Abstract: An HV-ECU executes a program including a step (S102) of turning on a fail-safe permission flag if a select sensor is abnormal (YES in step S100), and a step (S108) of transmitting a non-P request signal to a P-ECU if the position of a shift lever is read as the N position (YES in S104) and a predetermined time Tn(2) elapses (YES in S106).

Abstract: Embodiments of the disclosure are directed to measuring, via at least one sensor, at least one of a damage and a compromise associated with a vehicle, determining at least one of a region and a location of the at least one of a damage and a compromise and a level of the at least one of a damage and a compromise, and adapting an operational envelope for the vehicle based on the determined at least one of a region and a location of the at least one of a damage and a compromise and the level of the at least one of a damage and a compromise.

Abstract: A controller sets a target hydraulic pressure of a master cylinder based on the operation amount of a brake pedal, and controls the action of an electric motor so that a master cylinder hydraulic pressure attains the target hydraulic pressure. A brake characteristic representing a relationship between a motor rotation position detected by a resolver and the master cylinder hydraulic pressure as detected by the hydraulic pressure sensor is stored and updated. When the hydraulic pressure sensor is abnormal, a target motor rotation position corresponding to the target hydraulic pressure is set using the updated brake characteristic, and the action of the electric motor is controlled. The electric motor is controlled based on the updated brake characteristic, and hence fluctuations in the vehicle deceleration with respect to the brake operation can be suppressed and a sense of discomfort for the driver can be alleviated.

Abstract: A starting system for an internal combustion engine includes a starter motor and a battery. A method for evaluating the starting system includes detecting a fault associated with the starter motor when a minimum starting system voltage during a cranking event is greater than a threshold minimum starting system voltage determined in relation to an engine acceleration parameter, and detecting a fault associated with the battery when the engine acceleration parameter is less than a minimum threshold for the engine acceleration parameter.

Abstract: A diagnostic apparatus of a hybrid vehicle having an internal combustion engine, a motor, and a diagnostic unit that diagnoses a vehicle state by motoring the internal combustion engine using the motor in a zero output state. A detection unit detects a required driving force of a driver. A determination unit determines whether or not a remaining time required until a diagnostic completion is a predetermined time or less, in a case where the required driving force with a predetermined lower limit value or more is detected by the required driving force detection unit when the vehicle state is diagnosed by the diagnostic unit. A control device causes the motor to output the driving force, when the remaining time is the predetermined time or less, and continues the vehicle state diagnosis using the diagnostic unit by motoring the engine when the output of the internal combustion engine is zero.

Abstract: A method and apparatus diagnoses a correct operation of a phase or star point isolation relay in an electric power steering system of the kind including a motor drive circuit and at least one phase isolation relay which connects a part of the drive circuit to a phase of the motor. The relay is opened during shutdown to isolate the motor phase from the part of the drive circuit and is normally closed during operation of the motor to connect the phase to the part of the drive circuit.

Abstract: An energy protecting device for three and four-engined aircraft includes a detecting unit configured to detect failure of each engine. A control unit is configured to provide a protective function by controlling maximum thrust of each engine. A triggering unit is configured to monitor a plurality of parameters and trigger the control unit to provide maximum thrust at predetermined conditions of the monitored parameters. An inhibiting unit is linked to the triggering unit and is configured to inhibit the protective function, when at least one of the engine on the wings of the aircraft has failed. The control unit is also configured to control the engines that have not failed to minimize thrust imbalance.

Abstract: A brake rotor temperature determination or estimation system and method for controlling output power of a power source in a vehicle. The system includes a brake rotor, a processor, a memory, a speed sensor and a temperature sensor. The speed sensor senses a speed of the vehicle. The temperature sensor senses a temperature of a brake rotor or ambient air in a vicinity of the brake rotor. Based upon data stored in the memory and inputs from the speed sensor or the temperature sensor, the processor determines if an output power of the power source should be limited based on rotor temperature thresholds. The power limits may be defined as discrete power limits corresponding to the particular thresholds of rotor temperature or may be defined as interpolated data values along a linear or nonlinear ramp or slope.

Abstract: Apparatus, and an associated method, for analyzing operation of a multiple-state device, such as a vehicular automatic transmission under multiple-fault occurrence. An identifier identifies all possible path sequences of an initial state responsive to occurrence of all possible faults and all possible remediation actions. The paths are identified for a multiple-fault occurrence of two or more faults. For each of the possible paths, a hazard level is assigned, and the hazard levels are sorted to obtain preferred path sequences. Analysis of the possible paths and their associated hazard levels is made, and a state control scheme is formulated.

Abstract: A method and system are provided to eliminate the risk of over temperature concerns associated with electrical heating devices, which if undetected may result in an electrical over temperature condition. The electrical heating system may be applied to the detection and control structure of other automotive electrical loads where thermal concerns may exist. The electrical heating system combines several layers of fault detection strategies, to form a unique comprehensive approach to prevent and detect potential electrical fault conditions, which if undetected and/or controlled may result in an electrical over temperature condition.

Abstract: A metal plate (14) is buried in a gasket (12) of a case (10) for accommodating an electric device such as an inverter. The metal plate (14) is connected to a control board (400) in the case (10), and the voltage of the metal plate (14) is determined. A reference voltage is applied to the metal plate (14), and the case (10) is grounded. When the metal plate (14) is brought into contact with the case (10) or disconnected due to a crash, the voltage of the metal plate (14) is thereby changed, and the control board (400) detects a crash, based on the change in the voltage.

Abstract: A method and a system of determining failure of a urea level sensor may include: determining whether a difference between current and previous urea levels is smaller than or equal to a first predetermined level; determining, if the difference between the current and previous urea levels is smaller than or equal to the first predetermined level, whether a vehicle speed is faster than a predetermined vehicle speed; determining, if vehicle speed is faster than the predetermined vehicle speed, whether a vehicle acceleration is higher than a predetermined acceleration; determining, if vehicle acceleration is higher than the predetermined acceleration, whether a difference between current and previous raw urea levels is smaller than a predetermined raw urea level; and storing stuck failure code and restricting an output or the vehicle speed if the difference between the current and previous raw urea levels is smaller than the predetermined raw urea level.

Abstract: A method and a system determines failure of a urea quality sensor. The method may include: determining whether a urea temperature is higher than a predetermined temperature; determining, if the urea temperature is higher than the predetermined temperature, whether a vehicle speed is faster than a predetermined vehicle speed; determining, if the vehicle speed is faster than the predetermined vehicle speed, whether a difference between a current urea quality and a previous urea quality is higher than a predetermined urea quality; and storing a failure code if the difference between the current urea quality and the previous urea quality is higher than the predetermined urea quality.

Abstract: In the present invention, on the basis of the results of determining whether or not a constituent element of a vehicle control device is malfunctioning, the malfunction determination logic for determining whether or not the vehicle control device as a whole is malfunctioning is caused to be easily reusable. This vehicle control device determines the level of functional malfunction of the vehicle control device on the basis of what combination of hardware configuring the vehicle control device is malfunctioning, and executes a failsafe function that is in accordance with the level of functional malfunction (see FIG. 5).

Abstract: A termination system that transmits on a cyclic basis, from a control station to an unmanned vehicle, pairs of mutually dependent code and counter values whose dependency is determined by a termination algorithm. The vehicle has knowledge of the algorithm and can hence validate a received code/counter pair using the same algorithm. If the received code/counter pair is invalid, the vehicle can decide to self-terminate. The control station includes a termination actuator that allows the vehicle to be remotely terminated by invalidating, when actuated by an operator, the code/counter pairs that are transmitted to the vehicle.

Abstract: A device (D) is dedicated to the diagnosis of operating situations) in at least one communication network (RC) having a bus (BU) with N wire(s).

Abstract: Systems and methods for learning torque estimate errors and updating torque estimation models are presented. In one example, torque errors are learned during an engine shut-down, after a disconnect clutch coupled between an engine and an electric machine has been released. An updated torque estimation model is then used to control torque during subsequent engine operation to improve drive feel and vehicle performance.

Abstract: Systems and methods for learning torque estimate errors and updating torque estimation models are presented. In one example, torque errors are learned during an engine shut-down, after a disconnect clutch coupled between an engine and an electric machine has been released. An updated torque estimation model is then used to control torque during subsequent engine operation to improve drive feel and vehicle performance.

Abstract: [Object] An electric power steering apparatus capable of returning the steering wheel to a steering wheel neutral position even in case of failure of a steering angle sensor. [Solution] In performing a control action whereby the steering wheel is returned to a neutral position according to the steering angle and yaw rate, the gain of the yaw rate sensor (13) is amplified if a failure in the steering angle sensor (12) is detected, and the damping gain of a damping compensation unit (23) is reduced if failure in at least one of the sensors is detected. Thereby, the steering wheel (1) can return to the neutral position by producing a stronger returning force based on an amplified detection value even if the real yaw rate is small, and the damping component acting on the returning force can be reduced so that the self-aligning torque is enabled to return the steering wheel to the neutral position.

Abstract: A method for operating a powertrain system including a torque machine mechanically coupled to an internal combustion engine includes, upon detecting a pending fault associated with a power switch configured to control power flow to the torque machine, disabling torque output from the torque machine and executing retry events. The retry events are iteratively executed with a debounce time period preceding each retry event. Presence of a fault associated with the power switch is detected when a quantity of the retry events during a time window exceeds a threshold.

Abstract: Industrial vehicles communicate across a wireless environment where the wireless communication, data collection and/or processing capabilities of industrial vehicles are utilized to implement dashboard functions that thread status information from detail level views, up through intermediate views and to summary level views to facilitate efficient fleet maintenance, management and control. Further, industrial vehicle data may be communicated to a trusted third party server. As such, wirelessly collected industrial vehicle information is utilized within applications that aggregate and analyze data across multiple enterprises.

Abstract: A monitoring device is disclosed for an actuation system of an aircraft for monitoring a guiding device of a regulating flap with a load sensor. An actuation system with the monitoring device and a method for reconfiguring such an actuation system are disclosed. The monitoring device includes an interface to the load sensor and an interface to a driving device for adjusting the regulating flap. The monitoring device can determine or receive in-flight information actively signaling a predefined flight attitude and/or a predefined operational state of the aircraft. The monitoring device can compare a load value corresponding to a sensor value acquired by the load sensor and a limiting value corresponding to a minimum operational load for the predefined flight attitude and/or the predefined operational state of the aircraft and a monitoring function. The monitoring function can assign a fault mode to the regulating flap.

Abstract: A control device for an automatic transmission that outputs a command signal to an actuator to control the automatic transmission. The control device configured with a main control section that receives a state of the automatic transmission, that determines an abnormality in the automatic transmission on the basis of the input state of the automatic transmission, and that outputs to the actuator a main control section command signal for controlling the automatic transmission so as to establish a predetermined shift speed when it is determined that an abnormality is occurring in the automatic transmission; and a monitoring section that determines an abnormality in the main control section and that outputs to the actuator a monitoring section command signal for causing the automatic transmission to establish a neutral state irrespective of the main control section command signal when it is determined that an abnormality is occurring in the main control section.

Abstract: A method of diagnosing an operating state of an assisted starting system of a motor vehicle equipped with a controlled parking brake, the method including calculating at least one item of vehicle information, generating at least one item of validity information associated with the vehicle information, recording in a non-volatile memory vehicle information and associated validity information during a command to disengage the parking brake, and providing at least one item of diagnostic information from a verification of the validity of the recorded information.

Abstract: A power steering system including a sensor arranged or located in the steering system. The sensor detects an acoustic vibration or an acceleration signal in the steering system during a change in the steering angle and generates a sensor signal representing the vibration or the acceleration signal. A control unit receives the sensor signal and compares the sensor signal with a threshold value to detect a fault state; for example when the sensor signal is larger than the threshold value.

Abstract: A system and method for providing fault mitigation in a vehicle system having high side drivers (HSDs) and low side drivers (LSDs) are provided. The system includes a first HSD and a plurality of first LSDs. The system also includes a selected first plurality of actuators, with each actuator connected to the first HSD and connected to a respective one of the first LSDs to operate in a first operational mode. The system further includes a second HSD and a plurality of second LSDs. The system also includes a selected second plurality of actuators, with each actuator connected to the second HSD and connected to a respective one of the second LSDs to operate in a second operational mode. When a failed component sets a fault, the corresponding HSD is turned off and the other HSD is turned on, enabling the vehicle system to operate in the non-faulted operational mode.

Abstract: The invention relates to an electrically actuatable assembly of a motor vehicle having at least one component comprising a non-volatile memory. The component has base functionality characteristic for the component and required for the operation of the assembly. The memory comprises a memory region not utilized for realizing the base functionality of the component, in said memory region is stored a characteristic value that identifies the assembly with a predetermined probability. Furthermore, the characteristic value can be read out from the memory region of the component. Finally, the invention describes a method for identifying such an electrically actuatable assembly.

Abstract: A method to control a powertrain having an electric motor includes monitoring a torque command to the motor, predicting a motor torque for the motor based upon the torque command, monitoring an actual motor torque of the motor, comparing the actual motor torque to the predicted torque, and indicating a motor fault when the actual motor torque and the predicted torque differ by more than a calibratable threshold.

Abstract: In a vehicle data network with power storage and distribution systems, a ground fault detector or ground insulation monitoring device provides detection of power leakages. Integrity of the power system is reported to a body computer connected to the data network. Responsive to detection of leakage, controllers for high voltage sub-systems report out of norm power usage compared to expected power demand. The system can take corrective actions including: indicating to the operator occurrence of a ground fault; indicating the likely to the source of the fault; reconfiguring operation of the sub-system which is the likely source of the fault, including turning the sub-system off but not otherwise restricting vehicle operation; turning the sub-system off or limiting its operation after a limited time allowing the operator to configure the vehicle for restricted operation; or, placing the vehicle in a restrictive mode of operation.

Abstract: Disclosed is a hybrid construction machine that includes a control device and an auxiliary control device. The control device switches between a hydraulic/electric complex swing mode in which both the electric motor and the hydraulic motor are driven to drive the swing structure by using the sum of the torque of the electric motor and the torque of the hydraulic motor; and a hydraulic-only swing mode in which only the hydraulic motor is driven to drive the swing structure by using only the torque of the hydraulic motor. The auxiliary control device includes a monitoring controller that is connected to the control device and to the electric motor to monitor the temperature or electrical leakage in the electric motor as a substitute controller for the power control unit or the electrical storage device when the power control unit or the electrical storage device is removed due to a fault.

Abstract: Methods and systems for managing maintenance of a fleet of aircraft are provided. The method includes collecting data from at least one aircraft in each of the fleets related to the operation of the aircraft, determining a range of acceptable values of performance parameters associated with the collected data and based on the collected data, analyzing the collected data having values outside the range of acceptable values, and modifying at least one of a maintenance requirement and an interval between maintenance actions to facilitate reducing the number of performance parameters values that are outside the range of acceptable values during future operation of the aircraft.

Abstract: A method and associated safety system are provided for the recognition of defects in a drive system of a motor vehicle, having an electronically controllable brake control system and having at least one electronically controlled driving engine, an electronically controllable clutch and/or having an electronically controllable transmission. An electronic braking control device is assigned to the brake control system, which braking control device is connected with an independent monitoring module. The independent monitoring module checks for an occurrence of an implausible braking torque, for detecting a defect in the drive system.

Abstract: A method for operating a diagnostic system of a vehicle including a fail operational power system (FOPS) module and a fail operational system (FOS) module includes the FOS module requesting a microcontroller of the FOPS module to generate a diagnostic control signal. The FOS module receives the diagnostic information from a component module of the FOPS module based on the diagnostic control signal generated by the microcontroller. The FOS module executes isolator diagnostics based on the received diagnostic information.

Abstract: An object of the present invention is to enhance the accuracy and the level of detail of an abnormality diagnosis by checking a transmitting-end application or controller for an abnormality by using abnormality diagnosis results concerning a plurality of communication messages. Disclosed is an automotive control unit having a plurality of applications for controlling a vehicle-mounted device and a common execution environment section for permitting the applications to exchange data with each other. The automotive control unit includes a communication protection section that, when the applications exchange data with the common execution environment section, checks the data for an abnormality, and a system abnormality check section that determines in accordance with an abnormality check result produced by the communication protection section whether the system is abnormal.

Abstract: A vehicle includes electrical components, current sensors which determine current flowing through the electrical components, and a control system. The control system calculates and records error index values over an interval using the currents. The control system increments a first counter with every sample in the series, increments a second counter whenever a given error index value exceeds a calibrated high threshold, and decrements the second counter whenever the given error index value is less than a calibrated low threshold. A control action, e.g., recording a PASS or FAIL value, executes when either the absolute value of the second counter or the present value of the first counter reaches a corresponding limit or threshold. A method enhances the robustness of a hybrid vehicle torque security diagnostic using the control system. The vehicle and method use a signed X of Y debouncing or error signal processing method as noted above.

Abstract: A vehicle test system including a plurality of apparatuses mutually communicable via a network. A control apparatus included in the apparatuses controls two or more objects in the vehicle by using respective control modules each having fault detecting module used to detect fault in the object being controlled. A test apparatus connected to the control apparatus commands any one of the control module included in the control apparatus in order to read out fault information in the objects. The control apparatus generates, in response to the test apparatus, a response command indicative of the fault information detected by the fault detecting module and transmits the response command to the test apparatus via the network. The response commands includes both fault information corresponding to the control module to which the test apparatus commands and fault information corresponding to the other control module.

Abstract: A motor control device includes: a rotation angle detection portion that detects a rotation angle of a motor and outputs a rotation angle signal; an abnormal condition detection portion that detects the presence or absence of an abnormal condition of the rotation angle detection portion; a rotation angle estimation portion that estimates the rotation angle of the motor and outputs an estimate rotation angle signal; and a driving control portion that controls driving of the motor on the basis of the rotation angle signal, which is output from the rotation angle detection portion, when the abnormal condition detection portion does not detect an abnormal condition of the rotation angle detection portion, and controls driving of the motor on the basis of the estimate rotation angle signal, which is output from the rotation angle estimation portion, when the abnormal condition detection portion detects an abnormal condition of the rotation angle detection portion.

Abstract: A power relay is provided in a power line, which supplies power from a power source to a motor through an inverter circuit, to shut off power supply from the power source to the inverter circuit when an abnormality arises. A microcomputer diagnoses a short-circuit failure of the power relay when a steering wheel is not steered during a normal control operation of assisting the steering operation of the steering wheel. An EPS shuts off power supply by the power relay when the steering wheel is not steered, so that the short-circuit failure of the power relay is diagnosed without affecting the assist operation for the steering wheel.

Abstract: A semiconductor circuit for an electronic control device for use in a system in a motor vehicle, said system not being mechanically intrinsically safe, and a method for monitoring the semiconductor circuit, wherein the semiconductor circuit comprises a functional computer (FR), at least one monitoring unit (MU) and a monitoring computer (UR), wherein the functional computer (FR), the monitoring unit (MU) and the monitoring computer (UR) are each physically independent of each other, and the full or a restricted function of the semiconductor circuit is ensured by the functional computer (FR) in the event of a failure of the monitoring computer (UR) and vice versa.

Abstract: A method for actuating a component of a drive train of a motor vehicle. The component is mechanically prestressed into a safe state. The method has the steps: sensing a fault state; sensing whether the fault state is a first or second type of fault state; immediate interruption of the actuation of the component so that the component is passively transferred into the safe state by the mechanical prestress if the fault state, is of the first type of fault state, or actuation of the component in such a way that the component is actively transferred into the safe state if the fault state is of the second type of fault state.

Abstract: A solution for further automating the identification and processing of rail vehicles is provided. Each individual rail vehicle in a series of rail vehicles is identified and data is acquired for the rail vehicle. Identification of each rail vehicle can be implemented using a set of electromagnetic beams that are emitted and detected across a set of rails in such a manner as to enable the reliable identification of individual rail vehicles. Data acquisition for the rail vehicles can include evaluation of one or more parts of the rail vehicle, particularly the rail wheels, for the presence of one or more defects. Data on the part(s), such as rail wheels, can be reliably assigned to a corresponding rail vehicle by also accounting for changes in the direction of movement of the rail vehicle in locations such as a classification yard.

Abstract: Embodiments relate to systems and methods for vehicle monitoring with processing interruption tolerance. One or more vehicle sensors can transmit one or more data streams to a primary data processing system via a data channel. A secondary data buffer can be coupled to the data channel to continuously capture the set of data streams and/or subsets thereof. During normal operation, the set of data streams are processed by the primary data processing system. After a limited-duration fault occurs in the primary data processing system, it can recover by accessing the backup data in the secondary data buffer. The lost data can be retrieved from the secondary data buffer using timestamp information to process the data in its original time context and to ensure that no already-processed data is included. The set of data streams can be downsampled or decimated in the secondary data buffer to extend storage capacity.

Abstract: Provided are a braking control system for a vehicle which is controlled in a priority order, and a method of the same. A braking control system for a vehicle equipped with an electronic brake at each wheel includes a first control unit controlling the operation of a first electronic brake mounted at a front-left wheel and a second electronic brake mounted at a front-right wheel in response to braking signals, and a second control unit controlling the operation of a third electronic brake mounted at a rear-left wheel and a fourth electronic brake mounted at a rear-right wheel in response to the braking signals. In this configuration, when a fail occurs in any one of the first and second control units, the other control unit selectively controls at least one or more of the first to fourth electronic brakes, in accordance with predetermined logic.

Abstract: In a system and method for communicating data in a locomotive consist or other vehicle consist (comprising at least first and second linked vehicles), a first electronic component in the first vehicle of the vehicle consist is monitored to determine if the component is in (or enters) a failure state. In the failure state, the first electronic component is unable to perform a designated function. Upon determining the failure state, data is transmitted from the first vehicle to a second electronic component on the second vehicle, over a communication channel linking the first vehicle and the second vehicle. The second electronic component is operated based on the transmitted data, with the second electronic component performing the designated function that the first electronic component is unable to perform.

Abstract: A method and electrical system for detecting and compensating for a failure in a starter circuit that comprises first and second relays in a circuit path to a starter motor of a vehicle. The method and system determine if at least one of the first or second relays is in a closed position when it should be in an open position and disables a vehicle starter operation if it is determined that at least one of the first or second relays is in the closed position when it should be in the open position. The vehicle starter operation could be a stop-start operation of the engine.

Abstract: A method for diagnosing a device of a vehicle, includes: generating samples of a parameter of the device; indicating whether each of the samples passed or failed based on comparisons of the samples with one of a predetermined value and a predetermined range; tracking a first number of consecutive samples compared, a second number of the first number of samples that failed, a third number of the first number of samples that failed consecutively, and a fourth number of a last predetermined number of samples compared that failed; selecting one of a normal control mode, a temporary default action mode and a permanent default action mode based on the first, second, third, and fourth numbers; and selectively setting a diagnostic trouble code (DTC) in memory when in the permanent default action mode.

Abstract: A method of detecting an in-range failure of a brake pedal position sensor includes calculating the difference between a minimum position and a maximum position of the brake pedal position sensor. The calculated difference is weighted to define a fast test weighted input value and/or a full test weighted input value. A cumulative test result value is incremented by the fast test weighted input value and/or the full test weighted input value. The cumulative test result value is filtered to define a moving average of the cumulative test result value after each incremented occurrence. The moving average of the cumulative test result value is tracked to determine if the brake pedal position sensor is functioning properly.

Abstract: A creep travel capability of an electric vehicle is secured when an abnormality occurs in a brake sensor. When an accelerator operation amount reaches 0% in a low vehicle speed region, a target creep torque is set, whereupon a motor-generator is controlled toward the target creep torque. The target creep torque is reduced as a brake pedal is depressed in order to suppress heat generation and the like in the motor-generator during vehicle braking. Hence, in an electric vehicle in which the target creep torque is varied in accordance with the brake operation amount, when an abnormality occurs (step S11) in a brake sensor for detecting a brake operation amount, a preset prescribed creep torque is employed as the target creep torque regardless of the brake operation amount (step S15). The prescribed creep torque is set at a required magnitude for securing the creep travel capability.

Abstract: A system for wireless process control comprises at least a first wireless network, which is used to communicate real-time instructions and data between one or more pieces of mobile equipment to at least one other piece of mobile equipment. In one variant, a second wireless network is provided, using a different radio frequency band, to concurrently communicate the same or substantially the same real-time instructions and data as are communicated over the first wireless network.

Abstract: An actuator arrangement for a motor vehicle drive train has a control device, an electric actuator and a drive circuit for the actuator. The drive circuit receives at least one nominal signal relating to an actuator from the control device and converts it into a drive signal for the actuator. The control device is checked for faults by means of a monitoring device. The drive circuit and/or a power stage which is arranged between the drive circuit and the motor receives a reset signal when such a fault occurs. Further, the control device is configured to check the function of the drive circuit and to generate a reset signal for the drive circuit and/or for the power stage if a malfunction occurs.