Patent Application
20240391440
The present invention relates to a hydraulic brake system having at least two brake circuits and having at least one pressure provision unit.
The requirements, in particular safety requirements (for example two-circuit brake system), have a major influence on the design of a brake system and become more stringent with the degree of automation (levels zero to five of the SAE J3016 standard) of the motor vehicle. For example, in the case of autonomous driving for level one or higher (for example for an adaptive cruise control system), the braking force must be ensured even without an actuation of a brake pedal by the driver of a vehicle. This requires at least one pressure provision unit in a hydraulic brake system and a correspondingly configured electronic sensor and control unit. The acceptance of faults is likewise dependent on the automation level. In level two, individual faults are allowed if braking operations with at least approximately 0.3 g are possible, whereas, in level three, even braking operations with at least approximately 0.5 g should be ensured in the event of individual faults. For level three and higher, the ABS/ESP function must likewise be ensured even in the event of an individual fault. In general, double faults are accepted if the probability of failure based on ppm and FIT data is low.
The present invention relates to a brake system having two brake circuits. At least the requirements of level two according to the SAE J3016 standard are preferably met, wherein, furthermore, double faults that lead to total failure of the brake system can be avoided and so-called dormant individual faults can be identified in good time through redundancies and diagnostics.
According to a first aspect, the invention relates to a brake system for a vehicle, comprising the following components:
Aspect 2: The brake system according to aspect 1, wherein the at least one pressure supply device (DV) comprises a rotary pump. Rotary pumps are normally less expensive than, for example, plunger pumps.
Aspect 3: The brake system according to aspect 2, wherein the rotary pump is designed as a gear pump or as a multi-piston pump, in particular a three-piston pump.
Aspect 4: The brake system according to aspect 3, wherein the pressure supply device (DV) is connected to at least one of the brake circuits (BK1, BK2) via a check valve (RV3) which closes toward the pressure supply device (DV) or via a solenoid valve.
Aspect 5: The brake system according to aspect 3, wherein the multi-piston pump is connected directly to at least one of the brake circuits (BK1, BK2), wherein directly connected means that there is no valve or no pressure-influencing device between the multi-piston pump and the at least one brake circuit (BK1, BK2). With a suitable design of the multi-piston pump, a backflow of brake fluid can be prevented by way of the operation of the pump itself, such that a valve which prevents a backflow can be omitted.
Aspect 6: The brake system according to any one of the preceding aspects, wherein the pressure supply device (DV) has a motor, wherein the motor is preferably a brushless DC motor, which in particular has a redundant winding and/or a connection with 2×3 phase control.
Aspect 7: The brake system according to any one of the preceding aspects, wherein the switching valves (SV1, SV2, SV3, SV4) are switching valves which are open when electrically deenergized, and the bypass switching valve (BP1) is a bypass switching valve which is open when electrically deenergized, and the outlet switching valve (ZAV) is an outlet switching valve which is closed when electrically deenergized, and the infeed switching valve (FV) is an infeed switching valve which is open when electrically deenergized.
Aspect 9: The brake system according to any one of the preceding aspects, wherein the two hydraulic brake circuits (BK1, BK2) have exactly one, two or more pressure sensors (DG). A single pressure sensor for both brake circuits (BK1, BK2) is sufficient for the pressure detection. To increase safety, in each case one pressure sensor may be used in each brake circuit. Further redundant sensors may additionally also be used.
Aspect 10: The brake system according to any one of the preceding aspects, wherein ABS and/or ESP control can be performed by means of at least one switching valve (SV1, SV2, SV3, SV4) and the outlet switching valve (ZAV).
Aspect 11: The brake system according to any one of the preceding aspects, wherein no valve is present between the outlet switching valve (ZAV) and at least one of the switching valves (SV3, SV4) of one of the brake circuits (BK2). It is preferable for two switching valves (SV3, SV4) to be connected directly to the central outlet switching valve (ZAV). A valve can be omitted in this way.
Aspect 12: The brake system according to any one of the preceding aspects, wherein no valve is present between the bypass switching valve (BP1) and two, preferably all four, of the switching valves (SV1, SV2, SV3, SV4).
Aspect 13: The brake system according to any one of the preceding aspects, wherein only specifically the outlet switching valve (ZAV) connects the brake circuits (BK1, BK2) switchably to the reservoir (VB).
Aspect 14: The brake system according to any one of the preceding aspects, wherein each wheel brake (RB1, RB2, RB3, RB4) has only specifically the associated switching valve (SV1, SV2, SV3, SV4).
Aspect 15: The brake system according to any one of aspects 1 to 12 or 14, wherein a second outlet switching valve (ZAV2) is present, which is connected directly to the output of the pressure supply device (DV) or to an associated check valve (RV3) and switchably connects to the reservoir (VB), in particular wherein only specifically the outlet switching valve (ZAV) and the second outlet switching valve (ZAV2) switchably connect the brake circuits (BK1, BK2) to the reservoir (VB). The second outlet switching valve (ZAV2) represents a further possibility for increasing safety.
Aspect 16: The brake system according to any one of aspects 1 to 10 or 13 to 15, wherein the two hydraulic brake circuits (BK1, BK2) are connected to one another via the bypass switching valve (BP1) and a further bypass switching valve (BP2), which are connected in series, wherein the outlet switching valve (ZAV) is connected to a line section between the two bypass switching valves (BP1, BP2).
Aspect 17: The brake system according to any one of the preceding aspects, wherein an isolating switching valve (TV) is additionally present, which is connected directly to the output of the pressure supply device (DV) or to an associated check valve (RV3) and is connected directly to at least one of the switching valves (SV1, SV2).
Aspect 18: The brake system according to any one of the preceding aspects, wherein the hydraulic brake pedal system has a single master cylinder (SHZ) or a double master cylinder (DHZ). The system described here can meet at least the requirements of level two according to the SAE J3016 standard even with a single master cylinder, which can be of fail-safe design.
Aspect 19: The brake system according to any one of the preceding aspects, wherein the brake system furthermore has a travel simulator (WS).
Aspect 20: The brake system according to aspect 19, wherein the travel simulator (WS) is connected to the single master cylinder (SHZ) or the double master cylinder (DHZ) via an optional switchable travel simulator isolation valve (14).
Aspect 21: The brake system according to any one of the preceding aspects, wherein the single master cylinder (SHZ) or the double master cylinder (DHZ) has a force-travel sensor (KWS), or wherein the single master cylinder (SHZ) or the double master cylinder (DHZ) has no force-travel sensor (KWS).
Aspect 22: The brake system according to any one of the preceding aspects, wherein the brake system is designed as a brake-by-wire system.
Aspect 23: The brake system according to any one of the preceding aspects, wherein the hydraulic brake pedal system has a ventilation opening which is connected to the reservoir (VB) via a parallel circuit of a throttle (Dr1) and a check valve (RV1) which closes toward the reservoir (VB). The throttle (Dr1) and the check valve (RV1) serve as redundancy with respect to the primary seal (D2).
Aspect 24: The brake system according to any one of the preceding aspects, wherein the brake system furthermore has an open-loop and closed-loop control unit (ECU) which performs the open-loop and/or closed-loop control of the brake system.
Aspect 25: A brake system for a vehicle, comprising the following components:
Aspect 26: The brake system according to aspect 25, wherein the rotary pump is designed as a gear pump or as a multi-piston pump, in particular a three-piston pump.
Aspect 27: The brake system according to aspect 26, wherein the pressure supply device (DV) is connected to at least one of the brake circuits (BK1, BK2) via a check valve (RV3) which closes toward the pressure supply device (DV).
Aspect 28: The brake system according to aspect 26, wherein the multi-piston pump is connected directly to at least one of the brake circuits (BK1, BK2), wherein directly connected means that there is no valve or no pressure-influencing device between the multi-piston pump and the at least one brake circuit (BK1, BK2), and optionally one or more check valves may be integrated in the multi-piston pump.
Aspect 29: The brake system according to any one of aspects 25 to 28, wherein the pressure supply device (DV) has a motor, wherein the motor is a brushless DC motor, which in particular has a redundant winding and/or a connection with 2×3 phase control.
Aspect 30: The brake system according to any one of aspects 25 to 29, wherein the pressure supply device (DV) is part of a hydraulic control unit (HCU) and the hydraulic control unit (HCU) has only exactly one pressure supply.
Aspect 31: The brake system according to any one of aspects 25 to 30, wherein the pressure reduction in the at least one hydraulically acting wheel brake (RB1, RB2, RB3, RB4) is performed by opening of the outlet switching valve (ZAV) and of the associated switching valve (SV1, SV2, SV3, SV4).
Aspect 32: The brake system according to any one of aspects 25 to 31, wherein the switching valves (SV1, SV2, SV3, SV4) are switching valves which are open when electrically deenergized, and the bypass switching valve (BP1) is a bypass switching valve which is open when electrically deenergized, and the outlet switching valve (ZAV) is an outlet switching valve which is closed when electrically deenergized, and the infeed switching valve (FV) is an infeed switching valve which is open when electrically deenergized.
Aspect 33: The brake system according to any one of aspects 25 to 32, wherein the switching valves (SV1, SV2, SV3, SV4) are designed and connected such that a residual pressure in a wheel brake (RB1, RB2, RB3, RB4) opens the respective switching valve (SV1, SV2, SV3, SV4) in the electrically deenergized state.
Aspect 34: The brake system according to any one of aspects 25 to 33, wherein the two hydraulic brake circuits (BK1, BK2) have exactly one, two or more pressure sensors (DG).
Aspect 35: The brake system according to any one of aspects 25 to 34, wherein ABS and/or ESP control can be performed by means of at least one switching valve (SV1, SV2, SV3, SV4) and the outlet switching valve (ZAV).
Aspect 36: The brake system according to any one of aspects 25 to 35, wherein no valve is present between the outlet switching valve (ZAV) and at least one of the switching valves (SV3, SV4) of one of the brake circuits (BK2).
Aspect 37: The brake system according to any one of aspects 25 to 36, wherein no valve is present between the bypass switching valve (BP1) and two, preferably all four, of the switching valves (SV1, SV2, SV3, SV4).
Aspect 38: The brake system according to any one of aspects 25 to 37, wherein only specifically the outlet switching valve (ZAV) connects the brake circuits (BK1, BK2) switchably to the reservoir (VB).
Aspect 39: The brake system according to any one of aspects 25 to 38, wherein each wheel brake (RB1, RB2, RB3, RB4) has only specifically the associated switching valve (SV1, SV2, SV3, SV4).
Aspect 40: The brake system according to any one of aspects 25 to 37 or 39, wherein a second outlet switching valve (ZAV2) is present, which is connected directly to the output of the pressure supply device (DV) or to an associated check valve (RV3) and switchably connects to the reservoir (VB), in particular wherein only specifically the outlet switching valve (ZAV) and the second outlet switching valve (ZAV2) switchably connect the brake circuits (BK1, BK2) to the reservoir (VB).
Aspect 41: The brake system according to any one of aspects 25 to 35 or 38 to 40, wherein the two hydraulic brake circuits (BK1, BK2) are connected to one another via the bypass switching valve (BP1) and a further bypass switching valve (BP2), which are connected in series, wherein the outlet switching valve (ZAV) is connected to a line section between the two bypass switching valves (BP1, BP2).
Aspect 42: The brake system according to any one of aspects 25 to 41, wherein an isolating switching valve (TV) is additionally present, which is connected directly to the output of the pressure supply device (DV) or to an associated check valve (RV3) and is connected directly to at least one of the switching valves (SV1, SV2).
Aspect 43: The brake system according to any one of aspects 25 to 42, wherein the hydraulic brake pedal system has a single master cylinder (SHZ) or a double master cylinder (DHZ).
Aspect 44: The brake system according to any one of aspects 25 to 43, wherein the brake system furthermore has a travel simulator (WS).
Aspect 45: The brake system according to aspect 44, wherein the travel simulator (WS) is connected to the single master cylinder (SHZ) or the double master cylinder (DHZ) via an optional switchable travel simulator isolation valve (15).
Aspect 46: The brake system as claimed in any one of the preceding claims, wherein the single master cylinder (SHZ) or the double master cylinder (DHZ) has a force-travel sensor (KWS), or wherein the single master cylinder (SHZ) or the double master cylinder (DHZ) has no force-travel sensor (KWS).
Aspect 47: The brake system according to any one of aspects 25 to 46, wherein the brake system is designed as a brake-by-wire system.
Aspect 48: The brake system according to any one of aspects 25 to 47, wherein the hydraulic brake pedal system has a ventilation opening which is connected to the reservoir (VB) via a parallel circuit of a throttle (Dr1) and a check valve (RV1) which closes toward the reservoir (VB).
Aspect 49: The brake system according to any one of aspects 25 to 48, wherein the brake system furthermore has an open-loop and closed-loop control unit (ECU) which performs the open-loop and/or closed-loop control of the brake system.
In the single master cylinder unit (SHZ), it is additionally possible for a travel simulator (WS) with or without a switchable travel simulator isolation valve (14) to be connected to a further hydraulic output of the single master cylinder (or to the hydraulic line between infeed switching valve (FV) and single master cylinder). The travel simulator can transmit a certain pedal travel-force characteristic to the brake pedal (1) by means of a slave piston which, for example as a result of foot-imparted actuation of the brake pedal (1), can be displaced counter to an arrangement of resetting springs. The hydraulic connection of the travel simulator (WS) to the single master cylinder may be implemented, as illustrated in
In the normal situation, in particular when a power supply and a functional pressure supply DV are present, a braking operation is performed by means of a brake pedal actuation by the driver, wherein, during the brake pedal actuation, the infeed switching valve (FV) is closed and is kept closed for as long as the brake pedal (1) remains depressed. The pedal system is thus hydraulically decoupled from the hydraulic control unit (HCU). Instead, the coupling takes place in “brake-by-wire” form by means of the redundantly configured pedal travel sensors, the ECU and the pressure provision unit DV, which, when the switching valves (SV1, SV2, SV3, SV4) are open, the bypass valve (BP1) is open and the central outlet valve (ZAV) is closed, can deliver brake fluid volume from the reservoir (VB) into the wheel cylinders (RZ1, RZ2, RZ3, RZ4) of both brake circuits (BK1, BK2) and thereby build up brake pressure. Depending on the desired braking force and further boundary conditions, the bypass valve (BP1) may also be closed during a normal braking operation if braking is to be performed only by means of the wheel cylinders (RZ1, RZ2) in the first brake circuit (BK1). By means of the at least one pressure sensor (DG) in one of the brake circuits (BK1, BK2), and/or pulse width modulation of the switching valves (SV1, SV2, SV3, SV4) and/or of the bypass valve (BP1), a target pressure can be set by closed-loop control in a manner dependent on the pedal travel. By means of the travel simulator (WS) and the resetting spring (RF) in the single master cylinder, the driver is provided with a certain pedal travel-force characteristic, which may preferably always be as constant as possible and independent of the brake pressures in the brake circuits (BK1, BK2). In particular, the combination of travel simulator (WS) and resetting spring (RF) in the “brake-by-wire” system counteracts a collapse of the brake pedal and brings the pedal back into a defined starting position after the foot-imparted actuation. In particular in the case of electric vehicles or hybrid vehicles, the recovery of braking energy (recuperation) in the electric traction motors can thus be decoupled from the brake pedal (1). In particular, the pedal travel-force characteristic is not influenced even in the non-normal situation, for example in the event of failure of a brake circuit.
When the brake pedal force is released, the central outlet valve (ZAV) can be opened, in particular in the case of a rotary pump being used. In addition, the switching valves (SV1, SV2, SV3, SV4) and/or the bypass valves (BP1, BP2) are opened fully, or in a manner dependent on the desired pressure reduction gradient by means of pulse width modulation (PWM) or short stoppages (for example after a time At or after a differential pressure Δp), or in some other way. As a result, the brake fluid volume can be returned into the reservoir (VB) and brake pressure can be reduced. If the piston (3) of the single master cylinder returns into the defined starting position after the foot-imparted actuation of the brake pedal (1) has ended, the exchange of brake fluid between the pressure chamber of the single master cylinder and the reservoir (VB) may take place through for example radial breather openings in the piston (3) and in the single master cylinder and via a hydraulic connection. This hydraulic connection may be implemented, as in
In the normal situation, individual brake pressures for driving dynamics interventions such as ABS or ESP can be set by closed-loop control for each wheel. The closed-loop control function for ABS, for example, is as follows: If, during the pressure build-up Pbuild-up, the closed-loop controller signals that a brake cylinder (for example RZ1) of a wheel satisfies for example the criterion of excessive brake pressure, then, for the observation of the wheel, the pressure build-up Pbuild-up can be stopped or (possibly after such an observation time) the brake pressure can be reduced by pressure reduction Preduction. Since the infeed switching valve (FV) remains closed here and, depending on the embodiment, the pump in the pressure provision unit (DV) cannot admit any volume from the brake circuits, the opening of the central outlet valve (ZAV) constitutes the only option for pressure reduction Preduction in one possible configuration. When the central outlet valve (ZAV) is open, different pressure reduction gradients can then be set by closed-loop control, preferably through the PWM control of the associated switching valve (for example SV1). If the pressure reduction Preduction is stopped by the closed-loop controller, the central outlet valve (ZAV) is closed again. It is also possible for two, three or four wheel cylinders to be controlled simultaneously and on a wheel-specific basis during the pressure reduction Preduction. The pressure build-up Pbuild-up can likewise be controlled in one wheel cylinder or in two, three or four wheel cylinders simultaneously and on a wheel-specific basis as required.
In the case of an intervention by a driver assistance system that is customary in partially automated driving (level 2), such as in the case of an adaptive cruise control system or traffic jam assistant, a braking operation can be carried out even without pedal actuation by the driver by means of the pressure provision unit (DV), wherein the brake pedal (1) is hydraulically decoupled from such an intervention by the then-closed infeed switching valve (FV).
Based on the so-called conventional three-box systems (brake system with ABS/ESP functionality, vacuum brake booster and electrical or mechanical vacuum pump) and on the so-called conventional two-box systems (brake system with ABS/ESP functionality and electromotive brake booster unit), the “brake-by-wire” brake system according to the invention with travel simulator (WS), electromotive pressure provision unit (DV) and ABS/ESP functionality can be referred to as a so-called one-box system. Owing to the high degree of integration of such a one-box system, the installation space, weight and costs of the entire structural unit can be reduced and, in addition, installation and logistics can be optimized.
The valves FV, BP1, SV1, SV2, SV3, SV4 may be designed as solenoid valves which are open when electrically deenergized, whereas the valves ZAV and, if present, the travel simulator isolation valve (14) are preferably solenoid valves which are closed when electrically deenergized. Furthermore, the switching valves (SV1, SV2, SV3, SV4) are preferably connected via their output side to the respective wheel cylinders (RZ1, RZ2, RZ3, RZ4) such that each switching valve (SV1, SV2, SV3, SV4), in the event of a fault, for example in the event of failure of its electrical connection, automatically opens owing to the pressure in the respective wheel cylinder (RZ1, RZ2, RZ3, RZ4). By means of this valve configuration, it can in particular be ensured that, in the absence of a power supply, the brake pedal (1) can be hydraulically coupled to the wheel cylinders (RZ1, RZ2, RZ3, RZ4) via the open infeed switching valve (FV) and brake pressure can be built up. If the travel simulator isolation valve (14), which is closed when electrically deenergized, is present, the travel simulator (WS) can furthermore be decoupled from the brake pedal (1), whereby, for example, approximately 40% pedal travel can be saved.
All solenoid valves, in particular the ZAV, may each be designed as a redundant valve and/or with a redundant coil and/or with redundant control, whereby the probability of a valve failure can be reduced. In the event of a single failure with a probability of 1e-6 per year, for example, redundancy with the same failure probability can reduce the failure probability per year to 1e-6×1e-6=1e-12.
Also, if a power supply is present and the pressure provision unit (DV) fails, the valves FV, BP1, SV1, SV2, SV3, SV4 can be opened and the valves ZAV and, if present, the travel simulator isolation valve (14) can be closed, such that brake pressure can be built up by way of the brake pedal actuation. Alternatively, the bypass valve (BP1) can be closed and sufficient brake pressure can still be built up in the second brake circuit (BK2) by foot-imparted actuation of the brake pedal (1). The failure of the electrical control of the pressure provision unit (DV) can be classified as very unlikely, in particular in the preferred embodiments with a (single) multi-piston or gear pump and by means of redundant windings with 2×3 phase control. Since a failure of the power supply is also unlikely, the travel simulator isolation valve (14) can be omitted.
According to the invention, the brake system may have various sensors, in particular pressure sensors (DG, DG2), redundant pedal travel sensors (Sp1 and Sp2) for ascertaining the pedal travel, a force-travel sensor (KWS) in the piston of the single master cylinder for ascertaining a force-pedal travel characteristic, a fill level sensor element (6) for ascertaining the fill level of the brake fluid in the reservoir (VB), a yaw angle sensor (GWS) for ESP interventions, for example, or further sensors (for example a temperature sensor) whose sensor values can be transmitted to the electronic control unit (ECU). Alternatively or in addition to the force-travel sensor (KWS), a pressure sensor (not shown) may be integrated into the single master cylinder, which pressure sensor can detect the pressure in the pressure chamber and transmit this to the ECU. Furthermore, it is also possible for all solenoid valves, in particular the valves SV1, SV2, SV3, SV4, BP1, ZAV, FV, 14, to be switched by the electronic control unit (ECU) preferably by way of redundant electronic control or by means of a redundant coil. In single-box devices with ABS/ESP, the electronic control unit (ECU) may be attached to the hydraulic control unit (HCU) and preferably connected by means of a plug connector (13) to the on-board electrical system of the vehicle, wherein the bus communication may be implemented for example by FlexRay or CAN or in some other form.
The redundant pedal travel sensors (Sp1 and Sp2) may be implemented in different ways. In
Further fault situations, the consequences thereof and the detection thereof through diagnostics will be discussed below.
A loss of braking force caused by a leaking seal in one of the wheel cylinders (RZ1, RZ2, RZ3, RZ4) can, through a comparison with a predetermined pressure-volume characteristic for the pressure build-up Pbuild-up, which can be dependent on various boundary conditions such as valve positions, temperature, ventilation of the brake system, clearance of the wheel brakes (RB1, RB2, RB3, RB4), etc., be identified from the additional admission of lost volume or the additional delivery of volume by the pressure provision unit (DV). The wheel cylinder in which the loss of braking force occurs can be localized using the following diagnosis: After a pressure build-up Pbuild-up has occurred, all switching valves (SV1, SV2, SV3, SV4) are open and the pressure provision unit (DV) is no longer electrically energized if there is residual pressure in the brake circuits (BK1, BK2). After closure of the bypass valve (BP1), the pressure measured by the pressure sensor (DG) in the second brake circuit (BK2) can be examined. If the pressure drops, wheel cylinders RZ3 and/or RZ4 must be leaking. By closing switching valve SV3, for example, it is then possible for a leak in the wheel cylinder RZ4 to be identified in the event of falling pressure or for a leak in the wheel cylinder RZ3 to be identified in the case of constant pressure. If, on the other hand, the pressure remains constant after the bypass valve (BP1) has been closed, the wheel cylinders RZ3 and RZ4 can be identified as being leak-tight. In this case, the bypass valve (BP1) is opened and the switching valves SV1, SV3 and SV4 are closed. If the pressure drops, the leak can be identified as being in the wheel cylinder RZ2, whereas in the case of constant pressure, the leak can be identified as being in the wheel cylinder RZ1. After the wheel cylinder (for example RZ1) with a loss of braking force has been localized, the associated switching valve (for example SV1) can be closed before every braking operation until the unit is replaced during servicing work, such that deceleration remains possible by means of two or three wheel cylinders (for example RZ2, RZ3, RZ4) with a braking force that is reduced but sufficient for level two autonomous driving. If a small leak is identified in a wheel cylinder as described above, the leak can be compensated for through replenishment by means of the pressure provision unit (DV) as an alternative to shutting down the wheel cylinder.
After all of the switching valves SV1, SV2, SV3, SV4 have been closed, the leak-tightness of the central outlet valve ZAV and of the infeed switching valve FV can be checked, preferably in a standstill state with or without volume delivery by means of the pressure provision unit (DV), by virtue of the valves ZAV and FV being alternately closed and opened. If a possible leak can be localized in the ZAV or FV for example by way of a pressure oscillation from the pressure provision unit (DV) and by way of an interaction between the fill level sensor element (6) in the reservoir (VB) and pedal movement, the following measures can be distinguished: In the case of a central outlet valve (ZAV) which is blocked for example by a dirt particle and no longer seals, or if the central outlet valve (ZAV) can no longer be closed after failure of the electrical control, the bypass valve (BP1) can be closed, wherein, then, sufficient brake pressure can still be built up at least in the first brake circuit by means of the pressure provision unit (DV). On the other hand, in the case of an infeed switching valve (FV) which is blocked for example by a dirt particle and no longer seals, the bypass valve (BP1), the switching valves SV3 and SV4 in the second brake circuit (BK2) and the central outlet valve (ZAV) can be closed, whereby the disruption of the pedal characteristic in the single master cylinder that is possible in principle owing to the leak of the infeed switching valve (FV) can be prevented, and sufficient brake pressure can still be built up in the first brake circuit (BK1) by means of the pressure provision unit (DV). In the event that it is not possible for the leak to be localized in the ZAV or FV, the same procedure can be used as in the case of a leak in the FV. Furthermore, if such a leakage flow is small, it can, as mentioned above, be compensated by means of the delivery of volume by the pressure provision unit (DV).
If the central outlet valve (ZAV) fails in the sense that it can no longer be opened, brake pressure can be reduced by opening of the infeed switching valve (FV) by means of the single master cylinder and the reservoir (VB). In the case of an alternatively used double master cylinder, the further pressure chamber of which is, as in
If one (for example SV3) of the switching valves (SV3, SV4) in the second brake circuit fails in the sense that it can no longer be closed, for example owing to a dirt particle, the bypass valve (BP1) can be closed, and sufficient braking force, in particular for level two autonomous driving, can still be built up in the first brake circuit (BK1) by means of the pressure provision unit (DV). What can be particularly advantageous in the event of failure of one of the two brake circuits (BK1, BK2) is the so-called diagonal distribution of the braking force to the four wheels of the vehicle, which, in relation to the distribution of the brake circuits (BK1, BK2) between the front and rear axles of the vehicle, can lead to a greater braking action (for example approximately 50% in the case of the diagonal distribution compared to approximately 30% in the case of front/rear axle distribution, if the front drive circuit fails). Diagonal distribution of the braking force means that a front wheel brake on one side of the vehicle and the rear wheel brake on the other side of the vehicle are assigned to a brake circuit. The wheel brakes of the other diagonals are correspondingly assigned to the second brake circuit.
If one (for example SV1) of the switching valves (SV1, SV2) in the first brake circuit fails in the sense that it can no longer be closed, for example owing to a dirt particle, the bypass valve (BP1) can be closed and the infeed switching valve (FV) can be opened, such that sufficient brake pressure can still be built up in the second brake circuit (BK2) by foot-imparted actuation of the brake pedal (1). If present, the travel simulator isolation valve (14) can additionally be closed, whereby, for example, approximately 40% pedal travel can be saved.
If the infeed switching valve (FV) fails in the sense that it can no longer be closed, for example owing to a dirt particle, the second brake circuit can be decoupled by closure of the switching valves SV3 and SV4, of the central outlet valve (ZAV) and of the bypass valve (BP1). Since disruption of the pedal travel characteristic in the single master cylinder can be prevented in this way, sufficient brake pressure can furthermore still be built up in the first brake circuit (BK1) by means of the pressure provision unit (DV). In the event of emergency braking, the braking force in the wheel brakes (RB1, RB2, RB3, RB4) can furthermore be increased further, by foot-imparted actuation of the brake pedal (1), after opening of the switching valves (SV3, SV4) in the second brake circuit (BK2). If the leakage flow in the infeed switching valve (FV) is small and blocking of one of the wheel brakes (RB1, RB2, RB3, RB4) occurs during the emergency braking, ABS control can be performed by means of the central outlet valve (ZAV) and the pressure provision unit (DV).
If a pressure sensor (for example DG) in one of the brake circuits (BK1, BK2) fails, a further pressure sensor (for example DG2) in one of the brake circuits (BK1, BK2) may be used if present. If there is only one pressure sensor (DG) in the brake system, the pressure in the brake circuits (BK1, BK2) can also be set by closed-loop control by means of the electrical current in the motor of the pressure provision unit (DV) in accordance with predetermined current-pressure relationships stored in the ECU (for example characteristic maps), wherein these current-pressure relationships may include dependencies on various boundary conditions, for example pressure build-up Pbuild-up or pressure reduction Preduction, solenoid valve positions, temperature, etc.
If the primary seal (D2) in a pressure chamber of the master cylinder fails, that is to say if the primary seal (D2) is leaking, a leakage of the brake fluid in the master cylinder is possible, which can uncontrollably influence (in this case: increase) the pedal travel and, by way of “brake-by-wire”, can give rise to excessive brake pressure and thus undesirably intense braking operations. In the following, the master cylinder shall be assumed to be a single master cylinder, wherein the use of a tandem master cylinder is likewise possible. To avoid a possible total failure of the master cylinder, a connection of the single master cylinder to the reservoir (VB) may be implemented, such as in figure la, by means of a parallel connection of a check valve (RV1), which closes toward the reservoir, and a throttle (Dr1). In the case of a leaking primary seal (D2) and a leak-tight secondary seal (D1), the leakage flow is blocked by the check valve (RV1) and throttled by the throttle (Dr1) such that only an insignificantly small piston or pedal movement results, which only insignificantly disrupts the “brake-by-wire” braking operation. The throttle (Dr1) may for example be designed such that the pedal movement caused by the leak is approximately 0.2 mm/s. With an average braking time of approximately 3 s to decelerate a vehicle at 100 km/h with 1 g, disruption of the pedal travel by 0.6 mm can thus occur, which is small and negligible in relation to the entire pedal stroke. The check valve (RV1) allows rapid filling of the brake system with brake fluid and rapid ventilation via opened vent screws on the wheel cylinders (RZ1, RZ2, RZ3, RZ4). The throttle (Dr1) also allows volume compensation in the event of temperature changes.
A critical double fault consisting of a leaking primary seal (D2) and the additional dormant individual fault of a leaking secondary seal (D1), in the case of which the leak can no longer be throttled by the throttle (Dr1), can be averted by means of further redundant primary and/or secondary seals (not shown). According to the invention, as in
A double fault with a leaking primary (D2) and secondary seal (D1) can thus occur only in the unlikely event that both seals (D1, D2) fail at the same time during travel. In the case of a travel simulator (WS) without a travel simulator isolation valve (14), it may under some circumstances be the case, analogously to the diagnosis just described, that a detected leak cannot be uniquely assigned to the secondary seal (D1) of the single master cylinder, because the leak may also be caused by a leaking travel simulator seal (D3) of the travel simulator (WS), which, owing to the throttling by the leaking travel simulator seal (D3) as well as by means of a further throttle (Dr3) between the travel simulator seal (D3) and a further redundant seal (D3r) of the travel simulator (WS), can likewise lead to a leakage flow via a connection (not shown) into the reservoir (VB). In this case, in the event of a leak in D1 or D3, different leakage flows through Dr1 and/or Dr3 may arise to a certain extent owing to different configurations of the hydraulic resistances for the throttles Dr1 and Dr3, whereby the diagnosis just described can then localize the leak at D1 or D3. On the other hand, even without localization of the leak at D1 or D3, a dormant fault in D1 or D3 can be avoided by replacing both seals (D1, D3) at the same time, and the safety of the brake system can be ensured. An additional fault of the redundant primary seal (D3r) can be classified as an unlikely double fault.
The reservoir (VB) may have two mutually redundant fluid chambers. The reservoir (VB) has, in at least one fluid chamber, a float (8) with a sensor target (7), which, together with a fill level sensor element (6) on the PCB (5) of the electronic control unit (ECU) attached to the reservoir (VB), can measure the fill level of the brake fluid in the reservoir (VB) in virtually continuously variable fashion. In this way, it is likewise possible for small leaks to be detected redundantly in the brake circuit, for example leaks of D1 or of one of the wheel cylinders RZ1-RZ4. The integration of the fill level sensor element (6) into the electronic control unit (ECU) can reduce costs.
The further bypass valve (BP2) may be incorporated into the second brake circuit (BK2) such that the second brake circuit (BK2) with the wheel cylinders RZ3 and RZ4 can be decoupled from the rest of the brake system in the event of a fault in the second brake circuit (BK2). As shown in
The isolation valve (TV) may be incorporated into the first brake circuit (BK1) such that the first brake circuit (BK1) with the wheel cylinders RZ1 and RZ2 can be decoupled from the rest of the brake system in the event of a fault (for example double fault RZ and SV) in the first brake circuit (BK1). As shown in
The further central outlet valve (ZAV2) may be incorporated into the brake system such that pressure in the brake system can be reduced redundantly in relation to the central outlet valve (ZAV). As illustrated in
The second bypass valve (BP2) and the isolation valve (TV) may be designed as solenoid valves which are open when electrically deenergized, whereas the further central outlet valve (ZAV2) may be designed as a solenoid valve which is closed when electrically deenergized. The second bypass valve (BP2) and the isolation valve (TV) may furthermore each be connected by way of their output side to the second brake circuit (BK2) and to the first brake circuit (BK1) respectively such that they can be opened by the residual pressure in the brake circuits (BK1, BK2) in the event of failure of the valve control (for example in a situation without electrical energization). It is thus possible, as is the case in the brake system in
If one (for example ZAV) of the two (central) outlet valves (ZAV, ZAV2) fails in the sense that it can no longer be opened, the pressure reduction Preduction can be performed by means of the other central outlet valve (ZAV2). By contrast to the situation in
In one embodiment according to the invention, the further central outlet valve (ZAV2) furthermore has the advantage that the pressure reduction Preduction can be set by closed-loop control independently in in each case two wheel cylinders (RZ1, RZ2 and RZ3, RZ4 respectively) per brake circuit (BK1, BK2) during a driving dynamics intervention (for example ABS).
By means of the second bypass valve (BP2), safety can be increased if the infeed switching valve (FV) can no longer be closed (for example owing to a dirt particle or a fault in the electrical connection). In such a case, the single master cylinder can be decoupled from the brake system by means of the closure of both bypass valves (BP1, BP2), and sufficient brake pressure can still be built up in the first brake circuit (BK1) by means of the pressure provision unit (DV). The pressure reduction Preduction can in this case be performed for example by means of the further (central) outlet valve ZAV2. In the event of emergency braking, the braking force can furthermore be increased further, by foot-imparted actuation of the brake pedal (1) in the second brake circuit (BK2), after the opening of the second bypass valve (BP2). In this way, it is for example possible to achieve a braking action of approximately 75% of the full normal braking action. If the leakage owing to the infeed switching valve (FV) which is no longer closing is small, it is for example still possible for a pressure reduction Preduction (and pressure build-up Pbuild-up) for an ABS intervention to be performed by means of the switching valves (SV3, SV4) and one of the central outlet valves (ZAV).
In addition to the primary seal (D2) and the secondary seal (D1), the single master cylinder may have further redundant primary and/or secondary seals, in particular a redundant primary seal (D2r) illustrated in
The breather opening in the single master cylinder between the primary seal (D2) and the secondary seal (D1) may be connected via a so-called diagnostic valve (VD), which is illustrated in
To safeguard the primary seal (D2) in the master cylinder, which, by contrast to
Similarly to the case of the throttle-check valve combination from
Further openings may be provided between further redundant primary seals, which further openings may likewise be connected via the reservoir shut-off valve (17) to the reservoir (VB).
Fail-safety in general means here that an individual failure of an element of the brake system is safeguarded by redundancy, and the failure of the element of the brake system or the failure of the redundancy can be determined by diagnostics. An individual failure (or individual fault) is a failure (or fault) of only one element of the brake system. Double failures (or double faults) or multiple failures (or multiple failures), on the other hand, refer to failures (or faults) of two or more elements of the brake system. In general, double or multiple faults can be accepted if their occurrence is very unlikely. However, double faults which can lead to total failure of the brake system should be avoided in a fail-safe system. Double faults in a fail-safe system can be avoided if so-called dormant individual faults, which each lead, with a further individual fault, to double faults, are safeguarded or identified by redundancy with additional diagnosis.
A single master cylinder is fail-safe if the pressure chamber seal of the master cylinder is fail-safe. In the normal situation, that is to say in the absence of faults, the pressure chamber seal of a single master cylinder is realized for example by the primary seal (D2) of the single master cylinder. An individual failure of the seal of the single master cylinder pressure chamber, for example caused by a leaking primary seal (D2), can lead to a total failure of the brake system. The desired fail safety therefore requires at least one redundancy for the pressure chamber seal and at least one diagnosis of the pressure chamber seal or of the redundancy of the pressure chamber seal. A fail-safe master cylinder can be used in levels three to four in accordance with the SAE J3016 standard.
The required at least one redundancy for the pressure chamber sealing may for example be realized,
Whereas (apart from the at least one diagnosis that is still required) one redundancy is sufficient for the fail safety of the master cylinder, redundancies can be combined in an expedient manner to increase safety. For example, independently of a redundancy (combination Dr1/RV1 or reservoir shut-off valve 17) in the connection of the master cylinder to the reservoir (VB), further redundant primary seals (for example D2r) may be used. In principle, a combination of the combination Dr1/RV1 and reservoir shut-off valve 17 is also conceivable.
The at least one diagnosis of the pressure chamber seal or of the redundancy of the pressure chamber seal may be implemented as a diagnosis of the pressure chamber seal, for example
In relation to diagnoses performed in the standstill state of the vehicle, preferably when parked, safety can be increased by means of diagnoses performed during a braking operation and thus in particular several times during travel. Further redundant primary seals (for example D2r) in the master cylinder may likewise be diagnosed by means of the force-travel sensor (KWS) and/or the pressure sensor in the pressure chamber of the master cylinder.
If the brake system is coupled to a travel simulator (WS), as is conventional in “brake-by-wire” systems, the travel simulator (WS) should also be of fail-safe design. A travel simulator (WS) is fail-safe if the pressure chamber seal of the travel simulator (WS) is fail-safe. In the normal situation, that is to say in the absence of faults, the pressure chamber seal of the travel simulator (WS) is realized for example by the travel simulator seal (D3) of the travel simulator (WS). An individual failure of the seal of the travel simulator pressure chamber, for example caused by a leaking travel simulator seal (D3), can likewise lead to a total failure of the brake system. The desired fail safety therefore requires at least one redundancy for the pressure chamber seal and at least one diagnosis of the pressure chamber seal or of the redundancy of the pressure chamber seal.
The required at least one redundancy for the pressure chamber seal may for example be realized
The at least one diagnosis of the pressure chamber seal of the travel simulator or of the redundancy of the pressure chamber seal may be implemented as a diagnosis of the pressure chamber seal, for example
To increase safety, diagnoses may be combined in an expedient manner.
Owing to the hydraulic coupling of the pressure chambers of the master cylinder and travel simulator (WS), a diagnosed leak in the coupled pressure chamber cannot generally be localized, because this may be caused for example both by a leaking primary seal (D2) of the master cylinder and by a leaking travel simulator seal (D3). This is sufficient for the fail safety insofar as diagnosed leak-tightness in the coupled pressure chamber implies the leak-tightness of both seals (D2, D3). If a travel simulator isolation valve (14) is present, any leak in the travel simulator (WS) or master cylinder can be localized.
The safety demands on the seal of the single master cylinder to the outside, which in the normal situation is performed for example by means of a secondary seal (D1), may be less strict than those on the seal of the master cylinder pressure chamber, because on the one hand the secondary seal (D1) is not subjected to high pressures, and on the other hand the consequences of the fault are less critical. By contrast to the stricter requirement for fail safety, safety is ensured if at least one redundancy of the element and/or a failure of the element can be diagnosed.
An individual failure of the seal of the single master cylinder to the outside, for example a leaking secondary seal (D1), which can lead to a loss of brake fluid, can for example be safeguarded by a redundancy
Furthermore, during non-braking operation, wherein non-braking operation refers to operation in which no braking process is taking place, and in particular refers to the standstill state of the vehicle (for example when parked), the leak-tightness of the secondary seal (D1) can be determined or diagnosed in that,
To increase safety, redundancies and diagnoses may be combined in a variety of expedient ways. In the diagnoses, the fill level sensor (6) in the reservoir (VB) may likewise or additionally be used for leak identification.
The safety demands on the seal of the infeed switching valve (FV) in the closed state, that is to say on the seal of the infeed switching valve (FV), which in the normal situation is performed for example by means of a seal in the valve seat, may likewise be less strict than those on the seal of the master cylinder pressure chamber, because the consequences of faults are less critical. By contrast to the stricter requirement for fail safety, safety is ensured if at least one redundancy of the element and/or a failure of the element can be diagnosed.
An individual failure of the seal of the infeed switching valve (FV), which, caused for example by a dirt particle, impairs the “brake-by-wire” functionality and can disrupt the force-travel characteristic of the brake pedal system, may for example by means of a redundancy
Furthermore, as in figure la,
Whereas, in the event that the (central) outlet valves (ZAV, ZAV2) in the hydraulic control unit (HCU) can no longer be opened, the pressure reduction Preduction via the master cylinder in
The hydraulic connection between the at least one hydraulic output of the master cylinder and the infeed switching valve (FV) can be implemented as in
A preferred embodiment of the brake system according to the invention can be derived from
The connection of the wheel cylinders (for example RZ1, RZ2) to a brake circuit (for example BK1) may, as is known in the prior art, be realized by means of in each case one switchable inlet valve (for example EV1, EV2), wherein the wheel cylinders (for example RZ1, RZ2) may then be connected by means of in each case one switchable outlet valve (for example AV1, AV2) to the reservoir (VB). The inlet valves or outlet valves may also be regarded as switching valves. Alternatively, the connection of the wheel cylinders (for example RZ3, RZ4) to a brake circuit (for example BK2) as in
One of the two pressure chambers of the double-action piston pump may be connected to the first brake circuit (BK1) via a hydraulic output of the pump and via a check valve (RV3) which closes toward the pressure provision unit (DV) and via possible further valves. Furthermore, this pressure chamber may be connected to the reservoir (VB) via a suction replenishment inlet (breather opening or opening) of the pump and a further check valve (RV6) which closes toward the reservoir (VB) and via possible further valves. The other pressure chamber may likewise be connected to the second brake circuit via a further hydraulic output of the pump and a check valve (RV4) which closes toward the pressure provision unit (DV) and via possible further valves. Furthermore, said pressure chamber may likewise be connected to the reservoir (VB) via a further suction replenishment inlet (breather opening or opening) of the pump and a further check valve (RV5) which closes toward the reservoir (VB) and via possible further valves. The pump with the two suction replenishment inlets and the two hydraulic outputs and the piston may be designed such that, in both directions of movement of the piston, that is to say both during the forward stroke and during the return stroke, brake fluid can be delivered from the reservoir (VB) into at least one of the two brake circuits (BK1, BK2) and brake pressure can thus be built up, wherein, by definition, the forward stroke refers to the direction of movement of the piston in which brake fluid is forced (in
Depending on the embodiment, the two brake circuits (BK1, BK2) may be switchably connected to one another, as in
In relation to a single-action piston pump, which is likewise common in brake systems but is not illustrated and which can deliver volume into the brake system only in one stroke direction (forward stroke), the brake system according to the invention with a double-action piston pump and an exemplary connection as in
The brake system according to the invention with a double-action piston pump and with an exemplary connection as in
In a design with downsizing, during the pressure build-up Pbuild-up, after a return stroke in the higher pressure range, an idle pre-stroke may be required, whereby, for example with closed switching valves (for example SV3, SV4) and inlet valves (for example EV1, EV2), a closed infeed switching valve (FV), if present, a preferably closed second bypass valve (BP2), an opened first bypass valve (BP1) and an opened central outlet valve (ZAV), brake fluid can be conveyed from the pressure chamber with the larger effective piston area into the reservoir (VB). Such an idle pre-stroke may last up to approximately 100 ms, but only needs to be used very seldom. Subsequently, the pressure build-up Pbuild-up can be continued in the higher pressure range by way of a further return stroke.
As in the case of the rotary pumps in
Owing to the check valves (RV5, RV6) that close toward the reservoir (VB) in the connection of the double-action piston pump to the reservoir (VB), it is possible in particular for the (partial) evacuation and ventilation of both pressure chambers of the double-action piston pump to be performed in this embodiment only via the hydraulic outputs of the pump, the respective check valves (RV3, RV4) and the respective brake circuits (BK1, BK2).
During a forward stroke of the piston, the switchable solenoid valve PD1 can be opened, and pressure can be built up in the brake circuits (BK1, BK2) as in
By contrast to the embodiment in
In the hydraulic connection of the double-action piston pump in
By means of different combinations of open and closed solenoid valves (PD1, PD2, PD3, PD4), different operating states of the double-action piston pump can be set. As in
In the normal situation, the first infeed valve (FV) and the second infeed switching valve (FV2) may be closed during a braking operation, wherein, then, the pressure provision unit (DV) can build up brake pressure in the brake circuits (BK1, BK2) by way of “brake-by-wire” and corresponding valve switching in the hydraulic control unit (HCU).
In relation to a single master cylinder (SHZ), the use of a tandem master cylinder (THZ) can reduce the probability of a total failure of the master cylinder even without further redundant primary or secondary seals.
| Number | Date | Country | Kind |
|---|---|---|---|
| 10 2019 103 464.7 | Feb 2019 | DE | national |
This application is a continuation of co-pending U.S. patent application Ser. No. 17/429,615, filed on Aug. 9, 2021 as a Section 371 of International Application No. PCT/EP2020/053667, filed Feb. 12, 2020, which was published in the German language on Aug. 20, 2020 under International Publication No. WO 2020/165295 A1, which claims priority under 35 U.S.C. § 119(b) to German Patent Application No. 10 2019 103 464.7, filed Feb. 12, 2019, the disclosures of which are incorporated herein by reference.
| Number | Date | Country | |
|---|---|---|---|
| Parent | 17429615 | Aug 2021 | US |
| Child | 18793414 | US |
