Abstract: A diagnostic system for a battery system in accordance with an exemplary embodiment is provided. The battery system includes a battery module electrically coupled to a contactor. The diagnostic system includes a first microcontroller and a second microcontroller operably communicating with the first microcontroller. The second microcontroller is programmed to open the contactor electrically coupled to the battery module if either a first diagnostic indicator flag is equal to a first fault value or a second diagnostic indicator flag is equal to a second fault value. The second microcontroller is further programmed to open the contactor if either a third diagnostic indicator flag is equal to a third fault value or a fourth diagnostic indicator flag is equal to a fourth fault value.

Abstract: A diagnostic system for a power supply having first and second output terminals that output first and second reference voltages, respectively, is provided. The diagnostic system includes a microcontroller having an analog-to-digital converter with first and second banks of channels. The microcontroller samples the first reference voltage at a first sampling rate utilizing a first common channel in the first bank of channels to obtain a first predetermined number of voltage samples. The microcontroller determines a first number of voltage samples in the first predetermined number of voltage samples in which the first reference voltage was outside of a predetermined voltage range. The microcontroller sets a first power supply diagnostic flag equal to a first fault value if the first number of voltage samples is greater than a first threshold number of voltage samples.

Abstract: A power supply architecture provides for the efficient distribution and failsafe monitoring of power in a microcontroller system. The power supply architecture incorporates various components with high integrity and diverse monitoring schemes that allow the associated control processors to operate with high safety standards. The various embodiments provide an integrated method or apparatus for an electronic module safety architecture which includes diversity, time and space independence for power supplies for the various microprocessors and control communication buses.

Abstract: A diagnostic system for a voltage regulator is provided. The diagnostic system includes a microcontroller having first and second analog-to-digital converters and first and second output ports. The first analog-to-digital converter outputs a first voltage value corresponding to the first voltage from the voltage regulator. The microcontroller executes a first diagnostic function to set a first voltage regulator diagnostic flag equal to a fault value indicating a voltage out of range condition, if the first voltage value is greater than a first threshold voltage value or the first voltage value is less than a second threshold voltage value. The microcontroller executes a second diagnostic function to stop generating first and second control signals to de-energize a contactor coil to open a contact of a contactor if the first voltage regulator diagnostic flag is equal to the fault value.

Abstract: A power supply diagnostic strategy for discrete power supply diagnostic states is independent of the underlying memory structure. The values used in the associated algorithm are selected to ensure that random linked failures will be detected. This applies to planar memory structures with 1, 2, 4, 6, 8, 12, and 16 common lattices, or physical memory structures with individual bit dispersed memories with 1, 2, 4, 6, 8, 12, and 16 consecutive bit splices. Further, the strategy provides that the various monitored voltage tables remains distinct even with compiler optimization activated.

Abstract: A power supply architecture provides for the efficient distribution and failsafe monitoring of power in a microcontroller system. The power supply architecture incorporates various components with high integrity and diverse monitoring schemes that allow the associated control processors to operate with high safety standards. The various embodiments provide an integrated method or apparatus for an electronic module safety architecture which includes diversity, time and space independence for power supplies for the various microprocessors and control communication buses.

Abstract: A method for securing vehicle data that includes a plurality of data messages includes the steps of determining a sequence for the plurality of data messages, selecting a plurality of identifier values for the plurality of data messages such that each of the plurality of identifier values are at least two bit errors removed from another, and assigning one of the plurality of identifier values to each of the plurality of data messages, based at least in part on the sequence.

Abstract: Methods and systems are provided for encoding vehicle data comprising a first voltage pertaining to a first battery cell and a second voltage pertaining to a second battery cell is provided. A determination is made as to whether the first voltage is valid. In addition, a determination is made as to whether the second voltage is valid. One of a plurality of values is assigned to a validity measure based at least in part on whether the first voltage or the second voltage, or both, are valid. The plurality of values, in binary form, are at least two bit errors removed from one another.

Abstract: A redundant position sensing system includes a device having a position between minimum and maximum positions. First and second sensor modules include first and second sensor resistances. A value of one of the first or second sensor resistances increases and a value of the other of the first or second resistances decreases when the device moves from the minimum position to the maximum position. A maximum value of the first sensor resistance ranges between a first maximum value and a second maximum value that is greater than the first maximum value due to a first manufacturing tolerance. A maximum value of the second sensor resistance ranges between a third maximum value and a fourth maximum value that is greater than the third maximum value due to a second manufacturing tolerance. The second maximum value is less than the third maximum value.

Abstract: First and second reference voltages are applied to first and second terminals of a processor via voltage divider circuits. First and second signal conditioning circuits are coupled to third and fourth terminals of the processor, respectively, and voltage or current sensors are coupled to the first and second signal conditioning circuits. The processor measures the electrical characteristics at the third and fourth terminals and computes first and second ratiometric values of the electrical characteristics, wherein the first ratiometric value is based upon a measurement obtained from the third terminal and the first reference voltage and the second ratiometric value is based upon a measurement of obtained from the fourth terminal and the second reference voltage. The processor further identifies an issue if a ratio of the first ratiometric value to the second ratiometric value exceeds a ratio of the first reference value to the second reference value.

Abstract: A method and apparatus is provided for improving integrity in data representing a plurality of condition states of a variable, including the steps of determining which condition states are operationally incompatible with one another, and generating an array of transformed integer values including a separate integer value for each condition state. The transformed integer value for each condition state in binary form is at least two bit errors removed from any transformed integer value for an identified incompatible condition state in binary form.

Abstract: A method of encoding data related to voltages for each of a plurality of battery cells for transmission in a hybrid vehicle includes the steps of generating a plurality of voltage groups, and generating a validity measure for each of the plurality of voltage groups. Each of the plurality of voltage groups comprises the voltages for a different combination of the plurality of battery cells.

Abstract: Methods and systems are provided for encoding vehicle data comprising a first voltage pertaining to a first battery cell and a second voltage pertaining to a second battery cell is provided. A determination is made as to whether the first voltage is valid. In addition, a determination is made as to whether the second voltage is valid. One of a plurality of values is assigned to a validity measure based at least in part on whether the first voltage or the second voltage, or both, are valid. The plurality of values, in binary form, are at least two bit errors removed from one another.

Abstract: A vehicle parametric active front steering (AFS) system remedial action is described herein. AFS system modules inter-communicate via messages containing parameters. The AFS system detects a message error, determines an invalid parameter, and takes appropriate remedial action. An error is detected if an error condition is satisfied or if occurrence of incorrect messages reaches or exceeds a certain predetermined frequency. The AFS system takes the remedial action by setting default values of valid parameters corresponding to the invalid parameter.

Abstract: A method of providing secure data from vehicle operational variable data that includes a plurality of data message bits includes the steps of dividing the plurality of data message bits into a first group of data message bits and a second group of data message bits, encoding the first group of data message bits using a data map to generate a plurality of encoded data message bits, and generating the data message from the plurality of encoded data message bits and the second group of data message bits.

Abstract: A method for controlling steering in a vehicle includes the steps of obtaining a vehicle steering communication, controlling an actuator coupled to a hand wheel, a road wheel, or both using a primary active steering functionality, if the vehicle steering communication reflects one or more of a plurality of types of specified errors, and controlling the actuator using the primary active steering functionality and a supplemental active steering functionality, if the vehicle steering communication does not reflect one or more of the plurality of types of specified errors.

Abstract: A method and apparatus is provided for validating a plurality of data, comprising transmitting one or more first values for a variable from a first source of values to a first processor, transmitting one or more second values for the variable from a second source of values to the first processor, transmitting one or more third values for the variable from the first source of values for to the second processor, transmitting one or more fourth values for the variable from the second source to the first processor, comparing the one or more first values for the variable with the one or more third values for the variable, comparing the one or more second values for the variable with the one or more third values for the variable, and comparing the one or more second values for the variable with the one or more fourth values for the variable.

Abstract: A method for operating a vehicle electronic stability control (“ESC”) system utilizing values for a variable obtained from a primary source and a redundant source includes the steps of receiving a first value for the variable from the primary source, receiving a second value for the variable from the redundant source, generating a normalized value as a function of the first value and the second value, determining whether the primary source is operating correctly, utilizing the first value for operation of the vehicle ESC system if the primary source is operating correctly, and utilizing the second value for operation of the vehicle ESC system if the primary source is not operating correctly and the second value is not greater in absolute value than the normalized value.

Abstract: A method is provided for formatting a message, with a first plurality of bits forming a data component, and a second plurality of bits forming a reserved component, for transmission in a vehicle. The method comprises the steps of calculating an initial checksum from the data component, calculating a revised checksum at least from the initial checksum, and storing the revised checksum in the reserved component. The number of bits in the reserved component is less than the number of bits in the data component.

Abstract: A number N of position sensors, each associated with one of N shift rails in a shift rail transmission system, wherein the set of N sensors is divided into subsets and each subset is provided a common reference from a control module; and a processing component that determines from data from each sensor whether the shift rail associated with that sensor is in a position of engagement of a first gear, a position of engagement of a second gear, or in a neutral position. Further, providing a first common reference to a first set of shift rail position sensors; providing a second common reference to a second set of shift rail position sensors; receiving sensor data from each position sensor; determining that the data from the first set of position sensors is unreliable; and operating a transmission using only the gears related to the position sensors in the second set.