This application claims priority to Application No. 10028352.7 which was filed in the German language on Jun. 8, 2000.
The invention relates to a method for releasing the firing capability of at least two firing stages which can be fired separately in a vehicle occupant protection system and electric release circuit for a vehicle occupant protection system.
In motor vehicle occupant protection systems, airbags are being increasingly used which have two gas generators which are each equipped with their own firing stage. In this way, the inflation of the airbag can be adapted better to the respective requirements. If the second inflation stage is not required to protect the persons to be protected when there is an accident or if its firing even constitutes a hazard, it is possible for the second stage not to be fired directly after the first stage. However, so that helpers or rescue service personnel are not put in danger as a result of the second stage firing, it is expedient to fire the second stage automatically after the first stage, but at a time at which the person to be protected is no longer placed in danger. For it to be at all possible to fire a firing stage, a safety switch must be closed. Such a safety switch generally closes even when there are decelerations below a threshold value at which it is necessary to inflate the airbag.
If, as in the case described above, firing the second firing stage takes place with a long delay with respect to that of the first firing stage, the safety switch is opened again so that it is no longer possible to fire the second stage.
According to an aspect of the invention, a method is provided for releasing the firing capability of at least two firing stages which can be fired separately in a vehicle occupant protection system.
According to another aspect of the invention, an electric release circuit for a vehicle occupant protection system having at least two firing stages is provided. The invention can be applied in particular for motor vehicle occupant protection systems.
An object of the invention is to provide a remedy for the above-mentioned problem.
The switching device provided according to an aspect of the invention ensures that as soon as the safety switch is closed and the controller evaluates the output signal of the accident sensor in such a way that only one firing stage has to be fired in order to protect a person, during a time which is long enough to fire the second stage with such a delay that the person is no longer put in danger, a signal state is maintained which corresponds to the closed safety switch.
The controller can in this way never independently simulate closing the safety switch but instead it is only possible to maintain the signal state of a previously closed safety switch during the predetermined time period.
The invention can be used advantageously wherever systems, in particular protection systems, are triggered with multiple stages in response to external influences and are protected by a safety switch which releases the operation of the protection system.
The invention is described below with reference to the drawings, in which:
According to
A safety switch 20 is contained in a bridge circuit 22 which has resistors 24, 26 and 28 and is connected to a voltage source 29. A tap 30 of the bridge circuit 22 is connected to an input of a comparator 32 whose other input is connected to the other tap 34 of the bridge circuit 22.
A timing element 36 whose output is connected to one input of an OR element 38, whose other input is connected to the output of the comparator 32 in parallel with the timing element 36, is connected to the output of the comparator 32.
The output of the OR element 38, which, as will be explained below, forms a safety signal output 39, is connected to a control and data input 40 of the circuit module 16 and to the control input of a switch 42 which is embodied, for example, as a transistor. The switch 42 is located between a firing capacitor 44 and the firing stages 2 and 4. An output 46 of the circuit module 16 is connected via a diode 48 to the tap 30 of the bridge circuit 22.
The design and function of the described component and the basic function of an airbag system are known per se and are therefore not explained.
The interaction of the circuit elements is described below:
The safety switch 20 is embodied in such a way that it closes when there is a deceleration above a threshold value, this deceleration being below the deceleration which leads to triggering of the airbag. Closing the safety switch 20 leads to the signal level to one input of the comparator 32 changing, as a result of which its output level goes, for example, to a high level and the timing element 36 starts. The expiration time period of the timing element is, for example, approximately 100 ms, this time period being advantageously selected such that it is longer than the longest delay with which the second firing stage, for example the firing stage 4, is fired with respect to the firing stage 2 if both firing stages are fired for optimum protection of a vehicle occupant.
During the time period during which the timing element 36 is activated, a high level signal is present at the corresponding input of the OR element 38. As long as the safety switch 20 is closed, a high level signal is also present at the other input of the OR element 38. Thus, when the safety switch 20 is closed (the closing period may be very short under certain circumstances) and/or when the timing element 36 is still running, a safety signal which switches the switch 42 to the conducting state is present at the safety signal output 39, so that the firing voltage which is supplied by the firing capacitor 44 is present at corresponding inputs of the firing stages 2 and 4. The firing stages 2 and 4 are thus released for firing, which takes place if the controller 6 generates corresponding firing signals after the output signals of the accident sensor 8 are evaluated. When the safety switch 20 is open and the timing element 36 has expired, the safety signal at the safety signal output 39 ends, and the switch 42 opens, so that the firing stages 2, 4 can normally no longer be fired.
If the controller 6 evaluates the output signals of the accident sensor 8 to the effect that only the first firing stage 2 has to be fired to provide personal protection, said controller 6 generates, at the signal output 18, a clock signal which is fed to the signal input 19 of the circuit module 16. The safety signal which is present at this time is present at the data input 40 of the circuit module 16. This signal state leads to the situation in which a low level appears at the output 46 of the circuit module 16 and is connected in parallel with the safety switch, which low level places the tap 30 in the same level state as the closed safety switch 20, as a result of which the safety signal is retained at the output of the OR element 38. The switch 42 thus remains closed so that the controller 6 can fire the second firing stage 4 with sufficient delay in order to avoid placing the person who is protected by the firing of only the first firing stage in danger. This firing can take place although the firing switch 20 is open again and the timing element 36 has expired.
The circuit module 16 is reset by a reset pulse which the controller 6 generates with sufficient delay after the firing of the first firing stage at its output 10, or by a general system reset pulse which the controller switch generates at its output 12. The NAND element 14 feeds these pulses to the reset input of the circuit module 16. The circuit module 16, which is embodied for example as a D-flip flop, thus forms a self-locking circuit which is actuated by signals at its inputs 19 and 40 and maintains its output level until a reset takes place. The diode 48 serves to isolate the bridge circuit 22 from the circuit module 16 in such a way that only the low level at the output 46 and/or the low level which is brought about by the closing the safety switch 20 are effective.
The described release circuit which releases the firing capability of the firing stages 2, 4 by firing pulses which are generated by the controller 6 ensures that the release can be prolonged beyond the period during which the safety switch 20 is closed or the period which is predefined by the timing element 36, only if the safety switch 20 is initially closed and the controller 6 determines that only one of the two firing stages is allowed to be fired in order to protect a vehicle occupant. The circuit component 16 then places its output 46, which is connected in parallel with the safety switch 20, at a level which corresponds to the closed safety switch (for example to ground) so that a signal which corresponds to the closed safety switch 20 is present at the output of the OR element 38.
The described circuit can be modified in various ways. The firing stages 2 and 4 can be assigned separate firing energy sources which are released by separate switches. The comparator 32 is not absolutely necessary; likewise, the NAND gate can be dispensed with if only one reset is provided. The circuit module 16 which forms a logic circuit can be constructed in such a way that it contains a separate timing element which resets it automatically after a predetermined time period.
Filing Document | Filing Date | Country | Kind | 371c Date |
---|---|---|---|---|
PCT/DE01/02137 | 6/7/2001 | WO | 00 | 5/27/2003 |
Publishing Document | Publishing Date | Country | Kind |
---|---|---|---|
WO01/94163 | 12/13/2001 | WO | A |
Number | Name | Date | Kind |
---|---|---|---|
5184845 | Omura | Feb 1993 | A |
6036225 | Foo et al. | Mar 2000 | A |
6682094 | Laituri et al. | Jan 2004 | B1 |
20020147533 | Foo et al. | Oct 2002 | A1 |
20030197356 | Fischer | Oct 2003 | A1 |
20050057030 | Fischer et al. | Mar 2005 | A1 |
Number | Date | Country |
---|---|---|
198 27 427 | Dec 1999 | DE |
0 982 199 | Mar 2000 | EP |
9-240416 | Sep 1997 | JP |
11-301392 | Apr 1998 | JP |
11-91501 | Apr 1999 | JP |
WO 0032445 | Jun 2000 | WO |
Number | Date | Country | |
---|---|---|---|
20030189325 A1 | Oct 2003 | US |