# Patent

## Title
Method of triggering a vehicle occupant restraining device

## Abstract

In a method of triggering a vehicle occupant restraining device, at least one sensor signal generated by a crash sensor is supplied to an analyzing device, which determines the crash severity, and a time for the triggering of the restraining device based on the crash severity. When a first low crash severity occurs, a timer is started and the restraining device is triggered by the analyzing unit only when a higher crash severity is reached during the running time of the timer.

## Background
BACKGROUND AND SUMMARY OF THE INVENTION
This application claims the priority of German patent document 101 47 732, filed 27 Sep. 2001, the disclosure of which is expressly incorporated by reference herein.
The invention relates to a method of triggering a vehicle occupant restraining device.
In a method of this generic type disclosed in U.S. Pat. No. 5,999,871, the severity of the crash is determined by means of an acceleration signal which is supplied by an acceleration sensor. If this acceleration signal reaches a defined threshold value, it is deemed to reach the decisive severity of a crash. The restraining device—here, a first stage of an air bag—is triggered immediately. In this triggering algorithm, it is difficult to distinguish between an actual crash, and extreme stress to the vehicle, which occurs for example, during a fast drive along a gravel and pothole covered route. Accelerations occur in the latter case which are comparable to those of an actual crash. In order not to trigger the restraining device during such a drive, the decisive threshold value is increased in the factory. As a result, in the event of a crash, the restraining device may not be triggered or at least may not be triggered in time.
An additional fact is the lack of conformity of the response behavior of the sensor in the case of different vehicles of the same manufacturer and of the same type. It was found that the stability of macroscopically identical vehicles may differ. Since the method of operation of an acceleration sensor depends on its stability, the triggering of the restraining device differs while it is naturally assumed that the crash is identical in the case of vehicles of the same construction.
It is an object of the invention to provide a method of the initially mentioned type which achieves a constant and reproducible triggering point in time for the restraining device.
This and other objects and advantages are achieved by the method according to the invention wherein a timer is started when a first low crash severity occurs. In this case, it will not be necessary to differentiate between the above-mentioned very stressful drive and a crash, so that it is permissible for the timer to be triggered during such a drive. The crash event will be clearly recognized only by an additional triggering condition, in the form of the occurrence of a higher crash severity.
The triggering time for the restraining device is again determined by the timer. The restraining device will be triggered at the end of the running time of the timer if the higher severity of the crash has occurred during this running time. As an alternative, if the higher crash severity does not occur before the end of the running time, triggering takes place thereafter, as soon as a higher crash severity does occur, provided only that the timer has not yet been reset. Such resetting takes place as soon as the analyzing unit has clearly recognized that no crash is occurring, for example, by means of a “0” value of the acceleration sensor signal. As an alternative, deactivation can take place based on an independent criterion, such as the resetting of the alarm by means of a Saving sensor.
With such an arrangement, it is possible to immediately trigger one or more restraining devices during the running time of the timer if a still higher crash severity is reached during this time. While the one such restraining device may be, for example an active knee guard, another, which will be triggered immediately when a crash of a particularly high severity occurs, may be, for example an air bag.
According to one embodiment of the invention, triggering of the restraining device takes place under the conditions

    
    
        “counter reading=0” and
        “occurrence of a higher crash severity”.
    
    


In this case, it is not important which of the two conditions occurs first. The ignition circuit will only be triggered when both conditions have been met. If no ignition takes place, the timer will be deactivated again.
Other objects, advantages and novel features of the present invention will become apparent from the following detailed description of the invention when considered in conjunction with the accompanying drawings.



BRIEF DESCRIPTION OF THE DRAWINGS
FIGS. 1-3 are time lines which illustrate the operation of the triggering method according to the invention in different circumstances.



DETAILED DESCRIPTION OF THE INVENTION
In FIG. 1, a crash severity (“CS”) whose value CS2 is above a value of CS1 that occurs in the normal driving operation, results in the start of a timer (not shown) at time t1. During a running time of, for example, 10 ms, the timer counts down from its initial value. However, before the end (t3) of this running time (that is, before the count reaches zero at time t3), a second condition (a higher crash severity CS3) occurs (time t2) for the triggering of the restraining device. The ignition circuit (not shown) for the restraining device is ignited (“fire”) thereafter, at the end of the running time of the timer.
In FIG. 2, CS2 results, once again, in the start of the timer at time t1. The running time ends at time t3, and the timer remains at 0 ms waiting time. Thereafter, at time t4, the second condition occurs in the form of the higher crash severity CS3. The ignition circuit is triggered immediately at time t4 (“fired”) because the timer has already run out.
Finally, in FIG. 3, CS2 results in the start of the timer (t1), which counts down to zero (t3). Thereafter, the timer is deactivated upon occurrence of a reset criterion. The ignition circuit is not triggered. If the crash severity CS2 recurs subsequently, the sequence is repeated according to FIG. 1, 2 or 3, as applicable.
As a result of the expanded functionality of the timer, the ignition points in time become significantly more constant. The crash severity CS2 is recognized early and in a reproducible manner, so that, when the same event is repeated with the same vehicle, CS2 is also recognized at the same point in time.
The point in time when the crash severity CS3 occurs on the other hand is more variable. (The crash severities are precisely defined such that CS2 will be very reproducible, but that CS3 should be recognized as early as possible.) With the timer operation being commenced in response to CS2, when CS3 is recognized before the time runs out, a constant ignition point in time is achieved, even if the times when CS3 is recognized fluctuate. A triggering at CS2 is not desirable because the latter may be recognized even in the case of low-energy accidents in which ignition circuit is not necessary.
In summary, to trigger the ignition circuit, both the expiration of the time period counted by the timer and a triggering demand are required. As shown in FIGS. 1 and 2 ignition takes place when the second of these two events occurs. In the case of FIG. 3, only the timer is started, and no ignition takes place.
The foregoing disclosure has been set forth merely to illustrate the invention and is not intended to be limiting. Since modifications of the disclosed embodiments incorporating the spirit and substance of the invention may occur to persons skilled in the art, the invention should be construed to include everything within the scope of the appended claims and equivalents thereof.

## Claims

1. A method of triggering a vehicle occupant restraining device, in which a crash sensor supplies at least one sensor signal to an analyzing device, which determines from the sensor signal a crash severity and a time for triggering of the restraining device, wherein:
when said analyzing device determines that a first crash severity occurs, a timer having a set running time is started; and 
when said analyzing device determines that a second crash severity greater than said first crash severity occurs at a point in time which is during the running time of the timer, the restraining device is triggered by the analyzing unit only upon expiration of said running time.

2. The method according to claim 1, wherein:
when a second crash severity greater than said first crash severity occurs after a running time of the timer has expired, the restraining device is triggered by the analyzing unit upon occurrence of said higher crash severity.

3. The method according to claim 1, wherein the restraining device is triggered by the analyzing unit at the end of a triggering time defined by the timer.

4. The method according to claim 1, wherein:
when defined conditions occur, the timer can be reset; and 
after its running time and when the higher crash severity is reached, the timer triggers the restraining device as long as the timer has not yet been reset.

5. The method according to claim 2, wherein:
when defined conditions occur, the timer can be reset; and 
after its running time and when the higher crash severity is reached, the timer triggers the restraining device as long as the timer has not yet been reset.

6. A method for triggering a vehicle safety device, comprising:
an analyzing device determining occurrence of a crash and a severity thereof; 
upon said analyzing device determining occurrence of a low severity crash, starting timing of a fixed time period; and 
thereafter, triggering said vehicle safety device immediately upon the later of 
expiration of the fixed time period; and 
said analyzing device determining occurrence of a high severity crash at a point in time prior to a resetting of timing of the fixed time period.

7. The method according to claim 6, wherein resetting of the timing occurs upon fulfillment of conditions confirming that no crash has occurred.

8. A method for triggering a vehicle safety device, comprising:
a crash sensor generating a sensor signal that is indicative of a dynamic parameter associated with a crash; 
an analyzing device determining whether said sensor signal exceeds a first, relatively lower, threshold value; 
in response to said sensor signal exceeding said first threshold value, starting a timer having a set running time; 
subsequent to said sensor signal exceeding said first threshold value, said analyzing device detecting whether said sensor signal becomes greater than a second, relatively higher, threshold value; 
when said analyzing device determines that said sensor signal becomes greater than said second threshold value at a point in time which is during said set running time, triggering said safety device upon expiration of said set running time; and 
when said analyzing device determines that said sensor signal becomes greater than said second threshold value at a point in time which is after expiration of said set running time, triggering said safety device at said point in time when said sensor signal becomes greater than said second threshold value.

9. A method of triggering a vehicle safety device, comprising:
generating a sensor signal that is indicative of a dynamic parameter associated with a crash; 
starting a timer having a set running time in response to detection that said sensor signal exceeds a first threshold value; 
an analyzing device generating a triggering demand at a point in time at which it is detected that said sensor signal becomes greater than a second threshold value; 
when said point in time occurs during said set running time, triggering said safety device upon expiration of said set running time; 
when said point in time occurs after expiration of said set running time, triggering said safety device at said point in time.