CONTROL DEVICE FOR CONTROLLING A VEHICLE FUNCTION FOR A VEHICLE, AND METHOD FOR OPERATING A CONTROL DEVICE

A control device for controlling a vehicle function for a vehicle has at least one electronic or electrical component, at least one main switch, and one component switch. The component is designed to carry out the vehicle function. The main switch is connected via a power line between the component and a power supply connection for providing electricity to the component. The component switch is located between the component and the main switch and is designed to connect the component to the power line.

The present invention relates to a control device for a vehicle function for a vehicle and a method for operating the control device.

Current E/E architectures (electric/electronic architectures) in vehicles integrate only one or a few vehicle functions in each control device. This results in a very large number of control devices and software functions, with very complex networks.

This is the background forming the basis for the present invention with which an improved control device for vehicle functions in a vehicle, and a method for operating an improved control device is obtained according to the independent claims. Advantageous embodiments can be derived from the dependent claims and the following description.

The advantages with this approach are that a control device is created in which the individual components or modules for carrying out different vehicle functions can be switched on or off as needed. An embodiment of this forms a highly integrated control device, eliminating the need for individual control devices for each vehicle function.

A control device for controlling a vehicle function in a vehicle has at least one electronic or electrical component, at least one main switch, and one component switch. The component is designed to carry out the vehicle function. The main switch is on a power line between the component and a power supply with which the component is provided with electricity. The component switch is located between the component and the main switch and connects the component to the power line.

The vehicle can be a highly or fully automated vehicle for transporting people and/or goods. The component can be part of a module containing numerous electronic or electrical components for carrying out vehicle functions. The control device can also comprise this entire module. A power supply for the operating various components in the vehicle can be provided for the vehicle function. The main switch can be a switch with which all of the components connected to the control device can be supplied with electricity when it is activated, or all of the components connected to the control device can be separated from the power supply when it is deactivated. The component switch can be used to provide power to a specific component, or interrupt the power supply thereto. This makes it advantageously possible for the control device to provide or interrupt the power supply to any of the specific components. These components that are connected to the control device can all be placed on the same printed circuit board and/or located in the same housing.

The control device can also have at least one second electronic or electrical component for carrying out another vehicle function and a second component switch between the second component and the main switch with which the second component can be connected to the power line. The second vehicle function can differ from the first vehicle function. As a result, numerous vehicle functions can be controlled with a single control device. By way of example, when all of the switches are active, all of the components can be supplied with electricity, and when the main switch is switched off, none of the components are supplied with electricity, while when the main switch is on, and the first component switch is on, but the second component switch is off, only the first component is supplied with electricity, while when the main switch is on and the first component switch is off, but the second component switch is on, only the second component is supplied with electricity. This reduces power consumption, since only those components that are in use or needed for the various vehicle functions are supplied with electricity.

The first electronic or electrical component and second electronic or electrical component can be connected in parallel to the main switch.

It is also advantageous when the control device is connected to at least one third electronic or electrical component for carrying out another vehicle function, and there is a third component switch between the third component and the main switch that connects the third component to the power line. The third vehicle function can differ from the first and second vehicle functions. Consequently, numerous vehicle functions can be controlled with one control device. The control device can also be connected to an arbitrary number of other electronic or electrical components that each carry out different vehicle functions in the vehicle and each have dedicated component switches between these respective components and the main switch that each connect the respective components to the power line.

According to one embodiment, the control device can also have a second main switch connected by a second power line between the component and a second power supply connection to a second power supply, and/or a second component switch between the component and the second main switch for connecting the component to the second power line. This results in a redundant system that can be activated if the first main switch, the first power line, and/or the first component switch malfunction(s).

The first power line and second power line can be galvanically separated from one another and/or electrically insulated from one another. This means that the component can be supplied with electricity via either the first power line or the second power line. The first power line can be designed in this case to be connected to the first power supply and the second power line can be connected to the second power supply, and the first and second power supplies can differ from one another. By way of example, the first power supply connection can be to a 12 volt power source, and the second power supply connection can be to another power source that provides electricity at 48 volts. The power sources can also provide the same number of volts such that they function in a redundant manner.

It is also advantageous if the control device according to one embodiment contains a supply voltage transformer connected to the component via another power line between the main switch and an additional component switch, wherein the supply voltage transformer is designed to transform the voltage of the power supply. This transformer can be designed to reduce and/or boost the power supply voltage. As a result, the first component can be supplied with one voltage from a power supply, and the second component can be supplied by the same power supply with another voltage. The control device can also contain the voltage transformer, which is connected to the second main switch and the second component switch for the first component via the second power line or a third power line.

The control device can also have a monitoring device that is designed to detect an error in the component and/or switch the component switch on and/or off if an error has been detected in the component. This error can be a defect or malfunction in the control device. With such a monitoring device, a defective component can advantageously be shut off, or the malfunctioning component can be reset.

The control device can also have a second monitoring device that is designed to detect an error in the control device and/or switch the main switch on and/or off if an error has been detected in the control device. The error can be a defect or malfunction in the control device. With such a monitoring device, the complete control device can be reset if it malfunctions, for example.

The second monitoring device can also be designed to detect an error in the power supply connection and shut off the main switch if this is the case. It is also conceivable that the second monitoring device is designed to detect an error in the power supply connection and shut off the second main switch if the error has been detected in the power supply connection.

According to another embodiment, the second monitoring device can also be designed to detect an error in the power supply connection and shut off the main switch if an error has been detected in the power supply connection, and when the second main switch is then simultaneously switched on, the power supply remains intact via the power supply connection without interruption. Analogously, the second monitoring device can also be designed to detect an error in the power supply connection and switch off the second main switch if an error is detected in the power supply connection, and then switch the first main switch on at the same time, such that the power supply remains intact via the power supply connection without interruption.

In another embodiment, the monitoring device can be designed to keep both main switches on or to switch them on, and if an error occurs at the power supply connection, the main switch is then switched off. If an error is detected at the second power supply connection, the second main switch can be shut off by the first or second monitoring unit. This results in greater availability as the result of an uninterrupted power supply.

Furthermore, another embodiment of the invention presented herein may be particularly advantageous in a situation in which both main switches are on because a corresponding amount of power is necessary. If an error is then detected at the power supply connection, the main switch is shut off, for example, and the modules are shut off via the component switches, i.e. the switches for them are switched off, in accordance with a priority list, to prevent an overload to a second power line serving as the supply line.

According to one embodiment, the control device can have at least one power supply storage unit, in particular a supercapacitor, and/or a buffer battery, designed to provide an additional power supply. Such a power supply storage unit may be useful in the case of a vehicle blackout in that it can continue to provide electricity for the vehicle. The main switch(es) can be switched off if a vehicle blackout occurs.

The component can form a communication interface, computer unit, voltage transformer, processor, electronic sensor, actuator and/or power distributer. These form the typical components used for carrying out vehicle functions.

A method for operating a control device in the form of one of the variations described above has a providing step and an activating step. The control device is provided in the providing step. The power supply connection is subjected to the power supply in the activating step, such that the control device is placed in operation.

This method can be implemented in a control device, for example, by software or hardware, or a mixture thereof.

A computer program is also advantageous, which contains program code that can be stored on a machine-readable medium such as a semiconductor memory, hard disk, or an optical disc, and is used to carry out the method according to any of the embodiments described above when the program is executed on a computer or a device.

The same or similar reference symbols are used in the following description of preferred exemplary embodiments of the present invention for the elements shown in the various figures having similar functions, whereas the descriptions of these elements shall not be repeated.

FIG.1shows a schematic illustration of a vehicle100that has a control device105for controlling a vehicle function in the vehicle100according to an exemplary embodiment.

The control device105has at least one electronic or electrical component110, at least one main switch115, and one component switch120. The component110is designed to carry out the vehicle function. The main switch115is connected by a power line125between the component110and a power supply connection130through which power is supplied to the component110. The component switch120is located between the component110and the main switch115and is designed to connect the component110to the power line125.

Merely by way of example, the control device105according to this exemplary embodiment is accommodated on or in the vehicle100. The vehicle100is designed as a highly or fully automated vehicle100in this exemplary embodiment, intended for transporting people and/or goods. The vehicle function comprises a driving function for the highly or fully automated operation, or an arbitrary vehicle component in the vehicle100, for example. The component110is part of a module135comprising numerous electronic or electrical components110in this exemplary embodiment, and the module135is designed to carry out the vehicle function. The control device105according such an exemplary embodiment comprises this entire module135. These components110,115,125and/or130in the control device105are located in this exemplary embodiment on the same printed circuit board145and/or in the same housing.

The control device105in this exemplary embodiment also contains at least one second electronic or electrical component150for carrying out a second vehicle function in the vehicle100, and a second component switch155located between the second component150and the main switch115, with which the second component150is connected to the power line125.

The second vehicle function differs from the first vehicle function in this exemplary embodiment. The first electronic or electrical component110and the second electronic or electrical component110are connected in parallel to the main switch in this exemplary embodiment. Furthermore, the control device105in this exemplary embodiment has at least one third electronic or electrical component160for carrying out a third vehicle function, and a third component switch165located between the third component and the main switch, which connects the third component160to the power line125. The third vehicle function differs from the first vehicle function and the second vehicle function in this exemplary embodiment. The control device105also has an arbitrary number of additional electronic or electrical components Bn according to one exemplary embodiment, each of which carries out a different vehicle function in the vehicle100and has a respective dedicated component switch Sn, each of which are located between the additional component Bn and the main switch115, for connecting the additional components Bn to the power line125. The second component150, third component160, and/or the additional components Bn can also each be part of an individual module composed of numerous second components150, third components160, and/or additional components Bn. The modules can differ from one another.

According to this exemplary embodiment, the control device105also has a second main switch170, which is connected by a second power line175to the component110and a second power supply connection180for a second power supply, and/or a second component switch185between the component110and the second main switch170, which connects the component110to the second power line175.

The first power line125and the second power line175are galvanically separated from one another in this exemplary embodiment. The first power line125provides the first power supply in this exemplary embodiment, and the second power line175provides the second power supply, wherein the first power supply and second power supply can have either the same or different voltages. By way of example, the first power supply connection130is connected to a power source in this exemplary embodiment that provides electricity at 12 volts, and/or the second power supply connection180is connected to another power supply that provides electricity at 48 volts. The second component150, third component160, and/or additional components Bn also each have a second component switch185in this exemplary embodiment, which connects the second component, third component160and/or additional components Bn to the second power line175.

The control unit105also has a supply voltage transformer187in this embodiment, which is connected by another power line190between the second main switch170or the first main switch115and an additional component switch192for the component110, wherein the supply voltage transformer187is designed to transform the second power supply or the first power supply. According to one exemplary embodiment, the supply voltage transformer187is designed to reduce and/or boost the second power supply voltage or the first power supply voltage, respectively. The control device105can also contain one or more of these supply voltage transformers187according to one exemplary embodiment, which is/are connected via one or more additional power lines between the first main switch115or second main switch170and the respective dedicated component switches for the second component150, third component160, and/or additional components Bn.

The control device105also has a monitoring device in one exemplary embodiment, which is designed to detect an error in the component110and/or switch the first component switch120and/or the second component switch185of the component110and/or the additional component switch192of the component110on and/or off if an error is detected in the component110. The monitoring device in this exemplary embodiment is also designed to detect an error in the second component150, third component160, and/or additional components Bn, and/or switch the respective dedicated, or all respective dedicated component switches155,165,185, Sn for the second component150, third component160, and/or additional components Bn on and/or off, if an error is detected in the second component150, third component160, and/or additional components Bn. The control device105in this exemplary embodiment also has another monitoring device designed to detect an error in the control device105and/or switch the first main switch115and/or second main switch170on and/or off if an error is detected in the control device105. According one exemplary embodiment, the control device105has at least one power supply storage unit, e.g. a supercapacitor and/or buffer battery, designed to provide an additional power supply for the component110, or all of the components110,150,160, Bn.

The first component110, second component150, third component160, and/or additional components Bn in this exemplary embodiment form a communication interface, computer unit, voltage transformer, processor, electronic sensor, actuator, and/or power distributer. The first component110, second component150, third component160, and/or additional components Bn are each connected in this exemplary embodiment to a ground connection195.

In the highly integrated control device105presented herein, it is advantageously possible to provide a power supply in which diverse vehicle functions can be integrated. Despite the numerous functions in the vehicle100, advantageously only one control device105is needed in the vehicle100for the large variety of functions. Most of the control devices that are used cannot be upgraded and are designed to carry out the same functions over the entire course of the vehicle's lifetime. Software updates can be carried out to a limited extent “over the air,” or in garages. There are normally no hardware updates. The devices that are used are state of the art at the time that the vehicle is created, and normally have few reserves for reducing costs. It is also necessary with autonomous vehicles to ensure, on the basis of the SAE levels (classification levels for automation levels), that the vehicle will continue to function in the event of an error, e.g. in the power supply (i.e. remain fail-operational). The control device105presented herein enables all of this.

The components110,150,160, Bn in the form of hardware components or functions are integrated in the control device105presented herein and adapted with regard to their size and shape for the application in question, and combined in the manner of building blocks. With this modular printed circuit board construction, numerous different models can be advantageously integrated in a central platform. The layout for the printed circuit boards is optimized by combining specific functions and groups thereof in appropriate regions. This also reduces interferences caused by thermal discharge, short circuits, or overheating.

The first main switch115on the first power supply connection130for the first power supply and/or the second main switch170on the second power supply connection for the second power supply are/is used to switch the entire path to all components110,150,160Bn or their modules on and off in the case of an error, e.g. due to a short circuit, overload, overheating, and/or malfunction. These errors are either detected at the switches through measurements of the current or voltage, or by the monitoring device in the respective module. The monitoring in one embodiment can also take place via a separate upstream or downstream module. Optionally, the supply voltage, or another, second, external supply voltage can be used to continue supplying power to the modules when there is problem in the power supply. If there is a problem in the power supply, the switch is switched off in one exemplary embodiment via the main switch115, e.g. via a semiconductor element, to prevent feedback. If an error occurs in a module containing components110such as a standardized processor for external sensor signals, actuator control, power distributer and/or power supply, the first power supply and/or second power supply are switched on or off according to one exemplary embodiment via the component switch Sn,120,155,165,185,192. As a result, the malfunctioning modules are isolated from all of the other modules, and a hard reset is carried out according to one exemplary embodiment. A reliable state is obtained according to one exemplary embodiment by switching the power supply off. Energy is saved according to one exemplary embodiment by targeted switching off consumers that are not necessary. Furthermore, the first supply voltage and second supply voltage can be the same, e.g. 12 volt or 48 volt, or they can be different, e.g. 12 V and 48 V, or 12 V and high voltage serving as the main power supply. High voltage is regarded as voltages between 60 V and 1.5 kV in DC voltage. Different voltages can also be used for the actuators with different nominal voltages, i.e. in the third power line190. If the second power supply is 48 V and the first power supply is 12 V, as is the case in one exemplary embodiment, then the 48 V can be transformed to 12 V using the supply voltage transformer187in the form of a DC/DC transformer. By providing an uninterrupted power supply, availability is significantly increased in the control device105, which can also be referred to as the “ECU.” Optionally, supercapacitors or buffer batteries can temporarily ensure continued functioning in the case of a vehicle blackout. In this case, the main switch(es)115,170are switched off.

The main features of the control device105presented herein are summarized as: the power supply with the main switch115and individual component switches120,155,165, Sn in the form of switches on modules (without redundancy). Optionally, there can also be the second power supply with the second main switch170and the second and/or third component switches185,192in the form of individual switches on components (with redundancy). Optionally, there are different voltage levels for the power supply and the second power supply, with the possibility of an internal variation in the voltage.

Furthermore, the second monitoring device can be designed to detect an error in the control device105and/or switch the second main switch170on and/or off, if an error has been detected in the control device105. The second monitoring device is also designed in one exemplary embodiment to detect an error in the power supply connection130and to switch the main switch115off if an error has been detected at the power supply connection130. In another exemplary embodiment, the second monitoring device is also designed to detect an error at the power supply connection180and to switch the second main switch170off if an error has been detected at the power supply connection180. According to another exemplary embodiment, the second monitoring device is also designed to detect an error at the power supply connection130and to switch the main switch115off if an error has been detected at the power supply connection130. In this case, by switching the second main switch170on at the same time, the power supply can continue to be provided without interruption via the second power supply connection180.

It is also conceivable that the second monitoring device is designed to detect an error at the power supply connection180, and to switch the second main switch170off if an error has been detected at this power supply connection180, while the power supply can continue to be provided without interruption via the first power supply connection130by switching the first main switch115on at the same time.

In another exemplary embodiment, the first monitoring device or the second monitoring device is designed to keep both main switches switched on or to switch them on, and if an error occurs at the power supply connection130, the main switch115is then switched off. If an error is detected at the second power supply connection180, the second main switch170can be switched off by the first monitoring unit or the second monitoring unit. This results in higher availability through the implementation of an uninterrupted power supply. Furthermore, another exemplary embodiment of the approach presented herein is beneficial, specifically for a situation in which both main switches115and170are switched on, because a lot of power is needed, for example. If an error is then detected at the power supply connection130, the main switch115is then switched off, for example, and the modules are shut off via the second component switches185, i.e. these switches185are switched off, in accordance with a priority list, so that a second power line serving as the power line175is not overloaded.

For another situation, an exemplary embodiment of the approach presented herein is also advantageous in which the two main switches115and170are switched on, because a lot of power is needed. If an error is detected at the second power supply connection180, the second main switch170is then switched off, and the modules are shut off via the component switches120,155,165Sn, i.e. these component switches120,155,165Sn are switched off, so that a power line125serving as the power line is not overloaded.

FIG.2shows a flow chart for a method200for operating a control device according to an exemplary embodiment. This can be the control device described in reference toFIG.1.

The method200has a providing step205and an activating step210. In the providing step205, the control device is provided. In the activating step210, the power supply connection is subjected to the power supply to operate the control device.

The exemplary embodiments described herein and shown in the drawings are selected merely by way of example. Different exemplary embodiments can be combined with one another in their entirety or with regard to individual features. One exemplary embodiment can also be supplemented by features from another exemplary embodiment.

Furthermore, the steps of the method presented herein can be repeated, as well as carried out in a sequence other than that described herein.

If an exemplary embodiment comprises an “and/or” conjunction between a first feature and a second feature, this is to be read to mean that the exemplary embodiment according to one embodiment contains both the first feature and the second feature, and in another embodiment, contains either just the first feature or just the second feature.

LIST OF REFERENCE SYMBOLS