Abstract: A watchdog monitoring system having a watchdog integrated circuit and a microcontroller is provided. The microcontroller has a microprocessor, and a digital input/output device with an enable pin and a disable pin. A disable application in the microcontroller monitors the enable pin of the digital input-output device, and if the enable pin does not have a high logic state within a predetermined amount of time after a first time indicating that the microcontroller is malfunctioning, then the disable application generates a control message.

Abstract: A diagnostic system for a DC-DC voltage converter is provided. A first temperature sensor generates a first temperature signal associated with a buck mode integrated circuit. A first analog multiplexer outputs the first temperature signal to a first analog-to-digital converter which generates a first temperature value. A second temperature sensor generates a second temperature signal associated with a boost mode integrated circuit. A second analog multiplexer outputs the second temperature signal to a second analog-to-digital converter which generates a second temperature value. A microcontroller generates control signals to command first and second bi-directional switches in the DC-DC voltage converter to each transition to an open operational state if the first temperature value is greater than a first threshold temperature value.

Abstract: A diagnostic system for a vehicle electrical system having a first and second diagnostic application is provided. The first diagnostic application commands a high side driver circuit and a low side driver circuit to transition a contactor to an open operational position when a first difference value is greater than a first threshold difference value indicating that at least one of the first and second analog multiplexers is malfunctioning. The second diagnostic application commanding the high side driver circuit and the low side driver circuit to transition the contactor to the open operational position when a second difference value is greater than the first threshold difference value indicating that at least one of the first and second analog multiplexers is malfunctioning.

Abstract: A diagnostic system for a vehicle electrical system includes a first voltage divider circuit that outputs a second voltage in response to a first voltage, and a second voltage divider circuit that outputs a third voltage in response to the first voltage. An analog-to-digital converter outputs first and second voltage values, respectively, based on the second and third voltages, respectively. A microcontroller determines a first compensated voltage value utilizing the first voltage value and a compensation value. The microcontroller determines a difference value based on the first compensated voltage value and the second voltage value. The microcontroller commands the high side driver circuit and the low side driver circuit to transition the contactor to an open operational position when the difference value is greater than a threshold difference value.

Abstract: A control system for a DC-DC voltage converter includes a microcontroller having first and second applications. The first application commands the microcontroller to generate a first signal that is received at a first pin on a high side integrated circuit to transition a first plurality of FET switches to an open operational state, and that is received at a first pin on the low side integrated circuit to transition a second plurality of FET switches to the open operational state. The second application commands the microcontroller to generate a second signal that is received at a second pin on the high side integrated circuit to transition the first plurality of FET switches to the open operational state, and that is received at a second pin on the low side integrated circuit to transition the second plurality of FET switches to the open operational state.

Abstract: A diagnostic system for a DC-DC voltage converter is provided. An analog to digital converter measures a first low voltage level at a low voltage terminal of a DC-DC voltage converter and generates a first low voltage value based on the first low voltage level. A first buck mode monitoring application sets a first buck mode status flag equal to a first fault value when the first low voltage value is greater than a first maximum voltage value. A first buck mode diagnostic handler application transitions each of the high voltage switch and the low voltage switch to an open operational state when the first buck mode status flag is equal to the first fault value.

Abstract: A control system for a DC-DC voltage converter includes a microcontroller having first and second applications. The first application commands the microcontroller to generate a first signal that is received at a first pin on a high side integrated circuit to transition a first plurality of FET switches to an open operational state, and that is received at a first pin on the low side integrated circuit to transition a second plurality of FET switches to the open operational state. The second application commands the microcontroller to generate a second signal that is received at a second pin on the high side integrated circuit to transition the first plurality of FET switches to the open operational state, and that is received at a second pin on the low side integrated circuit to transition the second plurality of FET switches to the open operational state.

Abstract: A voltage monitoring system having a microcontroller with an analog-to-digital converter with a first channel, and a memory device is provided. The microcontroller includes a monitoring application and a hardware abstraction layer. The monitoring application sends a first encoded channel number to the hardware abstraction layer. The hardware abstraction layer determines a first channel number based on the first encoded channel number, and obtains a measured voltage value associated with the first channel number. The hardware abstraction layer sends a second encoded channel number and the measured voltage value therein to the monitoring application. If the first encoded channel number is equal to the second encoded channel number, then the monitoring application stores the measured voltage value in the memory device.

Abstract: A voltage monitoring system having a microcontroller with first and second monitoring applications and a hardware abstraction layer is provided. The hardware abstraction layer obtains a first measured voltage value associated with a first channel number. The hardware abstraction layer determines a second encoded channel number based on the first channel number. The hardware abstraction layer sends a first response message having the second encoded channel number and a first measured voltage value therein to the first monitoring application. The first monitoring application commands the microcontroller to generate first and second control signals to transition a contactor to an open operational state, if the second encoded channel number is not equal to a first expected encoded channel number.

Abstract: A diagnostic system for a battery system having a battery module electrically coupled to a contactor is provided. The battery module has first, second, and third battery cells. The diagnostic system includes a first microcontroller that transitions the contactor to an open operational state if a first battery cell comparator overvoltage flag is equal to a first battery cell analog overvoltage flag value, or a battery module fault line voltage flag is equal to a first battery module fault line voltage flag value.

Abstract: A diagnostic system for a battery system having a battery module electrically coupled to a contactor is provided. The battery module has first, second, and third battery cells. The diagnostic system includes a first microcontroller that transitions the contactor to an open operational state if a first battery cell analog overvoltage flag is equal to a first battery cell analog overvoltage flag value, or a battery module overvoltage flag is equal to a first battery module overvoltage flag value.

Abstract: A voltage monitoring system having a microcontroller with first and second monitoring applications and a hardware abstraction layer is provided. The hardware abstraction layer sends a second encoded channel number and a first measured voltage value to the first monitoring application. The first monitoring application sends the second encoded channel number to the second monitoring application. The hardware abstraction layer sends a fourth encoded channel number and a second measured voltage value to the second monitoring application. The second monitoring application stores the second measured voltage value in the memory device if the fourth encoded channel number is equal to a first expected encoded channel number, and the second encoded channel number is equal to a second expected encoded channel number.

Abstract: A diagnostic system for a DC-DC voltage converter is provided. The DC-DC voltage converter has a high voltage bi-directional MOSFET switch. The high voltage bi-directional MOSFET switch has a first node and a second node. The microcontroller samples a first voltage at the first node at a first sampling rate utilizing a first common channel in a first bank of channels to obtain a first predetermined number of voltage samples. The microcontroller determines a first number of voltage samples in the first predetermined number of voltage samples in which the first voltage is less than a first threshold voltage. The microcontroller sets a first voltage diagnostic flag equal to a first fault value if the first number of voltage samples is greater than a first threshold number of voltage samples indicating a voltage out of range low fault condition for the analog-to-digital converter.

Abstract: A system for determining a voltage out-of-range high condition of a battery module is provided. A microcontroller determines first, second, and third voltage values from first, second, and third voltage sensors, respectively, coupled to first, second, and third battery cells, respectively; and determines a battery module voltage value based on a fourth signal. The microcontroller sums the first, second, and third voltage values to obtain a battery module high voltage sum value. The microcontroller generates a first control signal to induce a contactor to transition to an open operational position to electrically decouple the battery module from an electrical load, if a difference between the battery module high voltage sum value and the battery module voltage value is greater than or equal to a battery module voltage out-of-range high error value.

Abstract: An exemplary transmission system includes a first sensor configured to measure a quantity and output a first signal representative of the quantity measured. A second sensor is configured to separately measure the quantity measured by the first sensor and output a second signal representative of the quantity measured. A transmission control module in communication with the first sensor and the second sensor is configured to process the first signal along a primary processing path, process the second signal along a secondary processing path, compare the processed first signal to the processed second signal to determine if the primary processing path is reliable, and compare the processed first signal to the processed second signal to determine if the first sensor is reliable.

Abstract: A control system for transitioning a DC-DC voltage converter from a buck operational mode to a safe operational mode is provided. A microcontroller performs a first scheduled task including executing first and second applications. The task deadline monitoring application sets a task deadline flag to a first fault value when a time interval associated with performing the first scheduled task is greater than a threshold time interval. The hardware abstraction layer inhibits operation of a disable pin of a watchdog IC when the task deadline flag is equal to the first fault value, which induces the watchdog IC to transition the DC-DC voltage converter to the safe operational mode.

Abstract: A battery management system having a microcontroller with first and second applications and first and second tables is provided. The first table has a first record with a first encoded channel index and a first battery cell voltage value associated with a first battery cell. The second table has a first record with a first encoded channel index and a first battery cell overvoltage flag associated with the first battery cell. The first application sends the first encoded channel index from the first table to the second application. The second application transitions a contactor to an open operational position, when the first encoded channel index from the first table is not equal to a first predetermined encoded channel index indicating a data misalignment of the first battery cell voltage value and the first battery cell overvoltage flag.

Abstract: A battery management system includes a microcontroller having a first diagnostic handler application and first and second applications. The first application sets a first non-recoverable diagnostic flag to a first encoded value having each nibble thereof selected from an odd Karnaugh set of binary values. The second application sets a second non-recoverable diagnostic flag to a second encoded value having each nibble thereof selected from an even Karnaugh set of binary values. The first diagnostic handler application sets a first master non-recoverable diagnostic flag to a first encoded fault value if the first non-recoverable diagnostic flag is equal to a second encoded fault value, or the second non-recoverable diagnostic flag is equal to a third encoded fault value.

Abstract: A diagnostic system for a DC-DC voltage converter includes a microcontroller having a first diagnostic handler application and first and second applications. The first application sets a first non-recoverable diagnostic flag associated with the DC-DC voltage converter to a first encoded value having each nibble thereof selected from an odd Karnaugh set of binary values. The second application sets a second non-recoverable diagnostic flag to a second encoded value having each nibble thereof selected from an even Karnaugh set of binary values. The first diagnostic handler application sets a first master non-recoverable diagnostic flag to a first encoded fault value if the first non-recoverable diagnostic flag is equal to a second encoded fault value, or the second non-recoverable diagnostic flag is equal to a third encoded fault value.

Abstract: A diagnostic system is provided. A first monitoring application sets a first voltage regulator status flag equal to a first fault value when a first voltage value is greater than a first maximum voltage value. A first diagnostic handler application transitions each of a high voltage switch and a low voltage switch to an open operational state when the first voltage regulator status flag is equal to the first fault value. A second monitoring application sets a second voltage regulator status flag equal to a second fault value when the second voltage value is less than a first minimum voltage value. A second diagnostic handler application transitions the high voltage switch and the low voltage switch to the open operational state when the second voltage regulator status flag is equal to the second fault value.