CONTROL APPARATUS FOR PASSENGER RESTRAINING SAFETY DEVICES

Abstract: A restraint system enabling a side air bag to be inflated even if communication between a collision detection device (1) and a restraining device control circuit (2) is broken. The collision detection device (1) repeatedly sends a normal condition signal, having a predetermined high rate period, through a communication line (3) to the restraining device control circuit (2) while a vehicle is travelling normally. If a lateral collision occurs, the collision detection device (1) sends an arithmetic operation start signal through the communication line (3) to the restraining device control circuit (2), and if a magnitude of impact is equivalent to, or larger than a predetermined magnitude, the collision detection device (2) sends a restraining start signal through the communication line (3) to the restraining device control circuit (2) which then directs a passenger restraining device (4) to operate to protect a passenger. When a collision occurs and the collision detection circuit has already sent the arithmetic operation start signal through the communication line to the restraining device control circuit, if the vehicle is seriously damaged by the collision and the communication line is broken, the restraining device control circuit does not receive a signal, or receives a defective signal after receiving the arithmetic operation start signal. Despite the control circuit receiving either no signal or a defective signal, the restraining device control circuit (2) operates under condition that a collision has occurred, driving the passenger restraining device (4) to operate.

Description: DESCRIPTION CONTROL APPARATUS FOR PASSENGER RESTRAINING SAFETY DEVICES FIELD OF THE INVENTION The present invention relates to a control apparatus for operational control of passenger restraining safety devices such as side air bags. BACKGROUND OF THE INVENTION A conventional control apparatus for operating a side air bag of a passenger restraining safety device for a vehicle in order to protect a passenger against a lateral collision of the vehicle comprises satellite collision detecting circuits including collision sensors, e.g., acceleration sensors, mounted on parts, or at positions that will confront and most accurately detect a lateral collision, and a controller mounted on a part, or at a position most likely to be unaffected by a collision of the vehicle, such as a center floor tunnel of an automobile. The satellite collision detecting circuits and the controller are interconnected by communication lines so that a satellite collision detecting circuit which has detected a collision exceeding a predetermined magnitude causes the side air bag at the corresponding side to operate. For such conventional control apparatus for a passenger restraining safety device, those parts, or positions, on or at which the satellite collision detecting circuits are mounted, are selected so that the impact of a collision will be detected with good accuracy, and the collision sensors will be subjected to the greatest force and damage upon occurrence of a lateral collision. In addition, the layout of the communication lines needed for interconnecting the satellite collision detecting circuits and the controller must be carefully designed so that a collision will not cause disconnection of the communication lines. Validation that there is no disconnection of the communication lines from a collision is established via testing, i.e., repeatedly running vehicle collisions and inspecting the crushed vehicle bodies to determine if there is disconnection of the communication lines. Therefore, development of such conventional control apparatus for passenger restraining safety devices requires large-scaled experiment facilities as well as a great amount of time and labor for testing in order to provide the required verification that there is no disconnection of the communication lines as a result of the collision. These factors are the principal reasons as to the high cost of such conventional control apparatus for passenger restraining safety devices. Furthermore, because of design rules imposed on the layout of communication lines, there is little flexibility in the layout design, which also increases cost. SUMMARY OF THE INVENTION To address such problems of the conventional control apparatus for passenger restraining safety devices, the present invention provides a control apparatus for passenger restraining safety devices which effects secure operation of the passenger restraining safety device to keep a passenger safe even if there is a disconnection of a communication line as a result of a collision. The control apparatus for passenger restraining safety devices includes a collision detection circuit disposed on a part, or at a position that will confront and accurately detect a lateral collision of a vehicle, a restraining device controller disposed on another part, or at another position of the vehicle, and a passenger restraining device operatively controlled by the restraining device controller. The collision detection circuit and the restraining device controller are interconnected by a communication line, wherein the collision detection circuit outputs a normal condition signal with a predetermined period when no collision is detected, an arithmetic operation start signal with a predetermined period when a collision is first detected, and a restraining start signal with a predetermined period when the detected collision exceeds a predetermined magnitude. The restraining device controller provides an operation command to the passenger restraining device when the restraining start signal is received and also when a defective communication develops after reception of the arithmetic operation start signal. In the control device for passenger restraining safety devices, while a vehicle is traveling normally, the collision detection circuit repeatedly sends the normal condition signal, having a predetermined high rate period, via the communication line to the restraining device controller. When a lateral collision occurs which exceeds a minimum magnitude, the collision detection circuit sends the arithmetic operation start signal via the communication line to the restraining device controller, and when an integral value corresponding to the magnitude of the collision becomes equal to, or larger than a predetermined magnitude, greater than the minimum magnitude, sends the restraining start signal via the communication line to the restraining device controller, and the restraining device controller directs the passenger restraining device to operate to protect a passenger. Where a collision has occurred, the arithmetic operation start signal is sent from the collision detection circuit via the communication line to the restraining device controller before significant damage to the vehicle occurs. Subsequently, if the vehicle is so seriously damaged from the collision that a disconnection of the communication line results, since the restraining device controller has received the arithmetic operation start signal and has failed to receive a subsequent signal, or receives a defective signal, the restraining device controller operates under condition that a collision has occurred and directs the passenger restraining device to operate to protect a passenger. BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a functional block diagram of an embodiment of the invention. FIG. 2 is a detailed function block diagram of the embodiment of the invention. FIG. 3 is a processing flowchart of an operation of a restraining device controller. DETAILED DESCRIPTION OF THE DRAWINGS The invention will be described in detail with reference to the accompanying drawings. FIG. 1 illustrates an arrangement of an air bag control apparatus in an automobile 5 including satellite collision detecting circuits 1 for detecting a lateral collision at either the left or right side of the vehicle, a controller 2 comprised of a microcomputer and responsible for determining that an air bag is to be inflated in accordance with a signal from any of the satellite collision detecting circuits 1, a communication line 3 connecting satellite collision detecting circuits 1 with controller 2, and left and right side air bags 4 operatively controlled to be inflated by the controller 2. The controller 2 in FIG. 1 is positioned at a location which will likely be unaffected by a collision such as the center floor tunnel of the automobile 5. As shown in FIG. 2, the left and right satellite collision detecting circuits 1 each comprise an acceleration sensor la, an impact magnitude decision section lb comprised of a microcomputer and responsible for outputting three kinds of signals (to be described later) in accordance with the signal output by the acceleration sensor la, and a signal sending section lc for sending, via the communication line 3, a predetermined type of signal having a predetermined high rate period, to the controller 2 in accordance with the kind of signal output from the impact magnitude decision section lb. The acceleration sensor la responds to a lateral collision of the automobile and outputs an acceleration signal corresponding to the magnitude of impact due to the collision. The impact magnitude decision section lb receives the acceleration signal from the acceleration sensor la and decides i) there is no collision when the signal from the acceleration sensor la does not exceed the minimum magnitude for every predetermined period, e.g., 1 ms, ii) to start an arithmetic operation when the acceleration signal from acceleration sensor la exceeds the minimum magnitude, or iii) that a collision has occurred and an air bag is to be inflated when an integral value of the signal from acceleration sensor la exceeds the predetermined magnitude, greater than the minimum magnitude, within a certain time interval, and provides the signal sending section lc an output command of a normal signal, an arithmetic operation start signal or a restraining start signal in correspondence with the respective decision. The signal sending section lc is responsive to the output command from the impact magnitude decision section lb to send to the controller 2, via the communication line 3, a signal having a code length of a plurality of bits, e.g., 4-bits, corresponding to the output command, e.g., '0101' for the normal condition signal, '1000' for the arithmetic operation start signal, and '1111' for the restraining start signal. The controller 2 receives the signal from each of the satellite collision detecting circuits 1 and responds to a content thereof to control the side air bag 4 to be inflated as a restraining device when needed. Controller 2 checks the receiving state of the signal sent from each of the satellite collision detecting circuits 1 and the content of the received signal, and does not start inflating the air bag when the normal condition signal '0101' is received, but drives the side airbag 4 to be inflated at a corresponding side when the restraining start signal '1111' is received after receipt of the arithmetic operation start signal '1000'. Also, if a communication failure or a defective communication occurs following reception of the arithmetic operation start signal '1000', controller 2 controls the side air bag 4 to be driven to inflation at a corresponding side. Described below are actions of the controller for controlling operation of passenger restraining safety devices with references to a flowchart of FIG. 3 in which a processing is periodically cycled at a high rate of processing intervals, e.g., 1ms. (For No Collision) The controller 2 receives communication signals S (t) from the left and right satellite collision detecting circuits 1 and stores the signals in registers (step SI) before deciding whether or not the communication signals from the satellite collision detecting circuits have been successfully received (step S2). If the communication signal is successfully received, the flow goes to a step S4 (step S2). When the received signal is the normal condition signal '1010' (there is no collision), at step S4 the decision is that the received signal is not the arithmetic operation start signal '1000' and the flow branches to a NO where, in turn, an arithmetic operation-on flag CF is cleared to "0", i.e., CF=0 (step S5). Also, at a subsequent step S6, the decision is that the received signal is not the restraining start signal '1111' (the normal condition signal '1010' having been received) and the flow branches to a NO to return. Accordingly, when there is no collision, the side air bags 4, as restraining devices, are not driven to inflation. (Upon Collision, With No Disconnection In Communication Lines) If a collision, greater than the minimum magnitude, occurs at either the left or right side of the vehicle, the respective acceleration sensor la detects such condition and the arithmetic operation start signal '1000' is transmitted to the controller 2 via impact magnitude decision section lb, signal sending section lc and the communication line 3. The arithmetic operation start signal '1000' is received and stored in a register (step SI) before deciding whether or not the communication signal from the satellite collision detecting circuit has been successfully received (step S2). As the communication signal in a current processing cycle has been successfully received, the decision at step S2 is YES and the flow branches to step S4. At step S4, with a decision that the received signal is the arithmetic operation start signal '1000', the flow branches to a YES, and the arithmetic operation-on flag CF is set to "1", i.e., CF=1 (step S8), before a return. In a subsequent processing cycle, the integral value of the signal from the acceleration sensor la, corresponding to the magnitude of the collision, will have increased to be in excess of the predetermined magnitude, greater than the minimum magnitude, so that there is a decision that the collision is significant, necessitating an air bag inflation. Consequently, the restraining start signal '1111' is sent from impact magnitude decision section lb. As the communication line 3 is not broken, the restraining start signal '1111' is received and stored in a register (step SI), and the flow proceeds to step S2 where, as the reception of the restraining start signal '1111' has been successful, the flow branches to a YES to go to step S4. As the received signal is the restraining start signal '1111', at step S4, the flow branches to a NO where the arithmetic operation-on flag CF is cleared to "0"; i.e., CF=0 (step S5), and at step S6, the flow branches to a YES for driving the side air bag 4 to be inflated as a restraining device (step S7). (Upon Collision, With Disconnection of Communication Line) In the case that a collision occurs at either the left or right side of the vehicle and the magnitude of the collision is so large as to cause serious damage and to break communication line 3, the side air bag 4 at the corresponding side is driven to be inflated in the below described manner. Until just before the occurrence of the collision exceeding the minimum magnitude, the controller 2 has been cycling processes for no collision where the arithmetic operation-on flag CF is set to "0", i.e., CF=0. At an instance just after the collision where the vehicle is in an initial phase of becoming damaged, the arithmetic operation start signal '1000' is transmitted from the corresponding satellite collision detecting circuit 1 through the communication line 3 and the flow branches to the YES at step S4 where the arithmetic operation-on flag CF is set to "1", i.e., CF=1. Then, the vehicle becomes seriously damaged by the collision and the magnitude of the collision is so large as to cause a disconnection in communication line 3, resulting in a failure to receive a signal from the corresponding satellite collision detecting circuit 1. Consequently, the flow in the subsequent processing cycle branches to NO at step S2 because of the failure to successfully receive the signal from the satellite collision detecting circuit 1. As the arithmetic operation-on flag CF has been set to "1" in the previous cycle, i.e., CF=1, the flow branches to NO under the decision at step S3 in the subsequent processing cycle and directly goes to step S7 where the side air bag 4 is driven to be inflated as a restraining device. As described, in the control apparatus for passenger restraining devices according to the embodiment, the controller 2 supervises signals sent from satellite collision detecting circuits 1 and drives a corresponding side air bag 4 to be inflated not only with reception, in order, of a normal signal — * • an arithmetic operation start signal — * ■ a restraining start signal, but also if reception of the arithmetic operation start signal is followed by a failure to receive a signal, or receipt of a defective signal (faulty communication) without reception of normal signal. This effects a secured operation of a restraining device to restrain a passenger for protection even when a serious lateral collision occurs and the communication line 3 is disconnected. The invention is not limited to the embodiment described and each satellite collision detecting circuit provided on a part, or at a position to confront and detect a lateral collision of a vehicle, may be implemented as an impact detection method using an arbitrary one of a variety of conventionally employed algorithms. Moreover, the sensors for detecting a magnitude of a collision are not limited to acceleration sensors, as disclosed in the present embodiment, but may be any other sensors, which provide a signal corresponding to the magnitude of a collision. Further, a side air bag has been illustratively described as the object to be driven for a restraining by the controller 2. However, a pre-tensional seat belt, or knee protector which operates to tightly fasten in response to the restraining start signal may be substituted for, or concurrently employed with the side air bag as the restraining device. The many features and advantages of the invention are apparent from the detailed specification, and thus, it is intended by the appended claims to cover all such features and advantages of the invention which fall within the true spirit and scope of the invention. Since numerous modifications and variations will readily occur to those skilled in the art, it is not desired to limit the invention to the exact construction and operation illustrated and described, and accordingly, all suitable modifications and equivalents may be resorted to, falling within the scope of the invention.

Claims: CLAIMS 1. An occupant restraint system, comprising: a collision detecting device positioned at a portion of a vehicle for detecting a collision of the vehicle, the portion of the vehicle being deformed by the collision of the vehicle; a restraining device for restraining the occupant in the vehicle when the collision is detected; and a controller connected with the collision detecting device by a communication device providing signals between the collision detecting device and the controller, the controller activating the restraining device after receiving a signal from the collision detecting device indicating that the collision is detected and subsequent communication through the communication device malfunctions. 2. The occupant restraint system according to claim 1, wherein the controller monitors the signals carried by the communication device and determines whether or not the communication device functions normally or malfunctions according to the monitored signals. 3. The occupant restraint system according to claim 1, wherein the signals provided to the controller from the collision detecting device via the communication device include a first signal when no collision exceeding a minimum magnitude is detected, a second signal when a collision exceeding the minimum magnitude is detected, and a third signal when the magnitude of the collision exceeds a predetermined magnitude, greater than the minimum magnitude; and the controller activates the restraining device when the third signal is received 4. The occupant restraint system according to claim 1, wherein the collision detecting device includes a sensor for sensing a magnitude of the collision, and the collision-detecting device provides a first signal to the controller when a magnitude of the collision is larger than a minimum magnitude, said first signal indicating an arithmetic operation for a signal from the sensor. 5. The occupant restraint system according to claim 3, wherein the controller activates the restraining device also when no signal, or defective signal is received from the collision detecting device after receiving the second signal. 6. The occupant restraint system according to claim 4, wherein the collision detecting device provides a second signal to the controller when a result of said arithmetic operation is that the magnitude of the collision is larger than a predetermined magnitude, greater than the minimum magnitude, and the controller activates the restraint device in response to receipt of the second signal. 7. The occupant restraint system according to claim 4, wherein the sensor comprises an acceleration sensor, said acceleration sensor outputting an acceleration signal corresponding to the magnitude of the collision, and the collision-detecting device includes an impact magnitude decision device for deciding whether the acceleration signal corresponding to the magnitude of the collision is greater than the minimum magnitude. 8. The occupant restraint system according to claim 6, wherein the sensor comprises an acceleration sensor outputting an acceleration signal corresponding to the magnitude of the collision, and the arithmetic operation includes integrating the acceleration signal and outputting the second signal when the integral value of the acceleration signal is greater than the predetermined magnitude. 9. The occupant restraint system according to claim 4, wherein the collision detecting device constantly provides a normal condition signal in a predetermined period when the magnitude of the collision is smaller than the minimum magnitude, and the controller determines there is no collision and no communication malfunction when the normal condition signal is received. 10. The occupant restraint system according to claim 1, wherein the sensor is positioned in a side part of the vehicle. 11. The occupant restraint system according to claim 10, wherein the sensor is positioned in a side door of the vehicle. 12. The occupant restraint system according to claim 1, wherein the restraint device comprises an air bag. 13. The occupant restraint system according to claim 12, wherein the air bag is positioned in the door of the vehicle. 14. The occupant restraint system according to claim 1, wherein the restraint system comprises tensing a seat belt when a collision occurs on the vehicle. 15. The occupant restraint system according to claim 1, wherein the restraint device is positioned on a knee protector. 16. The occupant restraint system according to claim 1, wherein the controller is positioned in a portion of the vehicle which is protected from being deformed by the collision. 17. A method of operating an occupant restraint system comprising the steps of: continually sensing an impact resulting from a collision and outputting to a controller controlling operation of a restraint device i) a first signal when a magnitude of the sensed collision does not exceed a minimum magnitude, ii) a second signal when the magnitude of the sensed collision exceeds the minimum magnitude; and iii) a third signal when the magnitude of the sensed collision exceeds a predetermined magnitude, greater than the minimum magnitude, after outputting the second signal; and activating the restraint device when the controller receives the third signal, and when the controller receives no signal, or a defective signal after receiving the second signal. 18. The method according to claim 17, further comprising the steps of: integrating a signal corresponding to the sensed impact from the collision when the second signal is output to the controller; and outputting the third signal when the integrated value of the signal corresponding to the sensed impact from the collision exceeds the predetermined magnitude.

Inventors: KIMURA MAKOTO, KIMURA, MAKOTO
Applicants: KIMURA MAKOTO, NISSAN MOTOR, KIMURA, MAKOTO, NISSAN MOTOR CO., LTD.
Application year: 1998
Main classification: B60R21
IPC codes: B60R21