Method and system for performing fail-safe operation for anti-skid automotive brake control system having a plurality of controllers independently operable to others

Claim 2

In an anti-skid brake control system for an automotive vehicle including a plurality of mutually independent control sub-systems for controlling braking operations of respectively corresponding braking circuits, each of said control sub-systems including a pressure control valve operable among a first position in which braking pressure in the corresponding brake circuit is increased, a second position in which the braking pressure in said corresponding braking circuit is decreased and a third position in which the braking pressure in said corresponding braking circuit is held constant, an actuator connected to said pressure control valve to operate the latter according to a control signal, a wheel speed sensor producing a sensor signal indicative of rotation speed of a corresponding vehicular wheel, and a controller receiving said sensor signal for deriving said control signal on the basis thereof, a method for performing a fail-safe operation when failure of operation in one of the control sub-systems is detected, comprising the steps of: monitoring operation of each of said control sub-systems for detecting a malfunctioning control sub-system, disabling said actuator of said malfunctioning control sub-system and maintaining said corresponding control signal at a value indicative of said first position of said pressure control valve thereby allowing a manual mode of operation, and producing a fault-indicative signal; and monitoring operating conditions of other control sub-systems by checking the presence of said fault indicative signal, and performing a fail-safe operation by disabling said actuator of other malfunctioning control sub-systems and holding, to corresponding control signal at a value corresponding to said first position and producing other fault-indicative signals corresponding to the other control sub-systems.

Claim 3

The method as set forth in claim 1, which further comprises a step of turning on a fault warning indicator in response to said fault indicative signal.

Claim 4

The method as set forth in claim 2, which further comprises a step of recording data identifying malfunctioning components of said control sub-system in response to ssaid fault-indicative signal.

Claim 5

The method as set forth in claim 1, wherein said anti-skid brake control system includes a first control sub-system for controlling braking operations for a first driven wheel, a second control sub-system for controlling braking operations for a second driven wheel, and a third control sub-system for controlling braking operations on driving wheels; and said first control system connected to said second control sub-system for detecting malfunction in said second control sub-system, said second control sub-system connected to said third control sub-system for detecting malfunction in said third control sub-system, and said third control sub-system connected to said first control sub-system for detecting malfunction in said first control sub-system.

Claim 6

The method as set forth in claim 4, wherein said first control sub-system is also connected to said third control sub-system for detecting malfunction in said third control sub-system, said second control sub-system is also connected to said first control sub-system for detecting malfunction in said first control sub-system, and said third control sub-system is also connected to said second control sub-system for detecting malfunction of said second control sub-system.

Claim 7

A fail-safe system for an anti-skid brake control system which includes a plurality of respectively independent brake control sub-systems comprising: a plurality of hydraulic brake circuits, each corresponding to one of said brake control sub-systems and each controlling a pressure control valve; said pressure control valve controlled in each of said brake circuits for increasing hydraulic brake pressure in a wheel cylinder in a first position thereof, for decreasing hydraulic brake pressure in said wheel cylinder in a second position thereof and for holding hydraulic brake pressure in said wheel cylinder constant in a third position thereof; an actuator connected to each one of corresponding pressure control valves for operating said pressure control valves between said first, second and third positions according to a control signal, said actuator being connected to an electric power source to receive power supply therefrom; a sensor connected to each of said brake control sub-systems for detecting wheel speed and producing a sensor signal indicative thereof; a detector connected to each of said brake control sub-systems for detecting faulty operation of the components of ssaid anti-skid brake control system and producing a fault-indicative signal when faulty operation of at least one of said components is detected; and a controller connected to each of said brake control sub-systems, and operative for receiving said sensor signal and processing the sensor signal, deriving values of wheel acceleration and slippage, deriving said control signal in accordance with said wheel acceleration and slippage values, and said controller being responsive to said fault-indicative signal from said detector connected to a sub-system having a faulty component for maintaining said corresponding control signal at a value at which said pressure control valve is in said first position thereby allowing a manual mode of operation and to terminate power supply to said actuator, and said controller further responsive to other fault-indicative signals from other sub-systems to hold said corresponding control signal at a value at which said corresponding pressure control valve is in said first position and to terminate power supply to said corresponding actuator.

Claim 8

A fail-safe system for an anti-skid brake control system which includes a plurality of respectively independent brake control sub-systems comprising: a plurality of hydraulic brake circuits, each corresponding to one of said brake control sub-systems and each controlling a pressure control valve; said pressure control valve controlled in each of said brake circuits for increasing hydraulic brake pressure in a wheel cylinder in a first position thereof, for decreasing hydraulic brake pressure in said wheel cylinder in a second position thereof and for holding hydraulic brake pressure in said wheel cylinder constant in a third position thereof; an actuator connected to each one of corresponding pressure control valves for operating said pressure control valves between said first, second and third positions according to a control signal, said actuator being connected to an electric power source to receive power supply therefrom; a sensor connected to each of said brake control sub-systems for detecting wheel speed and producing a sensor signal indicative thereof; a detector connected to each of said brake control sub-systems for detecting faulty operation of the components of ssaid anti-skid brake control system and producing a fault-indicative signal when faulty operation of at least one of said components is detected; and a controller connected to each of said brake control sub-systems, and operative for receiving said sensor signal and processing the sensor signal, deriving values of wheel acceleration and slippage, deriving said control signal in accordance with said wheel acceleration and slippage values, and said controller being responsive to said fault-indicative signal from said detector connected to a sub-system having a faulty component for maintaining said corresponding control signal at a value at which said pressure control valve is in said first position thereby allowing a manual mode of operation and to terminate power supply to said actuator, and said controller further responsive to other fault-indicative signals from other sub-systems to hold said corresponding control signal at a value at which said corresponding pressure control valve is in said first position and to terminate power supply to said corresponding actuator.

Claim 9

The fail-safe system as set forth in claim 6, which further comprises a fault monitor lamp energized by said fault-indicative signal.

Claim 10

The fail-safe system as set forth in claim 6, which further comprises a memory connected to said detector for storing data identifying faulty components in response to said fault-indicative signal.

Claim 11

The fail-safe system as set forth in claim 8, further comprising a faulty component indicator energized when faulty operation of a corresponding component is detected by said detector.

Claim 12

The fail-safe system as set forth in claim 9, wherein said detector monitors the power supply to said actuator and produces said fault-indicative signal when the power supply is interrupted.

Claim 13

The fail-safe system as set forth in claim 10, wherein said detector distinguishes between termination of power supply to said actuator by said controller and by external conditions, and in the former case does not produce said fault-indicative signal.

Claim 14

The fail-safe system as set forth in claim 6, wherein said detector includes means receiving said control signal and signals indicative of the response of the components of the anti-skid control system to the control signal comprising said control signal and said response-indicative signals and producing said fault-indicative signal when said responsive-indicative signals do not fully correspond to the response of properly functioning anti-skid control system components to the control signal.

Claim 15

In an anti-skid brake control system for an automotive vehicle including a plurality of mutually independent control sub-systems for controlling braking operations of respectively corresponding braking circuits, each of said control sub-system including a pressure control valve operable among a first position in which braking pressure in the corresponding brake circuit is increased, and a second position in which the braking pressure in said corresponding braking circuit is decreased, an actuator connected to said pressure control valve to operate the latter according to a control signal, a wheel speed sensor producing a sensor signal indicative of rotation speed of a corresponding vehicular wheel, and a controller receiving said sensor signal for deriving said control signal on the basis thereof, a method for performing a fail-safe operation when failure of operation in one of the control sub-systems is detected, comprising the steps of: monitoring operation of each of said control sub-systems for detecting a malfunctioning control sub-systems, disabling said actuator of said malfunctioning control sub-system and maintaining said corresponding control signal at a value indicative of said first position of said pressure control valve thereby allowing a manual mode of operation, and producing a fault-indicative signal; and monitoring operating conditions of other control sub-systems by checking the presence of said fault-indicative signal, and performing a fail-safe operation by disabling said actuator of other malfunctioning control sub-systems and holding the corresponding control signal at a value corresponding to said first position thereby allowing a manual mode of operation and producing other fault-indicative signals corresponding to the other control sub-systems.

Claim 16

In an anti-skid brake control system for an automotive vehicle including a plurality of mutually independent control sub-systems for controlling braking operations of respectively corresponding braking circuits, each of said control sub-system including a pressure control valve operable among a first position in which braking pressure in the corresponding brake circuit is increased, and a second position in which the braking pressure in said corresponding braking circuit is decreased, an actuator connected to said pressure control valve to operate the latter according to a control signal, a wheel speed sensor producing a sensor signal indicative of rotation speed of a corresponding vehicular wheel, and a controller receiving said sensor signal for deriving said control signal on the basis thereof, a method for performing a fail-safe operation when failure of operation in one of the control sub-systems is detected, comprising the steps of: monitoring operation of each of said control sub-systems for detecting a malfunctioning control sub-systems, disabling said actuator of said malfunctioning control sub-system and maintaining said corresponding control signal at a value indicative of said first position of said pressure control valve thereby allowing a manual mode of operation, and producing a fault-indicative signal; and monitoring operating conditions of other control sub-systems by checking the presence of said fault-indicative signal, and performing a fail-safe operation by disabling said actuator of other malfunctioning control sub-systems and holding the corresponding control signal at a value corresponding to said first position thereby allowing a manual mode of operation and producing other fault-indicative signals corresponding to the other control sub-systems.

Claim 17

A fail-safe system for an anti-skid brake control system which includes a plurality of respectively independent brake control sub-systems comprising: a plurality of hydraulic brake circuits, each corresponding to one of said brake control sub-systems and each controlling a pressure control valve; said pressure control valve controlled in each of said brake circuits for increasing hydraulic brake pressure in a wheel cylinder in a first position thereof, and for decreasing hydraulic brake pressure in said wheel cylinder in a second position thereof; an actuator connected to each one of corresponding pressure control valves for operating said pressure control valves between said first and second positions according to a control signal, said actuator being connected to an electric power source to receive power supply therefrom; a sensor connected to each of said brake control sub-systems for detecting wheel speed and producing a sensor signal indicative of the wheel speed; a detector connected to each of said brake control sub-systems for detecting faulty operation of the components of said anti-skid brake control system and producing a fault-indicative signal when faulty operation of at least one of said components is detected; and a controller connected to each of said brake control sub-systems, and operative for receiving said sensor signal and processing the sensor signal, deriving values of wheel acceleration and slippage, deriving said control signal in accordance with said wheel acceleration and slippage values, and said controller being responsive to said fault-indicative signal from said detector connected to a sub-system having a faulty component for maintaining said corresponding control signal at a value at which said pressure control valve is in said first position thereby allowing a manual mode of operation and to terminate power supply to said actuator, and said controller further responsive to other fault-indicative signals from other sub-systems to hold said corresponding control signal at a value at which said pressure control valve is in said first position and to terminate power supply to said corresponding actuator.

Claim 18

A fail-safe system for an anti-skid brake control system which includes a plurality of respectively independent brake control sub-systems comprising: a plurality of hydraulic brake circuits, each corresponding to one of said brake control sub-systems and each controlling a pressure control valve; said pressure control valve controlled in each of said brake circuits for increasing hydraulic brake pressure in a wheel cylinder in a first position thereof, and for decreasing hydraulic brake pressure in said wheel cylinder in a second position thereof; an actuator connected to each one of corresponding pressure control valves for operating said pressure control valves between said first and second positions according to a control signal, said actuator being connected to an electric power source to receive power supply therefrom; a sensor connected to each of said brake control sub-systems for detecting wheel speed and producing a sensor signal indicative of the wheel speed; a detector connected to each of said brake control sub-systems for detecting faulty operation of the components of said anti-skid brake control system and producing a fault-indicative signal when faulty operation of at least one of said components is detected; and a controller connected to each of said brake control sub-systems, and operative for receiving said sensor signal and processing the sensor signal, deriving values of wheel acceleration and slippage, deriving said control signal in accordance with said wheel acceleration and slippage values, and said controller being responsive to said fault-indicative signal from said detector connected to a sub-system having a faulty component for maintaining said corresponding control signal at a value at which said pressure control valve is in said first position thereby allowing a manual mode of operation and to terminate power supply to said actuator, and said controller further responsive to other fault-indicative signals from other sub-systems to hold said corresponding control signal at a value at which said pressure control valve is in said first position and to terminate power supply to said corresponding actuator.