Method for improving the availability of an energy storage or transformation system
A method for improving the availability of an energy storage or transformation, EST, system of a vehicle is described. The method comprises transferring the EST condition data from the first electronic unit by means of a second data transfer mode, receiving a fault or error regarding the EST condition data in relation to the first data transfer mode, determining whether or not an EST system criterium is achieved, the EST system criterium comprising at least that the EST condition data transferred by the first electronic unit by means of the second data transfer mode is received by the second electronic unit, in response of achieving the EST system criterium, operating the EST system despite the fault or error and using the EST condition data transferred by means of the second data transfer mode.
1 . A computer implemented method for improving the availability of an energy storage or transformation (“EST”) system of a vehicle, the EST system comprising a first electronic processor comprising a first sensor configured to provide measurement data as EST condition data, the EST system further comprising a second electronic processor being a control processor, the method comprising:
transferring the EST condition data from the first electronic processor to the second electronic processor by means of a first data transfer mode,
transferring the EST condition data from the first electronic processor to the second electronic processor by means of a second data transfer mode, wherein the EST condition data transferred by both the first and second data transfer mode comprises the measurement data from the first sensor, and wherein the measurement data from the first sensor is directly measured by the first sensor,
receiving a fault or error regarding the EST condition data in relation to the first data transfer mode, wherein the fault or error corresponds to a fault or error in the measurement data itself, wherein the fault or error in the measurement data further comprises a data communication error in the transfer of the EST condition data by means of the first data transfer mode,
identifying a vehicle situation which, in case of an at least temporary lack of operability of the EST system, belongs to a predetermined group of vehicle situations defined as hazardous, wherein the identified vehicle situation belonging to the predetermined group of vehicle situations defined as hazardous has a predetermined vehicle risk level, and wherein the received fault or error regarding the EST condition data in relation to the first data transfer mode has a predetermined EST system risk level,
determining whether or not an EST system criteria is achieved, the EST system criteria comprising at least that the EST condition data transferred by the first electronic processor by means of the second data transfer mode is received by the second electronic processor,
in response of achieving the EST system criteria, operating the EST system despite the fault or error and using the EST condition data transferred by means of the second data transfer mode, wherein operating the EST system despite the fault or error and using the EST condition data transferred by means of the second data transfer mode is carried out in response to identifying the vehicle situation belonging to the predetermined group of vehicle situations defined as hazardous, and wherein operating the EST system despite the fault or error and using the EST condition data transferred by means of the second data transfer mode is performed in response to the risk level of the identified vehicle situation being higher than the risk level of the EST system.
2 . The method according to claim 1 , wherein the first data transfer mode comprises transferring the EST condition data via a first communication bus, and the second data transfer mode comprises transferring the EST condition data via a second communication bus being different to the first communication bus.
3 . The method according to claim 1 , wherein the first data transfer mode comprises transferring the EST condition data via a first message, and the second data transfer mode comprises transferring the EST condition data via a second message being different to the first message.
4 . The method according to claim 3 , wherein the second message is of a different type than the first message, or wherein the data representing the EST condition data in the second message is of a different type than the data representing the EST condition data in the first message.
5 . The method according to claim 2 , wherein the first data transfer mode comprises transferring the EST condition data via the first message and the first communication bus, and the second data transfer mode comprises transferring the EST condition data via the second message and the second communication bus.
6 . The method according to claim 1 , wherein the EST system criteria comprises that the fault or error regarding the EST condition data in relation to the first data transfer mode indicates an at least temporary lack of operability of the EST system.
7 . The method according to claim 1 , wherein the fault or error regarding the EST condition data in relation to the first data transfer mode is at least one of the following: transmission error of the EST condition data, repetition of the EST condition data, deletion of the EST condition data, corruption of the EST condition data, delay of the EST condition data and masquerade error of the EST condition data.
8 . An EST management system comprising an electronic control processor being configured to perform:
transferring the EST condition data from the first electronic processor to the second electronic processor by means of a first data transfer mode,
transferring the EST condition data from the first electronic processor to the second electronic processor by means of a second data transfer mode, wherein the EST condition data transferred by both the first and second data transfer mode comprises the measurement data from the first sensor, and wherein the measurement data from the first sensor is directly measured by the first sensor,
receiving a fault or error regarding the EST condition data in relation to the first data transfer mode, wherein the fault or error corresponds to a fault or error in the measurement data itself, wherein the fault or error in the measurement data further comprises a data communication error in the transfer of the EST condition data by means of the first data transfer mode,
identifying a vehicle situation which, in case of an at least temporary lack of operability of the EST system, belongs to a predetermined group of vehicle situations defined as hazardous, wherein the identified vehicle situation belonging to the predetermined group of vehicle situations defined as hazardous has a predetermined vehicle risk level, and wherein the received fault or error regarding the EST condition data in relation to the first data transfer mode has a predetermined EST system risk level,
determining whether or not an EST system criteria is achieved, the EST system criteria comprising at least that the EST condition data transferred by the first electronic processor by means of the second data transfer mode is received by the second electronic processor,
in response of achieving the EST system criteria, operating the EST system despite the fault or error and using the EST condition data transferred by means of the second data transfer mode, wherein operating the EST system despite the fault or error and using the EST condition data transferred by means of the second data transfer mode is carried out in response to identifying the vehicle situation belonging to the predetermined group of vehicle situations defined as hazardous, and wherein operating the EST system despite the fault or error and using the EST condition data transferred by means of the second data transfer mode is performed in response to the risk level of the identified vehicle situation being higher than the risk level of the EST system.
9 . An EST system of a vehicle comprising an EST management system according to claim 8 .
10 . The EST system according to claim 9 , comprising the first electronic processor configured to provide EST condition data, wherein the electronic control processor of the EST management system is configured to receive the EST condition data from the first electronic processor by means of a first data transfer mode, wherein the EST system comprises a first communication bus for transferring the EST condition data by means of the first data transfer mode, and a second communication bus for transferring the EST condition data by means of the second data transfer mode, the second communication bus being different to the first communication bus.
11 . A vehicle comprising an EST system including an electronic control processor being configured to perform:
transferring the EST condition data from the first electronic processor to the second electronic processor by means of a first data transfer mode,
transferring the EST condition data from the first electronic processor to the second electronic processor by means of a second data transfer mode, wherein the EST condition data transferred by both the first and second data transfer mode comprises the measurement data from the first sensor, and wherein the measurement data from the first sensor is directly measured by the first sensor,
receiving a fault or error regarding the EST condition data in relation to the first data transfer mode, wherein the fault or error corresponds to a fault or error in the measurement data itself, wherein the fault or error in the measurement data further comprises a data communication error in the transfer of the EST condition data by means of the first data transfer mode,
identifying a vehicle situation which, in case of an at least temporary lack of operability of the EST system, belongs to a predetermined group of vehicle situations defined as hazardous, wherein the identified vehicle situation belonging to the predetermined group of vehicle situations defined as hazardous has a predetermined vehicle risk level, and wherein the received fault or error regarding the EST condition data in relation to the first data transfer mode has a predetermined EST system risk level,
determining whether or not an EST system criteria is achieved, the EST system criteria comprising at least that the EST condition data transferred by the first electronic processor by means of the second data transfer mode is received by the second electronic processor,
in response of achieving the EST system criteria, operating the EST system despite the fault or error and using the EST condition data transferred by means of the second data transfer mode, wherein operating the EST system despite the fault or error and using the EST condition data transferred by means of the second data transfer mode is carried out in response to identifying the vehicle situation belonging to the predetermined group of vehicle situations defined as hazardous, and wherein operating the EST system despite the fault or error and using the EST condition data transferred by means of the second data transfer mode is performed in response to the risk level of the identified vehicle situation being higher than the risk level of the EST system.
12 . A computer implemented method for improving the availability of an energy storage or transformation (“EST”) system of a vehicle, the EST system comprising a first electronic processor comprising a first sensor configured to provide measurement data as EST condition data, the EST system further comprising a second electronic processor being a control processor, the method comprising:
transferring the EST condition data from the first electronic processor to the second electronic processor by means of a first data transfer mode,
transferring the EST condition data from the first electronic processor to the second electronic processor by means of a second data transfer mode, wherein the EST condition data transferred by both the first and second data transfer mode comprises the measurement data from the first sensor, and wherein the measurement data from the first sensor is directly measured by the first sensor,
receiving a fault or error regarding the EST condition data in relation to the first data transfer mode, wherein the fault or error corresponds to a fault or error in the measurement data, wherein the fault or error in the measurement data further comprises at least one of the following: transmission error of the EST condition data, repetition of the EST condition data, deletion of the EST condition data, corruption of the EST condition data, delay of the EST condition data or masquerade error of the EST condition data,
identifying a vehicle situation which, in case of an at least temporary lack of operability of the EST system, belongs to a predetermined group of vehicle situations defined as hazardous, wherein the identified vehicle situation belonging to the predetermined group of vehicle situations defined as hazardous has a predetermined vehicle risk level, and wherein the received fault or error regarding the EST condition data in relation to the first data transfer mode has a predetermined EST system risk level,
determining whether or not an EST system criteria is achieved, the EST system criteria comprising at least that the EST condition data transferred by the first electronic processor by means of the second data transfer mode is received by the second electronic processor,
in response of achieving the EST system criteria, operating the EST system despite the fault or error and using the EST condition data transferred by means of the second data transfer mode, wherein operating the EST system despite the fault or error and using the EST condition data transferred by means of the second data transfer mode is carried out in response to identifying the vehicle situation belonging to the predetermined group of vehicle situations defined as hazardous, and wherein operating the EST system despite the fault or error and using the EST condition data transferred by means of the second data transfer mode is performed in response to the risk level of the identified vehicle situation being higher than the risk level of the EST system.
13 . A computer implemented method for improving the availability of an energy storage or transformation (“EST”) system of a vehicle, the EST system comprising a first electronic processor comprising a calculation processor configured to provide a calculation of a first internal state of the EST system as condition data, the first internal state including at least one of State-of-Charge (SoC), State-of-Power (SoP) or State-of-Energy (SoE) of the EST system, the EST system further comprising a second electronic processor being a control processor, the method comprising:
transferring the EST condition data from the first electronic processor to the second electronic processor by means of a first data transfer mode,
transferring the EST condition data from the first electronic processor to the second electronic processor by means of a second data transfer mode, wherein the EST condition data transferred by both the first and second data transfer mode comprises the first internal state from the calculation processor,
receiving a fault or error regarding the EST condition data in relation to the first data transfer mode, wherein the fault or error corresponds to a fault or error in the first internal state,
identifying a vehicle situation which, in case of an at least temporary lack of operability of the EST system, belongs to a predetermined group of vehicle situations defined as hazardous, wherein the identified vehicle situation belonging to the predetermined group of vehicle situations defined as hazardous has a predetermined vehicle risk level, and wherein the received fault or error regarding the EST condition data in relation to the first data transfer mode has a predetermined EST system risk level,
determining whether or not an EST system criteria is achieved, the EST system criteria comprising at least that the EST condition data transferred by the first electronic processor by means of the second data transfer mode is received by the second electronic processor,
in response of achieving the EST system criteria, operating the EST system despite the fault or error and using the EST condition data transferred by means of the second data transfer mode, wherein operating the EST system despite the fault or error and using the EST condition data transferred by means of the second data transfer mode is carried out in response to identifying the vehicle situation belonging to the predetermined group of vehicle situations defined as hazardous, and wherein operating the EST system despite the fault or error and using the EST condition data transferred by means of the second data transfer mode is performed in response to the risk level of the identified vehicle situation being higher than the risk level of the EST system.
14 . The computer implemented method of claim 13 , wherein the fault or error in the first internal state comprises a fault or error in the calculation or estimation of the first internal state, or the data transfer thereof by means of the first data transfer mode.