US20200139948A1

Description

Description

The invention relates to a brake system according to the preamble of claim 1.

Description of the prior Art

The trend towards vehicles with autonomous driving (AD) places high demands on the brake system in terms of fault tolerance on the one hand and redundant functions, e.g. for brake pressure generation, power supply and computer functions (ECU) on the other. So-called one-box and two-box systems are favored. The latter consist of an electric brake booster (BKV), a so-called e-booster, and an ESP system. This makes, for example, the generation of brake pressure via electric motor and electronic control unit (ECU) redundant for e-boosters and return pumps with electric motor and ECU.

The known solutions have relatively long lengths and a high weight.

In WO2011/098178 (hereinafter referred to as variant A or as a follow-up booster or e-booster), such a solution is described with a coaxial drive in which an electric motor acts via a gear and piston on the HZ piston (=main cylinder piston). The BKV control is effected via an electrical element and reaction disc as a so-called follow-up booster, the pedal travel is a function of the brake pressure and the volume absorption of the brake system, which requires long pedal travel in the event of fading or brake circuit failure.

WO2009/065709 (hereinafter referred to as variant B, or as a follow-up booster or e-booster) also shows an e-booster as a follower BKV. Here the BKV control takes place via pedal travel and pressure. A separate pressure supply with electric motor and plunger acts via the amplifier piston on the HZ piston.

WO2012/019802 (hereinafter variant C) shows an arrangement similar to WO2011/098178 with coaxial drive in which an electric motor acts on the HZ piston via a gear and piston. An additional piston cylinder unit is used here, which acts on a travel simulator piston (WS). The pedal travel is thus independent of e.g. fading and brake circuit failure. However, the complexity and the construction length are high.

DE 10 2009 033 499 (hereinafter also referred to as variant D) shows a brake booster (BKV) with additional ESP unit with hydraulic actuation of the booster piston and external pressure supply. This arrangement with four or five pistons and six solenoid valves (MV) is complex and unfavorable in length. The non-hydraulically acting travel simulator (WS) is located within the piston-cylinder unit upstream of the main cylinder and cannot be damped or switched via a solenoid valve (MV).

All above mentioned solutions have a redundant brake force amplification (BKV) function, because in case of failure of the BKV motor the ESP unit with pump similar to the assistance functions with vacuum BKV guarantees the brake function in autonomous driving mode.

In the event of failure of the ESP motor, ABS shall function via the possibility of pressure modulation by the BKV motor as described in WO2010/088920 of the applicant. However, this only allows a common pressure control for all four wheels, which does not result in an optimal braking distance.

All previously known one-box systems have a so-called travel simulator (especially for brake-by-wire) because of the advanced pedal travel characteristics.

The known systems with e-booster and ESP have only one redundancy in the pressure supply (DV), i.e. if the e-booster fails, there is a redundant pressure supply (DV) with redundant power for the brake booster (BKV) by the ESP. Higher safety requirements are not taken into account. Also, sufficient ABS function is ensured by the e-booster if the ESP fails.

Object of the invention

Based on the prior art, it is the object of this invention to provide an improved brake system.

The invention is based on the object of creating a brake system for use in autonomous driving operation (hereinafter AD) and/or electric vehicles/hybrid vehicles with increasingly strong recuperation power (energy recovery by braking via generator/or drive motor in generator operation), which brake system is significantly improved as compared to the prior art.

In addition, a cost-effective brake system for autonomous driving is to be created, which fulfils all required redundancies as well as very high safety requirements.

Furthermore, if the ESP should fail, both an adequate function of the ABS in respect of braking distance and stability, and an adequate function of the recuperation are to be achieved with the brake system.

Solution according to the invention

This object is solved according to the invention with the features of patent claim 1.

Among other things, the improvement is characterized in that the design of the brake booster has very few simple components with low tolerance requirements (e.g. valves only in open/closed operation) and is therefore cost-effective, very short and narrow in design and enables a constant pedal travel characteristic, especially with strong recuperation.

Advantageous embodiments or designs of the invention are contained in the further claims, the drawing and the figure description to which reference is made here.

With the solution according to the invention and its embodiments and designs, a brake system is created which has a very short construction as well as an advantageous pedal characteristic.

In particular, a two-box system is created according to the invention, having an electric brake booster which is connected to a standard ESP unit via two hydraulic lines (hereinafter referred to as X-Boost and ESP/ABS unit, together referred to as two-box system), wherein the brake booster has a pedal characteristic which is independent of the volume absorption of the brake system and the degree of recuperation.

Furthermore, the invention achieves a compact design of the brake booster with a low box volume, which is very short and narrow and has many redundancies, e.g. for pressure generation, electrical supply, failure of the pump motor of the ESP unit and also includes an ABS function with reduced performance in the event of failure of the ESP unit. In emergency operation without ESP, the ABS function should include at least individual regulation axle-by-axle to improve the braking distance (“select-low” pressure regulation).

The installation spaces in the unit compartment are becoming smaller and smaller, thus the dimensions of the brake unit should be as small as possible, especially in terms of width and length. This compact design is possible on the one hand by decoupling the main cylinder (HZ) piston from the motor drive and on the other hand by a special short main cylinder (HZ) according to WO2016/023994 of the applicant, which is referred to here with parallel arranged pressure supply (hereinafter pressure supply or DV) consisting of electric motor with piston drive.

Secondly, the pump (ESP pump) can be designed such that the pump motor is loaded only by the differential pressure of 200 bar−(80 to 100) bar (=100 to 120 bar). A conventional ESP pump is loaded by the maximum pressure of 200 bar for example. This advantage means an advantage reduction of the power or torque of the pump motor.

The pressure supply (DV) is only effective up to the wheel locking limit of 80 to 100 bar. For higher pressures (e.g. for driver assistance functions), the pump of the ESP unit is switched on. This can therefore be realized with the solution according to the invention in comparison to variant A of the prior art described above, since the ESP pump function has no influence on the pedal feel, since the brake pedal is decoupled.

The purpose of the X-Boost with DV is to supply the corresponding volume at maximum pressure of from 80 to 100 bar in order to increase the pressure of the ESP pump.

This has the advantage that the drive motor or the pressure supply device DV of the X-Boost with engine only has to be designed for a low mechanical load, or the electric motor requires only low torque, for example 80 to 100 bar, compared to the maximum pressure of approximately 200 bar of the ESP pump. This enables a cost-effective ball screw drive (KGT) or a trapezoidal spindle with a plastic nut.

There is also an additional possibility here for interconnection. The ESP pump may be switched on not only with activation of the X-Boost (80 to 120 bar), but also in the event of rapid pedal movement at, for example, 20 bar. This means either a quicker pressure increase for time-to-lock (TTL) or additional power reduction of the motor of the DV of the X-Boost.

This connection of the pumps in series and/or parallel, in the case of the ESP pump, requires a twin-circuit gear pump, or, in the case of the piston pump, an independent eccentric for each piston.

In the pedal characteristic, a retroactive effect from volume absorption, e.g. in the event of brake circuit failure, should be excluded. On the other hand, it should be possible to generate a desired pedal feedback, e.g. a small pedal movement when using the ABS function, optionally also intermittently. Faults, e.g. brake circuit failure, can also be indicated by moving the pedal parallel to the warning lamp.

Various solutions are conceivable for the pedal travel simulator. In the entire pressure range (150 to 200 bar) the pedal travel simulator should deliver a good pedal travel characteristic, e.g. up to 30 bar with a flat characteristic curve and then progressively increasing without influence whether the X-Boost or the ESP unit delivers the pressure. In the embodiment of the e-booster as a follow-up booster (variant A according to the prior art), the pedal force characteristic curve changes significantly during the transition from e-booster to ESP and requires a lot of software effort for the PWM operation of the valves necessary for this. This is not the case with the solution according to the invention, since the operation of the ESP pump has no influence on the pedal characteristics, since the pedal is decoupled via the travel simulator.

To reduce the construction volume, the return spring (18) can be used in the flat part of the pedal travel characteristic curve, so that the volume in the piston travel simulator is smaller and only corresponds to the progressive part of the characteristic curve, as also shown in WO2013/072198 of the applicant, to which reference is made here.

The travel simulator can be advantageously a piston simulator (WS) connected to the working chamber of the auxiliary piston via a hydraulic connecting line or/and a plunger simulator connected to a working chamber of the second piston (SK). If a plunger simulator is provided, the control pressure dependent on the pedal travel acts on the plunger.

It is also advantageous if the travel simulator can be switched off in a further development and is not effective in a first range and the brake pedal force is determined exclusively by a return spring and is determined in a second range by the return spring and travel simulator piston.

In addition, a switching valve can be connected upstream of the travel simulator in order to switch the travel simulator on or off as required. However, if no switching valve is connected upstream of the travel simulator, the switching valve (WA) must be arranged in a branch line branching off from the pressure or working chamber of the auxiliary piston to the travel simulator to the storage container.

It is also advantageous if the pressure-volume characteristic is used for pressure supply control and diagnostics.

Another possibility for the realization of a pedal travel simulator is a THZ (=tandem main brake cylinder) with plunger without piston travel simulator as described or illustrated in WO2016/023994 of the applicant, to which reference is made here in this respect. Here, the control pressure to the BKV, which depends on the pedal travel, acts on the plunger and thus generates the pedal feedback effect.

Depending on the pedal position, pressure is transmitted from the piston of the pressure supply to the SK piston of the main brake cylinder (T)HZ, which creates the brake pressure. The pressure supply consists of an electric motor which drives the piston via a spindle. Both a ball screw drive (KGT) and a trapezoidal spindle with nut can be used as transmissions. The latter is cheaper and quiet, but has a lower efficiency and is self-locking. The latter has the advantage that in the event of a failure in the pressure supply DV, e.g. of the engine, the piston remains in the position so that there is no increase in volume in the brake circuit under the influence of brake pressure.

For the ball screw drive (KGT), an additional shut-off valve must be used for this failure. The aspiration of the liquid from the storage container (VB) takes place via a suction valve or via the piston sleeve seal with a breather bore, as in a main cylinder (HZ).

Access to the piston travel simulator can be closed with a solenoid valve (WA), as in the event of a pressure supply failure (DV) the pedal force acts on the main cylinder (HZ) and thus generates brake pressure in the so-called fallback level (RFE). Without the valve (WA), the pedal travel in the fallback level (RFE) would be extended by the volume absorption of the piston travel simulator (WS).

Since the interconnection of X-Boost and ESP unit provides two redundant systems for pressure generation with redundant power supply, the fallback level (RFE) is only effective during towing, actually only for deep loading, e.g. in the event that the transmission of the vehicle may be blocked. These facts allow greater degrees of freedom in system and piston design, e.g. saving a WA solenoid valve.

One possibility for pad clearance control lies in providing a pad return by means of a strong rollback seal of the wheel brake, which seal is able to produce the necessary clearance, in particular on account of the deformation energy stored in it. The stored deformation energy generates a return force which lifts the brake pad from the brake disc (clearance or air clearance) as soon as there is no longer any pressure build-up in the brake circuit. This is possible advantageously in the invention since there is no effect on the brake pedal due to the decoupling.

X-Boost and ESP unit preferably have separate power supplies, e.g. ESP is connected to a 12V battery and X-Boost is connected to a DC/DC converter of a multi-voltage vehicle electrical system. Alternatively, both X-Boost and ESP unit can be connected to both 12V battery and DC/DC converter. Thus both modules of the brake system of the two-box have a redundant power supply in each case.

The solution according to the invention has even more advantages over the prior art variant A:
I. If the brake circuit fails, there is no pedal through fall;
II. If the ESP motor fails, the pressure can also be controlled axle by axle or wheel by wheel, which enables a considerable reduction in braking distance;
III. Many driver assistance functions can be implemented in X-Boost and can be implemented with greater precision than in the ESP unit;
IV. Recuperation control is easier, quieter and more accurate by control via the DV than via inlet and outlet valves and the pump of the ESP unit.

Pedal through fall I) can thus be avoided, since a leak in the system has no effect on the pedal feeling, since the travel simulator is decoupled. In contrast to the solution according to the invention, a leak in the system has a direct effect on the pedal feeling in variants A and B, for example, so that in the worst case the pedal travel is suddenly extended and the change cannot be controlled by the driver and leads to accidents.

The individual pressure regulation II) of axles and also wheel brakes is made possible by the solution according to the invention because in the event of failure of the ESP motor, the electric motor of the pressure supply DV of the X-Boost takes over the pressure regulation and the pressure regulation has no influence on the pedal. This means that there are considerably more degrees of freedom for axle-by-axle or wheel-by-wheel control than with follow-up booster solutions (variants A and B). For this purpose, the pressure control of the invention via the piston travel and motor current in accordance with (DE 10 2005 018649 of the applicant) and pressure gradient regulation (DE 10 2005 055751 of the applicant), to which reference is made here in this respect, is used for a high-precision pressure control which cannot be achieved with pulse width modulation (PWM) control of valves of the ESP unit.

The system decoupling (pedal of the system) is also of great importance for the implementation of III) driver assistance functions, as described in more detail below.

Recuperation control (IV) is becoming increasingly important due to the increasing hybridization and spread of electric vehicles. The brake pressure is varied depending on the possible generator braking effect and the total braking effect required from the driver. This is called brake pressure blending. This may involve all wheel brakes (four-wheel blending), just one vehicle axle (two-wheel blending), or the single wheel brakes individually. It requires appropriate brake pressure control and valve control. This is described in detail in the description of the drawings.

The recuperation control (IV) in the solution according to the invention is carried out exclusively via the piston travel control of the pressure supply DV in the simplest solution (four-wheel blending). Depending on the deceleration effect of the generator of the vehicle or the drive motor of an electric vehicle operated in generator mode, a corresponding braking pressure is set by adjusting the piston so that the sum of the hydraulic braking force and the braking effect by the drive motor results in the desired total deceleration force.

This is possible in a completely variable manner, as the pressure position of the pressure supply DV of the X-Boost has no effect on the pedal feel. This has considerable advantages, especially compared to the variants A and B of the prior art, where the coupling between the pedal and the HZ volume means that the storage chambers of the ESP unit have to be emptied in order to achieve a reduced deceleration while maintaining the same pedal feel. This requires an intervention in ESP and a very complex control of the outlet valves of the ESP unit. In addition, with the solution according to the invention, different ESP variants for different brake circuit distribution (diagonal and parallel/brake circuits axle by axle, rear and front drives) can be avoided, since control takes place exclusively via the piston, independent of the brake circuit distribution and the drive type. In particular, the following advantages of the X-Boost also result from the recuperation.

Axle-by-axle blending (two-wheel blending or axle-by-axle blending) is much easier to implement, as will be described below in greater detail.

Some of the solution approaches according to the invention, in particular the X-Boost, offer the following advantages in the pedal feel compared to the prior art:

• No change in pedal feel due to blending

• No change in pedal feel due to changes in the brake system (e. g. changes in brake release clearance, changes in PV characteristic curve) Blending by the X-Boost offers the following advantages in summary:

• Precise adjustment of brake pressures, even with rapid changes in generator torque = > Simple point braking;

• No perceptible noises, e.g. from switching valves in the ESP unit;

• Blending in the entire vehicle deceleration range;

• Much simpler software for blending than conventional e-boosters; Uniform blending for diagonal (X) and axis-parallel (II) brake circuit division;

• Brake force distribution can be displayed at will, up to the wheel lock limit. ESP interventions for vehicle stabilization, especially on slippery and uneven road surfaces, and interruptions of the recuperation process with complex switching from recuperation to purely hydraulic braking and vice versa, can thus be avoided;

• Changes to the wheel brakes (e.g. pressure-volume characteristics or p-V characteristics) on the non-driven axle have no influence on the hydraulic braking;

• No additional components required to hold hydraulic fluid (e.g. no “smart actuator”);

• No harder return spring required for pedal (important for Pmax in RFE);

• Changes in the PV characteristic curve of the brake system are diagnosed.

In known systems according to variant A with follow-up booster, the pedal travel is a function of the volume take-up. To prevent the pedal travel from becoming large during normal operation, it is necessary to adjust the dimensions of the main cylinder HZ for different vehicle types with different piston diameters. In the event of a system failure in the fallback level RFE, this leads to high pedal forces with the same pedal travel in brake systems with greater volume absorption. In accordance with the requirements of ECE-13H, a vehicle deceleration of at least 0.24-0.3 g is required for a maximum foot force of 500 N.

Some of the solutions according to the invention, in particular the X-Boost, allow the use of a small auxiliary piston diameter in comparison to the SK piston and thus higher brake pressures in the fallback level RFE at 500 N foot force. In addition, the volume in the brake circuits can be further increased with brake fading in that DV continues to convey. This additional volume must be able to be transferred from the SK piston into the floating circuit, either by a larger diameter of the SK piston than the auxiliary piston or by a larger travel of the SK piston.

The BKV is controlled in one embodiment in accordance with DE 10 2005 018649 and DE 10 2005 055751 of the applicant, to which reference is made here in this respect, via the piston of the pressure supply DV by applying a pressure in the brake circuit via a BKV characteristic curve as a function of the pedal travel. The pressure is measured in the ESP unit and provided by the pressure supply DV via a corresponding piston travel. If the pressure sensor fails, this pressure signal is not available. The pressure sensor failure is detected by the pressure supply DV via evaluation of the pressure volume characteristic curve (p-V characteristic curve). Here the corresponding pressure value is missing for the piston travel.

The current measurement of the DV motor can also be used here as a replacement for the pressure measurement. In general, it is also conceivable to use only current measurement. For the corresponding accuracy for pressure build-up and reduction, the hysteresis must be included in the characteristic curve of the pressure supply DV (piston travel and pressure or current alternatively) by the friction forces in the drive, optionally with correction values, e.g. by correlation of the current with the vehicle deceleration.

The concept has further potential to increase function and error safety through:

a) Function

• A small accumulator coupled to brake circuit 1 (BK1), also called mini storage container, which enables the ESP pump to build up further pressure in the wheel brake cylinders during the suction stroke of the pressure supply (DV).

• Hydraulic pedal force blending in the fallback plane

b) Safety

• Use of an additional isolating valve (TV1) in brake circuit 1 (BK1) in case of failure of brake circuit 1 (BK1)

• Dispensing with the travel simulator shut-off valve (WA). This also eliminates its possible errors

• Measures against blocking the sensor actuation

• Linear level transmitter for brake fluid in the storage container (VB), which detects small volume changes in the storage container (VB) and can give an early warning in the event of a leak in the brake system

• Additional shut-off valve (36) in the hydraulic connection from the auxiliary piston chamber to the storage container (VB)

• Redundant seals with diagnostic option for main cylinder (THZ) and pressure supply (DV)

• Redundant measures, e.g. additional shut-off valve (MVs) in the return line from the pressure supply (DV) to the storage container (VB) in the event that the suction valve (28) fails.

• Partially redundant control unit (ECU) for reading and processing the sensor signals and for controlling the FV and PD1 valve Heat dissipation from PCB to the main body, and thus to the cooler spray wall, reduces the temperature of electronic components and their failure rates

• 2×3-phase control of the motor, and thus redundant windings

This means that very high requirements for fail operational (FO) can also be met.

In the following, further possible advantageous features are listed for the possible embodiments described above, which can be added to the embodiments in combination or individually:

• For example, the pistons of the first piston-cylinder unit (main cylinder) may have different diameters and, in particular, the auxiliary piston may be dimensioned smaller for adaptation to smaller pedal forces in the fallback plane (RFE).

• Likewise, one module of the two-box design (X-Boost/ESP) can be connected to a 12V battery or 12V voltage supply and the other module to a DC/DC converter or 48V vehicle electrical system or other vehicle electrical system with higher voltage, wherein in particular the X-Boost is supplied by the DC/DC converter or the 48V vehicle electrical system. To increase safety, both modules can be connected redundantly to both vehicle electrical systems, in particular a 12V battery and DC/DC converter.

• The pressure supply transmission may have a self-locking trapezoidal spindle with a self-locking action in the event of drive failure.

• The valve (FV) can be controlled by pulse width modulation (PWM) to generate force feedback to the brake pedal (haptic feedback with ABS).

• A plug connection for the system may be located below the storage container and directed inward towards the center of the appliance to allow the associated plug to be pulled off sideways.

• The second piston-cylinder unit (pressure supply DV) can be advantageously aligned parallel or perpendicular to the axis of the first piston-cylinder unit (main cylinder).

• By replenishment a larger volume of brake fluid can be made available. This is advantageous in heavier vehicles or if there are air bubbles in the brake fluid, or if there are vapor bubbles in the brake fluid, which may arise as a result of overheated brakes.

• An improvement of the fault tolerance can be achieved by partial redundancy of the control devices of ESP and X-Boost.

• Adequate function over the braking distance and driving stability if the ESP fails can be achieved by introducing isolating valves (TV1, TV2) into the brake circuits (BK1, BK2) and hydraulic multiplex operation of the pressure supply DC. Recuperation for each brake circuit individually can thus also be achieved. Further, the replenishment can also be implemented in the brake circuit 2 (BK2).

Description of the figures

Further features and advantages of the invention result from the following description of embodiments examples of the invention and its designs.

The drawings show as follows:

Fig. 1: Complete X-Boost system with ESP;

Fig. 2: Pedal characteristics;

Fig. 3: Main components of the system;

Fig. 4: Extended X-Boost;

Fig. 4a : Redundancy in valve FV to increase functional security

Fig. 5: X-Boost with measures to increase functional security

Fig. 5a : Pedal travel sensor with measures to increase functional security

Fig. 6: Pressure supply with additional valve to increase functional security

Fig. 7: Pressure supply with seal redundancy to increase functional security

Fig. 1 shows a schematic diagram of the brake system with an actuating device, in particular brake pedal 1, a first piston-cylinder unit THZ, which can be actuated by means of the actuating device, a second piston-cylinder unit with an electromotive drive and a transmission (hereinafter also X-Boost or booster) and an ABS/ESP unit. The ABS/ESP unit is known with the main components pump P with motor M, valves HSV1 and HSV2, USV1 and USV2, inlet and outlet valves EV and AV assigned to the wheel brakes, and storage chamber (SpK). This system is described in many publications and patent applications. It is already on the market as an e-booster and is mainly used in electric and hybrid vehicles, because here the brake system is controlled in conjunction with the braking torque of the generator, i.e. recuperation. As is well known, both the e-booster and the ESP elements can play a role here, especially in the pedal characteristics. Another field of application is vehicles with autonomous driving. The focus here is on error safety and redundancy of the functions, such as pressure supply and ABS function. The main difference in system design is the new X-Boost concept. This consists of a special main cylinder HZ with travel simulator WS and pressure supply DV, which is arranged parallel or perpendicular to the main cylinder HZ in order to achieve a short overall length, see also Fig. 3.

The main cylinder HZ essentially consists of an auxiliary piston (HiKo) 16 and an SK piston (floating piston) (12) with return spring 12 a. The auxiliary piston 16 is connected to a plunger 16 a, which acts through a partition wall 14 with seal into the pressure chamber 12 d. A distance of approx. 50% of the travel of the auxiliary piston (HiKo) 16 is between the end of the plunger and the SK piston. The plunger (16 a) has a significantly smaller cross-sectional area than the pistons of the first piston-cylinder unit (>factor 5 smaller) and contributes insignificantly to pressure build-up and pressure sensing in the brake circuit and transmits this force to the brake pedal, thus generating a haptic feedback to the brake pedal, especially during ABS operation and/or fading.

Normally, a valve FV is closed at the start of braking and the auxiliary piston HiKo acts on the travel simulator WS, whose function and variants are described later. The auxiliary piston HiKo has two functions: for normal operation and for a fallback level in the event of a failure of the pressure supply DV. In the first case, normal operation, it feeds the travel simulator WS with the valve FV closed, and the pedal travel is the input signal for the pressure supply DV. At the fallback level, when the pressure supply DV fails, it also feeds the travel simulator WS when the valve FV is closed, but the pedal travel is now the input signal for the ESP booster.

When brake pedal 1 is actuated with pedal plunger 3, redundant pedal travel sensors 2 a/2 b are activated simultaneously. These can additionally be decoupled via an elastic member KWS, as described in DE 11 2011 103274 of the applicant, to which reference is made herein this respect. Advantages are on the one hand detection when the auxiliary piston (HiKo) 16 is blocked, and on the other hand the differential travel of the sensors when the auxiliary piston (HiKo) 16 is blocked provides a control signal for auxiliary braking. The elastic member can also be part of the spring characteristic of the WS travel simulator. The auxiliary piston (HiKo) 16 has a normal breather hole of a THZ piston which is connected to the storage container VB. It is well known that a brake circuit fails if the primary seal fails. This can be avoided by using a check valve RV which is used for venting and a throttle in the connection line to VB. The throttle is dimensioned with a small flow rate so that the pedal characteristic is not significantly changed (3 mm pedal travel in 10 s) if the seal fails and can still be diagnosed. The same arrangement can also be used for the floating piston (SK) 12 (not shown), which makes the failure of both seals uncritical. Alternatively, a normally open solenoid valve can also be used in the feedback line, which closes after pedal actuation or diagnosis. This applies to both pistons of the HZ (auxiliary piston HiKo and the second piston SK).

The travel simulator WS can be designed in different ways. The illustrated design corresponds to the prior art, which is described in various patent applications, consisting of a WS piston with spring combinations, which as a function of the pedal travel provide the pedal travel characteristics. The valve RV is used for the fast pressure reduction Pab from the travel simulator WS, if the pedal is released very fast, and the throttle D for the desired throttled pressure build-up Pauf with the corresponding pedal characteristics. In addition, the travel simulator WS can be switched off via the valve WA. This is necessary for non-redundant systems in the fallback level (RFE) so that the intake volume of the travel simulator WS does not affect the delivery volume of the auxiliary piston HiKo to the brake circuit BK1 and pressure chamber 12 d. With this system (Fig. 1) the ESP acts redundantly in case of failure of the X-Boost, where the ESP pump sucks volume from the storage container via the main cylinder THZ and the pressure supply DV. The valve WA can therefore be dispensed with. The auxiliary piston (HiKo) 16 with pedal plunger 16 a is moved to the initial position by the pedal return spring 18 after brake actuation.

The pressure supply or DV is required for the BKV function. This consists of an EC motor 8, which moves a piston 10 via a spindle 7 and nut and delivers pressure medium into the brake circuit BK1 and the pressure chamber 12 d. The dimensioning of the volume is derived from the BKV control, which controls a pressure from pedal travel 2 a/2 b via the BKV characteristic curve, which is measured by the pressure transducer DG in ESP. Alternatively, the motor current, measured via a shunt, can be used instead of the pressure. To improve the accuracy of the pressure control via the current measurement, this requires the recording of the friction losses in Pauf and Pab in a characteristic map, optionally additionally improved by correction factors, e.g. by comparison with the vehicle deceleration. This is particularly important if the spindle drive is not a ball screw drive KGT, but a trapezoidal spindle with a plastic nut, for example.

In the starting position, the piston 10 has a breather hole 27 as in the main cylinder THZ. The volume can be sucked in via the sleeves or via a suction valve (SV) 28, which requires a lower vacuum to open and is temperature-independent.

If a trapezoidal spindle is used, the pistons remain in the position in which the motor drive no longer acts due to the self-locking of the pistons.

The dimensioning of the pressure supply DV can be staggered so that the full travel of the DV piston corresponds to the volume consumption of brake circuit BK2 or the travel of the SK piston 2. The SK piston can be designed larger in diameter and also in travel for larger volume intakes. The pressure supply DV, on the other hand, can be designed accordingly or smaller in volume (piston and travel) by making the missing volume possible by replenishing with piston return travel via the SV suction valve. For this a normally closed solenoid valve PD1 is required, which is not shown in Fig. 1 (see Fig. 4). For full volume compensation in the event of pressure reduction Pab, the piston must be moved to its initial position with the breather hole open. The suction valve 28 and the breather hole 27 are connected to the return line to the VB. All components of the pressure supply DV are combined in one housing 25.

The pressure build-up Pauf and pressure reduction Pab in brake circuit BK1 and brake circuit BK2 is achieved via the BKV control and pedal travel sensors, and the piston of the DV moves accordingly. Normally, the X-Boost pumps volume into the brake circuit BK up to the blocking limit 80-120 bar. If a higher brake pressure is required for fading, the X-boost volume pumps at 80-120 bar to the ESP pump, which brings about a higher pressure level. Previously, the ESP pump had to be dimensioned with corresponding conveying volume for full pressure, for example 200 bar with ASR operation. By appropriate design of the pump, for example twin-circuit gear pump or separate eccentrics for the pump pistons and possibly additionally stepped pistons, the ESP pump only has to handle the differential pressure between brake circuit pressure and X-Boost pressure, i.e. PBremskreis (=200 bar)−X-Boost (=80-120 bar)=80-120 bar, and therefore only 80-120 bar are necessary for the design of the ESP pump instead of 200 bar, and therefore a smaller ESP motor is sufficient accordingly. In addition, with this design of the pump it is possible to arrange the E-Boost and ESP pump in parallel already in the low pressure range, for example already from 20 bar, with rapid deceleration, which brings the potential for a quicker Pauf (TTL) or smaller X-Boost motor, accordingly.

If the pressure supply DV fails during a braking process, the DV piston is pushed back under pressure in brake circuit BK1 so that the brake pressure can be completely reduced. If a self-locking gear is used for the DV piston (trapezoidal spindle with plastic nut), such a pressure reduction is not possible. In this case, a normally closed solenoid valve AV is provided in brake circuit BK1 with connection to the storage container (not shown) or in connection from the breather hole of the Hiko to the storage container VB.

In the event of failure of both electronic control or regulating units (ECU) of X-Boost and ESP, which occurs very seldom, volume is conveyed in the fallback level RFE by the auxiliary piston (HiKo) 16 to the brake circuit BK1 and to the main cylinder HZ on the rear side of the SK piston through the opened valve FV and the brake pressure is increased, wherein the brake pressure in the main cylinder HZ displaces the SK piston and the pressure in brake circuit BK2 increases. To prevent this volume from escaping through the opened breather hole of the DV, a normally closed solenoid valve PD1 is provided (not shown in Fig. 1, see Fig. 1a ).

Function in Case of Brake Circuit (BK) Failure

The failure of a brake circuit is detected by the pressure supply DV by comparing the p-V characteristic curve of the brake system, which is stored in a characteristic map at certain intervals as part of a diagnostic cycle. If, for example, the piston travel/volume is greater than the standard value, there is correspondingly air in the brake circuit BK or a leak. This can be identified via the p-V characteristic curve. In the event of a leak, the leak can be identified by closing the four valves EV one after the other, provided this is located outside the units, e.g. in the wheel cylinder. If this is the case, for example, in brake circuit BK1, the valves EV of brake circuit BK1 are closed. The pressure supply DV then acts via the SK piston into the brake circuit BK2 (corresponding description of the diagnostic logic in the patent applications DE 10 2015 106 089.2 and 10 2016 112 971.2, to which reference is made here in this respect). If this does not work, the pressure supply DV fails, and so does the brake booster BKV. In this case, the ESP pump acts as brake booster BKV in brake circuit BK2.

Failure of brake circuit BK2 does not result in failure of pressure supply DV, as the SK piston (12) represents an important safety gate with separation of brake circuits BK1 and BK2.

In both cases, the pedal characteristics remain the same and there is no pedal through fall.

ABS Function in the Event of Pump/Motor Failure in ESP.

When the ABS pressure reduction signal P_ab occurs, the DV control corrects the brake pressure to prevent the wheels from locking. A corresponding pressure reduction P_ab in both brake circuits is necessary to prevent a wheel from one of the two brake circuits from locking. However, this does not mean an optimal braking effect. However, this can be improved.

For example, during wheel locking with corresponding pressure reduction P_ab in one brake circuit, the other brake circuit cannot experience pressure reduction P_ab by closing the valve USVs. This can be optimized with individual wheel regulation by modifying the valves EV without parallel check valve RV as described in the patent application DE 11 2009 004636 (E112) to which reference is made here).

Fig. 2 shows the pedal characteristics over the pedal travel S_p. In area A, the force increase with curve 1 is relatively flat up to approx. 30 bar brake pressure, which corresponds to approx. 85% of all braking operations. This process can also be carried out via the pedal return spring. Then the more progressive part B acts up to the blocking limit, followed by the range of higher pressures, e.g. for fading. Here the driver should also feel that there has been a change in the brake system.

Curve 1 corresponds to the X-Boost with travel simulator WS. Without WS, i.e. with follow-up booster, curve 2 results where the pedal travel depends on the venting state or fading. Accordingly, there is a scattering (not shown) to 2a, which is even more extreme in the event of brake circuit (BK) failure. With the conventional e-booster the BKV is switched from e-booster to ESP booster at x. This changes the pedal characteristics. Without influencing the BKV control, at the same pressure and pedal force, the pedal with the main cylinder (HZ) piston would deliver further volume to the ESP pump until the pressure in the wheel cylinders has reached its target values and the volume is returned to the main cylinder HZ by overflowing the valves USVs.

A changed pedal characteristic with a larger pedal travel is achieved by reducing the amplification factor of the X-Boost, which results in the outlined scatter band. Additionally, the valves HSV1 and HSV2 can be modulated.

With the ABS function the pre-pressure supplied by the DV changes constantly. This can be felt as a small force change on the plunger 16 a and thus on the connected pedal plunger 3, which is demanded by many brake specialists. This can be changed at the beginning of the ABS or intermittently during deceleration by briefly increasing the inlet pressure.

The pedal characteristic is determined by the travel simulator WS. Here, brake management with generator determines the proportion of generator braking torque (electrical braking torque) and braking pressure (hydraulic braking torque) for the required vehicle deceleration. Both quantities can be changed at will during deceleration, wherein the recuperation may apply a. the same brake pressure in all four wheel cylinders, b. axle-individual brake pressures at the vehicle axles, or c. wheel-individual brake pressures in all four wheel cylinders. Here, special control methods are necessary for the pressure supply DV, and, in the case of b. and c., possibly corresponding valve designs or corresponding valve and pump control of the ESP unit.

The calculation of the brake pressure during recuperation in accordance with a. is preferably based on wheel force. The required total braking force (target braking force) on the wheels is determined from the pedal travel. If the target braking force can be applied electrically, then the hydraulic braking force is 0 N (braking pressure in the wheel cylinders 0 bar). If the target braking force exceeds the maximum possible electrical braking force, the difference between the target braking force and the electrical braking force is the hydraulic target braking force. The hydraulic target braking force is realized by the pressure supply DV by pressure generation in the wheel cylinders. For this purpose, the individual Cp values of the wheel brakes are used to calculate the target brake pressure, wherein the Cp value of a wheel brake represents the ratio of brake force to brake pressure. The target pressure is generated by a corresponding movement of the DV piston, wherein the pressure sensor of the ESP is used for the feedback of the piston movement. In this way, the pressure supply DV can set the target pressure both during pressure build-up and during pressure reduction. Due to the precise position control of the DV piston, the pressure setting is very accurate. The pressure control with the DV is also very quiet because no valves for P_auf and P_ab have to be actuated. Noise-causing valve and pump actuations of the ESP unit are not required. Furthermore, this recuperation control can be used uniformly for front, rear and all-wheel drive vehicles and X and II brake circuit splitting. The pedal characteristic remains unchanged.

In the case of b. with axle-individual brake pressures at the vehicle axles, the valves and the pump motor of the ESP might also have to be controlled. If the target brake force exceeds the maximally possible electric brake force, the difference between the target brake force and the electric brake force is thus the hydraulic target brake force, which is first applied by the pressure supply DV only at the driven axle. The EVs of the non-driven axle are closed. From a certain vehicle deceleration (for example from 0.2 g), the non-driven axle must also be hydraulically braked (due to the stability of the vehicle under braking). The hydraulic target brake force then has to be applied at the two vehicle axles jointly. The brake pressure at the non-driven axle is less than or equal to the brake pressure at the driven axle. The pressure at the driven axle is increased by the DV when the EVs are open. The pressure at the non-driven axle is adjusted by appropriate PWM control of the EVs of the non-driven axle. If the hydraulic target brake force then has to be reduced, for example because the driver releases the brake pedal, or because the generator moment increases, the brake pressures at both axles are reduced. This occurs at the driven axle with open valves EV by way of an appropriate control of the pressure supply DV. The pressure reduction at the non-driven axle occurs by opening of the valves AV (possibly clocked), together with a control of the ESP pump and pulse width modulation (PWM) control of the valves (EV) of the non-driven axle. The PWM control of the valves EV is intended to prevent the pressure at the rear axle from reducing too far. If, as a result, the pressure at the rear axle is reduced to 0 bar, the further reduction of the hydraulic target brake force then occurs exclusively via the pressure supply DV, with open valves at the driven axle and closed valves EV and AV at the driven axle. The AVs of the driven axle remain permanently closed during these processes. Valve and pump noise thus develops only above the specific vehicle deceleration (for example 0.2 g) and only at the non-driven axle.

In the case of c. with the wheel-individual brake pressures in all four cylinder, the valves and the pump motor of the ESP might also have to be controlled. The control of the pressure supply DV, of the valves, and of the ESP pump is achieved similarly to the situation described under b.

Driver Assistance Functions

There are many driver assistance functions that require automatic brake intervention, such as:

• ACC (Adaptive Cruise Control) in which the desired vehicle deceleration is set by active braking intervention.

• AWB (Automatic Warning Brake) where a braking impulse should wake the driver who has fallen asleep.

• BDW (Brake Disc Wiping) where a very low brake pressure in the wheel cylinders should wipe the water film off the brake discs during rain so that the maximum braking effect is achieved immediately during subsequent braking. With these assistance functions, the pressure supply DV can generate the necessary brake pressure in the wheel cylinders. The target brake pressure is specified by the various driver assistance systems. With the ACC the target brake pressure is variable and depends on the required vehicle deceleration, whereas with the BDW the target pressure has a small value (e.g. 1-3 bar). As with recuperation, the brake pressure is generated by a corresponding movement of the DV piston, wherein the pressure sensor of the ESP is also used here for the feedback of the piston movement. As with recuperation, the brake pressure setting is very accurate thanks to precise position control of the DV piston. The pressure control with the pressure supply DV is also very quiet in the driver assistance systems.

The figure description in Fig. 2, in particular, shows the decisive advantages of the invention in addition to the overall length.

• Pedal plunger 3

• Mounting flange BF on the front wall

• First piston-cylinder unit or main cylinder HZ with pedal interface

• Motor 8 with housing pressure supply I (DV) 25, arranged advantageously parallel to the main cylinder (can also be aligned perpendicular to the axle of the HZ)

• Hydraulic control and regulating unit HCU

• Electronic control and regulating unit ECU

• Storage container VB

• The plug connector ST is located below the storage container VB and above HZ and HCU and faces inwards towards the center of the unit to allow the associated connector to be pulled out sideways.

Fig. 4 shows an addition to Fig. 1 and Fig. 1a and 1s based on this description. The addition is the control unit (ECU) with interface to the storage container (VB) and electrical connections e of sensors, solenoid valves and motor. The control unit (ECU) has a partially redundant partial control unit (ECU2) for actuating, for example, particularly safety-relevant components such as the FV valve with optional separate vehicle electrical system connection. This partial control unit (ECU2) in which, for example, the signals of the pedal travel sensors (2a, 2b) are used, can preferably be integrated into an existing ASIC with redundant power supply.

In the interface to the storage container (VB), the integration of the sensor element (33) into the printed circuit board (PCB) is provided with floating body (34) and with target (T) in the storage container (VB). This allows an analogous evaluation of the level of the brake fluid in the storage container (VB) which supports the diagnosis of the system. If, for example, the level has decreased after pressure has been built up by the pressure supply (DV) and subsequent pressure reduction, a leak has occurred in the system.

The printed circuit board (PCB) is advantageously mounted on an aluminum plate or aluminum carrier (37) with good heat conduction to the main body (38) and spray wall (39). At peak loads, the outside temperature at the control unit (ECU) can be 120° C. and at the spray wall (39) 60° C., as the maximum temperature in the subsequent passenger compartment (39 a) is 30° C. with cooling. This allows a considerable temperature reduction to be achieved at the Mosfet (33 a), whose tub is transferred to the aluminum plate (37) via so-called vias (V). As is well known, the failure rate of electronic components in particular is strongly temperature-dependent according to Arrhenius law.

The EC motor (8) can be controlled via 2×3-phase control via a redundant connection e_red redundantly. The process is known. Usually the EC motor (8) requires an angle encoder as motor sensor (40).

The pressure supply DV has, here, an additional normally closed solenoid valve PD1. This is necessary if the DV piston is pushed back under pressure in the fallback plane RFE and the corresponding volume is lost in the brake circuit BK1 and BK2. This may be compensated for by the large volume of the auxiliary piston HiKo, however this has a negative effect on the pedal characteristics. If the DV piston arrives in the starting position, the breather hole opens, and brake fluid flows into the storage container. In the fallback plane RFE the valve PD1 is closed. In the case of ESP interventions or ESP boost, the valve PD1 can be opened again.

As already explained in Fig. 1, for the subsequent delivery of brake fluid volume into brake circuit 1 (BK1), volume is aspirated via the suction valve (28) from the storage container (VB) by pulling back the DV piston (10). For this purpose, the valve PD1 is closed and the DV piston (10) is retracted. The DV piston (10) draws brake fluid through the suction valve (28) and the hydraulic connection (R) from the storage container (VB). When the redelivery volume is sucked into the DV chamber (10), the valve PD1 is opened and the DV piston (10) moves forward. The DV piston (10) pushes the redelivery volume into brake circuit 1 (BK1). If during the suction phase of the pressure supply (DV) the ESP return pumps (P, Fig. 1) actively increase the pressure in the wheel brake cylinders, negative pressure is generated in brake circuit 1 (BK1). The volume delivery of the ESP return pumps (P, Fig. 1) then stagnates and possibly the ESP return pump (P, Fig. 1) in brake circuit 1 (BK1) aspirates an additional volume via seal D4, the replenishing bore (47) of the main cylinder (THZ) and the hydraulic connection (48) from the storage container (VB). The SK piston (12) is pushed back by the SK piston spring (12 a). The SK piston position then no longer corresponds to the pressure in the wheel brake cylinders, which can have a negative effect on the pressure reduction when the driver releases the brake pedal (1). A mini storage container (35) in brake circuit 1 (BK1) can be provided to prevent this stagnation of the volume delivery or this displacement back of the SK piston from happening. During the suction phase of the pressure supply (DV), the mini storage container (35) provides volume for the ESP return pumps (P, Fig. 1). The required volume of the mini storage container (35) depends on the duration of the suction phase and on the volume delivery capacity of the ESP return pumps (P, Fig. 1). To increase the availability of the X-Boost and to check the function of the travel simulator (WS), a shut-off valve (36) can be provided in the hydraulic connection (44) between the replenishing bore (42) of the auxiliary piston and the storage container (VB). If, for example, the auxiliary piston seal (D2) is leaking, the shut-off valve (36) can be closed, thus avoiding a failure of the travel simulator (WS).

The shut-off valve (36) can also be used to check various diagnostic functions. For this purpose, the valve PD1 is opened and the shut-off valve (36) is closed. When the pressure supply (DV) is activated, pressure is applied to brake circuit 1 (BK1), wherein the pressure can be measured, for example, with the pressure sensor (DG) of the ESP. Now, for example, the closing function of the travel simulator shut-off valve (WA) can be checked. If the valve FV is opened when the DV piston (10) is in constant position, the pressure in brake circuit 1 will drop only slightly when the travel simulator shut-off valve (WA) is functioning correctly. If the travel simulator shut-off valve (WA) is then opened, the pressure in brake circuit 1 (BK1) will drop considerably more if the function of the travel simulator shut-off valve (WA) is intact. If there is a leak in the travel simulator shut-off valve (WA), the pressure in brake circuit 1 (BK1) will drop considerably more, even if the travel simulator shut-off valve (WA) is not yet activated, and will not drop further when the travel simulator shut-off valve (WA) is opened. If the piston seal D6 of the travel simulator piston (49) is leaking, then the pressure in brake circuit 1 (BK1) continues to drop further after opening the travel simulator shut-off valve (WA).

If the travel simulator (WS) fails, the valve FV is generally opened, e.g. if the valve FV leaks. When actuating the brake pedal (1), the driver then pushes volume from the auxiliary piston chamber (43) to the ESP return pump (P, Fig. 1) in brake circuit 1 (BK1). ESP can then apply pressure to the cylinders via the active brake function of the ESP, depending on the position of the pedal (1). The pedal travel is significantly longer than with the intact X-Boost to achieve a certain pressure in the wheel brake cylinders. This can surprise the driver and lead to unpredictable behavior. To avoid this, a hydraulic pedal reset force can be generated using the pressure supply (DV), so that the pedal force is similar to the pedal force with the X-Boost function intact. For this purpose, the pressure in brake circuit 1 (BK1), and thus also the pressure in the auxiliary piston chamber (43), is adjusted by the pressure supply (DV) so that the normal pedal force/pedal travel characteristic of the travel simulator is reproduced as intended by the vehicle manufacturer. If this reproduction succeeds well, the driver will not be surprised by a longer pedal stroke and his behavior will be more predictable. In this example, the travel simulator (WS) will function as normal, but the brake pressure build-up by the pressure supply (DV) in brake circuit 1 (BK1) can only occur after the auxiliary piston sniff hole (45) is closed, or, if the shut-off valve (36) is used, also with smaller pedal travels. When using the active braking function of the ESP, however, the pressure in the wheel brake cylinders can already be increased before the auxiliary piston breather hole (45) is closed.

Fig. 4a shows a measure to increase the functional safety of the X-Boost. The valve FV can be extended by FVred for redundancy, preferably with modified flow from the sealing ball to the valve seat.

Fig. 5 shows the entire system of X-Boost with ESP. X-Boost with THZ, the valves and the pressure supply DV corresponds to that in Fig. 4 apart from an amended connection of the suction valve (28), as also described in Fig. 7. Fig. 5 shows a redundant seal (D2.1) and a replenishing bore (50) for the auxiliary piston (16) with throttled discharge (Dr2.1) to the storage container (VB). The throttle Dr2.1 is designed so narrow that if the seal (D2) leaks, only a small leakage flow is possible from the auxiliary piston chamber (43) through the replenishing bore (50) to the storage container (VB), which, however, only results in a slow and small, non-interfering extension of the travel of the brake pedal (1) during the limited braking time. This leakage flow is detected by the pedal travel sensors (2 a, 2 b) in a plausibility check, but also in a system diagnosis as described in E144.

A further seal D4.1 is also shown, as redundancy for the seal D4. If this seal D4.1 fails, the brake circuit BK1 and the pressure supply DV will thus also fail. In this case the ESP unit performs the task of pressure supply, i.e. pressure increase. This can be avoided by the combination of the seals D4 and D4.1 and replenishing bore 52, wherein the connection of the replenishing bore 52 to the storage container, as with the auxiliary piston (HiKo) 16, is provided with a throttle Dr4.1. A failure of this seal 4.1, with the low leakage flow through the throttle D44.1, will not result in a failure of the brake circuit BK1 or the pressure supply DV. In addition, a diagnosis of the seal D4.1 is advantageously possible with this arrangement. Alternatively, a normally open valve TV can be provided in the connection to the storage container, which valve can be closed in the event of a leak of the seals D4 or D5.

For the seal D3, a redundant seal D3.1 with replenishing bore 51 and throttle Dr3.1 can also be used. In addition, the travel simulator seal D6 can also be redundantly equipped with seal D6.1, replenishing bore 53 and throttle Dr6.1. This means that all functionally important seals are redundant, and leaks can be detected during braking and diagnostics. This achieves a high level of safety for Fail Operational (FO). The seal arrangement can also be used with a one-circuit main cylinder (THZ) with pressure rod piston without floating circuit.

If brake circuit 1 (BK1) between ESP and the wheel cylinders of brake circuit 1 (BK1) leaks, brake circuit 1 (BK1) and the pressure supply (DV) of X-Boost fails. There is also a risk that brake fluid may be lost to the environment due to leakage. As a remedy, ESP can close both inlet valves EV of brake circuit 1 (BK1). If the fault is detected in X-Boost, but X-Boost has no access to these valves (EV), then it must be switched to the active brake function of the ESP. In this case, ESP adjusts the pressures in the wheel brake cylinders of brake circuit 2 (BK2). But for the pressure adjustment in the wheel brake cylinders of brake circuit 1 (BK1) ESP must constantly convey volume in brake circuit 1 (BK1). If ESP does not detect a leak in brake circuit 1 (BK1), brake fluid is constantly lost. For this situation the isolating valve TV1 in brake circuit 1 (BK1) between pressure chamber (12 d) of the main cylinder (THZ) and ESP is provided. If X-Boost detects the leakage in brake circuit 1(BK1), valve TV1 is closed. The pressure supply (DV) can then supply the pressure chamber (12 d) of the main cylinder (THZ) and thus brake circuit 2 (BK2) with pressure without losing brake fluid. In addition, the valve TV1 can be used to provide optimized braking distance on slippery roads in the event of ESP failure. For legal reasons it is necessary that when braking on slippery roads, the wheels on the front axle lock in front of the wheels on the rear axle. For this reason, the wheels on the rear axle are underbraked when the vehicle decelerates slightly. With X-Boost, the valve TV1 can be closed if the wheels on the front axle, on brake circuit 1 (BK1) with II brake circuit splitting, show a locking tendency. Then the brake pressure in the wheel brake cylinders at the rear axle, at brake circuit 2 (BK2), can be further increased with the pressure supply (DV) of the X-Boost until the wheels at the rear axle also show locking tendency. This means that almost maximum deceleration can be achieved for a slippery road surface. Of course it is also possible to further increase the pressure in the wheel brake cylinders on the front axle by briefly opening the valve TV1 after increasing the pressure in the wheel brake cylinders on the rear axle. With X-brake circuit splitting, valve TV1 can be closed if the front wheel of brake circuit 1 (BK1) shows a locking tendency. After valve TV1 is closed, the pressure in brake circuit 2 (BK2) can be further increased until the rear wheel of brake circuit 2 (BK2) shows a locking tendency. The pressure in brake circuit 1 (BK1) is so low that the vehicle still has sufficient stability, while the high pressure in brake circuit 2 (BK2) causes a short braking distance.

In the feed line, BK2, from THZ to ESP, an isolating valve, TV2, is used in the brake circuit 2 (BK2). As with the isolating valve TV1, the hydraulic connection is important, since the output of the valve seat is connected to the ESP. These two isolating valves, TV1 and TV2, can be used for the following functions.

1. Replenishment, step 2. As already explained for Fig. 4, the volume in the brake circuit 1 (BK1), and thus the attainable pressure level in the brake circuit 1 (BK1) and brake circuit 2 (BK2) is stopped by replenishment when the SK piston (12) in the main cylinder (THZ) reaches its stop. A further pressure rise is then still possible only in the brake circuit 1 (BK1). The stop of the SK piston (12) is identifiable because the pressure in the brake circuit 1 (BK1) now increases twice as quickly with the volume increase in brake circuit 1 (BK1). If the stop of the SK piston is reached, the isolating valves TV1 and TV2 are thus closed and the piston (10) of the pressure supply (DV) is retracted. The pressure in the brake circuit 1 (BK1) drops very quickly. Under the influence of the return spring (12 a) of the SK piston (12), the SK piston (12) moves back, possibly as far as the starting position, and displaces volume from the primary chamber (12 d) of the main cylinder (THZ) through the line of the brake circuit 1 (BK1) and through the valve PD1 into the chamber of the pressure supply (DV). At the same time, the SK piston (12) sucks volume from the storage container (VB) into the chamber before the SK piston (12) of the main cylinder via the seal D5 of the SK piston (12) and via the bore (47) with the hydraulic connection 48 of main cylinder (THZ) to storage container (VB). Due to the modified connection of the suction valve (28), the suction valve is not effective in the front region of the piston (10) of the pressure supply (DV), and no volume is sucked from the storage container by the suction valve (28) and the connection R as the piston (10) of the pressure supply (DV) moves back (see also description of Fig. 7). At the end of this suction process, the isolating valves TV1 and TV2 are opened again. With the subsequent forward stroke of the piston (10) of the pressure supply (DV), the SK piston (12) of the main cylinder (THZ) is advanced again, and both the pressure in the brake circuit 1 (BK1) and the pressure in the brake circuit 2 (BK2) can be further increased. The pressure supply (DV) is preferably controlled by the pressure specification of the X-Boost.

2. The isolating valves, TV1 and TV2, can also be integrated in the ESP as replacement of the switchover valves (US1, USV2), with the above-mentioned precondition of the hydraulic connection of the valve outlet to the wheel cylinder via the inlet valve (EV). This is associated with a cost and weight saving.

3. As already described, if the ESP fails, an ABS function in brake circuit 1 (BK1) can be realized with the isolating valve TV1 and the pressure supply (DV). Together with the isolating valve TV2, an ABS function can be realized both in brake circuit 1 (BK1) and in brake circuit 2 (BK2). Should each wheel of a brake circuit be ABS-controlled individually, the 4 inlet valves (EV) may thus be used. This is of great advantage in particular with a diagonal division of the brake circuit. The control processes are not shown here. The pressure control is always achieved by the pressure supply (DV).

A partially redundant control unit (partially redundant ESP-ECU) for the main control unit of ESP (ESP-ECU) can be used in the ESP for the control of the inlet valves (EV) and also of the isolating valves (TV1, TV2). The function may preferably include the processing of the sensor signals of the speed sensor and also of the yaw speed sensor for an ABS emergency function. This partially redundant control unit (partially redundant ESP-ECU), however, may also be connected to the control unit of the X-Boost (X-Boost ECU).

All control units (ECU) and partially redundant control units and partially redundant control units (partially redundant ECU) have, in addition to the connection to the vehicle electrical system (S1), a redundant connection to the vehicle electrical system with power supply and bus systems (Sn). The partially redundant connections to the ESP are denoted by the “cross in circle” symbol.

As already mentioned in the description of Fig. 4, the control unit of the X-Boost (X-Boost ECU) may also have a partially redundant portion (partially redundant X-Boost_ECU). This preferably supplies the following components denoted by “circle”: pedal travel sensors (2 a, 2 b), isolating valve FV, and DV valve PD1. It is also conceivable that this partially redundant control unit (partially redundant X-Boost ECU) also performs the tasks of the partially redundant control unit (partially redundant ESP-ECU) of the ESP, since the emergency function of the ABS has to be provided also with the partially redundant control unit of the X-Boost (partially redundant X-Boost ECU).

The ECU or partially redundant ECU each have a redundant connection to the vehicle electrical system. Fig. 5a shows a solution for increasing safety using the example of the pedal travel sensor (2 a). If an extremely rare clamping of sensor 2 a occurs when the brake pedal (1) is actuated, pedal movement is not possible and the brake fails. A pretensioned spring (41 a) is provided inside the sensor (2 a), the plunger (2 a 1) of which can be moved against the pretensioning force of the spring (41 a) when the sensor (2 a) is blocked. The error can be determined in a plausibility check of the signals of the two pedal travel sensors (2 a, 2 b) together with the elastic member (KWS). The two redundant return springs 18 a and 18 b acting when the brake pedal (1) is actuated replace the central return spring 18. If the sensor 2 a is clamped when the brake pedal (1) is released, it may not be possible to release the brake pedal (1) completely. As a result, the vehicle would continue to be braked continuously, contrary to the driver's intention. For this situation, a notch (2 a 11) is provided in the plunger 2 a 1, which is dimensioned such that under the influence of the plunger force, the plunger breaks at the point of the notch (2 a 11). Of course, this solution can also be used with the pedal travel sensor 2 b to increase the safety of the pedal travel sensor 2 a.

Fig. 6 and 7 show a solution for the failure of the suction valve (28) of the pressure supply (DV), the failure of which, e.g. leakage, impairs the function of the pressure supply (DV), since the volume in the working chamber of the pressure supply (11) does not enter the brake circuit 1 (BK1) via the valve PD1, but returns to the storage container (VB) via the suction valve (28) and return line (R).

Solution 1 (Fig. 6): Use a solenoid valve (MV) as a shut-off valve in the return line (R) between the suction valve (28) and the storage container (VB). If the leakage of the suction valve (28) is detected, the solenoid valve (MV) closes. The solenoid valve (MVs) can be opened to aspirate brake fluid into the DV chamber (11) through the pressure supply (DV).

Solution 2 (Fig. 7): In an intermediate position of the DV piston (10) of the pressure supply (DV), an additional suction bore (46) and an additional seal (D9) of the DV piston (10) are provided. The additional suction bore (46) connects the DV working chamber (11) to the storage container (VB) via the suction valve (28) and the return line (R). As a result, the suction valve (28) cannot act after the intermediate position of the DV piston (10) when pressure is built up with the seal (D9) intact. The failure of the suction valve (28) then has no influence on the pressure build-up function of the pressure supply (DV). When the DV piston (10) is moved back to the intermediate position, the DV piston (10) can only draw volume from the storage container (VB) via the sleeve (D9), the suction bore (46), the suction valve (28) and the return line (R), but with two pressure losses (the seal, D9, and the suction valve, 28). Only before the intermediate position of the DV piston (10) does only the suction valve (28) work again. Since the suction function only works during subsequent conveying, no further disadvantages can be detected. Additional conveying is necessary if additional volume is required for a higher pressure level or to compensate for poor ventilation.

Similar to the seal D4 of the main cylinder (THZ), a redundant seal D8.1 with a breather bore (53) and throttle Dr8.1 can also be used for the piston seal D8. Thus the pressure supply (DV) would also satisfy the requirements of the “Fail Operational” (FO).

It follows from the above description that the measures described in detail will lead to further modifications of the brake system according to the invention, which also belong to the claimed scope of the invention.

List of reference numerals

1	Brake pedal
2 a	Master pedal travel sensors
2 a 1	Plunger of the pedal travel sensor 2 a
2 a 11	Notch in plunger 2 a 1 of pedal travel sensor 2 a
2 b	Slave pedal travel sensors
2 b 1	Pedal travel sensor plunger 2 b
3	Pedal plunger
7	Spindle (KGT), trapezoidal spindle
8	EC motor
10	Piston (DV)
11	Pressure chamber or working chamber of the DV
12	SK piston
12 a	Return spring SK piston
12 d	Pressure chamber or working chamber on floating piston SK (rear)
14	Partition wall
16	Auxiliary piston
16 a	Plunger
18	Pedal return spring
18 a	Pedal return spring for pedal travel sensor 2 a
18 b	Pedal return spring for pedal travel sensor 2 b
25	DV housing
27	Breather hole
28	Suction valve
33	Sensor element
33 a	Component, e.g. MOSFET
34	Floating body
35	Mini storage container
36	Shut-off valve for storage container (VB)
37	Aluminum plate or support
38	Main body
39	Spray wall
39 a	Passenger compartment
40	Motor sensor
41 a	Preloaded spring on pedal travel sensor 2 a
41 b	Preloaded spring on pedal travel sensor 2 b
42	Replenishing bore of the auxiliary piston (16)
43	Chamber of the auxiliary piston (16)
44	Hydraulic connection
45	Breather hole of the auxiliary piston (16)
46	Suction bore in the pressure supply (DV)
47	Replenishing bore of the main cylinder (THZ)
48	Hydraulic connection
49	Piston of the travel simulator (WS)
50	Replenishing bore of the auxiliary piston (16)
51	Replenishing bore of the auxiliary piston plunger (16 a)
52	Replenishing bore of the main cylinder (THZ)
53	Replenishing bore of the pressure supply (DV)
AV	Outlet valve ABS
B1	Vehicle electrical system connection 1
B2	Vehicle electrical system connection 2
BF	Mounting flange for end wall
BK	Brake circuit
BK1	Brake circuit 1
BK2	Brake circuit 2
D	Orifice for throttling
DV	Pressure supply
DG	Pressure transducer
Dr 2.1-Dr 6.1, Dr8.1	Throttles in the return flow to the storage container (VB)
D1	Seal 1 of the auxiliary piston (16)
D2	Seal 2 of the auxiliary piston (16)
D2.1	Redundant seal (D2)
D3	Seal of the auxiliary piston plunger (16 a)
D3.1	Redundant seal (D3)
D4	Seal 4 of SK piston (12)
D4.1	Redundant seal (D4)
D5	Seal 5 of SK piston (12)
D6	Seal 6 of the travel simulator piston (49)
D6.1	Redundant seal (D6)
D7	Seal 7 of DV piston (10)
D8	Seal 8 of DV piston (19)
D8.1	Redundant seal (D8)
ET	Electronic control unit
HA	Stop surface
HD	Hydraulic connection
HM	Hydraulic motor
K	Control chamber
KA	Control bore
KGT	Spindle drive
L	Hydraulic line
LP	Pressure line
M	Electric motor
MS	Mechanical stop
P	Pressure port
R	Return flow
S	Supply port
SK	Secondary piston
THZ	Main cylinder
VB	Storage container
WS	Travel simulator