Abstract: An engine control system comprises a driver axle torque request module (DATRM) and a driver axle torque security module (DATSM). The DATRM determines a pedal torque request based on minimum and maximum scaling torques and a torque scalar. The DATRM determines a raw driver torque request. The DATRM selectively shapes raw driver torque request into a final driver torque request. The DATRM converts the final driver torque request into a first axle torque request. The DATSM selectively diagnoses a fault in the first axle torque request based on a minimum engine torque, the minimum scaling torque, a first comparison of the final driver torque request and the redundant final driver torque request, and a second comparison of the first axle torque request and a redundant axle torque request.

Abstract: A method of regulating operation of a hybrid transmission in a vehicle includes determining a desired transmission state using a first module, generating transmission control signals based on the desired transmission state using a second module and receiving at least one transmission parameter signal at the second module. An actual transmission state is determined based on the at least one transmission parameter signal at the second module. Whether a fault is present within the hybrid transmission control system is determined based on the desired transmission state and the actual transmission state at the first control module.

Abstract: An engine system includes a throttle actuator module and a torque control module. The throttle actuator module controls a throttle actuator based on a desired throttle area. The torque control module determines an actuator torque. The torque control module determines a rate limited torque, a maximum torque, and a minimum torque based on the actuator torque and a predetermined rate of change. The torque control module determines the desired throttle area based on the actuator torque when the rate limited torque is greater than the maximum torque. The torque control module determines the desired throttle area based on the actuator torque when the rate limited torque is less than the minimum torque.

Abstract: A diagnostic system includes N dedicated diagnostic modules that each correspond with a respective one of multiple control systems. The N dedicated diagnostic modules each generate status signals indicating results of respective diagnostic tests. A diagnostic error time monitor determines an accumulated error time value between error events for each of the control systems based on the status signals. The diagnostic error time monitor selectively reports a fault to a respective one of the N dedicated diagnostic modules based on the accumulated error time value.

Abstract: An air-per-cylinder (APC) security system for a vehicle comprises an APC determination module, an APC threshold determination module, and an APC diagnostic module. The APC determination module determines first and second APC values for first and second cylinders of an engine, respectively, based on mass airflow (MAF) into the engine. The APC threshold determination module determines an APC threshold based on the first APC value and a spark timing for the first cylinder. The APC diagnostic module selectively diagnoses a fault in the APC determination module when the second APC value is greater than a sum of the first APC value and the APC threshold.

Abstract: A method of verifying the integrity of an arithmetic logic unit (ALU) of a control module includes inputting a first test value into one of a plurality of registers of the ALU and inputting a second test value into remaining registers of the plurality of registers. A first set of operations is performed between the one of the plurality of registers and each of the remaining registers to produce a first set of results. A fault is indicated when one of the first set of results varies from a first predetermined result.

Abstract: A vehicle speed module includes a speed arbitration module that receives at least two of a wheel speed, a transmission output speed (TOS), and an electric motor speed (EMS), and that determines a vehicle speed based on a comparison of the at least two of the wheel speed, the TOS, and the EMS. A speed diagnostic module selectively diagnoses a fault in one of a wheel speed sensor, a TOS sensor, and an EMS sensor based on the comparison.

Abstract: A system comprises a general-purpose memory, a lockable memory, a memory management unit, and a processor. The general-purpose memory includes data for a first set of addresses. The lockable memory includes data for a second set of addresses. The memory management unit selectively writes data to one of the general-purpose memory and the lockable memory and selectively locks the lockable memory by preventing writes to the lockable memory. The processor instructs the memory management unit to unlock the lockable memory before requesting a write to one of the second set of addresses.

Abstract: A control module includes a predicted torque control module that determines a desired throttle area based on a transmission torque request and a desired predicted torque. A throttle security module determines a throttle limit based on the desired throttle area and the desired predicted torque and determines an adjusted desired throttle area based on the throttle limit. A throttle actuator module adjusts a throttle based on the adjusted desired throttle area.

Abstract: An engine control system of a vehicle comprises a torque module and a chassis request evaluation module. The torque module controls a torque output of an engine based on a driver torque request and selectively increases the torque output based on a chassis torque request. The chassis request evaluation module selectively prevents the increase of the torque output based on at least one of a vehicle speed, a transmission state, and an accelerator pedal position.

Abstract: A throttle control module comprises a primary throttle position module, a redundant throttle position module, and a remedial action module. The primary throttle position module transforms a primary throttle area signal indicating desired throttle area into a primary throttle position signal indicating a first desired throttle position of a throttle valve. The throttle valve is actuated based upon the primary throttle position signal. The redundant throttle position module transforms a redundant throttle area signal indicating desired throttle area into a redundant throttle position signal indicating a second desired throttle position of the throttle valve. The remedial action module selectively generates a remedial action signal based upon a comparison of the first and second desired throttle positions.

Abstract: A control system for a control module of a vehicle includes a first integrated circuit (IC) core of a primary processor that generates a first control signal using a central processing unit (CPU). A second IC core of the primary processor generates a second control signal using a second CPU and generates a remedial control signal based on the first control signal and the second control signal.

Abstract: A method of regulating operation of a hybrid transmission in a vehicle includes determining a desired transmission state using a first module, generating transmission control signals based on the desired transmission state using a second module and receiving at least one transmission parameter signal at the second module. An actual transmission state is determined based on the at least one transmission parameter signal at the second module. Whether a fault is present within the hybrid transmission control system is determined based on the desired transmission state and the actual transmission state at the first control module.

Abstract: A vehicle having a system for validating a variable signal for input to a processor-performed function. An input module receives the signal. A processor tests first and second storage locations of a memory. After testing, the processor stores the signal in the first and second storage locations to obtain first and second stored values. The processor compares the first and second stored values and tests the first stored value for any corruption associated with receipt of the signal by said input module. The processor inputs the first and second stored values to first and second paths for performing the function to obtain two function results, and compares the results.

Abstract: An engine control system that regulates first and second throttles of an internal combustion engine includes a primary control module that generates a throttle area based on an operator input and a second control module that determines a second throttle position based on the throttle area. The second control module determines a redundant throttle position based on the throttle area and regulates a position of the second throttle based on the second throttle position if the second throttle position and the redundant throttle position correspond with one another.

Abstract: A throttle control system is presented. A throttle has a throttle actuator coupled to a throttle plate. A control module is coupled to the throttle actuator. The control module sends a first signal within a gear change time period to the throttle actuator to position the throttle plate for an increased throttle opening. The control module terminates the first signal after the gear change time period. The control module sends a second signal to the throttle actuator to position the throttle plate. The control module positions the throttle plate by the throttle actuator to attain a lower throttle opening limit. A downshift from a higher gear to a lower gear occurs.

Abstract: Methods and apparatus are provided for ensuring the integrity of a software variable stored in memory. The method comprises the steps of verifying the integrity of the specific hardware to be used in calculating and storing software variables, calculating a software variable and a dual store software variable using the verified hardware, storing both software variables in verified memory, and comparing the two stored software variables to verify the integrity of the software used for calculating and storing the two software variables.

Abstract: A vehicular powertrain includes a throttle controlled engine and a power take-off system for driving external loads. A power take-off control executed in a first processor seeks to have engine control authority in accordance with operator invoked switch states including an enable switch and set switches. Power take-off switch data is provided to a second processor to determine the power take-off system status and provide an integrity diagnosis of the power take-off system.

Abstract: Apparatus are provided for an electronic throttle control (ETC) system having a throttle body assembly. The apparatus includes a throttle actuator, an input circuit receiving sensor signals and having first, second, and third reference voltages, a first throttle position sensor (TPS) connected to the second reference voltage, a second TPS connected to the second reference voltage, a manifold absolute pressure (MAP) sensor connected to the first reference voltage, a manifold airflow (MAF) sensor connected to the third reference voltage, and a processor connected to the input circuit and transmitting a control signal to the throttle actuator based on the sensors, reference voltages, and returns. The ETC system has improved remedial actions responsive to failures of the various sensors, reference voltages, and returns.

Abstract: Methods and apparatus are provided for ensuring that a throttle increase accompanying a change in the number of active cylinders of an internal combustion engine will not occur too long with more than a selected fraction of all the cylinders activated, so as to not startle a driver. The apparatus comprises an electronic controller that generates the throttle increase if less than all the cylinders are requested to be activated. A determination is made as to whether the number of cylinders being fueled is equal to or less than the selected fraction. A timer is started if the number of cylinders being fueled is greater than the selected fraction. The throttle increase is turned off if the amount of time measured by the timer exceeds a threshold before the number of cylinders being fueled becomes either less than or equal to the selected fraction.