Operation CHARM: Car repair manuals for everyone.

Part 4


IPM

Activation & Deactivation
Description
Crash Unlock Function Activation
The crash unlock function is activated after 100 ms delay after the ignition switch state is changed from OFF or ACC to RUN or START position (Ign1 active).
Crash Unlock Function
In case of crash, the time between the "Crash Sensor From Air Bag Unit" signal activation sent by the sensor and the unlock motors activation (driver door, assist door, Right/Left rear door and tailgate unlock) to unlock the doors must be less than 40 ms.
Crash Unlock Function Deactivation
The crash unlock function is deactivated when the ignition switch state is changed from RUN or START to ACC or OFF position.
There are two steps in deactivation:
- crash sensor deactivation in ignition switch ACC or OFF position
- turn indicators deactivation in ignition switch OFF position (sending also the Crash Sensor Sts CAN signal with OFF value)

Crash Unlock Function
Description
Crash Unlock Function (initial unlock output)
When the vehicle crashes, the airbag unit activates the "Crash Sensor From Air Bag Unit" signal. IPM detects this signal change, filters it and sends the CAN signal Crash Sensor Sts with the following logic:




Crash Unlock Function
After this initial unlock output, a 100 ms long pause (Crash Sensor Sts =OFF) is done and then if any door is still locked, CAN signal Crash Sensor Sts = ON is sent again for 5 s.
Crash Unlock Function
This unlock action is done one more time if doors are still locked after 2 unlock attempts. After 3 attempts, if any door is still locked, IPM stops trying to unlock and Crash Sensor Sts CAN signal is set to OFF.
Crash Unlock Function
Once a crash has occurred, Door Lock Ctrl cannot be set to lock doors until crash is cancelled (ignition switch status turned OFF). Only unlock is authorized.
After Crash Unlock
When all doors are UNLOCKED by crash unlock function, if any door becomes LOCKED, the IPM sends the CAN signal Crash Sensor Sts = ON again for 5sec then OFF

RAM
Description
Crash Unlock Function
Upon detection of Crash Sensor Sts signal transition from any value to ON, RAM activate unlock motors outputs as long as Crash Sensor Sts is ON
Crash Unlock Function
In case of crash, the time between the "Crash Sensor From Air Bag Unit" signal activation sent by the sensor and the unlock motors activation (driver door, assist door, Right/Left rear door and tailgate unlock) to unlock the doors must be less than 40 ms.
Crash Unlock and tailgate open switch Sts dependences
After reception of Crash Sensor Sts CAN signal with ON value, the RAM sends the tailgate Open Sw Sts CAN signal with tailgate closed handle enabled value if the tailgate is closed or with tailgate opened value if the tailgate is opened. In this case the RAM does not take into account the vehicle speed or Inhibit Sw state until the change of ignition switch position to OFF

Horn
Description
The different ways of activation of the horn are:
The driver is directly activating the horn manually. Since the horn stalk switch is directly wired to the horn relay, the software does not manage this command.
Functional Diagram





ATM Shift Lock
Description
The purpose of this function is to prevent gear change from

to others if no pressure is applied on brake pedal.
ATM stands for Automatic Transmission
Functional Diagram





Key Interlock Relay Control
Functional Diagram





Answers back
Description
Answers back give a visual and/or sound feedback to user's action. These actions are linked to lock / unlock action and the alarm status (if equipped). Visual feedback is realized with the hazard turn indicators and the interior lighting, sound feedback with the horn sound.

IPM
Here are the different answers back with their description.
Description
Horn answer back sequence description
Horn lock sequence : Horn Relay Drive is set to ON for 50ms to activate the horn
Description
Hazard answer back sequence description
Hazard lock sequence : IPM sends the CAN signal Turn Indicator Ctrl with the value ALL_ON for 1s to switch on hazard lamps then ALL_OFF
Hazard unlock sequence : IPM sends the CAN signal Turn Indicator Ctrl with the sequence value ALL_ON / ALL_OFF during 2s to blink the hazard lamps at 1Hz frequency (duty 50%) then ALL_OFF
Description
Hazard answer back sequence description, 2-Turn unlock.
If the time between the first UNLOCK and the second UNLOCK is less than hazard lamp flashing time (2s), the first hazard unlock sequence stops immediately, turn signals are switched OFF (ALL_OFF) for 100ms then, the new sequence is started
If the time between the first UNLOCK and the second UNLOCK is more than hazard lamp flashing time (2s), IPM sends the CAN signal Turn Indicator Ctrl with the sequence value ALL_ON / ALL_OFF during 2s to blink the hazard lamps at 1Hz frequency (duty 50%) for the first and the second UNLOCK

Low Power Mode

Full Low Power Mode
Description
In normal mode, all modules and the CAN network are powered and running. All module functions are available; communication through the bus is possible as well as communication with the SCAN tool.
Low power mode is a state in which the modules try to lower their power consumption as much as possible in order to save energy. Low power mode can also be called "sleep mode". In this mode, CAN bus communication is not available and the ignition key position is OFF (Acc = OFF Ign1 = OFF and Ign2 = OFF). In low power mode the normal features of the modules are not available. The modules have to switch to normal mode in order to perform their functions. Thus, in low power mode, the modules periodically monitor changes on a given set of inputs in order to detect a user request and then enter normal mode. Those monitored inputs are called "Wake Up" inputs.
Full low power is the lowest power consumption state in which all the modules inputs and outputs as well as the modules themselves are in their lowest power consumption state. This implies that none of the equipments controlled by the modules are active, i.e., they do not consume energy. For example, in full low power mode, keyhole illumination must be off. All power consumption measurements in low power mode are made in full low power mode.
Low power mode is entered to save energy when the car is not running. This implies that low power mode can only be entered when ignition key is in OFF position. In low power mode, the software is not running, hence all the modules features must be in a stable inactive state for low power mode to be entered. The exact conditions for allowing a module to enter low power mode depending on each function are described in requirements.
In order to enter low power mode, the K line transceiver must be powered down. This means that low power mode cannot be entered while the SCAN tool is connected.
Sequence for entering low power mode for one module is as follows:
Check that all the module functions are in a state where they can enter low power mode.
If all the module functions are in a state where they can enter low power mode for 10s, the module sends a CAN message informing that it is ready to enter low power mode.
When all the modules on the network are ready to enter low power mode, the IPM sends a CAN message authorizing the CAN to be shut down.
Once the CAN network is in low power mode, each module enters low power mode.
This process can be interrupted at any time to go back to normal mode when a wake up event is detected.
The transition process from normal to low power mode is the same whether full low power or intermediate low power mode is being entered.





Intermediate Low Power Mode
Description
Intermediate low power is a state in which the modules lower their power consumption as much as possible. In this mode, one or several components connected to the modules are active. The modules reduce their power consumption but cannot achieve full low power mode because of those external components that need to be maintained in powered state.

Safe and Rescue Mode

Safe mode
Description
There are 2 safe modes:
- Software safe mode;
- Hardware safe mode.
The software safe mode is a transition state entered as soon as one of the CAN signals monitored is lost. It is built in such a manner that the current state of the lighting on the low beams and tail lamps is kept. The rest of the functions follow their own default behavior.
This transition state is mainly used to avoid going back and forth between the normal mode and the rescue mode in case of sporadic trouble on a signal. This will avoid having the low beams and tail lamps being turned ON/OFF for small periods.
The hardware safe mode consists in maintaining the state of the low beam if the exterior lighting was active before entering the safe mode.
Functional Diagram





Rescue mode
Description
The goal of this mode is to be able to cope with failures that may happen on some of the most critical functionalities (for the driver security) of the system.
There are 2 rescue modes:
- The hardware rescue mode;
- The software rescue mode.
The software rescue mode consists in activating some safety functions when IGN2_INPUT = ON:
Switch on the low beams (FAM), park lamps (FAM), tail lamps (RAM) and cluster backlighting (IPM);
Unlock of all the doors when the rescue mode is entered with IGN2_INPUT = ON
All other functions (apart from head lamp low beams, tail lamps and front wipers) will try to behave as specified and will enter their own default mode if it is not possible.
Front wipers do not need to be turned on by software in rescue mode because wipers can be turned on by manually setting the MF switch to low speed. The FAM software must keep the same state as before entering the rescue mode.
When IGN2_INPUT = OFF, low beams, park/tail lamps and cluster backlighting are turned off.
The hardware rescue mode will switch on the low beams and the tail lamps. The front wipers are not taken into account due to the direct wiring of the stalk switch (low speed position).
The boards are designed to allow this hardware rescue mode to ensure their own integrity.
Note that none of the modules powered by IPM, RAM or FAM are kept powered in rescue mode.
Functional Diagram