background image

Safety parameter

Specification

Description

CCF analysis

75

ISO 13849:2014/2015
ISO 25119:2018/2019

Software Requirement Level

SIL2 / SRL3

IEC 61508:2010
ISO 13849:2014/2015
ISO 25119:2018/2019

Source: JS1-SBW Component FMEDA and Lifetime Test.

Functional safety system integration

As shown in the steering system overview, JS1-H Steer by Wire requires an EHD as steering controller to
be present on both available CAN busses. The entireness of Functional Safety can only be obtained by
following the given system architecture.

It is strongly recommended that the system integrator performs a System-Level Failure Mode Effects
Analysis (FMEA) for installation of the steering-by-wire system to the vehicle.

Environmental control measures

Generally, JS1-H Steer by Wire does not monitor its temperature. Therefore, exceeding the allowed
ambient temperature could cause permanent damage of the joystick.

Force feedback over-temperature shut-down

The joystick JS1-H Steer by Wire implements over-temperature security mechanisms for its Force
Feedback components. In the unlikely occurrence of exceeding the allowed temperature threshold inside
the joystick housing, Force Feedback will immediately be disabled. This will also send the joystick into
safe state and send out Force feedback error, meaning it will remain operable at limited performance
until the next power-down.

DC power supply

JS1-H Steer by Wire is designed to reliably operate at battery voltages between 5.5V and 16V. Internal
protection circuitry ensure that the joystick’s electronics can withstand absolute maximum voltage peaks
of 26V for 5 minutes. Polarity protection withstands voltages down to -16V.

During engine cranking, the joystick will remain functional, even though the supply voltage may reach
excessively low levels, especially in cold conditions.

If the general power supply goes below 5.5V, JS1-H Steer by Wire will shut down without sending any
warning.

Force Feedback is supplied separately. The allowed operating range is 11V to 16V; additional load dump
protection is in place and reverse polarity protection secures the joystick down to -16V. However, Force
Feedback will not be functional during engine cranking!

If the Force Feedback’s supply voltage dips below 11V, Force Feedback can not be expected to be
functional. Between 10V and 11V it will not be comfortable and the noise level increases. Below 10V there
will be no Force Feedback.

User and Safety Manual

PLUS+1® JS1-H Steer by Wire

Functional Safety

 

©

 Danfoss | December 2022

AX436683569858en-000101 | 19

Summary of Contents for PLUS+1 JS1-H

Page 1: ...User and Safety Manual PLUS 1 JS1 H Steer by Wire www danfoss com...

Page 2: ...Revision history Table of revisions Date Changed Rev December 2022 First edition 0101 User and Safety Manual PLUS 1 JS1 H Steer by Wire 2 Danfoss December 2022 AX436683569858en 000101...

Page 3: ...14 Normal operation 14 Safe state 14 Power on self test POST 14 Out of range detection 14 Functional Safety Compatibility 15 External restrictions 15 Product limitations 15 Certification Z10 047358 0...

Page 4: ...Vehicle fault insertion and testing 22 Safety validation testing 22 Service part handling and repair instruction 22 Safety validation steps after replacing JS1 SBW with a service part or SW update 23...

Page 5: ...ct your nearest Danfoss representative Important user information Danfoss is neither responsible nor liable for indirect or consequential damages resulting from the use or application of this equipmen...

Page 6: ...19 2018 2019 Cat 2 for Monitoring Force Feedback This document covers safety functions requirements safety related parameters and application verification Additionally it provides information on insta...

Page 7: ...the opposite direction the operator moves the grip and the applied force feedback emulates the mechanical resistance to a conventional steering system The operator is notified on an error in the EHD...

Page 8: ...ors One of the joystick s finger functions is to give the machine operator control over the vehicle s direction lights Two buttons allow activating or deactivating the corresponding direction lights H...

Page 9: ...direction Operator notification The operator notification consists of a buzzer tone and a vibration feedback This is part of the redundancy concept since the joystick is designed to reliably inform th...

Page 10: ...EMS ISO 11452 2 2004 100 V m Conducted EMS ISO 11452 4 2011 200 mA Automotive transient pulses 1 2a 2b 3a 3b ISO 7637 2 2012 Automotive starting profile ISO 16750 2 2012 Note Us6 5 5V Automotive load...

Page 11: ...C power supply on page 19 CAN interface In the EHD steering system JS1 H Steer by Wire integrates dual channel CAN functionality Both CAN interfaces run simultaneously and provide steering control and...

Page 12: ...ed data page 0 Data page 0 PDU format 253 PSU specific 214 PGN supporting information Default priority 3 Parameter group number 64982 0x00FDD6 BJM1 SPN data format Start position Length Name SPN 1 1 2...

Page 13: ...2 bits Joystick 1 Button 4 Pressed Status Auto Guidance 0x00 Not pressed 0x01 Pressed 0x02 Error Indicator 0x03 Not Available 2688 6 3 2 bits Joystick 1 Button 3 Pressed Status Indicator Right 0x00 N...

Page 14: ...or affected modules are disabled but the joystick stays operational A Safe State can only be reset through a power cycle This means the one time occurrence of a single error leads to entering the Safe...

Page 15: ...y Wire relies on a load dump protected power supply by the EHD controller Those power supplies are completely independent and must not be interlinked The joystick internally connects both ground lines...

Page 16: ...functions provided by the JS1 H Steer by Wire steering joystick Approving certification and homologation of the entire system to the desired risk reduction level Installation set up safety assessment...

Page 17: ...processor interrupts the communication to the EHD controller No messages are sent to the CAN bus from the corresponding CAN Node Due to the second CAN channel the joystick functionality is still give...

Page 18: ...ring function that monitors the operator notification to ensure that the machine operator is correctly notified in case of a failures only Joystick safety perameters Safety parameter Specification Des...

Page 19: ...dback will immediately be disabled This will also send the joystick into safe state and send out Force feedback error meaning it will remain operable at limited performance until the next power down D...

Page 20: ...he two channels C1 pin Function Diagram 1 Ground common 2 Power supply A 3 Steering Bus A H 4 Steering Bus A L 5 CAN Shield A 6 FF Power 7 Horn Signal 8 Horn Power C1 pin Function Diagram 1 Ground com...

Page 21: ...ing points Calibration The joystick software uses non volatile calibration and configuration data for its steering application User and Safety Manual PLUS 1 JS1 H Steer by Wire System Set up Danfoss D...

Page 22: ...ting on the integrated system for failure modes where the system reaction to a fault cannot be predicted or simulated Please check with the EHD Safety Manual and the applicable Safety Standard which t...

Page 23: ...Service Tool can be used for checking the system status of all CAN connected Danfoss PLUS 1 Compliant devices and flashing firmware The following functions should be highlighted here Read out error c...

Page 24: ...eeds to be replaced Horn always on Hardware problem Joystick needs to be replaced GPS based Auto Drive always off Hardware problem Joystick needs to be replaced Light is always on high beam Hardware p...

Page 25: ...foss Power Solutions US Company 2800 East 13th Street Ames IA 50010 USA Phone 1 515 239 6000 Danfoss Power Solutions Trading Shanghai Co Ltd Building 22 No 1000 Jin Hai Rd Jin Qiao Pudong New District...

Reviews: