Patent application number | Description | Published |
20090024775 | Dual core architecture of a control module of an engine - A control system for a control module of a vehicle includes a first integrated circuit (IC) core of a primary processor that generates a first control signal using a central processing unit (CPU). A second IC core of the primary processor generates a second control signal using a second CPU and generates a remedial control signal based on the first control signal and the second control signal. | 01-22-2009 |
20090088946 | SECURED THROTTLE POSITION IN A COORDINATED TORQUE CONTROL SYSTEM - A throttle control module comprises a primary throttle position module, a redundant throttle position module, and a remedial action module. The primary throttle position module transforms a primary throttle area signal indicating desired throttle area into a primary throttle position signal indicating a first desired throttle position of a throttle valve. The throttle valve is actuated based upon the primary throttle position signal. The redundant throttle position module transforms a redundant throttle area signal indicating desired throttle area into a redundant throttle position signal indicating a second desired throttle position of the throttle valve. The remedial action module selectively generates a remedial action signal based upon a comparison of the first and second desired throttle positions. | 04-02-2009 |
20090235019 | SECURING SAFETY-CRITICAL VARIABLES - A system comprises a general-purpose memory, a lockable memory, a memory management unit, and a processor. The general-purpose memory includes data for a first set of addresses. The lockable memory includes data for a second set of addresses. The memory management unit selectively writes data to one of the general-purpose memory and the lockable memory and selectively locks the lockable memory by preventing writes to the lockable memory. The processor instructs the memory management unit to unlock the lockable memory before requesting a write to one of the second set of addresses. | 09-17-2009 |
20090292435 | SECURITY FOR ENGINE TORQUE INPUT AIR-PER-CYLINDER CALCULATIONS - An air-per-cylinder (APC) security system for a vehicle comprises an APC determination module, an APC threshold determination module, and an APC diagnostic module. The APC determination module determines first and second APC values for first and second cylinders of an engine, respectively, based on mass airflow (MAF) into the engine. The APC threshold determination module determines an APC threshold based on the first APC value and a spark timing for the first cylinder. The APC diagnostic module selectively diagnoses a fault in the APC determination module when the second APC value is greater than a sum of the first APC value and the APC threshold. | 11-26-2009 |
20090327821 | ACCUMULATED ERROR TIME MONITORING DIAGNOSTIC CONTROL SYSTEM - A diagnostic system includes N dedicated diagnostic modules that each correspond with a respective one of multiple control systems. The N dedicated diagnostic modules each generate status signals indicating results of respective diagnostic tests. A diagnostic error time monitor determines an accumulated error time value between error events for each of the control systems based on the status signals. The diagnostic error time monitor selectively reports a fault to a respective one of the N dedicated diagnostic modules based on the accumulated error time value. | 12-31-2009 |
20100075803 | SECURING THROTTLE AREA IN A COORDINATED TORQUE CONTROL SYSTEM - An engine system includes a throttle actuator module and a torque control module. The throttle actuator module controls a throttle actuator based on a desired throttle area. The torque control module determines an actuator torque. The torque control module determines a rate limited torque, a maximum torque, and a minimum torque based on the actuator torque and a predetermined rate of change. The torque control module determines the desired throttle area based on the actuator torque when the rate limited torque is greater than the maximum torque. The torque control module determines the desired throttle area based on the actuator torque when the rate limited torque is less than the minimum torque. | 03-25-2010 |
20100217472 | SECURING DRIVER REQUESTED TORQUE - An engine control system comprises a driver axle torque request module (DATRM) and a driver axle torque security module (DATSM). The DATRM determines a pedal torque request based on minimum and maximum scaling torques and a torque scalar. The DATRM determines a raw driver torque request. The DATRM selectively shapes raw driver torque request into a final driver torque request. The DATRM converts the final driver torque request into a first axle torque request. The DATSM selectively diagnoses a fault in the first axle torque request based on a minimum engine torque, the minimum scaling torque, a first comparison of the final driver torque request and the redundant final driver torque request, and a second comparison of the first axle torque request and a redundant axle torque request. | 08-26-2010 |
20120310467 | PROCESSOR SAFETY TEST CONTROL SYSTEMS AND METHODS - First, second, and third processor modules selectively execute a test having N test states while an ignition system of the vehicle is off. N is an integer greater than one. The N test states each include: the first processor module setting a first output to a first predetermined value for one of the N test states; the second processor module setting a second output to a second predetermined value for the one of the N test states; the third processor module setting a third output to a third predetermined value for the one of the N test states; a predetermined expectation for the one of the N test states; and at least one of the first, second, and third processor modules indicating a fault when a fourth output is different than the predetermined expectation. A control module sets the fourth output based on the first, second, and third outputs. | 12-06-2012 |
20130111203 | METHOD TO REPLACE BOOTLOADER PUBLIC KEY | 05-02-2013 |
20130111212 | METHODS TO PROVIDE DIGITAL SIGNATURE TO SECURE FLASH PROGRAMMING FUNCTION | 05-02-2013 |
20130246866 | SYSTEM AND METHOD FOR VERIFYING THE INTEGRITY OF A SAFETY-CRITICAL VEHICLE CONTROL SYSTEM - A control system according to the principles of the present disclosure includes an operation control module, a fault detection module, a remedial action module, and a reset module. The operation control module controls operation of a vehicle system. The fault detection module detects a fault in the operation control module when the operation control module fails an integrity test. The remedial action module takes a remedial action when the fault is detected. The reset module resets the operation control module when the fault is detected and the remedial action is not taken. | 09-19-2013 |
20140032916 | SECURED FLASH PROGRAMMING OF SECONDARY PROCESSOR - A system and method for securely flashing a controller, where the controller includes at least one main processor and at least one secondary processor, and where the processing duties are distributed between the processors. A programming tool provides a content file to be flashed and a digital signature to the controller. The controller calculates a hash value of the content file, decrypts the digital signature using a public key to generate a decrypted hash value, compares the decrypted hash value to the calculated hash value, and determines that the content file is valid if the decrypted hash code matches the calculated hash value, where one or more of the steps of calculating the hash value, decrypting the digital signature, comparing the decrypted hash value to the calculated hash value and determining that the content file is valid, is performed by the main processor for the secondary processor. | 01-30-2014 |