"MOTOR VEHICLE EQUIPPED WITH A DECEPTION-PROOF SAFETY CONTROL SYSTEM"
*0*0*0 The present invention relates to a system capable of monitoring the state of intoxication of 4-wheel motor vehicle drivers, to prevent the risks associated with driving such vehicles, as well as a vehicle equipped with means to perform such prevention and control . It is known that vehicles on the road today are equipped with generally electronic, sometimes extremely sophisticated systems capable of monitoring the regular functioning of all vehicle components. These control systems are generally passive, consisting of devices capable of detecting a possible fault and of signalling it to the driver, who must then act in order to remove the fault .
In recent years, however, systems capable of performing at least partially an active control have also been developed, which do not only detect the fault, but apply countermea- sures, too. Such a system may typically detect a temperature rise in the cooling water, for example, and consequently activate the cooling fan; or it may detect rain, consequently activating the vehicle windscreen wipers.
All systems currently used in vehicles, however, only de- tect, as mentioned, functioning anomalies in the vehicle or in its components. To this day, the market does not offer a vehicle capable of checking the driver's "fitness to drive", this term meaning not so much, or not only, the ability resulting from having obtained a driving license, but rather the driver's physical and/or psychological conditions which enable him to drive the vehicle safely. It is well known that today, with increasing traffic and vehicle speed, driving safely means that the driver must be in a perfect physical
and psychological condition.
It is true that proposals for systems capable of checking the driver's "fitness to drive", and more specifically the driver's condition of "sobriety or intoxication", are already disclosed in some prior patents, but none of the known prposals has been implemented on commercial vehicles. Document US-3.818.434 (1972) suggests placing in the passenger compartment, in front of the driver, a device that detects alcohol in the driver's breath: in this case the control is an active one, as it comprises means to interlock the vehicle in case an excessive alcohol content is detected; in US- 4,689,603(1986) and GB-2186448 (1987) too, a similar alcohol detection device is disclosed, in the latter case also combined with a secret-code device: both need to be activated by the driver in order to start the vehicle engine; US-4,926,164 (1988) discloses a similar alcohol detection and starter motor inhibiting device, combined with means to repeat the test at predetermined times; GB-2232284 (1989) discloses a device similar to the previous ones, but employing a pump to draw air from the passenger compartment as soon as the driver's presence inside the vehicle is detected by means of an open- door sensor and by an on-off weight sensor mounted on the seat; WO-01/12457 (2000) discloses a similar device to that described in patent US-3, 818,434 30 years earlier. The fact that 30 years have elapsed without any of the mentioned devices being effectively and usefully mounted on a vehicle for sale, despite drink driving today being one of the main causes of potentially fatal car accidents, may be explained only by the fact that none of them was considered satisfactory and really useful. This is due not so much to the technological inadequacy of the devices employed - it is currently known that the police have on the one hand very simple but very effective breathalysers, and on the other
hand electronic control devices are all extremely advanced and completely reliable -, but rather to the fact that the use of these devices, mounted on vehicles and left to the driver's control only, are likely to be tampered with or their results falsified easily.
Following examples are given in order to clarify this concept : a) when the use of a breathalyser or of an alcohol detector is suggested, characterised by inlets that automatically draw the air inside the passenger compartment and that are mounted in front of the driver, following points are not being considered:
- on the one hand, the driver may deceit the breathalyser by directing air onto the breathalyser air inlets which comes from, for example, a small pressurised air tank, bellows, or a balloon, or by spraying perfume or solvents onto the air inlets; or the driver may breathe with his face temporarily facing the rear of the passenger compartment, so that his breath does not reach the air inlets; - on the other hand, ambient air inside the vehicle may contain alcohol vapours due to intoxicated passengers, which would cause the vehicle to interlock despite the driver being the only sober person in the car (which represents an obvious, incorrect, and excessive intervention) ; b) when the use of an on-off weight sensor is suggested (used, among other things, on the driver's seat only and only to detect the driver's presence exclusively in order to trigger the automatic drawing of air from the passenger compartment) following points are not being considered: - The driver may deceit such detector by asking a sober person to sit in the driver's seat to take the breath test and then, at the end thereof, ask him to move to the passenger seat or to get off the vehicle while the intoxicated per-
son seats himself into the driver's seat;
- during the breath test the driver's hands are free to use aerosol bombs containing air, perfume, solvents, or other substances that may disguise or replace alcohol breath; - during the breath test other people possibly present in the vehicle may blow into the breathalyser from the passenger seat or rear seats.
Consequently, the main object of the present invention is to suggest means and a system employing the same that are ca- pable of monitoring the driver's state of intoxication in a way that is not excessively penalising, but mainly in a deceit-proof way. This aim is achieved through a monitoring system and through a vehicle displaying the essential features detailed in claims 1 and 12, which highlight how the driver is subject to control in a mandatory and deceit-proof procedure .
Further features and advantages of the present invention will become apparent from the following detailed description of a preferred embodiment of the invention, given purely as a non-restrictive example and taken in conjunction with the accompanying drawings, wherein:
- Figures 1 and 2 are diagrammatic views (plan view and vertical section) of a vehicle equipped with safety control means according to the invention; - figures 3 and 3a show, in a comprehensive view and in detail, the dashboard of a vehicle equipped with the detection means accessible to the driver according to the invention;
- figures 4-8 are block diagrams of the electronic control unit (ECU) and of the components connected thereto.
As already mentioned in the preliminary remarks, it is an object of the present invention to provide an equipped vehicle that allows a safety test on the driver's state of in-
toxication and, most importantly, that allows such test to be performed in a way that excludes the possibility of tampering or falsification of results by the driver or by the other occupants of the vehicle. The safety test constituting the essential object of the invention is a test of the driver's "fitness to drive", in particular of the driver's state of "sobriety or intoxication" ; this type of test has already been dealt with extensively by prior patent literature - as mentioned in the in- troduction of the present description - but with hardly any practical results. At the basis of the difficulty in implementing an effective testing system - obviously in the absence of the known police test, which can be carried out only very occasionally - is the fact that the driver who is aware of his more or less severe state of intoxication tends to avoid his blood alcohol level to be tested or, when this is unavoidable, to try and deceit the test or to falsify its results.
Consequently, in order to avoid deception or results fal- sification, the present invention provides that the vehicle is equipped with a variety of sensors and with an electronic data control and storage unit, which receives and processes the signals coming from such sensors and which interacts with the driver to "force" him to co-operate with the test without deceiving. In this way, a signal allowing or inhibiting the starting of the vehicle engine, or limiting maximum driving speed may be issued at the end, according to process results.
As illustrated in the drawings, a vehicle V according to the invention comprises an electronic data processing unit (a small on-board computer) , identified by CI in fig. 1, to which various sensors and actuators are connected. These are mounted in the passenger compartment and in the engine compartment and are described further in the following para-
graph.
In figure 1, no. 2 indicates weight-measuring sensors, represented as plates integrated in each of the seats; in figure 2 the same sensors are represented as plates under the seats. These sensors detect the exact, actual weight acting on the seat; in particular, the weight acting on the driver's seat will be used for the exact calculation of his blood alcohol level, too (its value, as is known, varies according to the body weight of the tested individual) . The detected weight value will then be fed to the central unit CI and stored in a suitable database.
As known, the weight of a seated person acting on the seat is well below the actual weight of the same person; however, central unit CI is capable of calculating the actual weight thanks to stored parameters on the basis of the weight detected by the sensor. If necessary, it can store the actual weight for the functions better described in the following paragraph.
The presence of such weight-measuring sensors in each of the vehicle seats represents one of the main technical features to avoid possible deception and/or falsification of results during and after the breath test, as is highlighted in the following paragraphs.
3 and 8 indicate pairs of photocells which are capable of detecting the presence of people in the area beside the driver and in the rear seat area.
4 indicates the position of magnetic sensors detecting the open or closed position of the vehicle windows. 5 indicates the position of contact sensors, similarly detecting the open or closed position of the vehicle doors. 9 indicates possible further sensors detecting the door opening angle.
7 indicates movement sensors, located between the driver's seat and the guide rail thereof, which are capable of detect-
ing any position change of the driver's seat.
P6 and P7 indicate contact sensors or push-buttons doubly located far away from each other on the dashboard and aimed at requiring the driver to use both his hands in the way de- scribed below.
10 and 11 indicate actuators, namely a device 10 limiting fuel supply flow, and a device 11 directly limiting vehicle speed, which are of a known design and often already supplied and mounted on the vehicle by manufacturers, and which are referred to in the following paragraph.
The central unit CI, in addition to managing and controlling the various sensors and actuators mounted on the vehicle, also "communicates" with all vehicle components and functions (such as brake, gearbox, fuel flow, speedometer, etc.), which are globally indicated by 12 and which are essential to the test envisaged by the invention.
The structure of central unit CI illustrated in the drawings comprises the following classic modules (see figures 4- 8) : - input/output management and control : for connection and interfacing (buses, connectors, etc.) with all devices external to the central unit;
- (analogue and digital) data acquisition, data conditioning and analogue/digital data conversion (see in detail figg. 5, 6, and 7) ;
- central processing based on cpu or microprocessor, cache memory and chipset (to pilot microprocessor, arithmetic processor, bus controller, system clock, DMA controller, interrupt controller, keyboard controller) ; - timer and clock, to program any control and verification time intervals;
- data and program (RAM, Flash, ROM, EEPROM) memories to contain data and software necessary to the functioning of the
whole device (see in detail figures 5 and 8) .
Fig. 3 illustrates a vehicle dashboard according to the invention, containing a control panel P, shown in greater detail in fig. 3a. Panel P comprises: an alphanumeric keyboard PI, of the type employed in mobile phones; a microphone P2 and a loudspeaker P3 to receive and transmit voice messages; a nozzle- shaped terminal P4 to blow lung air into the breathalyser, which is protected by a cover P10 that may be opened by the electronic data processing unit; a series of push-buttons P5 to provide standard replies to the voice messages delivered by the control unit or to the questions asked on a liquid crystal display indicated by P8; and, lastly, a push-button Pll to launch the breath alcohol test in case a "spontaneous" (i.e. non mandatory) test is taken by the driver.
Furthermore, keyboard PI, microphone P2 , and loudspeaker P3 can have the control function of a vehicle-integrated mobile phone (module C6 in fig. 4) with hands-free function (as required by law in the case of mobile phone use while driv- ing) .
On the dashboard, two push-buttons P6 and P7 are directly located at a suitable distance from each other as mentioned.
Fig. 4 shows the block diagram of the control device according to the invention which comprises, the following pe- ripheral units, as well as central data processing unit CI, powered by battery CIO:
C2 for the control module of the breathalyser assembly
C3 for the control module of the weight-measuring sensors
C4 for the control module of the open-door and open-window sensors, as well as of the sensors detecting living beings and driver ' s seat movement
C5 for the receiver module of satellite positioning signals
C6 for the already mentioned mobile phone module C7 for the control module of vehicle components C8 for the control module of the vehicle electronic unit C9 for the control module of the actuators adjusting vehi- cle speed.
Figures 5-8, as already said, illustrate in greater detail block diagrams of the invention components relating to the central unit and to the interaction with the driver.
The alcohol breath test device is triggered as soon as the ignition key is inserted, and it switches off (or rather, it stays in stand-by/lowest consumption position) when test performance is completed.
Such device can interact with the driver by means of, on the one hand, display P8 and loudspeaker P3 , in order to in- struct the driver about the operations to carry out, and on the other hand, alphanumeric keyboard PI, microphone P2 and the series of function keys P5 and Pll in order to receive answers .
Following is a detailed description of the mode of opera- tion of the device.
The first step consists in typing on a keyboard a secret code exclusive to the driver, which matches an identical code directly stored inside the device, for example in a suitable chip. Such secret code - which may also be entered by an electronic card through a suitable reader linked to central unit CI (not shown in the drawings)- may be associated with different safety levels; meaning that a) it represents above all a kind of alarm, as failure to enter the code or entering of an erroneous code will prevent the engine from getting started; b) it allows for different authorisation levels; young drivers, for example, may have limitations imposed on their driving that do not apply to adults;
c) similarly, a driver who has shown correct driving behaviour throughout a long period of time may even - within certain limits and, for example, during certain times of the day - not be subjected to the alcohol breath test. Once passed the secret code test, the driver is later invited, by means of a voice announcement through loudspeaker P3, to take the breathalyser test, for which he needs first of all : al) to sit in the driver's seat a2) to ensure that vehicle doors and windows are shut a3) to ensure he is the only occupant of the passenger compartment a4) to ensure that the vehicle is in a stationary position and the engine running a5) to place his hands on push-buttons P6 and P7, at a suitable distance from each other a6) to place his feet on two of the clutch, brake or gas pedals .
Meanwhile, central unit CI also checks that: a7) the alcohol detecting device is "protected" in a compartment closed by a suitable cover P10.
Only after ensuring compliance with all these conditions - through the different signals generated by the different sensors - does central unit CI order the launch of the breatha- lyser test by opening safety cover P10, allowing access to said alcohol detecting apparatus P4 , and inviting the driver to blow directly into the nozzle of said device.
Such conditions (all constantly controlled by the device, as well as the various vehicle components affected by the test) will have to be complied with throughout the test duration, otherwise a repeat test will be necessary. If during the test or after its end the vehicle engine is switched off, the test will have to be repeated.
Condition al) - i.e. correct posture of the driver in the driver's seat - means above all that the intoxicated driver cannot have the breathalyser test carried out by a sober person, later rising from the driver's seat to allow the intoxi- cated person to sit in it: in fact, as soon as the sober person rises from the seat to offer the seat to the driver, weight-measuring sensor 2 detects the corresponding weight variation, which is thus interpreted by central unit CI as a deception attempt triggering a repeat test. If, instead of a zeroing of the driver's seat weight (corresponding to the sober person walking away) , even a simple seat weight change takes place, even limited to a few kg., this will be interpreted by central unit CI as meaning that the test was taken not by the real driver, but by a second individual, who got on the vehicle together with the driver and very near him (for example sitting in front of him or in his lap) so that they form a unique entity, and who later, once the test is over, may move into the front passenger seat. This weight change too thus triggers a repeat test. Also, condition al) means that the driver's seat itself must already be in the correct position which is to be maintained throughout the journey, and into which it must be brought again by moving the seat backwards or forwards before launching the breathalyser test . Once the test is completed with a positive result, the driver's seat is not to be moved backwards or forwards again (control by movement sensors 7) , as mentioned earlier, because that too may be interpreted as the test being carried out by a sober person sitting in front of or in the lap of the driver. Finally, it must be noted that this type of control of condition al is carried out not only on a stationary vehicle, but in a cyclical manner, even after passing the breathalyser test, for example every 3 or 4 seconds, at least as long as
the vehicle speed is below a relatively low limit, for example below 30-40 Km/h; as a matter of fact, up to this speed a deception attempt as described above may always be possible. Conditions a2) and a3) - i.e. closed doors and closed win- dows and no other passenger on board except for the driver - are meant to avoid that the alcohol breath test may be distorted by actions of sober individuals from outside. Among these, the most immediate and obvious may be:
- alcohol breath test carried out directing a blow of air from outside the vehicle to nozzle P4 by means of a hose inserted through the vehicle window by a person other than the driver;
- alcohol breath test carried out by a person other than the driver standing outside the vehicle but craning through the window to reach nozzle P4;
- alcohol breath test carried out by a person other than the driver sitting inside the vehicle in one of the passenger seats, but leaning towards nozzle P4 without reaching the driver's seat. Condition a5) , i.e. the driver's hands both being positioned on push-buttons or contacts at a distance from each other, is meant to prevent the driver from being able to falsify test results with the help of his hands. Possible actions of deception in this case may be: - alcohol breath test carried out by the driver, but using his hands to blow into nozzle P4, for example with the aid of a compressed air bomb or an air-filled balloon, a bicycle cylinder pump, a bellow pump for rubber dinghies or similar, instead of exhaling his own breath; - alcohol breath test carried out by the driver after having used his hands to spray nozzle P4 with solvents or heavily scented substances from aerosol bombs.
Condition a4) , together with condition a6) - i.e. both the
driver's feet placed on push-buttons or pressure contacts mounted on the vehicle control pedals - is meant to prevent the driver from using his feet or knees (rather than his hands) to falsify the test in the way described earlier, and more precisely, to operate a blowing pump or other device.
Once the test is completed (i.e. once blown into the nozzle with adequate strength) , central unit CI can simply authorise or not the starting of the engine; alternatively, intermediate solutions may be considered (all signalled by a voice message) according to the value of blood alcohol content, namely: a) the driver is "sober" (blood alcohol content below 0,4, for example) , so the engine can be started normally without any speed limitation; b) the driver is "euphoric" (blood alcohol level between 0,4 and 0,5, for example); in this case the device will automatically limit the maximum speed of the vehicle - according to predetermined parameters and possibly taking into consideration the current time -, for example acting directly on fuel flow adjustment, or on the usual vehicle speed control unit; c) the driver is "inebriated" (alcohol blood level between 0,5 and 0,6, for example); the driver is alerted by a voice message that his blood alcohol level is above the legal limit and that therefore driving in that condition is against the law; starting the engine is inhibited: central unit CI enters waiting mode, informing the driver thereof, for a repeat test within a predetermined time (by which time the blood alcohol level is expected to have decreased below the limit of 0,5 ) or for a different driver d) the driver is "drunk" (blood alcohol level above 0,6, for example) ; in this case the engine will be prevented from being started (interlock controlled by unit CI) until central
unit CI detects a different driver in the driver's seat, who will be administered the blood alcohol test from the beginning.
In this situation, especially if the test detecting a "state of drunkenness" is not immediately followed by another test with a positive result, it is possible to expect that the central unit automatically transmits a pre-recorded message (over the mobile phone integrated in the device) to the driver's relatives informing them of the driver's state and of his "exact location" (located, for example, by means of a global positioning system, GPS) .
Even in the case of a passed test it is possible to design the control software of the electronic processing unit so that it performs, in a random and occasional way, a further breath alcohol test at the end of the journey (i.e. before switching off the vehicle engine) : this helps preventing the driver from drinking alcohol while driving. As a further "deterrent" psychological effect, should the driver refuse to take the test, it is possible to schedule an increment of "penalty points" in an archive stored in the central unit data memory. Thus the central unit may order - for that particular driver, identified by his secret code - further and future limitations to the use of the vehicle.
Summarising what has been described in detail above, the invention provides that, while performing a breath alcohol test, the following conditions are complied with: al) the driver must be duly seated in the driver's seat - this condition is essential to prevent the easy substitution of drivers having performed the breath alcohol test. This condition is verified by the already mentioned "weight- measuring sensors" integrated in the driver's seat, as well as by a "movement sensor" located on the driver's seat guide rail. In order to make deception attempts impossible, it is
therefore essential that during and after the test the weight detected on the driver's seat does not vary substantially. Also, the driver's seat must not be moved backwards or forwards, in order to prevent two people from being in the driv- ing area at the same time while the test is being performed. a2) the vehicle doors and windows must be shut - this condition is extremely important to prevent third parties from being able to interfere with the test through an open door or window and/or a sunroof. This condition is verified by " (mag- netic) contact sensors" on each window and by " (photoelectric) contact sensors" on each door; in this case, too, the sensors only need to be capable of giving off a simple open/closed signal; a3) the driver must be the only occupant in the passenger compartment - as in the previous case, this condition is essential to avoid third-party interference on test results. This condition is verified by two types of "presence sensors", namely: "weight-measuring sensors" integrated in each of the vehicle seats, which are capable of detecting the driver's and passengers' weight, and "movement sensors", such as "photo-electric sensors" for example, which detect the presence of any passengers, whether they are seated or not. Or, even better, by a combination of these two types of sensors ; a4) the vehicle must be stationary - this condition is essential, as the test must be performed before the driver can move the vehicle. This condition is verified by a "movement sensor" , associated for example with the vehicle movement transmission and/or with the fuel flow and/or with the elec- trical system. The sensor only needs to be capable of transmitting an on/off signal, i.e. stationary/moving vehicle; a5) the driver's hands must be engaged at a suitable distance from each other. This condition is essential to prevent
the driver from interfering with the blood alcohol test using his hands. This condition is verified by "pressure sensors" (or push-buttons) that the driver must depress separately with both hands; they are located at such a distance from each other to make it impossible for them to be operated with one hand only. In this case, too, the sensor only needs to be capable of transmitting a simple depressed/non depressed signal ; a6) the driver's feet must be engaged - this condition is essential to prevent the driver from falsifying test results as described above, using his feet and/or knees, instead of his hands. This condition is verified by "pressure sensors" that the driver must depress separately with both feet . For this reason said sensors are best located on two of the con- trol pedals: clutch, brake or gas. In this case, too, the sensor only needs to be capable of transmitting a simple depressed/non depressed signal; a7) before the test, the alcohol detecting apparatus must be "protected" in a compartment closed by a suitable cover - this condition is essential in order for the apparatus to be safe from tampering before the test. This condition is verified by a "contact sensor" associated with a "closing cover" of said housing compartment; such contact sensor is in turn capable of transmitting an open/closed signal only. The functioning of the system described above can be summarised as follows:
- the electronic data processing unit verifies that all conditions described at the points al-a6 are satisfied. A negative verification result triggers voice messages inviting the driver to repeat the blood alcohol test procedures (alternatively interlocking the vehicle) . A positive verification result prompts the central unit to order the opening of the alcohol sensor protective cover (point a7) . Upon invita-
tion, the driver must exhale deep lung alveolar air from his respiratory system into the inlet nozzle of the alcohol sensor. If the test apparatus detects normal levels of blood alcohol, it issues a consent signal, which is later processed by the electronic unit as authorisation to the starting and regular running of the vehicle. Otherwise, the vehicle will be blocked or, in the case of a blood alcohol level only just above the legal limit, starting of the engine and running of the vehicle will be allowed but with a drastic limitation of its maximum possible speed.
Thanks to the various devices and controls used by the present invention, deception attempts and/or falsification of test results will not be possible, such as:
- asking somebody other than the driver to take the blood alcohol test;
- substituting the driver during or after the blood alcohol test (that is, while driving) ;
- using improper objects (weights, pipes, aerosol bombs, rods, etc . ) ; - using substances, such as perfumes, solvents or others, to be sprayed onto the alcohol sensor, which may disrupt the alcohol test;
- drinking while driving (after the test) shall not be advantageous, as a further alcohol test may occasionally be required before the vehicle engine stops.
However, the invention is not meant to be limited to the specific structure described above, which represents only an example embodiment thereof. Other variations may also be possible, all within the range of an engineer specialised in the field without limiting its scope, as defined in the following Claims.