The invention relates to a method for operating a motor vehicle accident data memory and an accident data memory system for executing such a method.
Motor vehicle accident data memories are in principle known, wherein they typically record data such as, for example, speed, steering angle and acceleration in a reliable manner immediately prior to and following a known accident. As a result, the sequence of events leading to an accident can be reconstructed and, for example, the guilt or innocence of a respective driver can be ascertained. In the course of introducing autonomous vehicles, in which the identification of any technical problems assumes a central role in the event of an accident, accident data memories will in future be deployed far more frequently than they have been to date.
One important piece of information for reconstructing an accident is the time at which an accident occurred and at which specific recorded values apply. Consequently, it is important to provide a precise time reference for an accident data memory.
Ideally, it is possible to, for example, synchronize on a global basis, which can in particular be provided by a satellite navigation system (GNSS=Global Navigation Satellite System). However, a time from a satellite navigation system is not always available, nor is it always reliable.
It is therefore an object of the invention to provide a method for operating an accident data memory which is improved in terms of the provision of a time for the accident data memory. It is also an object of the invention to provide an associated accident data memory system.
The above objects can be achieved according to the invention by a method and an accident data memory system respectively having features as set forth herein.
The invention relates to a method for operating a motor vehicle accident data memory. The method has the following steps:
Due to the use of the system time, a separate time basis for the accident data memory can be provided. This can in particular be operated and pursued independently of the reference time, i.e. it can also be continued if a reception of satellite navigation signals is not currently available. This can be the case, for example, if the vehicle is located in a tunnel, in a garage or between high buildings.
The non-volatile memory is in particular a memory which stores the data stored thereon over a longer period of time and in particular also independently of a power supply, in particular of an external power supply.
The synchronizing can be carried out, for example, by means of Network Time Protocol, NTP, Precision Time Protocol, PTP, or AUTOSAR time synchronization. Such protocols or techniques have proven successful in practice.
The accident data can relate, for example, to a period of time of a maximum of 10 s prior to the detection of the accident up to a maximum of 10 s following the detection of the accident. These are typical data which are to be usefully enlisted in order to evaluate an accident.
Integrity data regarding the reference time can preferably also be generated by means of the satellite navigation system. Such integrity data are data which display the reliability of the reference time generated from satellite navigation.
When an accident is detected, integrity data are preferably recorded in the non-volatile memory. Consequently, in addition to the actual time, a piece of information regarding the reliability of this time can also be recorded in the non-volatile memory and, consequently, can be considered during the evaluation of the accident. If, for example, at the time of the accident, only a poor integrity exists, this can also be considered during the evaluation of the accident.
The integrity data can in particular be wholly or partially based on a satellite-based augmentation system, also referred to as SBAS. Such satellite-based augmentation systems have proven to be advantageous for increasing the precision and reliability of satellite navigation systems.
According to a preferred embodiment, in the event of a failure of the reference time, an integrity level based on integrity data existing prior to the failure of the reference time continues to be calculated and is also recorded when an accident is detected. Consequently, the reliability can also be assessed in the event of a failure of the reference time and can be considered during the reconstruction of an accident. Typically, during a time in which a satellite signal is not available or the establishment of the time based on satellite navigation is otherwise disturbed, the integrity level will continually decrease.
The system time can be advantageously managed in a clock of a unit containing the accident data memory, for example an accident data memory system. The system time can also be managed in a clock of the accident data memory.
In the event of a failure of the reference time, the system time can in particular be updated by means of a number of decaying storage elements. Such storage elements can be, for example, capacitors, coils or other elements which modify a measurable variable in a defined way. This means that, in the event of a failure of the reference time, the system time can also be updated with a defined accuracy.
The storage elements can in particular be calibrated when the reference time is present. In particular, this can be carried out continually such that the last calibration does not lag far behind in the event of a failure of the reference time.
The calibration can in particular be carried out, taking account of one or more of the following influence variables:
These are influence variables which have a relevant influence on the decay behavior of typical decay elements or typical decaying storage elements. The age can in particular be an age of the decaying storage element or of a corresponding unit.
Data relating to the calibration are preferably recorded in the non-volatile memory. This can in particular also be carried out independently of the accident. For example, such data can thus also be recorded continually. This means that the calibration can be tracked at any time. The data relating to the calibration can, however, also be recorded in response to an accident.
A plurality of storage elements having different time constants and/or different types can advantageously be used. As a result, an updating of a time to different time scales, i.e. in the event of different outage times, can be reliably achieved. For example, storage elements having a short time constant can be used for short interruption times, while storage elements having long time constants can be used for long outage times.
Typical examples of storage elements are capacitors or coils such that, for example, different types can be used accordingly. This means that a comparison between the storage elements of different types can also be carried out. In order to provide, for example, different time constants with capacitors, capacitors having different dielectrics or different electrode surfaces, for example, can be used.
When an accident is detected, raw data of the satellite navigation system are additionally preferably recorded in the non-volatile memory. This makes possible an even more accurate reconstruction of the time at the time of the accident than by updating a time in the vehicle.
Furthermore, the invention relates to an accident data memory system. The accident data memory system has a non-volatile memory. The accident data memory system has a clock for managing a system time. In addition, the accident data memory system has an electronic control apparatus which is configured to execute a method according to the invention.
The advantages already described above can be achieved for an accident data memory system by means of the accident data memory system according to the invention. In particular, a reliable time can be provided. With respect to the method according to the invention, recourse can be had to all of the embodiments and variants described herein.
The accident data memory system can additionally have a satellite navigation module for generating the reference time. This makes possible a particularly high integration and a joint power supply. However, it is also indicated that an external satellite navigation module can alternatively also be used to generate the reference time.
The invention also relates to a non-volatile, computer-readable storage means which contains programming code. When said programming code is run, a method according to the invention is carried out. With respect to the method according to the invention, recourse can be had to all of the embodiments and variants described herein.
The aforementioned information of a satellite-based augmentation system can in particular contain integrity information regarding the atmosphere and regarding the satellite system or satellite navigation system.
A time of a unit, in which the accident data memory is contained, can in particular be synchronized with an integer time. To this end, the protocols indicated above can be used for example. In addition, an integrity of the synchronization can still be determined in order, in the event of a missing satellite navigation signal, to be able to update the integer time and the integrity level thereof.
The aforementioned storage elements can in particular also ensure that a time is provided, which is immediately available when the system is started and is not dependent on satellite reception. This means that a time can be used immediately, for example following a period of standing in garages, which is advantageous, as an accident can already occur before the satellite navigation data are received.
Due to the aforementioned recording of calibration data, including independently of an accident, changes in the calibration data can be detected and can be taken into account in an evaluation.
The aforementioned influence variables on the calibration can likewise be stored in the non-volatile memory in order, in the event of an accident, to be able to make any necessary corrections during the evaluation of the data. For example, this can be required if the calibration has not been completed.
A system for determining the time including a satellite navigation receiver is preferably integrated into a unit which also contains the accident data memory. It can thus be ensured that, in the event of an accident, the important time information can still be provided and are also supplied with emergency operation current. Furthermore, it is possible to certify the unit as such without having to certify a vehicle completely.
External correcting information can also be used as an aid regarding the raw data, which have already been indicated and which can also be recorded, in order to subsequently obtain further information from these data offline. This is in particular a good idea if no reception of a satellite-based augmentation system exists.
The person skilled in the art will infer further features and advantages from the embodiment example described below with reference to the appended FIGURE, wherein:
The vehicle 10 has an accident data memory system 20 which is likewise represented purely schematically.
The accident data memory system 20 has a satellite navigation module 30. An outside antenna 35 is mounted thereon. The outside antenna 35 is designed to receive signals from satellites 31, 32, 33, 34 which are merely represented schematically. A location of the vehicle 10 can in particular be established therewith. Furthermore, a time of day can be determined as the reference time by the satellite navigation module 30 based on the satellite signals.
The accident data memory system 20 further has a clock 40. This is used for managing a system time. The system time is continually synchronized with the reference time determined by the satellite navigation module 30 for as long as the reference time is available.
Furthermore, the clock 40 has a number of decaying storage elements (not represented) in the form of multiple different capacitors. These are continually calibrated for as long as the reference time 30 is available. Should the reference time 30 not be available, for example because the vehicle 10 is located in a tunnel or in a garage and, correspondingly, no signals can be received from the satellites 31, 32, 33, 34, the system time is updated in the clock 40 with the aid of the storage elements. To this end, recourse can be had to the known decay behavior, in each case, and in particular the respective time constant of the respective storage element.
Furthermore, the accident data memory system 20 has a non-volatile memory 50. Data can thus be recorded in this non-volatile memory 50 such that they are read out again independently of a power supply.
Furthermore, the accident data memory system 20 has an electronic control apparatus 60. This is configured to execute a method according to an embodiment example of the invention.
The non-volatile memory 50 and the control device 60 can be considered jointly as an accident data memory 25.
If an accident is detected, which will not be dealt with in greater detail here, accident data are recorded in the non-volatile memory 50. These data are, for example, data from acceleration sensors, steering wheel angle sensors or other data which can be helpful for reconstructing the sequence of events leading to an accident. Such data relate to a period of time of 10 s prior to the accident up to 10 s following the accident. For example, an accident can be detected as a result of a control device triggering an airbag.
In the event of a detected accident, the system time from the clock 40 is stored in the non-volatile memory 50. Consequently, an accurate value for the time at which the accident happened can be recorded in the non-volatile memory 50.
Integrity data, which relate to the integrity of the respective reference time, are additionally constantly generated by the satellite navigation module 30. These data are also recorded in the non-volatile memory 50 such that the integrity of the respective time can be reconstructed. The integrity data are in particular based on a satellite-based augmentation system.
The sequence of events leading to the accident can be reconstructed particularly well by means of the accident data memory system 20 according to the invention in the vehicle 10, in the event of the vehicle 10 having an accident, since very accurate information regarding the accident time are available and a comparison, for example, with accident data memories of other vehicles, which are likewise involved in the accident, can be carried out very accurately. As a result, malfunctions of technical systems in autonomous vehicles can, for example, also be detected.
The aforementioned steps of the method according to the invention can be executed in the indicated order. They can, however, also be executed in another order. The method according to the invention can be executed in one of its embodiments, for example with a specific combination of steps, such that no further steps are executed. However, further steps can essentially also be executed, including those which are not indicated.
The claims which form part of the application do not constitute a waiver of the attainment of more extensive protection.
If in the course of the proceedings it transpires that a feature or a group of features is not absolutely necessary, then the applicant here and now seeks a wording of at least one independent claim, no longer comprising the feature or the group of features. This may, for example, involve a sub-combination of a claim existing as at the application date or a sub-combination of a claim existing as at the application date restricted by further features. Such claims or combinations of features, which are to be newly worded, are understood to also be covered by the disclosure of this application.
It is further pointed out that configurations, features and variants of the invention, which are described in the various embodiments or embodiment examples and/or shown in the FIGURES, can be combined with one another as desired. Individual or multiple features are interchangeable as desired. Resulting combinations of features are understood to also be covered by the disclosure of this application.
Back references in dependent claims should not be construed as a waiver of the right to independent, objective protection for the features of the subclaims referred back to. These features can also be used in any combination with other features.
Features which are only disclosed in the description or features which are disclosed in the description or a claim only in conjunction with other features can, in principle, be of independent inventive relevance. They can therefore also be included separately in claims to distinguish from the prior art.
Number | Date | Country | Kind |
---|---|---|---|
10 2017 205 793.9 | Apr 2017 | DE | national |
Filing Document | Filing Date | Country | Kind |
---|---|---|---|
PCT/DE2018/200030 | 3/27/2018 | WO |
Publishing Document | Publishing Date | Country | Kind |
---|---|---|---|
WO2018/184640 | 10/11/2018 | WO | A |
Number | Name | Date | Kind |
---|---|---|---|
5757916 | MacDoran | May 1998 | A |
5916300 | Kirk | Jun 1999 | A |
5923286 | Divakaruni | Jul 1999 | A |
6081163 | Ujiie | Jun 2000 | A |
6493650 | Rodgers | Dec 2002 | B1 |
8219280 | Ishikawa | Jul 2012 | B2 |
8240287 | Hashimoto et al. | Aug 2012 | B2 |
8291149 | Azuma et al. | Oct 2012 | B2 |
9821999 | Rudow | Nov 2017 | B2 |
20030046003 | Smith | Mar 2003 | A1 |
20050216147 | Ferman | Sep 2005 | A1 |
20070058812 | Ali et al. | Mar 2007 | A1 |
20100129064 | Maeda et al. | May 2010 | A1 |
20100204918 | Joo | Aug 2010 | A1 |
20120105278 | Riedinger | May 2012 | A1 |
20120208557 | Carter | Aug 2012 | A1 |
20120249343 | Thomas | Oct 2012 | A1 |
20130030642 | Bradley | Jan 2013 | A1 |
20130253760 | Berman | Sep 2013 | A1 |
20130300552 | Chang | Nov 2013 | A1 |
20140368601 | deCharms | Dec 2014 | A1 |
20150009067 | Rudow | Jan 2015 | A1 |
20150309181 | Stahlin | Oct 2015 | A1 |
20160192166 | deCharms | Jun 2016 | A1 |
20160314628 | Chapman et al. | Oct 2016 | A1 |
20170337753 | Joodaki | Nov 2017 | A1 |
20180080795 | Roy | Mar 2018 | A1 |
Number | Date | Country |
---|---|---|
2947936 | Nov 2014 | CA |
3008512 | Dec 2018 | CA |
3010133 | Dec 2018 | CA |
101739739 | Jun 2010 | CN |
101806257 | Aug 2010 | CN |
101896943 | Nov 2010 | CN |
203352548 | Dec 2013 | CN |
205334566 | Jun 2016 | CN |
102004012228 | Sep 2005 | DE |
102014211168 | Dec 2015 | DE |
1 462 885 | Sep 2004 | EP |
H08275081 | Mar 1995 | JP |
3569190 | Sep 2004 | JP |
2005037491 | Feb 2005 | JP |
2005257484 | Sep 2005 | JP |
2014035336 | Feb 2014 | JP |
5585194 | Sep 2014 | JP |
WO-2012038250 | Mar 2012 | WO |
WO-2014095376 | Jun 2014 | WO |
Entry |
---|
Chinese Office Action and Search Report dated Apr. 6, 2021 in Chinese Patent Application No. 201880023787.X, 10 pages, with English partial Summary of the Chinese Examiner's Comments, 2 pages. |
Chinese Office Action dated Sep. 17, 2021 in Chinese Patent Application No. 201880023787.X, 8 pages, with Brief Summary of the Chinese Examiner's Comments, 1 page. |
PCT Examiner Wolf Holzmann, English translation of the International Search Report of the International Searching Authority for International Application PCT/DE2018/200030, dated Jun. 21, 2018, 3 pages, European Patent Office, HV Rijswijk, Netherlands. |
PCT Examiner Nora Lindner, PCT International Preliminary Report on Patentability including English Translation of PCT Written Opinion of the International Searching Authority for International Application PCT/DE2018/200030, dated Oct. 8, 2019, 8 pages, International Bureau of WIPO, Geneva, Switzerland. |
German Examiner Kathrin Arnold, German Search Report for German Patent Application No. 10 2017 205 793.9, dated Mar. 26, 2018, 10 pages, German Patent and Trademark Office, Muenchen, Germany, with partial English translation, 8 pages. |
Isaac Skog et al., “In-Car Positioning and Navigation Technologies—A Survey”, IEEE Transactions on Intelligent Transportation Systems, vol. 10, No. 1, Mar. 1, 2009, XP011347156, ISSN: 1524-9050, pp. 4 to 21. |
“Crystal Oscillator”, Wikipedia, Feb. 25, 2017, XP055483914, retrieved from the Internet: https://en.wikipedia.org/wiki/Crystal_oscillator, retrieved on Jun. 22, 2018, pp. 1 to 15. |
“What is SBAS?”, European Global Navigation Satellite Systems Agency, Mar. 20, 2017, XP055483948, retrieved from the Internet: https://web.archive.org/web/20170320212643/https://www.gsa.europa.eu/european-gnss/what-gnss/what-sbas, retrieved on Jun. 22, 2018, pp. 1 to 4. |
“SBAS Fundamentals”, Navipedia, Dec. 10, 2016, XP055484330, retrieved from the Internet: https://web.archive.org/web/20161210192610/http://www.navipedia.net/index.php/SBAS_Fundamentals, retrieved on Mar. 29, 2018, pp. 1 to 9. |
“Oszillatorschaltung”, Wikipedia, May 20, 2018, https://de.wikipedia.org/wiki/Oszillatorschaltung, retrieved on Mar. 29, 2018, pp. 1 to 7 (in German), see Reference AI for corresponding English entry for “Oscillator Circuit” in Wikipedia. |
Chinese Office Action for Chinese Application No. 201880023787.X, dated Apr. 1, 2022 with translation, 11 pages. |
European Examination Report for European Application No. 18 720 094.4, dated Apr. 25, 2022 with translation, 14 pages. |
Number | Date | Country | |
---|---|---|---|
20210056785 A1 | Feb 2021 | US |