Académique Documents
Professionnel Documents
Culture Documents
BODAS-drive DRC
RE 95323
Edition: 10.2015
Features Contents
▶▶ Covering a wide range of hydrostatic drivetrain and 1 Introduction 2
gearbox variants of wheeled mobile machines 2 Typical applications and variants 2
▶▶ Load sensitive and automotive driving for load and travel 3 System description 4
operations 3.1 System overview 4
▶▶ Proportional driving at fixed engine speed for work and 3.2 Drivetrain components 6
material handling operations 4 Functional description 7
▶▶ Multiple comfort functions like cruise control or velocity 4.1 Driving functions 8
limitation for accurate and easy driving. 4.2 Comfort functions 9
▶▶ Diesel Hydraulic Control ECOdrive and ECOwork for 4.3 Energy efficiency and component protection
improved efficiency and reduced noise emissions functions 10
▶▶ Flexible interfaces – discrete or CAN J1939 5 Electrical interfaces 11
▶▶ Comprehensive configuration options via BODAS-service 5.1 Connection diagram RC12-10/30 12
▶▶ Integrated safety functions in accordance with EN ISO 5.2 CAN signals 16
13849 and ISO 25119 5.3 Inputs 17
▶▶ Modular software concept for efficient customer-specific 5.4 Outputs 22
extensions 5.5 Power supplies 24
▶▶ Supporting process documents and tools for systematic 6 Functional safety in accordance with
integration into the machine EN ISO 13849 and ISO 25119 25
▶▶ BODAS-drive DRC is part of BODAS Bosch Rexroth 6.1 Approach 25
design and application system for mobile electronics 6.2 Concept 25
▶▶ Software solution on Rexroth controller RC12-10/30 6.3 Safety functions 26
6.4 Example of using a BODAS-drive safety function 30
7 Project engineering and ordering information 32
7.1 Ordering code 33
8 Valid standards and separate documentation 34
9 Abbreviations 35
10 Safety Instructions 36
BODAS-drive DRC is a software solution embedded in BODAS-drive is designed to control the hydrostatic drive-
Rexroth controller RC12-10/30 to control hydrostatic drive- train of wheeled mobile machines. Thanks to the multiple
trains of wheeled vehicles. BODAS-drive covers a wide functions and configuration options it can be adapted to
range of drivetrain types. The drivetrain is always based on various applications. Typical examples include wheeled
an engine with CAN interface and a hydrostatic drive con- loaders, telehandlers, dumpers, municipal vehicles and fork
sisting of a pump and at least one motor. The gearbox type lift trucks. BODAS-drive was developed using a generic
can vary between fixed gears, a gearbox shiftable during approach and represents a Safety Element out of Context
standstill, a shift-on-fly gearbox, a summation gearbox or (SEooC). Assumptions have been made and documented
radial piston motors mounted at the wheels. accordingly for the applicable safety functions of BODAS-
drive.
The load sensitive travel behavior and features like automo- Note
tive driving, hydrostatic braking and reversing provide for BODAS-drive helps to realize functionality and safety at
accurate and easy driving of the mobile machine. Propor- the machine level. The machine manufacturer must thor-
tional driving at a fixed engine speed can be the right oughly check whether the functionality of BODAS-drive
choice for work and handling operations. The integrated can fulfil the requirements of the specific machine. If addi-
Diesel Hydraulic Control DHC ECOdrive and ECOwork tional features are required, BODAS-drive can be
functions reduce fuel consumption and noise emissions. extended. Please consult your Bosch Rexroth contact for
Comfort functions like cruise control, hand throttle, speed an individual solution.
limitation and the automatic parking brake support the
driver at the daily work. The comprehensive diagnostics
The BODAS-drive configuration is always based on an
and well-defined limp-home strategies ensure that the
engine with a standard CAN J1939 interface and a Rexroth
machine is operational.
axial piston variable pump A4VG with electrical direct
control type ET or electrical proportional control type EP.
Each input device can either be discretely connected to the
Depending on the secondary side of the hydrostatic drive
RC or the signal can be received via CAN. The BODAS-drive
and the gearbox type, different configurations of BODAS-
CAN protocol is based on SAE J1939. BODAS-drive can be
drive are applicable.
configured and adapted to the specific machine require-
ments by setting parameters with BODAS-service.
BODAS-drive DRC
DRC variant A
Engine Communication via CAN J1939
Hydraulic drive pump A4VG.ET or EP (pump equipped with pressure and swivel angle sensors are mandatory for prototype machines!)
Sensors Discrete
Driver interface Discrete or CAN J1939
BODAS controller RC12-10/30
Safety standards EN ISO 13849, ISO 25119
Gearbox Hydraulic Fixed gear ratio, Up to 3 gear ratios, MCR motors, Summation gearbox
pump not shiftable shiftable during standstill. displacement shiftable with one clutch interfacing
ET or EP 2 gear ratios shiftable during standstill and 2 hydraulic motors for high
during driving during driving torque and high speed
Power /
speed range
2 hydraulic motors with
2+1 summation gearbox
Up to
4 hydraulic motors
1 hydraulic motor with
Standstill shifting gearbox
or Shift-on-fly gearbox
1 hydraulic motor
+
CAN
RC12-10/30
BODAS-drive
BODAS-service
ASrun DRCA41
BODAS controller
Transmission ECU
CAN4:
CAN3:
CAN2:
CAN1:
Velocity limitation switch
Drive direction switches
free
CCP
3.1 System overview
System description
Drive pedal
SAE J1939
3 System description
Drive potentiometer
BODAS-service
Brake pedal
Diesel
engine
Velocity limit
ECU
CAN
Engine
BODAS-drive DRC | Application software
SAE J1939
Implement joystick
Pressure MA, MB
pump
Implement joystick 2
Variable
Pump control
Driver-on-board switch
A4VG ET or EP
Cruise control on switch
Motor control
Vg min switch
Motor temperature
Parking brake
Speed sensor
A6VM EP
lamp
Variable motor
Clutch valve 1–3
Fault lamp
Clutch pressure Brake lamp
feedback via relay
Gearbox
ECU
Emergency stop
Inputs via J1939 (optional)
▼▼ System overview for a BODAS-drive DRC configuration with gearbox shiftable during standstill / shift-on-fly
Machine
brake
Parking
CAN
Application software | BODAS-drive DRC 5
System description
▼▼ Part of system overview for a BODAS-drive configuration ▼▼ Part of system overview for a BODAS-drive configuration
with summation gearbox with radial piston motors MCR
Gearbox temperature
Temperature motor
Speed sensor
Speed sensor
Parking brake
Clutch valve
feedback
switch
Parking
brake
valve
Rear
2x 2+1
Variable motors Gearbox
A6VM
Drive motor
There is the possibility to apply fixed or variable hydraulic
motors in the drivetrain. In case of a fixed motor the output
speed of the hydraulic motor is proportional to the pump
output flow. If the drivetrain is equipped with a variable
axial piston motor A6VM with electric proportional control
EP, the hydrostatic ratio can additionally be controlled by
an electrically defined signal which sets the swivel angle of
the motor. The closed loop EP control system ensures a
constant swivel angle independent from the occurring high
pressure.
For a detailled description of the motor A6VM see Rexroth
datasheet 91610.
4 Functional description
BODAS-drive evaluates the input signals coming from the particular machine configuration, each function can be
connected operator devices and machine sensors. Based separately activated using BODAS-service. Thus only the
on this, BODAS-drive calculates the control values for the relevant inputs are evaluated and just the needed outputs
various actuators, such as the engine, hydrostatic drive and are activated. The diagnostic routines are adapted with
gearbox. To map the BODAS-drive functionality to a regard to the activated functions.
Operator
devices
Machine
sensors
For a detailed description of the safety functions, For a detailed description of the relationship between
see chapter 6.3. desired functions and required devices, see chapter 5.
The minimum configuration for operating devices requires a
drive direction lever (FNR) and a drive pedal. With respect
to sensors, it is expected that at least one speed sensor is
installed to read the hydraulic motor or gearbox speed,
which enables elementary drive functionality.
5 Electrical interfaces
The modular approach of BODAS-drive enables a flexible functions and required driver and machine interfaces for
activation of the available functions. inputs and outputs.
The table below describes the relationship between desired
Inputs Outputs
Pump pressure5)
Oil temperature
Driver on board
Speed sensor 1
Speed sensor 2
Retarder valve
Cruise control
Shift requests
Engine torque
Clutch valve1)
Engine speed
Status lamp
Brake pedal
Drive pedal
Brake lamp
Inch pedal
Fault lamp
Motor
Pump
Automotive driving o6) o6) x x x x x x
Brake lamp control 3)
x x
Cruise control x o o o x x x o4) x x x x
Diagnostics3) x x x x x x x x x x x x x x x x x x x x x x o x x x x x x x x x x x x x x x x x x x
Drive demand o o 6) 6)
x x x x
Drive modes x x x x x
ECO drive mode o6) o6) x x x x x x x
ECO work mode o6) o6) x x
Engine speed control o o 6) 6)
o o 6) 6)
x x o
Engine overspeed protection x x x x o
Inch function x o x x x
Load limiting control o6) o6) x x x x x
Motor control o o x x o x x
Motor pressure control x x x x
Motor protection x x x x
Parking brake control x x x x x x x
Power limitation x x
Pump control o6) o6) o x x o x
Pump protection x x
Radial piston motors (MCR) o6) o6) x x o x x o x x x
Reversing function o o x x o x
Service brake influence x x
Shift-on-fly gearbox control o o 6) 6)
o o x x o x x x x x x x
Standstill gearbox control x o x x x x
Summation gearbox control o6) o6) x x x x x o x x
Tractive effort limitation x o o x2) x1)
Velocity limitation control o o o 4)
x x x
x = mandatory for functionality
o = optional (additional enhanced functionality)
Note
The detailed hardware characteristics of the RC controller
are described in Rexroth data sheet 95204. This data
sheet must be taken into account before implementing
BODAS-drive at the machine level.
1) With summation gearbox (e.g. 2+1) 4) Mandatory for close loop control
2) With standstill gearbox (up to 3 gears) 5) Mandatory for prototype machines
3) Diagnostics depends on enabled functionality 6) One option mandatory
Inputs Outputs
Pump pressure5)
Oil temperature
Driver on board
Speed sensor 1
Speed sensor 2
Retarder valve
Cruise control
Shift requests
Engine torque
Clutch valve1)
Engine speed
Status lamp
Brake pedal
Drive pedal
Brake lamp
Inch pedal
Fault lamp
Motor
Pump
Engine speed control o6) o6) o6) o6) x x o
Engine overspeed protection x x x x o
Inch function x o x x x
Frequency inputs
see page 15
1 109 IN_75 150
Speed sensor Pump speed
DSM sensor 2 213 IN_66
see page 15 (only Prototype) B
174
208 IN_67
B
Pin 255, page 14 108 IN_68 130
VSS_3
1 133 IN_69
Auto shift enable B
131
2 132 IN_70
A 18)
Pin 255, page 14 VSS_2
VSS_3 250 IN_1 126
A
Drive mode switch 1 236 IN_2 A
Drive mode switch 2 209 IN_3 101
A
Drive mode switch 3 147 IN_4 A
Drive mode switch 4 223 IN_5 125
A
Drive mode switch 5 148 IN_6 A
129
Poti 1 159 IN_7 B
see Drive pedal 2 158
page 15 IN_8 A
Inch pedal 1 214 IN_9
Poti A
see (combined brake/ 2 157 IN_10
page 15 Inch pedal) B Proportional
Voltage inputs
A
Poti Drive 1 142 IN_23 181
A
Ulgn see
page 15 potentiometer 2 235 IN_24 B
Neutral 247 IN_25 B 182
Forward 0 V/+5 V 13)
Switch inputs
234 IN_26 A
Reverse 225 IN_27 A
212 IN_28 188
A
248 IN_29 A
Poti 1 237 IN_30 0 V/+5 V 13)
see Engine hand A 187
page 15 request 2 239 IN_31
A
Parking brake request 1 251 IN_32 Connection diagram part 2:
A 18) see next page
Pin 119,
Parking brake request 2 page 14 IN_40
1)
Voltage inputs
V 106 earbox valve B
G
166 IN_34 OUT_22
A 2.2 A
Pump pressure MA p (standstill/SoF gearbox)
V 231 IN_35 (MCR 2; 50% / 100%)
B
217 IN_36 190 Gearbox valve C
Pump pressure MB p B OUT_23
V 226 IN_37 2.2 A (standstill/SoF gearbox)
B (MCR 2; 0%)
Switch 5A
Implement control axis 0 negative p 139 IN_38 A
V outputs 189 Pin 179, page 13
Parking brake pressure switch 141 IN_39 OUT_24
A 2.2 A Fault lamp
Implement control axis 1 negative p 2)
Sensor GND, connection, see page 13 V 146 19) 194
Sensor ground 5 A OUT_25 Parking brake lamp
UBat 2.2 A
Switch 5A 2) Battery T.30
228 INH
INH 12) Brake lamp
Stop switch outputs Relay
114 IN_42 SW-INH14) OUT_26 193
Pressure switch
C 2.2 A
6.5 V service brake
Cruise control On 115 IN_43 (external)
C 243 2)
140 IN_44 OUT_27
C 3.5 A Status lamp (gearbox)
155 IN_45 2)
Switch inputs Switch
1
C
5A
Cruise control Set 2 156 IN_46 outputs
C OUT_28 241
1 172 IN_47 3.5 A
C
Velocity limitation switch 2 191 IN_48 C
242
192 IN_49
C
Driver on board switch 1 196 IN_50 C
2 249 IN_51
C 256
3.3 V
Constant voltage 244
121 IN_62
Temperature gearbox oil switch B
Temperature inputs
257
116 IN_63
221
4 ... 20 mA
p 171 IN_56
Implement control axis 3 positive V A
195
227 IN_57
Implement control axis 3 negative p V A
VSS_1
GND 4)
Swivel angle pump 5V
167 IN_58 215 BODAS-service
WSI Sig 1 1 CAN H1 216
(only prototype) Sig 2 A CAN L1 250 kBaud
10) 4) 16)
253
Pin 146
2 169 IN_59
A CAN H2 254 Engine J1939
Sensor CAN L2 250 kBaud
VSS_3 GND
Motor Vg min switch 170 IN_60
A CAN H3 163
CAN L3 162
161 4) 16)
Power limitation switch 165 IN_61 CAN H4 160 CCP
A CAN L4 1000 kBaud
Connection diagram part 1: see page 15
1)
2)
Pin 146, page 2
Sensor GND 270 Ω
1) 1
Option idle
Poti
validation switch
1)
2
UIgn
Speed sensor HDD2
(NPN only), DSA2
1+ 2)
3 1 270 Ω / 2W
4 2
2−
Pin 146, page 2
Pin 146, page 2 Sensor GND
Sensor GND
4) CAN-bus: termination resistor 120 Ω and twisted pair wire neces- 14) Secondary deactivation channel for proportional- and switch aout-
sary. puts: enabling with level <0.8 V, deactivation with level >1.7 V, ca-
5) Outputs 5 V / 10 V can also be used as sensor supply alternatively. ble break leads to deactivation.
6) Temporary wake up of the controller when a signal >8 V is applied 15) Supply can be switched by the software.
for more than 1 sec. 16) Is switched off when the watchdog triggers. Is switched off shortly
7) Note max. current consumption with simultaneous actuation of for diagnosis purposes when a main switch is initially activated.
proportional solenoid and switched outputs. 17) If power is disconnected during operation no data can be saved to
8) Separate ground connection for current source to battery, control- non-volatile memory and no after-run.
ler GND possible. 18) A and B indicate different A/D converters which may be selected
9) Can be used as switch inputs if externally switched to GND. for redundancy reasons.
10) For use as voltage inputs (0...10 V), the load can be stiched by the 19) Terminal 31 (supply ground) and sensor ground are bridged at a
software in groups for these inputs. star point in the control-unit and connected to the housing.
Groups: inputs 1...2, inputs 3...6, inputs 7...10
11) Outputs arranged in groups, each with 2 output stages.
5.2 CAN signals
CAN 1 250 kBaud Communication with BODAS-service or Signal is contained in a standard J1939
BODAS-design. CAN message.
CAN 2 250 kBaud J1939 Standard. Communication with SAE J1939
iesel engine and other ECUs.
d
Standard
CAN 3 Reserved.
Signal is contained in a proprietary J1939
CAN 4 1000 kBaud Communication via CAN calibration
CAN message. All proprietary messages have a
protocol (CCP).
SAE J1939 checksum and message counter for in-
Supporting development tools like
creased safety. All proprietary message iden-
CANape, INCA or equivalent for advanced Proprietary tifiers can be commonly shifted via an offset
measuring options.
parameter for free choice of identifier space.
Caution: CCP must not be used for param-
eter setting or calibration.
5.3 Inputs
Range inputs
Discrete CAN Bus
Supported Maximum Open Remarks Supported Remarks
electrical signal voltage input CAN
interfaces range1) voltageV2) messages
Drive pedal
Drive potentiometer
Inch pedal3) ▶▶Signal range of first
2.7 V channel can be learned
Brake pedal via trimming functionality
Velocity limit of BODAS-service
▶▶Idle validation switch
Tractive effort limit
must be connected to 5V CAN Proprietary messages
Hand throttle SAE J1939 include checksum and
Proprietary
message counter
This interface expects one analog voltage signal in the range from 0.5 V to 4.5 V.
The details of the signal characteristics including start and end point as well as the allowed
V
tolerances can be configured via parameters.
x5)
This interface expects two opposing voltage signals in the range from 0.5 V to 4.5 V.
V2
The first signal is the leading signal and the second signal is used for plausibility check.
The details of the signal characteristics including start and end point as well as the allowed
V1 tolerances can be configured via parameters.
x5)
This interface expects two concurrent voltage signals in the range from 0.5 V to 4.5 V.
The first signal is the leading signal and the second signal is used as a plausibility check.
V2
V1 The details of the signal characteristics including start and end point as well as the allowed
tolerances can be configured via parameters.
x5)
This interface expects one voltage signal in the range from 0.5 V to 4.5 V and one on/off idle
VIVS validation switch VIVS signal. The voltage signal is the leading signal and the on/off signal is
VIVS
used as a plausibility check. The details of the signal characteristics including start and end
V1 V1
point as well as the allowed tolerances can be configured via parameters.
x5)
x5)
1) Passive sensors such as potentiometers must be connected to a 2) Voltage measured in case of unconnected signal pin. Voltage re-
5 V sensor supply (VSS_1 or VSS_3). Active sensors must be sup- sults from internal circuitry of RC.
plied as specified by sensor data sheet (VSS_1, VSS_2, VSS_3 or 3) A combined brake / inch pedal must be connected as inch pedal
UIgn). 4) Such as implement pressure sensors or implement joystick
5) x = angle α, line S or pressure p
RE 95323/10.2015, Bosch Rexroth AG
18 BODAS-drive DRC | Application software
Electrical interfaces
Engine speed
CAN
– – – SAE J1939 Standard EEC1 message
Standard
DSM Sensor:
DSM
This interface expects one frequency with coded error and direction information.
IHigh
ILow
t
Time t
360° phase
approx. 90° phase shift
▼▼ Supported positions and combinations of speed sensors For summation gearboxes, two speed sensors are compul-
Gearboxes that can be shifted at a standstill require a sory. Two combinations are supported for the sensor posi-
speed sensor at the hydraulic motor (1), the gearbox input tions: Both speed sensors are placed either at the hydraulic
(1*) or the gearbox output shaft (2*), respectively. For motors (1, 2) or within the gearbox (1*, 2*).
shift-on-fly a speed sensor at the gearbox output shaft (2*) 2*
is mandatory. The evaluation of two sensors is supported
Permanently
for additional diagnostics. active motor
1* 2
Temporarily
active motor
(disengageable)
1 1 1*
For configurations with radial piston motors (up to four
wheels) two speed sensors are recommended (sensor (2) is
2*
mandatory). The sensors must be placed at different motors.
1 2
Engine coolant
CAN
temperature
– – SAE J1939 Standard ET1 message
Standard
Switch inputs
Discrete CAN Bus
Supported Closed 1)
Open 2)
Remarks Supported Remarks
electrical switch switch CAN
interfaces voltage voltage messages
Cruise control on
Driver-on-board
switch
Shift request
shift up, shift down 2.7 V
5 V Switches may be
Auto shift enable normally opened or
closed
Parking brake
request
Proprietary messages
Clutch pressure UIgn
CAN
SAE J1939 include checksum and
switch
Proprietary
message counter
Parking brake
pressure switch
Motor minimum dis-
placement switch 0 V
Power limitation
switch
5V
Gear position switch Switches must be
normally opened. Switch
closes if corresponding
gear is engaged
FNR - Drive direction
select Switches may be
three channels: 1
UIgn normally opened or
neutral, forward and Com 2 closed
reverse n
This interface expects an on/off signal coming from a push button or switch with normally
open contact.
This interface expects an on/off signal coming from a push button or switch with normally
closed contact.
This interface expects two redundant on/off signals coming from a push button or switch
with two normally open contacts.
This interface expects two redundant on/off signals coming from a push button or switch
with two normally closed contacts.
This interface expects two redundant on/off signals coming from a push button or switch
with one normally open and one normally closed contact.
1 This interface expects exactly one of n signals in on-condition. Typical devices can be
Com 2 a steering column switch or any other selector switch with one common supply pin and
n mechanical positions connecting the common pin with one of the n output pins.
n
5.4 Outputs
Proportional outputs
Discrete CAN Bus
Supported Default Invertible2)
Remarks Supported Remarks
electrical output logic1) CAN
interfaces messages
Pump solenoids Pump forward and reverse
Pump swivels to solenoids are connected to
no
Vg0 two independent low-side
switches
Hydraulic motor ▶▶All hydraulic motor Proprietary
solenoids solenoids are connected to CAN
messages include
Motor swivels to yes one low-side switch. SAE J1939
checksum and
Vgmin (Vgmax) ▶▶Output logic is Proprietary message counter
independently configurable
for both motors
Retarder Retarder control can be
solenoid yes
proportional or digital
Standard
– – – –
CAN Proprietary
SAE J1939 messages include
checksum and
Proprietary
message counter
I This high-side output expects a solenoid connected to ground potential. The proportional
output current is generated via PWM closed-loop control. The details of the solenoid
characteristics including minimum and maximum resistance can be configured via parameters.
I This high-side output expects a solenoid connected to a low-side switch. The low-side switch is
an additional safety path for switching off the output in case of external short circuits. Up to
four high-side switches can be connected to one low-side switch. The proportional output
current is generated via PWM closed-loop control. The details of the solenoid characteristics
including minimum and maximum resistance can be configured via parameters.
Switch outputs
Discrete CAN Bus
Supported Default Invertible2)
Remarks Supported Remarks
electrical output logic1) CAN
interfaces messages
Fault lamp Lamp signals from lowest
Lamp is on yes to highest priority:
off, on, slow flash, fast flash
Parking brake lamp Lamp signals:
off = brake disengaged,
Lamp is on yes on = brake engaged,
flashing = brake engagement
is requested
Status lamp Lamp signals:
(Gearbox) off = shifting not possible,
on = shifting possible,
Lamp is on yes
flashing = shift up/down for
fixed gear request currently Proprietary
not possible CAN
messages include
SAE J1939
Brake lamp via relay Lamp is on yes – checksum and
Engine start allowed If engine ECU input is active
Proprietary message counter
Engine start low, signal must be inverted
no
is allowed (e.g. with a normally open
relay to GND)
Gearbox valves ▶▶Up to three valve solenoids
for standstill, are connected to one
shift-on-fly, low-side switch
Valve is open yes
summation gearbox ▶▶Output logic is indepen-
or MCR motor control dently configurable for all
valves
Parking brake valve Parking brake valve solenoid
Parking brake
yes is connected to one low-side
is open
switch
Pump neutral valve No short circuit Pump neutral valve solenoid
between pump yes is connected to one low-side
X1, X2 switch
V This high-side output expects a solenoid connected to ground potential. The output voltage is
switched to battery voltage or ground. The details of the solenoid characteristics including
minimum and maximum resistance can be configured via parameters.
V This high-side output expects a solenoid connected to a low-side switch. The low-side switch is
an additional safety path for switching off the output in case of external short circuits.
Up to four high-side switches can be connected to one low-side switch. The output voltage U
is switched to battery voltage or ground. The details of the solenoid characteristics including
minimum and maximum resistance can be configured via parameters.
This high-side output expects a resistance (e.g. a lamp) connected to ground potential. The
V
output voltage is switched to battery voltage or ground. The details of the resistance character-
istics including minimum and maximum resistance can be configured via parameters.
5.5 Power supplies
Sensor supplies
UBat
▶▶ This potential is connected to battery voltage and is
protected by a 5 A fuse.
▶▶ It is solely used for power supply of ECU electronics and
the emergency stop switch.
UIgn
▶▶ This potential is connected to the ignition switch and is
protected by a 3 A fuse.
▶▶ It is used for sensors requiring battery voltage as power
supply and for some switches.
▶▶ The sensors connected to UIgn don’t draw current when
ignition is off.
VSS_1, VSS_3
▶▶ These potentials are connected to 5 V constant voltage
sources supplied by the ECU.
▶▶ It is used for sensors requiring a 5 V power supply, for
potentiometers and for some switches.
VSS_2
▶▶ This potential is connected to a 10 V constant voltage
source supplied by the ECU.
▶▶ It is not used in the BODAS-drive DRC wiring harness.
Drivetrain system
1 Risk assessment
▶▶ Performance of risk assessment
Subsystem Subsystem Subsystem
▶▶ Identification of the safety functions
Driver interface BODAS Hydraulics
+ controller RC ▶▶ Determination of the required performance level (PLr)
+
machine sensors + Mechanics
BODAS-drive DRC 2 Safety concept and category selection →
Category 2 is pre-defined for BODAS controller RC +
The machine manufacturer can use the BODAS controller BODAS-drive DRC subsystem
RC + BODAS-drive DRC subsystem within the machine ▶▶ Comparison of risk assessment results with safety func-
safety design to realize safety functions for the drivetrain tions offered within BODAS-drive
system. The described characteristics within this data sheet ▶▶ If the safety requirements of the application cannot be
refer to the BODAS controller RC + BODAS-drive DRC fulfilled with the existing safety functions of BODAS-
subsystem. drive, the product must not be used. In this case, con-
sult your Bosch Rexroth contact regarding a customized
Ready-to-use safety functions developed according to the solution. Otherwise go on with the next step.
standards EN ISO 13849 and ISO 25119 are part of the ▶▶ Developing a safety concept for the complete machine
software. If the performance level for the BODAS-drive and drivetrain
subsystem is sufficient to reach the required overall perfor- –– Applying BODAS-drive inherent safety approach
mance level, BODAS-drive can be used based on the cus- –– Creating block diagrams
tomer-specific risk assessment. In any case, the require- –– Calculation of the overall performance level. The
ments of the relevant safety standard must be fulfilled at SISTEMA tool from IFA may be used. A calculation
the drivetrain and machine level. example is provided. Once the safety function groups
and the characteristics of the sensors and actuators
6.2 Concept have been provided, it can directly calculate the
The software of the BODAS controller RC + BODAS-drive probability of failure per hour and the performance
DRC subsystem utilizes an inherent safety concept. This level achieved.
means that all noted safety functions are realized not by
dedicated monitoring software, but by a safe implementa- 3 Integration and parameterization of BODAS-drive in the
tion of the safety relevant software program parts. The machine
BODAS-drive software has been completely developed ▶▶ Integrate BODAS-drive in the machine environment
according to PL d and SRL 1. The software comes with 8 interfacing the wiring harness and devices which are
predefined safety functions, but is not limited to these. For selected according to the safety requirements.
additional safety functions, contact your Bosch Rexroth ▶▶ Set parameters with BODAS-service according to the
sales partner. application-specific requirements.
6.3 Safety functions The following table shows, which input and output
All Safety functions of the BODAS-drive subsystem have components are related to each declared safety function.
been developed according to PL d (DIN EN ISO 13849) and For example, to know which components have a
AgPL c (ISO 25119). The software has been developed to dependency for e.g. the safety function “Safe Reversing”,
fulfil the requirements of PL d (DIN EN ISO 13849) and the “x” marks in the line of “Safe Reversing” show which
SRL 1 (ISO 25119). The ECU hardware fulfils the require- components have to be regarded. In this case, these are
ments of category 2 according DIN EN ISO 13849 and ▶▶ Drive pedal
ISO 25119. ▶▶ Drive potentiometer
▶▶ Drive direction select
Relationship between safety functions and input/output ▶▶ Speed sensor 2
functions ▶▶ Pump actuation
The following tables show the dependencies between
safety functions and configured components.
Inputs Outputs
Motor temporary1)
Velocity limitation
Torque limitation
Oil temperature
Driver on board
Speed sensor 1
Speed sensor 2
Pump pressure
Retarder valve
Cruise control
Shift requests
Engine torque
Clutch valve1)
Engine speed
Status lamp
Brake pedal
Drive pedal
Brake lamp
Inch pedal
Fault lamp
Motor
Pump
Safe standstill x x x x x x x
Safe parking brake x x x
Safe direction x x
Safe acceleration and
x x x x x x x x x x x x x x x x x x x
deceleration Limit
Safe reversing x x x x x
Safe brake light x x
Safe limited speed x x x x x x x
Safe deceleration x x x x x x x
Safe operator detection x x x x
x = mandatory for safety function (if sensor is used for configured function)
Reversing function
Motor protection
Pump protection
Power limitation
ECO drive mode
ECO work mode
Cruise control
Drive demand
Motor control
Pump control
Inch function
Drive modes
Diagnostics
Safe standstill x x x x x x
Safe parking brake x
Safe direction x x
Safe acceleration and deceleration limit x x x x x x x x x x x x x x x x x x x x x x x x x x
Safe reversing x x
Safe brake light x
Safe limited speed x x x x
Safe deceleration x x x x x x x x
Safe operator detection x x
SF1: Safe standstill PFH value for the BODAS controller RC + BODAS-drive DRC
This safety function ensures no unwanted self-propelled subsystem for this function is about 2.6 · 10–7. This value
movement of the machine caused by an unwanted torque of depends on the connected sensors and the type of connec-
the hydrostatic transmission. tion (such as analog or CAN…).
Driver-on-board switch
Drive pedal
PFH value for the BODAS controller RC + BODAS-drive DRC Brake pedal
Driver interface + BODAS controller RC Hydraulics + PFH value for the BODAS controller RC + BODAS-drive DRC
machine sensors + BODAS-drive DRC Mechanics
subsystem for this function is about 2.6 · 10–7. This value
depends on the connected sensors and the type of connec-
tion (such as analog or CAN…).
Speed motor 2
Drive pedal
Driver interface + BODAS controller RC Hydraulics + PFH value for the BODAS controller RC + BODAS-drive DRC
machine sensors + BODAS-drive DRC Mechanics
subsystem for this function is about 2.6 · 10–7. This value
depends on the connected sensors and the type of connec-
tion (such as analog or CAN…).
Speed motor 1
Pump
SF9: Safe operator detection
This safety function ensures that the hydrostatic transmis-
sion stops propelling the vehicle as long as the operator is
Speed motor 2 Hydromotor EP temp not present at the operator’s position.
6.4 Example of using a BODAS-drive safety function The example shows a block diagram for the safety function
This chapter uses an example based on SF1 Safe Standstill SF1, “Safe Standstill”. It makes use of a 2-channel drive
to show how to use the standard BODAS-drive safety func- pedal, a 2-channel parking brake switch, a driver-on-board
tions depending on the machine configuration. switch and a 3-position F-N-R switch on the sensor side and
an electrically controlled pump and parking brake valve on
First step: Develop a block diagram the hydraulic side.
Develop the block diagram based on the machine configura- The block diagram shows the connection of all blocks
tion and desired functionality. The usable blocks of the relevant for this safety function. It also shows the choosen
BODAS controller RC are defined within the safety-relevant category, here category 2 with a function channel and a test
project instructions, Rexroth datasheet 95451-01-B of the channel.
choosen ECU. The appropriate blocks of the subsystem of
sensors and hydraulics have to be choosen according to the
machine configuration.
Driver interface + machine sensors BODAS controller RC + BODAS-drive DRC Hydraulics + Mechanics
PWM
Analog
output
Safety (function) channel
input
Drive pedal HS
Proces- Circuit
Driver-
sor/ board/
on-board-
switch RAM supply
PWM
Digital
output
input
LS
Analog
input
Second step: Calculate metrics Result for the BODAS controller RC + BODAS-drive DRC
The metrics of MTTFd and DC value are calculated in subsystem is:
the second step. Bosch Rexroth recommends using the
SF Safe standstill
SISTEMA tool for that purpose.
PLr d
PL d
✔SF Safe standstill PFH [1/h] 6.61E-7
✔SB ECU SB ECU
✔CH Channel 1
PL d
✔BL K2 – Analog input PFH [1/h] 3.49E-7
✔BL K2 – Analog input Cat. 2
✔BL K2 – Analog input MTTFd[a] 100 [high]
✔BL K3 – Digital input DCavg[%] 77.94 [low]
✔BL K3 – Digital input CCF 75 [fulfil]
✔BL K5 – Processor and memory
✔BL K7 – CAN bus According to the BODAS controller RC + BODAS-drive DRC
✔BL K11 – Sensor supply subsystem, the calculation for the full system has to be
✔BL K6 – Power supply unit and circuit board done based on the respective machine. The database of the
✔BL K8 – PWM output highside used values can be found within the safety-relevant project
✔BL K8 – PWM output highside planning instruction for BODAS controllers RC, Rexroth
✔BL K8 – PWM output highside
datasheet 95451-01-B. Since the sensor and system struc-
✔TE Test channel
tures vary, a concrete calculation has to be done within
✔BL K2 – Analog input
✔BL K2 – Analog input each project. Also, the machine-specific temperature profile
✔BL K2 – Analog input has to be taken into account when performing the MTTFd
✔BL K3 – Digital input value calculation.
✔BL K3 – Digital input
✔BL K4 – Monitoring
✔BL K13 – INH (inhibit, pin 228)
✔BL K8 – PWM output highside
✔BL K9 – PWM output lowside
✔BL K9 – PWM output lowside
✔BL K9 – PWM output lowside
✔BL K9 – PWM output lowside
7.1 Ordering code
01 02 03 04
ASrun / DRC A 41
Type
01 Application software ready to run on RC controller ASrun
Application
02 Hydrostatic drivetrains for wheeled mobile machines DRC
Variant
03 Hydraulic pump A4VG.ET or EP, engine with SAE J1939 CAN interface, hydraulic motor with constant displacement or
A6VM.EP, fixed gear or gearbox shiftable during standstill or shift-on-fly gearbox or summation gearbox interfacing two hy- A
draulic motors or hydraulic transmission using radial pistion motors type MCR.
Release
04 Release number of the software 41
The software BODAS-drive DRCA41 will be delivered already flashed on a BODAS controller RC12-10/30
When placing an order, the hardware and software ordering codes are to be linked by a “+“.
In this case the complete ordering code is as follows: RC12-10/30 + ASrun/DRCA41
The operating instructions as well as the valid standards and separate documentation (chapter 8) must be considered
before start-up of the software.
The documents and tools container is provided upon request via Info.Bodas@boschrexroth.de
Please use the following subject for your e-mail request: “Container request: ASrun/DRCA41“
Document
SAE J1939-21 December 2010 Data Link Layer
SAE J1939-71 May 2012 Vehicle Application Layer
Standard DIN ISO 13849-1 2006-11 Safety of machinery – Safety-related parts of control systems
Standard DIN ISO 13849-2 2012-10 Part 1: General principles for design
Part 2: Validation
Standard ISO 25119 2010-06 Parts 1-4 Tractors and machinery for agriculture and forestry – S
afety-related parts of control systems
95204 BODAS Controller RC series 30
RC12-10, RC20-10, RC28-14
95451-01-B Controller RC12-10, RC20-10, RC28-14
Safety-relevant project planning instruction
08511 10 10 Steps to Performance Level
9 Abbreviations
Abbreviation Meaning
AgPL Agriculture Performance Level
BODAS Bosch Rexroth Design and Application System
CAN Controller Area Network
CCF Common Cause Failure
CCP CAN Calibration Protocol
DA Automatic control speed-related
DC Diagnostic Coverage
DHC Diesel Hydraulic Control
DIN Deutsches Institut für Normung
DRC Drive Control
ECU Electronic control unit
EN European Norm
EP Proportional control electric
ET Electric control, direct-controlled
FNR Forward/Neutral/Reverse
HA Automatic control high-pressure related
HS High-Side
IFA Institute for work protection of the German
statutory accident insurance
ISO International Organization for Standardization
IVS Idle validation switch
LS Low-Side
MCR Radial piston motors
MTTFd Mean Time To dangerous Failure
PFH Probability of dangerous failure per hour
PL Performance Level
PLr Required Performance Level
PWM Pulse-width modulation
RC Rexroth Controller
SAE Society of Automotive Engineers
SEooC Safety element out of context
SF Safety Function
SISTEMA Safety integrity software tool for the evaluation of
machine applications, produced by IFA
SRL Software Requirement Level
10 Safety Instructions
▶▶ BODAS-drive DRC represents a safety element out of ▶▶ The machine may pose unforeseen hazards while com-
context (SEooC). The machine manufacturer must verify missioning and maintenance are carried out. Before
whether it is the right product for the specific application. commissioning the system, you must therefore ensure
▶▶ The machine manufacturer must perform a risk assess- that the vehicle and the hydraulic system are in a safe
ment. condition.
▶▶ The required safety functions and performance levels ▶▶ Make sure that nobody is in the machine’s danger zone.
must be fulfilled with the product in order to use ▶▶ No defective or incorrectly functioning components may
BODAS-drive DRC in a specific application. be used. If the components should fail or demonstrate
▶▶ The machine manufacturer bears responsibility for faulty operation, repairs must be performed immediately.
applying the valid safety standards at the machine level. ▶▶ The technical specifications and safety instructions of all
▶▶ The machine manufacturer is responsible for fulfilling all involved components must be considered.
safety requirements at the drivetrain and machine level. ▶▶ The machine manufacturer must follow the valid stan-
▶▶ The machine manufacturer is responsible for validating dards and separate documentation (see chapter 8)
the machine-specific configuration of BODAS-drive DRC. when using the product.
▶▶ Configurations of BODAS-drive DRC used for serial
production must be validated. Intended use
▶▶ The proposed circuits do not imply any technical liability ▶▶ The control unit is designed for use in mobile working
for the system on the part of Bosch Rexroth. machines provided no limitations / restrictions are made
▶▶ Incorrect connections could cause unexpected signals at to certain application areas in this data sheet.
the outputs of the RC. ▶▶ Operation of the control unit must generally occur
▶▶ Incorrect programming or parameter settings may create within the operating ranges specified and released in
potential hazards while the machine is in operation. this data sheet, particularly with regard to voltage,
▶▶ It is the responsibility of the machine manufacturer to current, temperature, vibration, shock and other
identify hazards of this type in a hazard analysis and to described environmental influences.
bring them to the attention of the end user. Bosch ▶▶ Use outside of the specified and released boundary
Rexroth assumes no liability for dangers of this type. conditions may result in hazard to persons and/or cause
▶▶ The application software must be installed and removed damage to components which could result in subse-
only by Bosch Rexroth or an authorized partner to pre- quential damage to the mobile working machine.
serve the warranty.
▶▶ It must be ensured that the vehicle is equipped with Improper use
adequately dimensioned service and parking brakes. ▶▶ Any use of the control unit other than as described
▶▶ Make sure that the software configuration does not lead under “Intended use” is considered to be improper.
to safety-critical malfunctions of the complete system in ▶▶ Use in explosive areas is not permissible.
the event of failure or malfunction. This type of system ▶▶ Damage resulting from improper use and/or from unau-
behavior may put life in danger and/or cause great thorized interference in the component not described in
damage to property. this data sheet render all warranty and liability claims
▶▶ System developments, installations and commissioning void with respect to the manufacturer.
of electronic systems for controlling hydraulic drives
must only be carried out by trained and experienced
specialists who are sufficiently familiar with both the
components used and the complete system.
Bosch Rexroth AG © This document, as well as the data, specifications and other information
Mobile Applications set forth in it, are the exclusive property of Bosch Rexroth AG. It may not be
Glockeraustraße 4 reproduced or given to third parties without its consent. The data specified
89275 Elchingen, Germany above only serve to describe the product. No statements concerning a
Tel. +49 (0)9352 40 50 60 certain condition or suitability for a certain application can be derived from
Info.Bodas@boschrexroth.de our information. The information given does not release the user from the
www.boschrexroth.com/mobile-electronics obligation of own judgment and verification. It must be remembered that our
products are subject to a natural process of wear and aging.