Abstract: A microprocessor system for safety-critical control operations includes at least three central units which are preferably located jointly on one chip and execute the same program. Further, there is provision of read-only memories and random-access memories with additional memory locations for test data, input and output units and comparators which check the output signals of the central units for correlation. The central units are interconnected by way of bus systems and bypasses which enable the central units to jointly read and process the existing data, including the test data and commands, according to the same program. The central units are extended by redundant periphery units into two complete control signal circuits and are interconnected in such a manner that, upon failure, the faulty central unit is identified by a majority decision and an emergency operation function is maintained.

Abstract: The present invention relates to an electro-hydraulic brake system for motor vehicles which is controllable in a ‘brake-by-wire’ operating mode by the vehicle operator as well as independently of the vehicle operator, and which can be operated in a back-up operational mode where only operation by the vehicle operator is possible. The brake system includes an emergency pressure generator or master brake cylinder which has at least one pressure chamber and is operable by way of a brake pedal, and a hydraulic auxiliary pressure source whose pressure is used to act upon wheel brakes that are connectable to the master brake cylinder by way of at least one hydraulic connection closable by a separating valve, as well as an electronic control and regulating unit.

Abstract: By a method for detecting an output-stuck fault of a car body acceleration sensor, an absolute value of a relative difference between the logical car body acceleration operated on the basis of a wheel speed and the physical car body acceleration output from a car body acceleration sensor is obtained, and the obtained absolute value of the relative difference is compared with a first rated value. When the absolute value of the relative difference exceeds the first rated value, a fail counter is made to start to count up at that point of time. When a counted value of the fail counter exceeds one second during the absolute value of the relative difference is exceeding the first rated value, the difference of the maximum value and the minimum value of the physical car body acceleration during the period is compared with a second rated value.

Abstract: A device for monitoring a pressure sensor, which is positioned in a braking system of a vehicle. For this purpose, the device contains arrangement with which, during a braking action, a first vehicle motion variable is ascertained, which characterizes a vehicle motion in the longitudinal direction. The device further includes arrangement with which a mass variable is ascertained, which characterizes the mass of the vehicle. Using further arrangement, it is ascertained, for the monitoring of the pressure sensor, whether the first vehicle motion variable lies within a value range for the first vehicle motion variable, whose limits are ascertained as a function of the mass variable.

Abstract: A method and apparatus control target deceleration of a vehicle in response to a master cylinder pressure and the like. A controlled braking mode in which the pressure in each wheel cylinder is controlled based on the target deceleration, and a driver braking mode in which the pressure in each wheel cylinder is directly controlled by a master cylinder. When an abnormality in the braking control is detected, the ratio of the wheel braking force to the amount of driver's braking operation is gradually adjusted closer to the ratio set for the driver braking mode.

Abstract: An electrical system architecture for a vehicle brake by wire system provides three electrical power sources: an electric generator, an electric power storage device such as a battery, and a third source which may be either an electric generator or storage device. An electric circuit has a common node and (1) connects the first electric generator to the common node through a first diode, (2) connects the first electric power storage device to the common node through a second diode, (3) connects the electric power source to the common node through one of the first and second diodes, and (4) connects the common node to the electric power inputs of control unit through circuit breaker devices. A sub-circuit within the electric circuit interconnects the first and second diodes, the common node and the first and second circuit breaker devices and isolates them within a zone protected from short circuits to points outside the zone.

Abstract: By allowing for the possibility that light-weight spare wheels or spare wheels are mounted, a demonstration of the possible ways for replacing the output signals of one or more defective wheel speed sensors is presented.

Abstract: A method of monitoring the motion of an actuator of a vehicle brake including establishing an actuator reference coordinate which is associated with a predetermined actuator reference position, defining an actuator actual coordinate in accordance with the actuator reference coordinate and in accordance with the motion of the actuator, establishing a first permitted actuator motion range from a permitted release end coordinate of the actuator for release of the brake and a first permitted brake application end coordinate of the actuator for application of the brake in accordance with the actuator reference coordinate and outputting a signal when the actuator actual coordinate lies outside the first permitted actuator motion range.

Abstract: The device according to the present invention relates to a device for monitoring a pressure sensor, which is positioned in a braking system of a vehicle. For this purpose, the device contains means with which, during a braking action, a first vehicle motion variable is ascertained, which characterizes a vehicle motion in the longitudinal direction. The device further includes means with which a mass variable is ascertained, which characterizes the mass of the vehicle. Using further means, it is ascertained, for the monitoring of the pressure sensor, whether the first vehicle motion variable lies within a value range for the first vehicle motion variable, whose limits are ascertained as a function of the mass variable.

Abstract: A method and apparatus for data exchange between a towing vehicle and an attached trailer uses radio contact via transmission/receiving modules contained in the towing vehicle and in the trailer. To recognize that the towing vehicle and the trailer are connected, the transmission/receiving module of the towing vehicle transmits an identification signal, and at the same time, changes the electrical status of a connection line between the towing vehicle and the trailer. If the transmission/receiving module located in the trailer recognizes the change in the electrical status of the connection line simultaneously with receiving the transmitted identification signal, the identification signal is stored within the trailer. In subsequent communications between the towing vehicle and the trailer, the identification signal is always transmitted before the message. As such, only the attached trailer, with the appropriate stored identification signal, can communicate with its towing vehicle.

Abstract: An electronic digital device for controlling or adjusting processes in a motor vehicle has several components, of which at least one arithmetic unit and a bus connecting the components are redundant. At least one component is not redundant. The electronic device can exhibit a preferably redundant monitoring device which compares the data arising in the redundant systems and outputs an error signal when the data deviate from one another.

Abstract: A method and apparatus for detecting and compensating for wheel brake irregularities includes a unit for detecting a control signal that controls a brake actuator, a unit for detecting changes of the control signal generated by the actuator, and a unit for evaluating control signal changes. The frequency and amplitude of such changes are analyzed to detect the existence of a brake irregularity.

Abstract: A vacuum booster apparatus used for a brake apparatus positively decreases a degree of opening of a throttle valve when it is required while an unnecessary decrease in the degree of opening of the throttle valve is positively prevented. A first pressure chamber of a vacuum booster is connected to an intake pipe of the engine on a downstream side of a throttle valve. A second pressure chamber of the vacuum booster is selectively connectable to one of the first pressure chamber and atmosphere. The vacuum booster boosts an operating force applied to a brake operating member based on a pressure difference between the first pressure chamber and the second pressure chamber. A throttle-opening-degree control device controls a negative pressure in the first pressure chamber by controlling the degree of opening of the throttle valve.

Abstract: An electro-hydraulic braking system of the type capable of operating in a brake-by-wire mode wherein hydraulic pressure is applied to braking devices at the vehicle wheels in proportion to the driver's braking demand as sensed electronically at a brake pedal, wherein when it is detected that there exists within the system a prescribed category of non safety-critical fault, it is arranged that the driver is caused to experience a modified, different to usual, travel/force behaviour characteristic through the braking pedal when braking.

Abstract: In a brake system of a vehicle in which a pair of wheel cylinders are supplied with a fluid pressure by a fluid circuit having a pair of inlet control valves for selectively connecting the pair of wheel cylinders respectively to an outlet port of a motor-driven pump and a pair of outlet control valves for selectively connecting the pair of wheel cylinders respectively to a fluid reservoir, a brake control device controls the motor driving of the pump and opening/closing of the inlet and outlet control valves, such that a controlled fluid pressure is supplied to the pair of wheel cylinders at least temporarily with the pair of inlet control valves substantially fully opened, while the pair of outlet control valves substantially closed, wherein it is judged if there is a difference between output signals of a pair of wheel cylinder pressure sensors beyond a predetermined threshold value, thereby judging the pair of wheel cylinder pressure sensors to be both operating normally when the difference is not larger t

Abstract: A behavior control device of a vehicle including a longitudinal acceleration sensor has a judgment system for judging if the longitudinal acceleration sensor is operating normally by comparing an output of the acceleration sensor with a corresponding longitudinal acceleration of the vehicle detected based upon a wheel rotation speed detected by a sensor therefor, excepting at least when the acceleration sensor output is much different from a longitudinal acceleration calculated based upon a wheel drive torque, so that the reliability of the behavior control incorporating the acceleration sensor is ensured, while when the acceleration sensor is not operating normally, the behavior control is modified or suspended.

Abstract: An electronically controlled brake system includes a brake actuator wherein a valve is electrically controlled to maintain the spring chamber in the non-actuated position during normal operation. However, should there be a failure in the electrical system, then the spring chamber is allowed to set the brake actuator. The “failure” could also include a diagnostic system included in the control which identifies a failure in control operation. In this way, should there be an electrical failure, either in the control or power circuits, the truck is stopped.

Abstract: A vehicular brake controlling apparatus comprises: a brake unit to enable a suppression of boosting a braking liquid pressure independently of each wheel cylinder, each wheel cylinder operatively braking a corresponding one of vehicular front and rear road wheels according to the braking liquid pressure; a plurality of road wheel velocity sensors, each road wheel velocity sensor detecting a revolution velocity of the corresponding one of the road wheels and outputting a signal indicating the detected road wheel revolution velocity thereof; and a controller configured to be enabled to execute such a braking force distribution control function as to controllably operate the brake unit to suppress the boosting in the braking liquid pressure for the rear road wheels on the basis of a revolution velocity difference between the front and rear road wheels derived from the signals outputted from the respective road wheel velocity sensors when the revolution velocity difference is in excess of a predetermined start th

Abstract: A device for monitoring a transverse acceleration sensor located in a vehicle and detecting a first transverse acceleration quantity. The device includes a processing device that has at least one filtering device used to filter the first transverse acceleration quantity, yielding a filtered transverse acceleration quantity. A second transverse acceleration quantity is determined by determining device as a function of wheel speed quantities detected by a corresponding detecting device. A comparison between the filtered transverse acceleration quantity and the second transverse acceleration quantity is carried out in a monitoring device to monitor the transverse acceleration sensor.

Abstract: A method and device for controlling a braking system of a motor vehicle in open loop, in which the wheel-brake pressure in the individual wheel brakes is adjusted via closed pressure-control loops. Different secondary braking operations are initiated depending on the fault condition. The faults are detected on the basis of a model which takes into account the prevailing operating state of the braking system.

Abstract: An electronic control unit for an automotive vehicle which can be manufactured at a low cost and which is compact in size, includes a first microprocessor which has a first memory storing one of a plurality of arithmetic programs for controlling respective predetermined control systems, and which is connected to at least one external sensor and an actuator of a corresponding one of the predetermined control systems. The first microprocessor arithmetically processes information from the at least one external sensor based on the one of the plurality of predetermined arithmetic programs stored in the first memory, and delivers a control signal as a result of the arithmetic processing to the actuator. A second microprocessor is connected to the first microprocessor to deliver and receive data to and from the first microprocessor, thereby monitoring operation of the same.

Abstract: A method of electronic brake force distribution is applied to contribute to vehicle stability even in the event of failure of the system that detects failure of the front-axle brake circuit (13) in a vehicle (1). The method involves initiating a pressure maintenance or pressure reduction phase only after the standards with respect to a minimum vehicle deceleration upon brake circuit failure are met. This way, it is ensured that the standards are observed, on the one hand, and locking of the rear wheels (6,7) before the front wheels (4,5) is prevented with great likelihood, on the other hand. Thus, electronic brake force distribution (EBD) is switched over to less sensitive criteria. This makes allowance for both possibilities in the event of a failure of a pressure switch (15), i.e., that the front-axle brake circuit (13) is intact or that it is defective.

Abstract: A device for controlling an electro-hydraulic brake system of a vehicle checks if the battery or the alternator forming an electric power source for the electric part of the brake system is in its normal operating condition, and when the battery or the alternator is not in its normal operating condition, lowers the load imposed on the battery, so as to care the battery against a too soon failure. The device may also check if the driver is pumping the brake pedal at a substantial standstill of the vehicle, and when the brake pedal is so pumped, also lowers the load imposed on the battery, so as to care the battery against a useless consumption of the battery.

Abstract: A method for detecting fault in vehicle motion sensors for a motor vehicle includes providing a measured lateral acceleration signal and yaw rate signal. The method further includes calculating, respectively, a first and second road bank angle estimate based on these signals. Also included is determining a first and second maximum road bank angle based on the first and second road bank angle, respectively, and calculating a first and second threshold based on these values. The method further includes comparing whether the first and second road bank angles exceeds the second and first thresholds, respectively, and if so, indicating either one or both a lateral acceleration signal fault or yaw rate signal fault.