Abstract:
A system for determining a setpoint associated with a position of a pedal in an automobile of type that includes two sensors each measuring a value associated with the pedal position. The system includes a mechanism capable of switching between a first and second state on a predetermined switching position of the pedal, and a mechanism generating the setpoint on the basis of the measures from the two sensors and of a current state of the switching mechanism. The generation mechanism is capable of selecting the measure corresponding to the smallest of the pedal positions when the switching mechanism is in the first state, and selecting the measure corresponding to the largest of the pedal positions when the switching mechanism is in the second state.

Description:
FIELD OF THE INVENTION 
       [0001]    The present invention deals with the field of setpoint generation in an automobile with electronic control. 
         [0002]    More particularly, the present invention relates to the generation of a braking setpoint based on a pedal actuated by a driver, said pedal being decoupled from the brakes themselves. Such a decoupling is better known by the expression “brake-by-wire”. 
       PRIOR ART 
       [0003]    In electronically controlled braking, the braking setpoint received from the driver is determined by means of a system for measuring a quantity associated with the depression of the brake pedal (position of the pedal, depression travel, bearing force or other). 
         [0004]    For obvious safety reasons, this measurement system has to continue to operate even when it exhibits failures. Systems have therefore been provided in which the measurement is made by a number of sensors in order to ensure redundancy and thus avoid having the failure of a single sensor disable the system. 
         [0005]    The document WO 2001/62569 proposes a measurement system comprising two sensors measuring the position of the brake pedal. However, this system is not tolerant to the failure of one of these sensors only in the case in which it is possible to determine with certainty which of the sensors has actually malfunctioned. In practice, if the sensors deliver inconsistent measurements, it is difficult, with no other information, to determine which has actually failed. 
         [0006]    The document GB 98 20463 proposes the measurement system comprising three sensors measuring the position of the brake pedal in order to eliminate the uncertainty concerning the identity of a failed sensor. In practice, when there is a sensor failure, two sensors remain, the measurements of which are consistent so that the system can continue to operate. However, the same uncertainty is found when two sensors have failed since it is not possible to determine which one is still functioning normally. Moreover, the main drawback to this system lies in its high cost. 
       EXPLANATION OF THE INVENTION 
       [0007]    The aim of the present invention is to resolve the abovementioned problem by proposing a system for determining a setpoint associated with the position of a pedal of an automobile that is less expensive and allows for a diagnosis of enhanced reliability when one or more of its elements have failed. 
         [0008]    To this end, the subject of the invention is a system for determining a setpoint associated with the position of a pedal of an automobile, of the type comprising two sensors each measuring a quantity associated with said position. The system comprises means switching between first and second states on a predetermined switching position of the pedal and means of generating the setpoint as a function of the measurements from the two sensors and the current state of the switching means. The generation means are suitable for selecting the measurement corresponding to the smallest of the pedal positions when the switching means are in their first state, and the measurement corresponding to the greatest of the pedal positions when the switching means are in their second state. 
         [0009]    In other words, there is, by virtue of the switching means, a third information item concerning the actual position of the pedal with respect to a predetermined position, making it possible to test the consistency of the measurements delivered by the sensors. This single information item does not have to be produced by a sensor but, for example, by a less costly switch element. 
         [0010]    Furthermore, the comparison of the measurements from two sensors with the state of the switching means makes it possible to diagnose the failure of one, or even both of the sensors, and the failure of the switching means themselves. 
         [0011]    According to particular embodiments of the invention, the system comprises one or more of the following characteristics:
       the pedal is a brake pedal, and in that the first state is activated for pedal positions below the switching position, and the second state is activated for pedal positions above the switching position;   it also comprises means of diagnosing the operating state of the two sensors and of the switching means according to signals delivered by the latter;   the diagnosis means are suitable for diagnosing a failed sensor and that only it has failed if both:
           the deviation between the positions corresponding to the measurements from the two sensors is above a predetermined first threshold value; and   when the switching means are in their state indicating a pedal position above the switching position, the position corresponding to the measurement from the sensor is below the switching position by at least a predetermined second threshold value and the position corresponding to the measurement from the other sensor is above the switching position by at least a predetermined third threshold value or, when the switching means are in their state indicating a pedal position below the switching position, the position corresponding to the measurement from the sensor is above the switching position by at least the predetermined third threshold value and the position corresponding to the measurement from the other sensor is below the switching position by at least the predetermined second threshold value;   
           the diagnosis means are suitable for diagnosing that the switching means have failed and that only they have failed if both:
           the deviation between the positions corresponding to the measurements from the two sensors is below a predetermined first threshold value; and   when the switching means are in their state indicating a pedal position above the switching position, the positions corresponding to the measurements from the sensors are below the switching position by at least a predetermined second threshold value, or, when the switching means are in their state indicating a pedal position below the switching position, the positions corresponding to the measurements from the sensors are above the switching position by at least a predetermined third threshold value;   
           the diagnosis means are suitable for diagnosing a double failure or a total inconsistency between the signals delivered by the sensors and the switching means if both:
           the deviation between the positions corresponding to the measurements from the two sensors is above a predetermined first threshold value; and   when the switching means are in their state indicating a pedal position above the switching position, the positions corresponding to the measurements from the sensors are below the switching position by at least a predetermined second threshold value, or, when the switching means are in their state indicating a pedal position below the switching position, the positions corresponding to the measurements from the sensors are above the switching position by at least a predetermined third threshold value;   
           the setpoint generation means are suitable for triggering setpoint degraded modes in the event of failure of the sensors and of the switching means;   the pedal is a brake pedal, and when only one sensor is diagnosed as having failed, the setpoint generation means are suitable for selecting the maximum between the position corresponding to the measurement from the other sensor and the switching position;   the pedal is a brake pedal, and when only the switching means are diagnosed as having failed, the generation means are suitable for selecting the maximum of the positions corresponding to the measurements from the two sensors;   the pedal is a brake pedal, and when at least two elements out of the switching means and the two sensors are diagnosed as having failed, the setpoint generation means are suitable for selecting the maximum between the positions corresponding to the measurements from the two sensors and the switching position.       
 
     
    
     
       BRIEF DESCRIPTION OF THE FIGURES 
         [0027]    The present invention will be better understood on reading the following description, given solely as an example, and in relation to the appended drawings in which identical references denote identical or similar elements, and in which: 
           [0028]      FIG. 1  is a schematic view of a system according to the invention associated with a brake pedal of an automobile equipped with an electronically controlled braking system; 
           [0029]      FIG. 2  is a schematic view of a first embodiment of the setpoint unit of  FIG. 1 ; 
           [0030]      FIG. 3  is a schematic view of a second embodiment of the setpoint unit of  FIG. 1 ; 
           [0031]      FIG. 4  is a plot illustrating tolerances in a diagnosis of failure of the sensors and of the switch of the system of  FIG. 1 ; and 
           [0032]      FIG. 5  is a schematic view of a third embodiment of the setpoint unit of  FIG. 1 . 
       
    
    
     DETAILED DESCRIPTION OF THE INVENTION 
       [0033]    In  FIG. 1 , an automobile  10  with four wheels  12 ,  14 ,  16 ,  18  comprises an electronically controlled braking system  20 . 
         [0034]    The braking system  20  comprises a brake pedal  22 , actuated by the driver of the vehicle  10 , two sensors  24 ,  26  measuring the position of the brake pedal  22 , and a switch module  28 . 
         [0035]    The module  28  comprises a switch closing a circuit when the position of the brake pedal is above a predetermined value, hereinbelow designated “switching position”. The module  28  thus delivers a first low value “LO” when the position of the brake pedal is below the switching position, and a second high value “HI” when the position of the brake pedal is above the switching position. For example, the module  28  is of the contact type for switching on the vehicle stop lights, as described in U.S. Pat. No. 1,750,279. 
         [0036]    The braking system  20  also comprises a braking setpoint unit  30 , connected to the sensors  24 ,  26  and to the switch module  28 . The unit  30  generates a braking setpoint according to the outputs from the latter as explained in more detail hereinbelow. 
         [0037]    Finally, the braking system  20  comprises braking devices  32 ,  34 ,  36 ,  38  for the wheels  12 ,  14 ,  16 ,  18  and a unit  40  controlling the latter. The control unit is connected to the braking setpoint generation module  30  and controls the devices  32 ,  34 ,  36 ,  38  according to the setpoint delivered by the latter. The devices  32 ,  34 ,  36 ,  38  and the control unit  40  are conventional and will not be described in more detail in the interests of conciseness. 
         [0038]      FIG. 2  is a schematic view of a first embodiment of the braking setpoint unit  30 . 
         [0039]    The unit  30  comprises, in this embodiment, first and second selection means  50 ,  52  connected to the sensors  24 ,  26 , the first means  50  selecting the maximum out of the measurements mes 1 , mes 2  from the two sensors, and the second means  52  selecting the minimum from the measurements mes 1 , mes 2 . 
         [0040]    The unit  30  also comprises third selection means  54  connected to the switch module  28  and to the first and second means  50 ,  52  and generating the braking setpoint C. The third selection means  54  select an output from the latter according to the value E delivered by the switch module  28 . More particularly, the third means  54  select the output from the first means  50  when the value E delivered by the switch module  28  is the “HI” value and the output from the second means  52  when the value E delivered by the switch module  28  is the “LO” value. 
         [0041]    The following setpoint generation logic is thus implemented by the unit  30 :
       when the switch module  28  indicates that the brake pedal is in a “very depressed” position (value E=“HI”) the braking setpoint C is equal to the greatest of the measurements delivered by the sensors  24 ,  26 ; and   when the module  28  indicates that the brake pedal is in the “little or not depressed” position (value E=“LO”), the braking setpoint C is equal to the smallest of the measurements delivered by the sensors  24 ,  26 .       
 
         [0044]    Thus, if one of the two sensors has failed, freezing its measurement at a value below the switching position of the switch module  28 , then:
       when the switch module  28  indicates that the brake pedal is in the “very depressed” position, the braking setpoint C follows the maximum of the measurements, and therefore that of the sensor that has not failed; and   when the module  28  indicates that the brake pedal is in the “little or not depressed” position, the braking setpoint C follows the minimum of the measurements, which always allows braking to be able to be stopped. It may, however, result from braking less than the will of the driver in the region between the switching position of the switch module  28  and the value at which the measurement from the failed sensor is frozen. However, this can easily be controlled by the driver by depressing the brake pedal a little more, a natural reflex that is observed in the case of underbraking, in order to toggle the switch module to the “very depressed” state.       
 
         [0047]    Similarly, if one of the sensors has failed by freezing its measurement at a value above the switching position of the switch module  28 , then:
       when the module  28  indicates that the brake pedal is in the “little or not depressed” position, the braking setpoint C follows the minimum of the measurements, and therefore that from the sensor that has not failed; and   when the switch module  28  indicates that the brake pedal is in the “very depressed” position, the braking setpoint C follows the maximum of the measurements, which means that maximum braking is always available. It may, however, result from a braking greater than the will of the driver in the region between the switching position of the switch module  28  and the value at which the measurement from the failed sensor is frozen. However, this can easily be controlled by the driver by lifting the foot off the brake pedal, a natural reflex observed in the case of overbraking, in order to toggle the switch module to the “little or not depressed” state.       
 
         [0050]    Moreover if the switch module has itself failed, for example it no longer switches between these two values “HI” and “LO”, or it switches to a wrong switching position, the braking setpoint alternately follows the maximum and the minimum of the two position measurements. Since these two values are substantially equal for sensors that have not failed, tolerances apart, the braking setpoint remains correct. 
         [0051]    It will thus be noted that the failure of a sensor does not cause braking setpoint generation to be disabled. Furthermore, a high safety level is preserved even in such a situation. 
         [0052]    In a second embodiment of the unit  30  illustrated in  FIG. 3 , a diagnosis of the operating state of the two sensors  24 ,  26  and of the switch module  28  is implemented according to signals delivered by the latter. 
         [0053]    The setpoint unit  30  comprises a setpoint generation module  60 , consisting of the selection means  50 ,  52  and  54  described in relation to the embodiment of  FIG. 1 , and a module  62  for diagnosing the operation of the sensors  24 ,  26  and of the switch module  28 . 
         [0054]    The module  62  implements the following diagnosis strategy, with A, B and D being positive predetermined parameters that take account of the behavior dispersions (manufacturing tolerance, wear, etc.) inevitably exhibited by the physical devices. 
         [0055]    More particularly, referring to  FIG. 4  which illustrates the response of the two sensors  24 ,  26  and of the switch module  28  according to the actual position of the brake pedal, a first tolerance mask G 1  is plotted, within which the measurements mes 1  and mes 2  from the two sensors  24 ,  26  are expected when the latter are operating normally, and a second tolerance mask G 2  within which the actual switching position of the switch module  28  is expected when the latter is operating normally. 
         [0056]    From these two masks G 1 , G 2 , the parameters A, B, D are deduced. More particularly:
       the parameter D is the difference between the high limit and the low limit of the first mask G 1 . This parameter is therefore a maximum acceptable difference between the measurements mes 1 , mes 2  from two sensors  24 ,  26  when they have not failed. The parameter D thus defines a threshold of agreement or disagreement between these measurements;   the parameter A is the point of intersection between the high limits of the two masks G 1  and G 2 . This parameter is therefore a position value beyond which it is considered that the two sensors  24 ,  26  and the switch module  28  are returning consistent values if none of them has failed; and   the parameter B is the point of intersection between the low limits of the two masks G 1  and G 2 . This parameter is therefore a position value below which it is considered that the two sensors  24 ,  26  and the switch module  28  are returning consistent values if none of them has failed.       
 
         [0060]    A failure of only the sensor  24  is thus diagnosed by the module  62  if: 
         [0000]    
       
         
               
               
             
               
               
             
               
               
             
               
               
             
               
               
             
               
               
             
               
               
             
           
               
                   
                   
               
             
             
               
                   
                 (the difference between the measurements from the 
               
               
                   
                 sensors is greater than D) 
               
               
                   
                 AND 
               
               
                   
                 ( 
               
             
          
           
               
                   
                 ( 
               
             
          
           
               
                   
                 (the switch module 28 indicates that the brake 
               
               
                   
                 pedal is in the “little or not depressed” 
               
               
                   
                 position) 
               
               
                   
                 AND 
               
               
                   
                 (the measurement from the sensor 24 is above A) 
               
               
                   
                 AND 
               
               
                   
                 (the measurement from the sensor 26 is below B) 
               
             
          
           
               
                   
                 ) 
               
               
                   
                 OR 
               
               
                   
                 ( 
               
             
          
           
               
                   
                 (the switch module 28 indicates that the brake 
               
               
                   
                 pedal is in the “very depressed” position) 
               
               
                   
                 AND 
               
               
                   
                 (the measurement from the sensor 24 is below B) 
               
               
                   
                 AND 
               
               
                   
                 (the measurement from the sensor 26 is above A) 
               
             
          
           
               
                   
                 ) 
               
             
          
           
               
                   
                 ) 
               
               
                   
                   
               
             
          
         
       
     
         [0061]    Similarly, a failure of only the sensor  26  is diagnosed by the module  62  if: 
         [0000]    
       
         
               
               
             
               
               
             
               
               
             
               
               
             
               
               
             
               
               
             
               
               
             
           
               
                   
                   
               
             
             
               
                   
                 (the difference between the measurements from the 
               
               
                   
                 sensors is above D) 
               
               
                   
                 AND 
               
               
                   
                 ( 
               
             
          
           
               
                   
                 ( 
               
             
          
           
               
                   
                 (the switch module 28 indicates that the brake 
               
               
                   
                 pedal is in the “little or not depressed” 
               
               
                   
                 position) 
               
               
                   
                 AND 
               
               
                   
                 (the measurement from the sensor 24 is below B) 
               
               
                   
                 AND 
               
               
                   
                 (the measurement from the sensor 26 is above A) 
               
             
          
           
               
                   
                 ) 
               
               
                   
                 OR 
               
               
                   
                 ( 
               
             
          
           
               
                   
                 (the switch module 28 indicates that the brake 
               
               
                   
                 pedal is in the “very depressed” position) 
               
               
                   
                 AND 
               
               
                   
                 (the measurement from the sensor 24 is above A) 
               
               
                   
                 AND 
               
               
                   
                 (the measurement from the sensor 26 is below B) 
               
             
          
           
               
                   
                 ) 
               
             
          
           
               
                   
                 ) 
               
               
                   
                   
               
             
          
         
       
     
         [0062]    Moreover, a failure of only the switch module  28  is diagnosed by the module  62  if: 
         [0000]    
       
         
               
               
             
               
               
             
               
               
             
               
               
             
               
               
             
               
               
             
               
               
             
           
               
                   
                   
               
             
             
               
                   
                 (the difference between the measurements from the 
               
               
                   
                 sensors is below D) 
               
               
                   
                 AND 
               
               
                   
                 ( 
               
             
          
           
               
                   
                 ( 
               
             
          
           
               
                   
                 (the switch module 28 indicates that the brake 
               
               
                   
                 pedal is in the “little or not depressed” 
               
               
                   
                 position) 
               
               
                   
                 AND 
               
               
                   
                 (the measurements from the two sensors 24, 26 
               
               
                   
                 are above A) 
               
             
          
           
               
                   
                 ) 
               
               
                   
                 OR 
               
               
                   
                 ( 
               
             
          
           
               
                   
                 (the switch module 28 indicates that the brake 
               
               
                   
                 pedal is in the “very depressed” position) 
               
               
                   
                 AND 
               
               
                   
                 (the measurements from the two sensors 24, 26 
               
               
                   
                 are below B) 
               
             
          
           
               
                   
                 ) 
               
             
          
           
               
                   
                 ) 
               
               
                   
                   
               
             
          
         
       
     
         [0063]    Finally, a double failure or a total inconsistency between the signals delivered by the sensors  24 ,  26  and the switch module  28  is diagnosed by the module  62  if: 
         [0000]    
       
         
               
               
             
               
               
             
               
               
             
               
               
             
               
               
             
               
               
             
               
               
             
           
               
                   
                   
               
             
             
               
                   
                 (the difference between the measurements from the 
               
               
                   
                 sensors is above D) 
               
               
                   
                 AND 
               
               
                   
                 ( 
               
             
          
           
               
                   
                 ( 
               
             
          
           
               
                   
                 (the switch module 28 indicates that the brake 
               
               
                   
                 pedal is in the “little or not depressed” 
               
               
                   
                 position) 
               
               
                   
                 AND 
               
               
                   
                 (the measurements from the two sensors 24, 26 
               
               
                   
                 are above A) 
               
             
          
           
               
                   
                 ) 
               
               
                   
                 OR 
               
               
                   
                 ( 
               
             
          
           
               
                   
                 (the switch module 28 indicates that the brake 
               
               
                   
                 pedal is in the “very depressed” position) 
               
               
                   
                 AND 
               
               
                   
                 (the measurements from the two sensors 24, 26 
               
               
                   
                 are below B) 
               
             
          
           
               
                   
                 ) 
               
             
          
           
               
                   
                 ) 
               
               
                   
                   
               
             
          
         
       
     
         [0064]    The module  62  is connected to driver alerting means (not represented), such as, for example, a screen displaying a light indicator, an audible alerting means or other, to alert the driver to the diagnosed failures. 
         [0065]    As can be seen, the diagnosis of the failures of the sensors  24 ,  26  and of the switch module  28  takes account of the dispersions normally observed in their operation. 
         [0066]    Because of these dispersions, when at least one of the signals delivered by the sensors  24 ,  26  and the module  28  is situated between the values A and B, there is an uncertainty which renders the consistency tests between these signals ineffective. It may be that a failure is not instantaneously detected. 
         [0067]    This is not, however, detrimental in as much as the driver acts on the pedal regularly and according to various configurations (releasing the pedal or braking to stop, in particular), so that, regularly, all the signals from the sensors  24 ,  26  and from the switch module  28  are situated outside the region of uncertainty between A and B, thus making an effective diagnosis possible. 
         [0068]    A third embodiment of the setpoint unit  30  is illustrated in  FIG. 5 . This embodiment comprises a setpoint generation module  60  and a diagnosis module  62  that are identical to those of the second embodiment described in relation to  FIG. 4 . 
         [0069]    In this embodiment, the setpoint generation module  60  is complemented by a module  70  which generates braking setpoints according to degraded modes when failures of the sensors  24 ,  26  and of the switch module  28  are diagnosed by the module  62 . 
         [0070]    The module  70  implements the following setpoint generation strategy in degraded modes. 
         [0071]    If no failure is diagnosed by the module  62 , the module selects, as the braking setpoint C, the setpoint produced by the module  60 . 
         [0072]    If a failure of the switch module  28  is diagnosed by the module  62 , the module  70  selects as the braking setpoint the maximum of the measurements mes 1 , mes 2  from the sensors  24 ,  26 . 
         [0073]    As long as none of the sensors  24 ,  26  has failed, the measurements from the latter are substantially equal (that is to say within the mask G 1 ) and a reliable measurement of the pedal position is thus obtained. However, if one of the sensors has failed, the selection of the maximum of the measurements induces, in the worst case, an overbraking, overbraking being preferable to underbraking from the safety point of view. Furthermore, the driver is already alerted to a failure of the system for measuring the position of the brake pedal because of the diagnosis emitted by the module  62  upon the detection of the failure of the switch module  28 . Thus, the case of a subsequent failure of one of the two sensors  24 ,  28  is improbable between the moment of emission by the module  62  of the failure of the switch module  28  and the moment when the driver sends his vehicle for repair. 
         [0074]    If a failure of only one of the sensors  24 ,  26  is diagnosed by the module  62 , the module  70  selects, as the braking setpoint C, the maximum between the measurement from the sensor that has not failed and a value I equal to the value 0 if the switch module  28  indicates a “little or not depressed” pedal position or equal to the switching position if the switch module  28  indicates a “very depressed” pedal position. 
         [0075]    Thus, as long as there is no other failure, the braking setpoint C follows the measurement from the sensor that has not failed which is in all cases greater than or equal to the value “I”. 
         [0076]    Moreover, if, subsequently, the healthy sensor also fails with its measurement being frozen at a value “J” below the switching position, the braking setpoint C then switches between the value J at which the measurement from the sensor is frozen and the switching position of the switch module  28 . This therefore makes it possible to always respond to a braking request with a braking setpoint that is acceptable according to the value of the switching position. Moreover, following a releasing of the brake pedal, there remains a residual braking corresponding to the value J, which can be controlled by the driver by using the vehicle&#39;s acceleration function, a reflex generally observed in the case of residual braking. It will thus be noted that, in the case of a double failure of the position sensors  24 ,  26 , a high safety level is retained. Furthermore, the driver is already alerted to a failure of the measurement system following the diagnosis of the first failure observed on the sensors. 
         [0077]    Similarly, if the healthy sensor also fails with its measurement being frozen on a value “K” above the switching position of the switch module  28 , the braking setpoint C will also be frozen on the value K, independently of the state of the switch module  28 , inducing, in the worst case, an overbraking, which is always preferable to an underbraking from the safety point of view. Furthermore, the driver is already alerted to a failure. 
         [0078]    If a double failure or a total inconsistency between the signals delivered by the sensors  24 ,  26  and the switch module  28  is diagnosed by the module  62 , the module  70  selects for the braking setpoint C the maximum of the measurements from the sensors  24 ,  26  and the value I defined hereinabove. 
         [0079]    Thus, if the double failure relates to one of the sensors and the switch module  28 , a high braking request, such as an emergency braking for example, on the part of the driver is always satisfied by the measurement from the healthy sensor which is then selected as the braking setpoint C. 
         [0080]    If the double failure relates to the two sensors  24 ,  26  and their measurements are frozen at values below the switching position, the braking setpoint C then switches between the maximum of the measurements from the sensors and the switching position. This therefore always makes it possible to respond to a braking request with an acceptable level according to the value of the switching position. 
         [0081]    If the double failure relates to the two sensors  24 ,  26  and their measurements are frozen at values above the switching position, the braking setpoint is then frozen on the maximum of these values, independently of the state of the switch module  28 . In the worst case, there is therefore an overbraking, which is always preferable to an underbraking for safety reasons. 
         [0082]    Thus, it will be noted that, whatever double failure is observed, which is an extremely rare case, including a simultaneous failure of the two sensors, a braking setpoint, at least equal to the switching position of the switch module  28 , is generated. This is always preferable to a zero braking setpoint which is synonymous with the absence of braking. 
         [0083]    In the embodiments that have just been described, brake pedal position sensors have been considered. 
         [0084]    As a variant, any type of sensor can be used, provided that it delivers a monotonous and continuous measurement directly linked to the position of the brake pedal. Similarly, the two sensors can be of different types (for example, a force sensor and a pedal depression travel sensor) involving the use of formatting of the measurements delivered by the latter in order to obtain comparable values. 
         [0085]    Similarly, a switch module has been described. It will be understood that any type of member suitable for exhibiting two states according to the position of the brake pedal, or of the depression travel, of the force exerted on the pedal, and so on, is suitable. 
         [0086]    Moreover, a braking setpoint generation system based on a measurement on the brake pedal of an automobile has been described. 
         [0087]    It will be understood that the invention applies equally to the generation of an acceleration setpoint according to measurement on the acceleration pedal. The generation logic is then preferentially reversed. Whereas, in the case of braking, a logic favoring overbraking is considered, in the case of acceleration, a logic favoring under-acceleration is considered. In such an application, the maximum-based selection functions are replaced with minimum-based selection functions.