Abstract: The present application describes a supervision and decision hardware unit compatible with redundant-based sensors architectures, targeting a fail operational sensor design. The herein disclosed invention describes a supervision and decision unit, based on a “decision block” embedded in a redundant sensor architecture, allowing the supervision of each isolated subsystem. Beyond that, each isolated subsystem is able to provide the full required information of sensor and indicate the operation state of each independent subsystem. This unit is developed to be incorporated in a fail operation sensor design, including supervision and circuitry independency, and promoting sharing of data through a galvanic isolated communication.

Abstract: A Steering Angle Sensor (SAS), equipped with a redundancy system to allow the bypass of any failing part, keeping all functionalities intact, while ensuring all the required safety integrity levels is provided. The proposed fail operational redundant steering angle sensor (100) has two functional blocks (70) responsible to determine the absolute angle between at least two angling sensing devices, detecting systematic failures of the devices.

Abstract: A fail operational steering angle sensor for vehicles is provided. The fail operational Steering Angle Sensor comprises one central gear (hub) and two outer gears (Gear 1 and Gear 2) mechanically connected to the hub. The two outer gears have magnetic properties, and they are arranged in the vicinity of a Printed Circuit Board (PCB). The SAS Fail Operational is connected to a Steering Wheel Actuator shaft that, by means of a mechanical connection with the central gear, the two outer gears and a rotor arranged between the central gear and the PCB, provides angular rotation to the above-mentioned moving parts. The variations of the magnetic field and flux originated in the rotation of the mechanical parts will be determined by the PCB.

Abstract: A method for checking an interface module, the interface module returning to the processor, using a second data message, stored values representing sensor values, after a request for a test by a processor using a data message. Using these firm sensor values, the processor can check the functioning of the interface module and its own algorithm. A safety module, which also picks up the sensor values, also checks its functioning with them, since the safety module is a redundant hardware path to the processor and is used as a plausibility check for the release decision of means of restraint. The interface module is changed into a test mode as soon as it receives the first data message from the processor, and it then suppresses the transmission of the real sensor values which were received from connected sensors.

Abstract: A sensor has a transmitter module for transferring data via a line, the sensor receiving power via the line. At a point in time in which the sensor receives a first power level, it transmits the data for a first time interval. A second sensor which is connected to the line in parallel to the first sensor then transmits its data for a second time interval after the first time interval. A timing sequence control system in the two sensors which is triggered by the point in time of reception of the power ensures the subsequent transmission by the first and second sensor.

Abstract: A sensor has a transmitter module for transferring data via a line, the sensor receiving power via the line. At a point in time in which the sensor receives a first power level, it transmits the data for a first time interval. A second sensor which is connected to the line in parallel to the first sensor then transmits its data for a second time interval after the first time interval. A timing sequence control system in the two sensors which is triggered by the point in time of reception of the power ensures the subsequent transmission by the first and second sensor.

Abstract: A method of data transmission from a sensor to a control unit and a sensor and control unit are described, the sensor transmitting both differential values and absolute values. The differential values are analyzed in the control unit to perform the function provided, and the absolute values are analyzed for the plausibility check of the function.

Abstract: A device for impact sensing is described which detects an impact by a pressure, a normalized signal being supplied to a processor for analyzing the pressure signal. This normalization may occur either in the pressure sensor, by the sensor element itself or by a signal preprocessor, or in the processor.

Abstract: An interface module is proposed, to which sensors are connected and which is positioned in a control device, it being indicated via an identification input how the sensor data are to be classified by the interface module. In particular, this can be used to distinguish between safety-relevant and safety-irrelevant data. Furthermore, the nature of the data can be identified therewith. This identification input is advantageously designed as a voltage input, the voltage levels being then converted into a bit sequence. The identification input is connected to ground via a resistor, so that, in the case of an unspecified input potential, the voltage level is connected to ground. The interface module has a logic circuit to which voltage comparators are connected, which compare the voltages to reference potentials, and then the logic circuit performs a coding using the bit sequences, as a function of the output signals of the voltage comparators.

Abstract: A device for impact sensing is described which detects an impact by a pressure, a normalized signal being supplied to a processor for analyzing the pressure signal. This normalization may occur either in the pressure sensor, by the sensor element itself or by a signal preprocessor, or in the processor.

Abstract: A method for transmitting data from at least one sensor to a control unit via an appropriate two-wire line is described. The method is used to identify any sensor at the control unit and to implement a plurality of logical channels via the appropriate two-wire line. The at least one sensor receives the necessary electrical energy from the control unit via the two-wire line and then transmits the sensor-specific data.

Abstract: A method of data transmission from a sensor to a control unit and a sensor and control unit are described, the sensor transmitting both differential values and absolute values. The differential values are analyzed in the control unit to perform the function provided, and the absolute values are analyzed for the plausibility check of the function.

Abstract: A device for controlling firing circuits for restraining devices, a processor and a safety IC for controlling the restraining devices being connectable to the firing circuit control, and the firing circuit control having blocking inputs and blocking registers for the blocking of groups of connectable firing circuits; the processor setting the blocking registers after switching-on (of the device) and logically linking the firing circuit control data of the blocking inputs and the blocking registers with one another, so as to block individual groups of firing circuits. Thus it is especially possible individually to block firing circuits for air bags in dependence upon the degree of occupancy and the classification of the occupants in a vehicle. Setting the blocking inputs and the blocking registers takes place shortly after switching-on (of the device), after function tests of the IC's have been conducted.

Abstract: A device for data transmission between vehicle sensors and a control unit, which is used to decode data telegrams having sensor data from the vehicle sensors and to reformat them into SPI (serial peripheral interface) data telegrams. Furthermore, an interface module of the control unit transmits the SPI data telegrams to the processor of the control unit. By using an alter bit, the processor determines whether to retrieve the newest sensor data or the preceding sensor data. The interface module converts the sensor data in each case into a 10-bit data field of an SPI data telegram, into which the interface module may supplement missing data. By counting out the edges, it is possible for the interface module to recognize the data telegrams from the sensors.

Abstract: Proposed is a method for transmitting data from at least one sensor to a control unit via an appropriate two-wire line, the method being used to identify any sensor at the control unit and to implement a plurality of logical channels via the appropriate two-wire line. The at least one sensor receives the necessary electrical energy from the control unit via the two-wire line and then transmits the sensor-specific data.

Abstract: A device is proposed for data transmission between vehicle sensors and a control unit, which is used to decode data telegrams having sensor data from the vehicle sensors and to reformat them into SPI (serial peripheral interface) data telegrams. Furthermore, an interface module of the control unit will then transmit the SPI data telegrams to the processor of the control unit. By using an alter bit, it is possible for the processor of the control unit to retrieve either the newest sensor data or the preceding sensor data. The interface module converts the sensor data in each case into a 10-bit data field of an SPI data telegram, the interface module supplementing missing data if necessary. By counting out the edges, it is possible for the interface module to recognize the data telegrams from the sensors.

Abstract: A device and a method are proposed for controlling firing circuits for an element of restraint, individual transistors of the output stages being controlled by bit combinations, and impermissible bit combinations lead to an error message to a processor. In addition, a firing current is measured, in order to estimate a firing energy from it, so that efficient energy management can be carried out. Furthermore, determination of the firing current makes it possible to update a crash protocol as to whether the firing circuit was activated or not. When a voltage of the energy reserve is exceeded, it is further proposed to switch over to pulse operation for operating the output stages. Thereby a greater resistance to short-circuits and a higher efficiency are achieved.

Abstract: A method for checking an interface module, the interface module returning to the processor, using a second data message, stored values representing sensor values, after a request for a test by a processor using a data message. Using these firm sensor values, the processor can check the functioning of the interface module and its own algorithm. A safety module, which also picks up the sensor values, also checks its functioning with them, since the safety module is a redundant hardware path to the processor and is used as a plausibility check for the release decision of means of restraint. The interface module is changed into a test mode as soon as it receives the first data message from the processor, and it then suppresses the transmission of the real sensor values which were received from connected sensors.

Abstract: A device and a method are proposed for controlling firing circuits for an element of restraint, individual transistors of the output stages being controlled by bit combinations, and impermissible bit combinations lead to an error message to a processor. In addition, a firing current is measured, in order to estimate a firing energy from it, so that efficient energy management can be carried out. Furthermore, determination of the firing current makes it possible to update a crash protocol as to whether the firing circuit was activated or not. When a voltage of the energy reserve is exceeded, it is further proposed to switch over to pulse operation for operating the output stages. Thereby a greater resistance to short-circuits and a higher efficiency are achieved.

Abstract: A device for controlling firing circuits for restraining devices, a processor and a safety IC for controlling the restraining devices being connectable to the firing circuit control, and the firing circuit control having blocking inputs and blocking registers for the blocking of groups of connectable firing circuits; the processor setting the blocking registers after switching-on (of the device) and logically linking the firing circuit control data of the blocking inputs and the blocking registers with one another, so as to block individual groups of firing circuits. Thus it is especially possible individually to block firing circuits for air bags in dependence upon the degree of occupancy and the classification of the occupants in a vehicle. Setting the blocking inputs and the blocking registers takes place shortly after switching-on (of the device), after function tests of the IC's have been conducted.