inductive sensor element5.1, since the detection of the functional capability of the evaluation module20is not monitored via further inductive sensor elements5.i.

As a result, in both versions in an electrically controlled brake system a fallback level can be implemented which intervenes if the supply of the inductive sensor elements5.iby the evaluation module20fails, which can be easily detected by the redundancy module21itself.

The power supply of the evaluation module20and the redundancy module21in this case are provided separately from each other via two energy sources15a,15bwhich are independent of each other, so that in the event of a defect in a first power source15a, which supplies the evaluation module20with energy, a second energy source15b, which supplies the redundancy module21with energy, remains unaffected. This is implemented, for example, via a galvanic separation when only one power supply is used, such as a vehicle battery or an alternator, or else by the provision of two separate energy sources15a,15b. The energy sources15a,15bhere ensure that the respective module20,21can provide the redundancy/sensor voltage Usens, Usens_r, and that the redundancy/comparator module7.i,27.iand the redundancy/monitoring module8,28can evaluate and process the respective voltages and/or signals according to their mode of operation.

According toFIG.3aa further design of the sensor assembly200with two active rotational speed sensor1b.iis shown schematically. In this case, on the relevant wheel2.ian active sensor element3.iis present, which is designed, for example, as a Hall sensor element3a. In this device, on approaching a magnet tooth4aof the magnet wheel4.ia change is produced in an effective current IW.i flowing through the active sensor element3.i. Due to the potentials M, Usens prevailing at the supply points P1, P2of the evaluation module20, or due to the sensor voltage Usens acting on the active sensor element3.ithrough the load resistors R1, R2via the sensor cables6a,6bin normal operation, a median current IM is superimposed on the effective current IW.i as an effective parameter. This superposition is transmitted as a measured current I.i via the sensor cables6a,6bto the evaluation module20and received by the respective comparator module7.i. As an example, such a measured current I.i is shown inFIG.3bas a measurand.

If the active sensor element3.iis designed to output further sensor information via a VDA-AK protocol, these can be additionally used for a diagnosis. In that case, the sensor information is appropriately encoded in the measurand, wherein to this end in accordance withFIG.3bfollowing a sensor current pulse IS occurring in the effective current IW.i, which occurs as a result of the interaction of the magnet wheel4.iwith the active sensor element3.iand which is greater than or equal to a current threshold value I_th, additional diagnostic current pulses DS of differing duration and with roughly half the current threshold value I_th are transmitted. By using the duration of the diagnostic current pulses DS certain sensor information, in particular indicating a status of the active rotational speed sensor1b.i, can be transmitted.

The operating principle of the evaluation module20is analogous to the already described evaluation module20for an inductive sensor element5.iin accordance withFIGS.1a,2aand2b. Accordingly, the measuring current I.i assigned to the respective active sensor element3.iis compared with the current threshold value I_th by the respective comparator module7.i. If passing over the magnetic tooth4aon the respective active sensor element3.ican be concluded, which inFIG.3bis always the case on a sensor current pulse IS in the measured current I.i, a corresponding voltage pulse US is generated and output by the comparator module7.iin a comparator voltage UK.i for further processing and monitoring. From this, as also previously described for an inductive sensor element5.i, having knowledge of the number of magnet teeth4a, the rotation speed D.i of the magnet wheel4.ior the wheel2.ican be concluded. Furthermore, from the measuring current I.i the comparator module7.ia corresponding analog voltage can also be generated and output as measured voltage U.i at the analog output7dof the comparator module7.i.

The structure and operating principle of the redundancy module21is similar to the design of the sensor assembly200with inductive sensor elements5.i, i.e. in normal operation the redundancy module21is initially passive and observes the redundancy measured current Ir.i which is fed into the redundancy module21via the redundancy lines26a,26b, or a redundancy measuring voltage Ur.i generated from this in the redundancy comparator module27.iand the redundancy comparator voltage UKr.i or the redundancy comparator signal Skr.i also output by the redundancy comparator module27.i, each of which characterizes the rotation speed D.i.

In the presence of the corresponding variant of the active sensor element3.iwith the VDA-AK protocol, the sensor information transferred from the diagnostic current pulses DS can additionally be monitored.

Thus, the same or comparable parameters as already described for the inductive design of the sensor assembly200are available, and the method specified inFIG.4can be carried out in a similar way in the redundancy monitoring module28in order to monitor a function of the evaluation module20in relation to a supply of the in this case active sensor elements3.iwith the sensor voltage Usens.

On the one hand, this can take place after checking the plausibility of the currents or voltages (cf. St1) by monitoring the median current IM, wherein in the event of a dropout of the sensor voltage Usens provided by the evaluation module20the median current IM falls to zero within the fault tolerance T, which corresponds to supplying the active sensor element3.iwith the ground potential M within the fault tolerance T (cf. St2, St3b).

If this is detected for all active sensor elements3.iof the sensor assembly200(cf. St4, St5b), the redundancy module21can perform the operation of the active rotational speed sensor1b.iand accordingly ensure both a supply and an evaluation (cf. St6).

On the other hand, however, the monitoring can also be carried out via the diagnostic signal SD and in the event of a reported malfunction the redundancy module21can intervene redundantly.

If the VDA-AK protocol for the active rotational speed sensor1b.iis supported, in addition, the sensor information can also be taken into account during the monitoring. For example, it can also be detected whether the diagnostic current pulses DS are transmitted via the redundancy measured current Ir.i and on the basis of this it can be detected whether the active sensor elements3.iare being supplied, because in the event of a failure of the supply no more diagnostic current pulses DS will be able to be detected either.

LIST OF REFERENCE NUMERALS (PART OF THE DESCRIPTION)

The terms “comprising” or “comprise” are used herein in their broadest sense to mean and encompass the notions of “including,” “include,” “consist(ing) essentially of,” and “consist(ing) of. The use of “for example,” “e.g.,” “such as,” and “including” to list illustrative examples does not limit to only the listed examples. Thus, “for example” or “such as” means “for example, but not limited to” or “such as, but not limited to” and encompasses other similar or equivalent examples. The term “about” as used herein serves to reasonably encompass or describe minor variations in numerical values measured by instrumental analysis or as a result of sample handling. Such minor variations may be in the order of ±0-25, ±0-10, ±0-5, or ±0-2.5, % of the numerical values. Further, The term “about” applies to both numerical values when associated with a range of values. More-over, the term “about” may apply to numerical values even when not explicitly stated.

Generally, as used herein a hyphen “-” or dash “—” in a range of values is “to” or “through”; a “>” is “above” or “greater-than”; a “≥” is “at least” or “greater-than or equal to”; a “<” is “below” or “less-than”; and a “≤” is “at most” or “less-than or equal to.” On an individual basis, each of the aforementioned applications for patent, patents, and/or patent application publications, is expressly incorporated herein by reference in its entirety in one or more non-limiting embodiments.

It is to be understood that the appended claims are not limited to express and particular compounds, compositions, or methods described in the detailed description, which may vary between particular embodiments which fall within the scope of the appended claims. With respect to any Markush groups relied upon herein for describing particular features or aspects of various embodiments, it is to be appreciated that different, spe-cial, and/or unexpected results may be obtained from each member of the respective Markush group independent from all other Markush members. Each member of a Markush group may be relied upon individually and or in combination and provides adequate support for specific embodiments within the scope of the appended claims.

The present invention has been described herein in an illustrative manner, and it is to be understood that the terminology which has been used is intended to be in the nature of words of description rather than of limitation. Many modifications and variations of the present invention are possible in light of the above teachings. The present invention may be practiced otherwise than as specifically described within the scope of the appended claims. The subject matter of all combinations of independent and dependent claims, both single and multiple dependent, is herein expressly contemplated.