Abstract: A feedback-diverse, dual-controller-architecture functional safety system includes: a first module; a second module; and an inter-module logic.

Abstract: An engine control system includes an engine with an output shaft. A power take-off device interfaces with the output shaft and provides rotational power to an auxiliary device. A user input device includes a first engine speed control that commands an increase in engine speed by a first amount to increase the rotational power to the auxiliary device when a user selects the first engine speed control. A second engine speed control commands an increase in engine speed by a second amount that is greater than the first amount to increase the rotational power to the auxiliary device when the user selects the second engine speed control. The user input device includes a speed cancellation control that commands a reversal of a net increase in the speed of the engine that is commanded via the user input device when the user selects the speed cancellation control.

Abstract: Integrity of data stored in a memory space associated with a vehicle-based control system (such as a traction enhancement system) is verified through the use of sub-module checksums. A checksum for one or more subsystem modules is initially calculated based upon a checksum routine and the values of data residing in the portions of the memory space associated with the subsystem of interest. A global checksum is also initially calculated based upon data associated with the entire memory space. If the global checksum matches an expected value, the subsystem checksum(s) are stored as expected subsystem checksums. During subsequent operation, a second subsystem checksum is calculated and compared against the expected checksum value for the subsystem to verify the integrity of data residing within the memory space associated with the subsystem.

Abstract: A method is provided for formatting a message, with a first plurality of bits forming a data component, and a second plurality of bits forming a reserved component, for transmission in a vehicle. The method comprises the steps of calculating an initial checksum from the data component, calculating a revised checksum at least from the initial checksum, and storing the revised checksum in the reserved component. The number of bits in the reserved component is less than the number of bits in the data component.

Abstract: A method and apparatus is provided for validating a plurality of variable data transmitted in an automobile, comprising generating a control copy and a redundant copy of the variable data, calculating a pre-transmittal cross-check measure using the redundant copy of the variable data, and generating a transmittal message using the control copy of the data and the pre-transmittal cross-check measure.

Abstract: A method and apparatus is provided for validating a plurality of data, comprising transmitting one or more first values for a variable from a first source of values to a first processor, transmitting one or more second values for the variable from a second source of values to the first processor, transmitting one or more third values for the variable from the first source of values for to the second processor, transmitting one or more fourth values for the variable from the second source to the first processor, comparing the one or more first values for the variable with the one or more third values for the variable, comparing the one or more second values for the variable with the one or more third values for the variable, and comparing the one or more second values for the variable with the one or more fourth values for the variable.

Abstract: A vehicle includes a semi-active suspension including suspension dampers controllably adjustable in accordance with electronic stability control commands and ride and handling commands. Vehicle steering response states, turning direction states and vehicle dynamics states are binary coded in respective state variables and suspension control calibrations are binary coded in calibration words. Integrity and security of state variables and calibration words are ensured in efficient binary digit resource allocation schemes.

Abstract: A vehicle includes a semi-active suspension including suspension dampers controllably adjustable in accordance with electronic stability control commands and ride and handling commands. Vehicle steering response states, turning direction states and vehicle dynamics states are binary coded in respective state variables and suspension control calibrations are binary coded in calibration words. Integrity and security of state variables and calibration words are ensured in efficient binary digit resource allocation schemes.

Abstract: A control system includes a device having a position between minimum and maximum positions. First and second sensor modules sense the position of the device and generate first and second position values. A control module receives the position values and computes first and second normalized position values that represent a fraction of a range between minimum and maximum values of the first position value and between minimum and maximum values of the second position value. The control module suspends a control procedure that is based on at least one of the first normalized position value and/or the second normalized position value while a difference between the first and second normalized position values is greater than or equal to a first predetermined value and while at least one of the first normalized position value and/or the second normalized position value is less than or equal to a second predetermined value.

Abstract: A redundant position sensing system includes a device having a position between minimum and maximum positions. First and second sensor modules include first and second sensor resistances. A value of one of the first or second sensor resistances increases and a value of the other of the first or second resistances decreases when the device moves from the minimum position to the maximum position. A maximum value of the first sensor resistance ranges between a first maximum value and a second maximum value that is greater than the first maximum value due to a first manufacturing tolerance. A maximum value of the second sensor resistance ranges between a third maximum value and a fourth maximum value that is greater than the third maximum value due to a second manufacturing tolerance. The second maximum value is less than the third maximum value.

Abstract: Systems, methods and devices are provided for placing a transmission into a desired operating state in response to a multi-position actuator manipulated by a vehicle operator. Several switch contacts, including at least one ternary switching contact, provide input signals representative of the position of the actuator. Control logic then determines the desired state for the transmission based upon the input signals received. The desired transmission operating state is determined from any number of operating states defined by ternary and/or discrete values of the input signals, and can. be electronically selected and/or indicated to the vehicle operator.

Abstract: Systems, methods and data structures are provided for representing robust data transmitted within a control system. The data structure includes at least two data fields identifying sub-modules and sub-modes of the control system, and optionally includes a third field for designating a primary operating mode of the control system and/or a fourth field representing a handshaking bit or value. The operating modes, sub-modes and sub-module designators are represented by values of the bits selected such that no single bit transition results in the selection of another valid operating state of the control system. As a result, single bit errors will not produce erroneous operating results. Similar concepts can be optionally applied to ensure that errors in contiguous sets of four, eight or any other number of bits do not produce valid states represented by the data structure.

Abstract: Methods, systems and data structures select prioritized robust data values from a plurality of available data values formed by a plurality of data bits, each capable of exhibiting a bit value. Available data values are arranged into a gray code format, and alternate values of gray code format are selected to form a value map. An optional complementary value map may also be formed from the remaining data values. The value map is then prioritized according to bit adjacencies, wherein bit adjacencies are defined by contiguous bits within one of the data values that exhibit a common bit value. Priority may be given to data values having shortest and/or fewest bit adjacencies.

Abstract: Systems, methods and devices are described for robustly determining a desired operating state of a controlled device in response to the position of a multi-position actuator. Two or more switch contacts provide input signals representative of the position of the actuator that are selected between a reference signal and an intermediate signal. Control logic then determines the desired state for the controlled device based upon the input signals received. The desired operating state is determined from any number of operating states defined by the input values.

Abstract: Systems, methods and devices are described for determining a state of a multi-position actuator such as a four-state switch with a return-to-default position. A circuit for detecting the state of the multi-position actuator suitably includes two or more switches coupled to the actuator and configured to provide input signals as a function of the state of the actuator. At least one of the switches is a ternary (three-state) switch to increase the number of states that can be represented. Control logic receives the input signals from the switches and determines the state of the multi-position actuator as a function of the input signals. This circuit is useful in a number of automotive and other applications, including joysticks, transfer case controls, electric mirror controls, power take-off (PTO) and other devices.

Abstract: Systems, methods and devices are described for robustly determining a desired operating state of a controlled device in response to the position of a multi-position actuator. Two or more ternary switch contacts provide input signals representative of the position of the actuator. Control logic then determines the desired state for the controlled device based upon the input signals received. The desired operating state is determined from any number of operating states defined by the input values. Robustness is provided by selecting each of the operating states such that transitions between any operating states to another result from changes in each of the first and second ternary input values.

Abstract: A vehicle control module for controlling an actuator unit in response to an input having a first processor, a first communication link coupled to the first processor, and a second processor coupled to the first processor via the first communication link. The first processor is configured to generate a first value based on the input, transmit the first value to the actuator unit, and receive a second value from the actuator unit based on a data received by the actuator unit from the first processor. The first communication link is configured to transfer the input and the second value to the second processor. The second processor is configured to determine a third value based on the input, and verify the first value based on a comparison of the second value with the third value.

Abstract: Systems, methods and devices are described for placing a controlled device into a desired operating state in response to the position of a multi-position actuator. Two or more switch contacts provide input signals representative of the position of the actuator. Control logic then determines the desired state for the controlled device based upon the input signals received. The desired operating state is determined from any number of operating states defined by the input values. In various embodiments, ternary switching may be used in combination with binary switching to efficiently implement multi-state rotary or linear switches capable of identifying six, twelve, eighteen or any other number of switchable states.

Abstract: Systems, methods and devices are described for placing a controlled device into a desired operating state in response to the position of a multi-position actuator. Two or more switch contacts provide input signals representative of the position of the actuator. Control logic then determines the desired state for -the controlled device based upon the input signals received. The desired operating state is determined from any number of operating states defined by the input values. In various embodiments, ternary switching may be used alone or in combination with binary switching to efficiently implement multi-state rotary or linear switches capable of identifying six, eight, nine, twelve, eighteen, twenty-six, twenty-seven or any other number of switchable states.

Abstract: Systems, methods and devices are described for robustly determining a desired operating state of a controlled device in response to the position of a multi-position actuator. Two or more ternary switch contacts provide input signals representative of the position of the actuator. Control logic then determines the desired state for the controlled device based upon the input signals received. The desired operating state is determined from any number of operating states defined by the ternary input values. Robustness is provided by selecting each of the operating states such that transitions between any operating states to another result from changes in each of the first and second ternary input values.