Abstract:
A method for monitoring a motor vehicle includes: monitoring whether a speed of the motor vehicle indicates a stopping condition of the motor vehicle; detecting whether at least one vehicle operating condition indicating an imminent unintentional acceleration of the vehicle exists; and triggering a fault response if (i) the vehicle is in the stopping condition and (ii) the at least one vehicle operating condition indicating an imminent unintentional acceleration of the vehicle exists.

Description:
BACKGROUND OF THE INVENTION 
       [0001]    1. Field of the Invention 
         [0002]    The present invention relates to a method for monitoring an engine system for a motor vehicle such that unintentional accelerations of the motor vehicle are prevented. 
         [0003]    2. Description of the Related Art 
         [0004]    The operation of engine systems in motor vehicles is a safety-critical function, which is why measures for monitoring for proper functioning are serially provided. In monitoring, it is customary in particular to use three-level concepts, in which control unit functions are monitored by a torque-based or acceleration-based monitoring function. This should prevent unintentional accelerations of a motor vehicle, such as that which might occur due to a software or hardware bug in the engine control unit, for example. 
         [0005]    Monitoring generally triggers a fault response when the ascertained engine torque or the ascertained acceleration of the vehicle is implausible and/or a predefined maximum allowed value of the monitored variable is exceeded. These methods permit a sufficiently rapid response to faults occurring in the normal driving condition. 
         [0006]    For tolerance reasons, previous methods for detecting unintentional accelerations have used threshold values and detection times, which are suitable for driving conditions at higher speeds but do not ensure a sufficiently rapid response in the event of a fault in the speed range approaching a standstill. In particular, monitoring methods today take too much time to prevent an approach to a pedestrian who is crossing the road directly in front of the motor vehicle, for example. 
       BRIEF SUMMARY OF THE INVENTION 
       [0007]    According to a first aspect of the present invention, a method for monitoring an engine system of a motor vehicle is provided, so that according to a stopping condition monitoring method, a fault response is triggered when the motor vehicle is in a stopping condition and at least one monitoring-relevant condition, which is indicative of an imminent unintentional acceleration, is met. 
         [0008]    The above-mentioned method permits a rapid fault response for the specific case of unintentional or faulty acceleration, which occurs suddenly from a standstill or from the speed range approaching a standstill, such as that which may occur when approaching a traffic light or a crosswalk, for example, to avoid endangering pedestrians in front of the vehicle. In addition, this ensures that the above-mentioned monitoring method does not have any unintentional effects on the dynamics during normal driving operation. 
         [0009]    Additional monitoring criteria are therefore used when the vehicle is in a stopping condition, i.e., has come to a stop or is moving only at a very low speed, the additional monitoring criteria differing from the torque-based or acceleration-based monitoring. 
         [0010]    It may be provided that a determination is made that the stopping condition is assumed when the speed of the motor vehicle is below a predefined speed threshold value. 
         [0011]    In addition, the stopping condition may be determined when a torque demand is present which is lower than a predefined torque demand threshold value. 
         [0012]    The stopping condition may thus be detected in particular when the speed is below a predefined speed threshold value and there has been little or no torque demand by the driver or the driver has actuated the brake pedal. When the stopping condition of the motor vehicle is detected, the presence of another monitoring criterion is checked. If this criterion is met, an unintentional acceleration of the motor vehicle is detected and a fault response is triggered. 
         [0013]    Furthermore, in addition to the stopping condition monitoring method, a torque-based or acceleration-based monitoring method may be carried out to monitor for an unintentional acceleration under driving conditions different from the stopping condition. 
         [0014]    According to one specific embodiment, the stopping condition may be assumed when a braking demand exists. 
         [0015]    Furthermore, there may be a monitoring-relevant condition when the rotational speed of a drive engine of the motor vehicle is higher than a predefined rotational speed threshold value, the drive train is not disengaged and the gradient of the rotational speed of the drive engine is greater than a predefined gradient threshold value. This is advantageous in particular with automatic transmissions having a converter clutch since a faulty engine torque, even before an unintentional vehicle acceleration, results in a definite increase in the rotational speed of the engine due to the variable transmission slip. 
         [0016]    Alternatively or additionally, a monitoring-relevant condition may occur when the product of the rotational speed of a drive engine of a motor vehicle and a transmission ratio of a transmission in the drive train is greater than a predefined drive wheel speed threshold value and a time derivation of the product of the rotational speed of drive engine  2  and the transmission ratio exceeds a predefined gradient threshold value. 
         [0017]    Alternatively or additionally, a monitoring-relevant condition may occur when the gradient of the speed of a drive wheel of a motor vehicle exceeds a predefined drive wheel speed gradient threshold value and the transmission ratio is not equal to zero. 
         [0018]    Alternatively or additionally, a monitoring-relevant condition may occur when the engine torque of a drive unit, for example, an additional electric motor in a hybrid vehicle, is greater than a predefined torque threshold value and the transmission ratio is not equal to zero. 
         [0019]    According to one further aspect, a device for monitoring an engine system of a motor vehicle is provided, the device being designed to trigger a fault response according to a stopping condition monitoring method when the motor vehicle is in a stopping condition and at least one monitoring-relevant condition is met, indicating an imminent unintentional acceleration. 
         [0020]    According to one additional aspect, a motor vehicle is provided having an engine system and the above-mentioned device. 
         [0021]    According to one additional aspect, a computer program is provided, which is configured to carry out all steps of the above-mentioned method. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0022]      FIG. 1  shows a schematic diagram of a motor vehicle, including an engine system which includes an internal combustion engine and an engine control unit. 
           [0023]      FIG. 2  shows a flow chart to illustrate a method for monitoring a motor vehicle. 
       
    
    
     DETAILED DESCRIPTION OF THE INVENTION 
       [0024]      FIG. 1  schematically shows a motor vehicle  1 , including a drive engine  2 , which is designed as an internal combustion engine, for example, which is connected via a clutch  3  to a drive train (not shown). Drive engine  2  is controlled by an engine control unit  4 , based in particular on a torque demand by a driver or a driver assistance system (not shown). 
         [0025]    A torque demand may be given by the driver by actuating an accelerator pedal  5 . In addition, a brake pedal  6  may be provided, so that by actuating this pedal, the driver signals his intent to carry out a braking operation or signals a demand for braking. Engine control unit  4  ascertains corresponding control variables or manipulated variables for drive engine  2 , based on the torque demand in the form of a driver&#39;s intended torque, which is derived from the accelerator pedal position of accelerator pedal  5 , for example. In the case of an internal combustion engine as drive engine  2 , the manipulated variables may include a throttle valve manipulated variable, a fuel injector manipulated variable, a camshaft manipulated variable, a wastegate valve manipulated variable and/or the like. The manipulated variables are ascertained from the engine torque to be supplied by engine control unit  4 . In the case of an electric motor as part of drive system  2 , the manipulated variable may be the applied motor voltage or the motor current derived therefrom. Drive system  2  may also be designed as a hybrid drive system of an electric motor and an internal combustion engine. 
         [0026]    A monitoring unit  7  is provided for verifying proper functioning of engine control unit  4 , which monitors the control of drive engine  2  and, in the event of a fault, triggers a fault response, which brings motor vehicle  1  or the engine system of motor vehicle  1  into a safe condition. Monitoring unit  7  is frequently integrated into engine control unit  4  and is part of a three-level monitoring concept. Monitoring unit  7  has monitoring functions to carry out a traditional torque-based or acceleration-based monitoring of engine control unit  4 . 
         [0027]    However, traditional concepts for torque-based or acceleration-based monitoring do not intervene in the event of a suddenly occurring unintentional acceleration of vehicle  1  from a standstill or from a low speed, as is often the case in a driving situation when approaching a traffic light or a crosswalk. In particular, detection using the traditional monitoring methods, which have been implemented, takes too long, so that the fault response in the above-mentioned driving conditions occurs too late to prevent any threat to pedestrians who are directly in front of the motor vehicle, for example. The reasons for this include, for example, the fact that threshold values are set too high and detection times for the monitoring functions of monitoring unit  7  are too long. 
         [0028]      FIG. 2  shows a flow chart illustrating a method for detection and implementation of a fault response in the event of an unintentional acceleration of motor vehicle  1 , this method being implemented additionally in monitoring unit  7 . 
         [0029]    In step S 1  it is checked whether motor vehicle  1  is in a stopping condition. The stopping condition corresponds to a condition in which vehicle  1  is at a standstill or is driving at a very low speed and there is no torque demand. This may be determined by a corresponding speed sensor  8 , which is connected to a drive wheel  9  of motor vehicle  1 . If the speed data obtained by engine control unit  4  from speed sensor  8  are equal to zero, the method is continued at step S 10  for further fault detection. 
         [0030]    Alternatively, if the speed data are not equal to zero, a check is carried out in step S 2  as to whether the speed data indicate a speed of motor vehicle  1  lower than a predefined speed threshold value. If this is not the case (alternative: no), then the system jumps back to step S 1  since no monitoring-relevant driving condition has been ascertained. 
         [0031]    In step S 3  it is checked whether a torque demand exists, for example, by checking on the accelerator pedal position of accelerator pedal  5 , by verifying the information obtained from a driver assistance system or by detecting that brake pedal  6  has been actuated. It is possible to recognize, by a threshold value comparison with a predefined torque demand threshold value, whether there is only a very low torque demand by the driver or none at all. 
         [0032]    If it is found in step S 3  that there is only a negligible torque demand or none at all (alternative: yes), then the method is continued in a monitoring step S 4  for checking for a monitoring-relevant fault. Otherwise (alternative no), the system jumps back to step S 1 . 
         [0033]    The check in step S 4  with respect to the existence of a monitoring-relevant fault may be carried out in various ways. A fault case may be ascertained in particular when one or multiple of the following conditions exist: 
         [0034]    a) The rotational speed of drive engine  2  is higher than a predefined rotational speed threshold value, the drive train is not disengaged, i.e., clutch  3  produces at least a slipping power transmission between drive engine  2  and drive wheel  9 , and the gradient of the rotational speed of drive engine  2  is greater than a predefined gradient threshold value. 
         [0035]    b) The product of the rotational speed of drive engine  2  and the transmission ratio of a transmission  3  in the drive train is greater than a predefined drive wheel speed threshold value and the time derivation of the product of the rotational speed of drive engine  2  and the transmission ratio exceeds a predefined gradient threshold value. A time-variable quantity may also be detected and supplied here for the transmission ratio, so that a clutch slip may also be taken into account. The time derivation of the product of the rotational speed of drive engine  2  and the transmission ratio in particular may be converted into an acceleration of motor vehicle  1 , which is then monitored with respect to an acceleration threshold value and in particular with regard to exceeding the acceleration threshold value. 
         [0036]    c) The gradient of the speed of drive wheel  9  exceeds a predefined drive wheel speed gradient threshold value and the transmission ratio is not equal to zero, i.e., there is a coupling between drive engine  2  and drive wheel  9 . 
         [0037]    d) The engine torque of drive engine  2  is greater than a predefined torque threshold value, and the transmission ratio is not equal to zero. In hybrid vehicles the drive torque may correspond to the total drive torque of all drive units or only some of the drive units, depending on the hybrid concept. 
         [0038]    If one or multiple of the above-mentioned conditions a) through d) is/are met (alternative: yes), a fault is present and a fault response is triggered. For example, in step S 5 , a fuel injection may be suppressed as the fault response or the function of engine control unit  4  may be deactivated. Alternatively, interventions into the power transmission are conceivable, for example, a neutral driving stage demand to a transmission control unit and/or a brake force demand to the braking system or to drive engine  2 . 
         [0039]    If drive engine  2  or one of the drive units is an electric machine, then in the fault case an active short circuit may be switched via the phase lines of the electric machine or a braking torque may be demanded [to generate a neutral torque]. 
         [0040]    If none of the above-mentioned conditions a) through d) is met (alternative: no), the method is repeated in steps S 1  through S 4 .