# US 10,479,303 B2 · Safety system for a vehicle of a vehicle fleet

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,479,303 B2
- Document ID: US10479303B2
- Status: Granted
- Kind: B2
- Application number: 15/527,408
- Filed: 2015-12-17
- Published: 2017-12-07
- Granted: 2019-11-19
- Earliest claimed: 2014-12-18
- Assignees: Robert Bosch GmbH
- Applicants: Robert Bosch GmbH
- Inventors: Armin Koehler; Heiko Freienstein
- Web page: https://patentgrep.com/patent/US10479303B2

## CPC

- B60R 21/0134: responsive to imminent contact with an obstacle {, e.g. using radar systems}
- B60R 21/0173: {Diagnostic or recording means therefor}
- B60W 30/085: Taking automatic action to adjust vehicle attitude in preparation for collision, e.g. braking for nose dropping
- G07C 5/008: {communicating information to a remotely located station (transmission systems for measured values G08C)}
- G07C 5/085: {using electronic data carriers}
- G08G 1/164: {Centralised systems, e.g. external to vehicles}
- G08G 1/166: {for active traffic, e.g. moving vehicles, pedestrians, bikes}
- B60R 21/013: including means for detecting collisions, impending collisions or roll-over
- B60R 21/0136: responsive to actual contact with an obstacle {, e.g. to vehicle deformation, bumper displacement or bumper velocity relative to the vehicle (monitoring crash strength in combination with passenger seat detection B60R21/01558)}
- G01S 13/93: for anti-collision purposes
- G01S 17/93: for anti-collision purposes
- B60R: VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
- B60W: CONJOINT CONTROL OF VEHICLE SUB-UNITS OF DIFFERENT TYPE OR DIFFERENT FUNCTION; CONTROL SYSTEMS SPECIALLY ADAPTED FOR HYBRID VEHICLES; ROAD VEHICLE DRIVE CONTROL SYSTEMS FOR PURPOSES NOT RELATED TO THE CONTROL OF A PARTICULAR SUB-UNIT
- G07C: TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G08G: TRAFFIC CONTROL SYSTEMS (guiding railway traffic, ensuring the safety of railway traffic B61L; arrangement of road signs or traffic signals E01F9/00; radar or analogous systems, sonar systems, lidar systems specially adapted for traffic control G01S13/91, G01S15/88, G01S17/88; {radar or analogous systems, sonar systems, lidar systems specially adapted for anti-collision purposes G01S13/93, G01S15/93, G01S17/93})
- G01S: RADIO DIRECTION-FINDING; RADIO NAVIGATION; DETERMINING DISTANCE OR VELOCITY BY USE OF RADIO WAVES; LOCATING OR PRESENCE-DETECTING BY USE OF THE REFLECTION OR RERADIATION OF RADIO WAVES; ANALOGOUS ARRANGEMENTS USING OTHER WAVES

## Abstract

A pre-crash system has at least one dummy actuator and an adaptive pre-trigger function that is implemented with different parameter sets as a function of a current degree of validation, and evaluates the acquired physical quantities for pre-crash recognition in order to recognize an unavoidable crash, a first parameter set, which limits the pre-trigger function to a dummy operating mode in which the pre-trigger function produces at least one trigger signal for the dummy actuator if the evaluation of the physical quantities permits the inference of an unavoidable crash, being implemented until the current degree of validation satisfies a specified condition, the pre-trigger function comparing the triggering of the dummy actuator with the behavior of the evaluation and control unit, and, as a function of the comparison, rating the triggering of the dummy actuator as “correct” or as a “false positive.”

## Claims

### Claim 1

A safety system for a vehicle of a fleet of vehicles, comprising:
a personal protection device;
a contact sensor system for acquiring at least one impact-relevant physical quantity;
an environmental sensor system for acquiring at least one crash-relevant physical quantity in an environment surrounding the vehicle; and
an evaluation and control unit;
wherein:
the evaluation and control unit is configured to:
evaluate the at least one impact-relevant physical quantity acquired by the contact sensor system;
execute an adaptive pre-trigger function by which to:
evaluate the at least one crash-relevant physical quantity acquired by the environmental sensor system;
based on the evaluation of the at least one crash-relevant physical quantity acquired by the environmental sensor system, recognize that an unavoidable crash, which has not yet occurred, will occur; and
based on the recognition that the unavoidable crash will occur and only when the adaptive pre-trigger function is validated to be accurate, output a trigger signal that triggers deployment of the personal protection device prior to occurrence of the unavoidable crash; and
determine, for respective recognitions that the unavoidable crash will occur, whether a respective corresponding crash impact is recognized subsequent to the respective recognition that the unavoidable crash will occur, with a result of the determination impacting a rating indicating whether there is a threshold correspondence between the recognitions that the unavoidable crash will occur and the recognitions of crash impact; and
the adaptive pre-trigger function:
is initially installed without being validated to be accurate, prior to the rating indicating that there is the threshold correspondence, so that one or more recognitions that the unavoidable crash will occur is made by the execution of the adaptive pre-trigger function without the trigger signal being output to trigger the deployment of the personal protection device; and
is subsequently updated to be validated to be accurate in response to the rating being changed to indicate that there is the threshold correspondence so that in response to a subsequent recognition that the unavoidable crash will occur, the adaptive pre-trigger function causes deployment of the personal protection device prior to any corresponding crash impact being determined.

### Claim 2 (depends on 1)

The safety system as recited in claim 1, further comprising a data recorder that stores the rating and sums operating hours.

### Claim 3 (depends on 1)

The safety system as recited in claim 1, further comprising a first communication device via which the safety system is configured to transmit at least one of the rating and a sum of operating hours to a central unit.

### Claim 4 (depends on 3)

The safety system as recited in claim 3, wherein the first communication device receives an update from the central unit by which the adaptive pre-trigger function is validated to be accurate, thereby enabling the output of the trigger signal that triggers the deployment of the personal protection device in response to the recognition that the unavoidable crash will occur.

### Claim 5

A system for validating a pre-trigger function for a safety system in vehicles of a fleet of vehicles, comprising:
a central unit that includes a computer system, a first communication device, and storage device, the computer system communicating with and exchanging data with the vehicles of the vehicle fleet via the first communication device;
wherein:
the safety system of the individual vehicles of the vehicle fleet includes:
a personal protection device;
a contact sensor system for acquiring at least one impact-relevant physical quantity;
an environmental sensor system for acquiring at least one crash-relevant physical quantity in an environment surrounding the vehicle; and
an evaluation and control unit;
the evaluation and control unit is configured to:
evaluate the at least one impact-relevant physical quantity acquired by the contact sensor system;
execute an adaptive pre-trigger function by which to:
evaluate the at least one crash-relevant physical quantity acquired by the environmental sensor system;
based on the evaluation of the at least one crash-relevant physical quantity acquired by the environmental sensor system, recognize that an unavoidable crash, which has not yet occurred, will occur; and
based on the recognition that the unavoidable crash will occur and only when the adaptive pre-trigger function is validated to be accurate, output a trigger signal that triggers deployment of the personal protection device prior to occurrence of the unavoidable crash; and
determine, for respective recognitions that the unavoidable crash will occur, whether a respective corresponding crash impact is recognized subsequent to the respective recognition that the unavoidable crash will occur, with a result of the determination impacting a respective rating of correspondence in the respective vehicle between the recognitions that the unavoidable crash will occur and the recognitions of crash impact, by which a determination is made of whether there is a threshold correspondence between the recognitions that the unavoidable crash will occur and the recognitions of crash impact;
the adaptive pre-trigger function:
is initially installed without being validated to be accurate, prior to the rating indicating that there is the threshold correspondence, so that one or more recognitions that the unavoidable crash will occur is made by the execution of the adaptive pre-trigger function without the trigger signal being output to trigger the deployment of the personal protection device; and
is subsequently updated to be validated to be accurate in response to the rating being changed to indicate that there is the threshold correspondence; and
the computer system:
receives data including one or both of (a) the respective ratings and (b) respective sums of operating hours of the adaptive pre-trigger function in the respective vehicles of the vehicle fleet;
stores the data in the storage device;
evaluates the data to determine whether the threshold correspondence is met; and
in response to determining that the threshold correspondence is met, transmits, to the vehicles of the vehicle fleet and via the first communication device, an update by which the adaptive pre-trigger function in the vehicles of the vehicle fleet is validated to be accurate, so that in response to a subsequent recognition that the unavoidable crash will occur, the adaptive pre-trigger function causes deployment of the personal protection device prior to any corresponding crash impact being determined.

### Claim 6 (depends on 5)

The system as recited in claim 5, wherein the computer system:
ascertains a number of “false positives” of in which the execution of the adaptive pre-trigger function in the vehicles of the vehicle fleet resulted in a recognition that the unavoidable crash will occur without a corresponding impact recognition;
ascertains a sum of the operating hours of the vehicles of the vehicle fleet; and
calculates a current correspondence between the recognitions that the unavoidable crash will occur and the recognitions of impact as the number of “false positives” per unit of time.

### Claim 7 (depends on 6)

The system as recited in claim 6, wherein the computer system determines whether the calculated current correspondence meets the threshold correspondence so that the update is transmitted when the number of “false positives” per unit of time is below a predefined threshold value.

### Claim 8 (depends on 5)

The system as recited in claim 5, wherein the computer system communicates with second communication devices of the vehicles of the vehicle fleet via the first communication device directly or indirectly via a third communication device.

### Claim 9 (depends on 8)

The system as recited in claim 8, wherein the third communication device is situated in a workshop and reads out respective data recorders of the vehicles of the vehicle fleet via the respective second communication devices during respective diagnoses.

### Claim 10 (depends on 9)

The system as recited in claim 9, wherein the communication devices are IP nodes.

### Claim 11 (depends on 1)

The safety system as recited in claim 1, wherein, in response to the recognition that the unavoidable crash will occur prior to the validation of the adaptive pre-trigger function, the evaluation and control unit executing the adaptive pre-trigger function is configured to provide the trigger signal to a device that does not react to produce any output.