Search Results

The BMW Group is the first car manufacturer introducing FlexRay in series projects. Start of production is September 2006, where a pilot application is implemented in the chassis domain of the new BMW X5. In 2008 FlexRay will form a substantial part of the overall electronics architecture in form of a FlexRay network connecting multiple ECUs implementing chassis, powertrain, and driver assistance applications.

BMW, DaimlerChrysler, Motorola and Philips present their joint development activity related to the FlexRay communication system that is intended for distributed applications in vehicles. The designated applications for powertrain and chassis control place requirements in terms of availability, reliability and data bandwidth that cannot be met by any product currently available on the market under the testing conditions encountered in an automobile. A short look back on events so far is followed by a description of the protocol and its first implementation as an integrated circuit, as well as its incorporation into a complete tool environment.

The new generation of drive-by-wire systems currently under development has demanding requirements on the electronic architecture. Functions such as brake-by-wire or steer-by-wire require continued operation even in the presence of component failures. The electronic architecture must therefore provide fault-tolerance and real-time response. This in turn requires the operating system and the communication layer to be predictable, dependable and composable. It is well known that this properties are best supported by a time-triggered approach. A consortium consisting of German and French car manufacturers and suppliers, which aims at becoming a working group within the OSEK/VDX initiative, the OSEKtime consortium, is currently defining a specification for a time-triggered operating system and a fault-tolerant communication layer.1 The operating system and the communication layer are based on applicable interfaces of the OSEK/VDX standard.

Actual research results in the automotive field show that there is a big potential in increasing active and passive safety by implementing intelligent driver assisting systems. Realizing such safety related system functions requires an electronic system without mechanical or hydraulic backup to de-couple the human interface from the vehicle functions, e.g., steering and braking. Safety critical functions without mechanical backup enforce new requirements in system design. Any faulty behavior of a component within the system must not lead to a malfunction of the overall system. Consequently in the system design fault-tolerance mechanisms in real time must be introduced. Active replication of a functional node is a proper solution to guarantee this real time fault-tolerance. Redundancy management of the functional nodes can be implemented by fail-silent replicas, i.e. a node behaves correctly or does not produce any output at all.

The provision of a system-wide global time base with good precision and accuracy is a fundamental prerequisite for the design of a time-triggered automotive real-time control system. In this paper we investigate the issues of clock synchronization in such a system. Our synchronization scheme allows every node to have a different oscillator. Based on typical parameters we derive the achievable precision and accuracy, which is in the microsecond range. The description of a prototype implementation shows the applicability of our approach.