Granted Patent B2

US 12,466,376 · App. 17/771,791 · Granted Nov 11, 2025

Inventors: Michael Belling (Renningen, DE); Christian Kaufmann (Sindelfingen, DE)

Assignee: KNORR-BREMSE SYSTEME FUER NUTZFAHRZEUGE GMBH

B60T13/662B60T8/1708B60T8/885B60T8/92B60T2270/406B60T2270/413

Abstract

Claims (42)

1 . A switching device for a brake system for a vehicle, comprising:

a central control unit for controlling the brake system,

a redundant control unit which is connected or is connectable to the central control unit via a data bus to control a redundant brake system which is redundant to and independent of the brake system; and

a single monitoring device to read in both: (a) a first test signal from the central control unit to test a function of the central control unit, and (b) a redundant test signal from the redundant control unit to test a function of the redundant control unit;

wherein the first test signal includes a measured value, an evaluation result or a protocol of the central control unit, and the redundant test signal includes a measured value, an evaluation result or a protocol of the redundant control unit, and

wherein the monitoring device is configured to check or verify the measured value or the evaluation result or the protocol of the first test signal, by comparing it with another measured value or another evaluation result or another protocol to detect whether the central control unit is functioning as expected, and the monitoring device is further configured to check or verify the measured value or the evaluation result or the protocol of the redundant test signal by comparing it with a third measured value or third evaluation result or a third protocol to detect whether the redundant control unit is functioning as expected.

2 . The switching device of claim 1 , wherein the monitoring device is configured to output a first control signal to a component of the brake system using the first test signal, wherein the first control signal indicates the function of the central control unit, and/or to output a redundant control signal to a component of the brake system using the redundant test signal, wherein the redundant control signal indicates the function of the redundant control unit.

3 . The switching device of claim 1 , wherein the monitoring device is implemented in the redundant control unit.

4 . The switching device of claim 1 , wherein the central control unit is connected or is connectable for signal communication to at least one sensor and/or actuator of the brake system and/or is connected electrically to an operating voltage terminal and/or a ground terminal and/or the redundant control unit is connected or is connectable for signal communication to at least the sensor and/or actuator and/or connected electrically to a further operating voltage terminal and/or a further ground terminal.

5 . The switching device of claim 1 , wherein the brake system is an EBS and the redundant brake system is another instance of an EBS.

6 . The switching device of claim 1 , wherein the brake system is an ABS and the redundant brake system is another instance of an ABS.

7 . The switching device of claim 1 , wherein the brake system is an EBS brake system and the redundant brake system is an electronic parking brake.

8 . The switching device according to claim 1 , further comprising:

at least one subsystem control unit which is connected or is connectable to the central control unit via a further data bus to control a subsystem device of the brake system;

wherein the monitoring device is further configured to read in a second test signal from the subsystem control unit to test a function of the subsystem control unit; and

wherein the second test signal includes a measured value of the subsystem control unit or an evaluation result of the subsystem control unit or a protocol of the subsystem control unit, and

wherein the monitoring device is configured to check or verify the measured value or the evaluation result or the protocol of the second test signal, by comparing it with a third measured value, or a third evaluation result or a third protocol to detect whether the subsystem control unit is functioning as expected.

9 . The switching device of claim 8 , wherein the monitoring device is configured to output a second control signal to a component of the brake system using the second test signal, wherein the second control signal indicates the function of the subsystem control unit.

10 . The switching device of claim 8 , wherein the monitoring device is implemented in the central control unit and/or the subsystem control unit.

11 . The switching device of claim 8 , wherein the monitoring device is arranged outside of the central control unit and the subsystem control unit.

12 . The switching device of claim 8 , wherein the central control unit is connected or is connectable to at least the subsystem control unit via an electrically conductive connecting device.

13 . The switching device of claim 8 , further comprising:

at least one second subsystem control unit which is connected or is connectable to the central control unit and/or the subsystem control unit via at least one second data bus to control a second subsystem device of the brake system, wherein the monitoring device is configured to read in a third test signal from the second subsystem control unit in order to check a function of the second subsystem control unit.

14 . The switching device of claim 8 , wherein the subsystem control unit is configured to control a subsystem device that is formed as an electropneumatic module or a foot brake module of the brake system.

15 . A brake system, comprising:

a switching device, including:

a central control unit for controlling the brake system,

a redundant control unit which is connected or is connectable to the central control unit via a data bus to control a redundant brake system which is redundant to and independent of the brake system; and

a single monitoring device to read in both: (a) a first test signal from the central control unit to test a function of the central control unit, and (b) a redundant test signal from the redundant control unit to test a function of the redundant control unit;

wherein the first test signal includes a measured value, an evaluation result or a protocol of the central control unit, and the redundant test signal includes a measured value, an evaluation result or a protocol of the redundant control unit, and

wherein the monitoring device is configured to check or verify the measured value or the evaluation result or the protocol of the first test signal, by comparing it with another measured value or another evaluation result or another protocol to detect whether the central control unit is functioning as expected, and the monitoring device is further configured to check or verify the measured value or the evaluation result or the protocol of the redundant test signal by comparing it with a third measured value or third evaluation result or a third protocol to detect whether the redundant control unit is functioning as expected.

16 . A method for operating a switching device for a brake system for a vehicle, the method comprising:

reading in, by a single monitoring device, both: (a) a first test signal from a central control unit, configured to control the brake system, and a redundant test signal from a redundant control unit, which is connected or is connectable to the central control unit via a data bus and is configured to control a redundant brake system which is redundant to and independent of the brake system; and

outputting a first control signal to a component of the brake system using the first test signal, wherein the first control signal indicates the function of the central control unit, and a redundant control signal to a component of the brake system using the redundant test signal, wherein the redundant control signal indicates the function of the redundant control unit;

wherein the first test signal includes a measured value or an evaluation result or a protocol of the central control unit, and the redundant test signal includes a measured value, an evaluation result or a protocol of the redundant control unit, and

wherein the monitoring device is configured to check or verify the measured value or the evaluation result or the protocol of the first signal, by comparing it with another measured value or another evaluation result or another protocol to detect whether the central control unit is functioning as expected, and the monitoring device is further configured to check or verify the measured value or the evaluation result or the protocol of the redundant test signal by comparing it with a third measured value or third evaluation result or a third protocol to detect whether the redundant control unit is functioning as expected.

17 . A non-transitory computer readable medium having a computer program, which is executable by a processor, comprising:

a program code arrangement having program code for operating a switching device for a brake system for a vehicle, by performing the following:

reading in, by a single monitoring device, both (a) a first test signal from a central control unit, configured to control the brake system, and (b) a redundant test signal from a redundant control unit, which is connected or is connectable to the central control unit via a data bus and is configured to control a redundant brake system which is redundant to and independent of the brake system; and

outputting a first control signal to a component of the brake system using the first test signal, wherein the first control signal indicates the function of the central control unit, and/or a redundant control signal to a component of the brake system using the redundant test signal, wherein the redundant control signal indicates the function of the redundant control unit;

wherein the first test signal includes a measured value or an evaluation result or a protocol of the central control unit, and the redundant test signal includes a measured value, an evaluation result or a protocol of the redundant control unit, and

wherein the monitoring device is configured to check or verify the measured value or the evaluation result or the protocol of the first test signal, by comparing it with another measured value, another evaluation result or another protocol to detect whether the central control unit is functioning as expected, and the monitoring device is further configured to check or verify the measured value or the evaluation result or the protocol of the redundant test signal by comparing it with a third measured value or third evaluation result or a third protocol to detect whether the redundant control unit is functioning as expected.

Assignments (1)

Priority Claims (1)

Continuity (1)

References Cited (24)