DE-102023202617-B4 - Device and method for increasing occupant protection in a self-driving car

DE102023202617B4DE 102023202617 B4DE102023202617 B4DE 102023202617B4DE-102023202617-B4

Abstract

Device (2) for increasing occupant protection in an ego-vehicle (1), the device (2) comprising at least one reversibly adjustable actuating device for applying forces to a belt tensioner (3) for reversibly moving the belt tensioner (3) from a starting position to an impact position, and a control unit (5) for controlling the actuating device, further comprising a first sensor for detecting the traffic situation as first environmental data with a first quality and at least a second sensor for detecting the traffic situation as second environmental data with a second quality, wherein the control unit (5) is configured to interweave the first environmental data as well as the at least second environmental data as interweaving environmental data and, depending on the quality of the interweaving environmental data and a collision probability detected in the interweaving environmental data, to cascade the force exerted on the actuating device, wherein the first sensor and the at least second sensor are configured as identical sensors, wherein the first environmental data are recorded at a first time and the at least second environmental data are recorded at a subsequent second time, and the The control unit (5) is designed to intertwine the first environmental data as well as at least the second environmental data as intertwined environmental data.

Inventors

Stefan Heiss
Bruno Arbter
Philipp Straßburger

Assignees

ZF AUTOMOTIVE GERMANY GMBH
ZF FRIEDRICHSHAFEN AG

Dates

Publication Date: 20260513
Application Date: 20230323

Claims (13)

Device (2) for increasing occupant protection in an ego-vehicle (1), the device (2) comprising at least one reversibly adjustable actuating device for applying forces to a belt tensioner (3) for reversibly moving the belt tensioner (3) from a starting position to an impact position, and a control unit (5) for controlling the actuating device, further comprising a first sensor for detecting the traffic situation as first environmental data with a first quality and at least a second sensor for detecting the traffic situation as second environmental data with a second quality, wherein the control unit (5) is configured to interweave the first environmental data as well as the at least second environmental data as interweaving environmental data and, depending on the quality of the interweaving environmental data and a collision probability detected in the interweaving environmental data, to cascade the force exerted on the actuating device, wherein the first sensor and the at least second sensor are configured as identical sensors, wherein the first environmental data are recorded at a first time and the at least second environmental data are recorded at a subsequent second time, and the The control unit (5) is designed to intertwine the first environmental data as well as at least the second environmental data as intertwined environmental data.
Device (2) according Claim 1 , characterized in that the first sensor and the at least one second sensor are designed as separate sensors.
Device (2) according to one of the preceding claims, characterized in that the collision probability includes the probability of a collision as well as the time of collision.
Device (2) according to one of the preceding claims, characterized in that the control unit (5) is designed to set, as a cascaded force, at least the triggering time for triggering the force exerted on the actuating device, the force and a tightening speed of the belt tensioner (3).
Device (2) according to one of the preceding claims, characterized in that the control unit (5) is designed to exert a small force on the actuating device when the quality is below a first quality threshold in conjunction with a maximum first collision probability threshold, so that a slow movement of the belt tensioner (3) from the initial position towards the impact position is achieved.
Device (2) according Claim 5 , characterized in that the control unit (5) is designed to perform haptic and/or optical and/or acoustic preconditioning by means of the actuating device when the quality is below a second quality threshold in conjunction with a maximum second collision probability threshold which is below a first collision probability threshold.
Device (2) according to one of the preceding claims, characterized in that the control unit (5) is designed to exert a maximum force on the actuating device when the quality is above a first quality threshold in conjunction with a minimum first collision probability threshold, so that rapid movement of the belt tensioner (3) from the starting position towards the impact position is achieved.
Device (2) according to one of the preceding claims, characterized in that the control unit (5) is designed to additionally articulate vehicle dynamic sensor data along with the articulated environmental data.
Device (2) according to one of the preceding claims, characterized in that the control unit (5) is designed to take into account certain traffic situations recognized in the interlocked environmental data when cascading the applied force, wherein the traffic situations can be selected from at least the following traffic situations: high lateral acceleration above a predetermined defined lateral acceleration value and/or high self-speed above a predetermined defined speed value of the ego vehicle (1).
Device (2) according to one of the preceding claims, characterized in that the control unit (5) is designed to dynamically release the force on the actuating device if no collision occurs or if an incorrect diagnosis is detected.
Method for increasing occupant protection in an ego vehicle (1) characterized by the steps of: - providing at least one reversibly adjustable actuating device for imposing forces on a belt tensioner (3) for reversible Moving the belt tensioner (3) from a starting position to an impact position, - providing a control unit (5) for controlling the actuating device, - providing a first sensor for detecting the traffic situation as first environmental data with a first quality and at least a second sensor for detecting the traffic situation as second environmental data with a second quality, - interlacing the at least first environmental data as well as the at least second environmental data with each other as interlaced environmental data, - cascaded adjustment of the force exerted on the actuating device depending on the quality of the interlaced environmental data and a collision probability detected in the interlaced environmental data, wherein the first sensor and the at least second sensor are designed as identical sensors, wherein the first environmental data are recorded at a first time and the at least second environmental data are recorded at a subsequent second time and wherein the first environmental data as well as the at least second environmental data are interlaced with each other as interlaced environmental data.
Procedure according to Claim 11 , characterized in that , in addition to the interlocked environmental data, interior sensor data from an interior sensor (6) are also interlocked.
Procedure according to Claim 11 or 12 , characterized in that , in addition to the interlocked environmental data, vehicle dynamics sensor data are also interlocked.

Description

The invention relates to a device for increasing occupant protection in a self-driving car, the device comprising at least one reversibly adjustable actuating device for applying forces to a seatbelt tensioner to reversibly move the seatbelt tensioner from a starting position to an impact position, and a control unit for controlling the actuating device, further comprising a first sensor for detecting the traffic situation as first environmental data of a first quality and at least a second sensor for detecting the traffic situation as second environmental data of a second quality. The invention further relates to a method. Vehicles usually feature reversible occupant restraint systems for passive safety, which can be activated by an automatic control mechanism. Examples of reversible occupant restraint systems include reversible motorized seatbelt pretensioners, which tighten the seatbelts fastened by the vehicle occupants in dangerous situations to secure them in their seats. After a collision is detected, the seatbelt is tightened, thus restraint the buckled-up occupant. This is achieved by driving a spool, which winds and unwinds the seatbelt, a short distance in the winding direction, thereby tightening the seatbelt. Other reversible occupant restraint systems include, for example, automatic seat adjustment, which allows the seats to be brought into an upright position in dangerous situations, as well as electric window lifters or devices with which an existing sunroof can be closed in collision situations. Furthermore, in the future, irreversible occupant protection devices, such as airbags, which cannot be put into an inactive state by a corresponding automatic control mechanism after being triggered, can at least partially be implemented reversibly. Such occupant protection devices are usually triggered upon detection of an accident, i.e., a collision, or only shortly beforehand. ISO 26262 ("Road vehicles - Functional safety") is an ISO standard for safety-related electrical/electronic systems in motor vehicles. ISO 26262 defines a process model along with required activities and work products, as well as methods to be applied in development and production. ISO 26262 mandates the performance of a hazard and risk analysis as a method for determining risk. In this analysis, the risk is considered and analyzed for each function of the component. This analysis then results in an ASIL (Advanced Safety Integrity Level) for the respective function. ASIL thus represents a scheme for risk assessment. There are four ASIL classes: ASIL A, ASIL B, ASIL C, and ASIL D. ASIL D represents the highest safety requirements and necessitates correspondingly stringent safety precautions. The implementation of this standard is intended to ensure the functional safety of a system with electrical/electronic components in a motor vehicle. Therefore, the standard is an adaptation of IEC 61508 to the specific products in the automotive sector. The state of the art also describes systems for optimizing triggering times. Triggering algorithms used to distinguish between triggering and non-triggering cases employ, for example, an evaluation of signals that are usually stronger in a triggering case than in a non-triggering case. The DE 10 2009 011 580 A1 Disclosing a method for warning a driver in a vehicle with at least one reversible seat belt tensioner, in which the seat belt tensioner, depending on a hazardous situation detected by a detector system and evaluated by an evaluation unit, is controlled to change the pretension of a seat belt as a warning signal for the driver, wherein parameters for triggering and influencing the warning signal are specified by the evaluation unit, which are set according to the driver's specifications via an input device connected to the evaluation unit to store a driver-specific warning profile. The EP 0 816 188 B1 Disclosing a trigger circuit for an occupant restraint system for motor vehicles with at least one belt tensioner for tightening a seat belt associated with a vehicle seat, wherein the trigger circuit evaluates the acceleration signal of an accelerometer and, upon detection of a critical impact, sends a trigger signal to the belt tensioner, wherein the trigger circuit has an evaluation channel for detecting a rear-end collision, wherein the evaluation channel comprises: a rearward displacement determination stage with which, based on the acceleration signal occurring in a rear-end collision, a rearward displacement of the occupants is calculated. a characteristic displacement signal can be determined and a displacement threshold switch for the displacement signal is connected downstream of the displacement determination stage, which sets a high signal when a displacement threshold is exceeded by the displacement signal, whereby in the case of a rear-end collision the presence of this high signal is necessary for the output of the trigger signal to the belt tensioner. The DE 10 2009 0