2. Occupant restraint coupling

An occupant restraint system is not designed against a single crash pulse; it is tuned against a family of pulses. The airbag, seatbelt, pretensioner, and load limiter form a coupled system whose performance depends on the timing, amplitude, and shape of the vehicle deceleration pulse. A change of a few milliseconds in airbag deployment timing or a few kilonewtons in belt load limit can shift HIC and chest deflection significantly. This chapter explains the physical coupling between pulse characteristics and restraint response, and shows how to reason about that coupling quantitatively.

Pulse Characteristics That Matter to Restraints

Four pulse parameters dominate restraint design: pulse onset time, peak deceleration, pulse duration, and pulse shape (front-loaded vs. rear-loaded). The restraint control module (RCM) uses acceleration signals from a frontal accelerometer, typically mounted on the vehicle tunnel or radiator support, to decide whether and when to fire the airbag and pretensioner. The RCM applies a crash severity algorithm with a velocity change threshold and a time-window criterion. If the pulse rises quickly, the RCM reaches its firing threshold earlier; if the pulse is slow-rising, firing is delayed.

The occupant, however, does not decelerate with the vehicle. The occupant continues forward at the pre-crash velocity until the belt and airbag apply force. The relative displacement between occupant and vehicle interior is the "ride-down" distance. A well-matched restraint system allows the occupant to ride down the vehicle deceleration over the longest possible distance without exceeding injury thresholds. The pulse determines how much ride-down distance is available and how quickly the restraint must act.

Airbag Deployment Timing

Airbag deployment timing is defined by the time from impact (T0) to the moment the airbag reaches full inflation, and by the time to first occupant contact. The critical requirement is that the airbag must be fully inflated before the occupant's head reaches the airbag surface. If the airbag is still deploying when the head arrives, the inflating bag can strike the occupant with high velocity, a condition known as "aggressive deployment" or "out-of-position" loading.

Consider a representative 56 km/h frontal barrier pulse. The vehicle decelerates from 56 km/h to zero in approximately 90–110 ms. The occupant's head, restrained by a three-point belt with a pretensioner, begins to move forward after roughly 15–25 ms of belt slack take-up. The airbag must therefore reach full inflation within about 30–40 ms after T0. Typical driver airbag inflator rise times are 25–35 ms at 23 °C, but this varies with temperature: at −35 °C the inflator is slower, and at +85 °C it is faster. The RCM must compensate by adjusting firing time based on measured temperature and crash severity.

Seatbelt Load Limiting

The seatbelt load limiter controls the force transmitted from the belt to the occupant's chest. A fixed load limiter uses a torsion bar or tear stitch that yields at a predetermined force, typically 3–5 kN for a front-row occupant. A variable load limiter can switch between two force levels, for example 2.5 kN for a small occupant and 4.5 kN for a large occupant, based on belt payout or occupant classification.

The load limiter interacts directly with the pulse. A high-severity, front-loaded pulse produces a large velocity change early, requiring higher belt force to keep the occupant in the seat. If the load limit is too low, the occupant moves forward excessively, increasing the risk of contact with the steering wheel or instrument panel. If the load limit is too high, chest deflection and chest acceleration increase, raising injury risk. The optimal load limit is therefore pulse-dependent.

Pretensioners also couple to the pulse. A pyrotechnic pretensioner fires within 5–10 ms of the RCM decision, removing belt slack (typically 50–80 mm) before the occupant loads the belt. A retractor pretensioner and a buckle pretensioner may fire together or in sequence. The timing of pretensioner firing relative to the airbag firing is calibrated so that belt slack is removed before the airbag is needed to cushion the head.

Injury Metrics: HIC and Chest Deflection

Head Injury Criterion (HIC) is defined as:

HIC = max over t1,t2 of [ (1/(t2-t1)) * ∫ a(t) dt ]^2.5 * (t2-t1)
where a(t) is the resultant head acceleration in g, and t2-t1 ≤ 36 ms (HIC36) or ≤ 15 ms (HIC15).

HIC is sensitive to both the peak head acceleration and the duration of the acceleration. A short, high-amplitude acceleration can produce the same HIC as a longer, lower-amplitude acceleration. The airbag reduces HIC by spreading the head deceleration over a longer time and by reducing the peak acceleration. If the airbag is late, the head contacts the steering wheel or A-pillar, producing a short, high-amplitude acceleration and a high HIC.

Chest deflection is measured as the maximum sternal deflection relative to the spine, typically in millimeters. The chest deflection criterion (e.g., 63 mm for a 50th percentile male in FMVSS 208) is directly controlled by belt force and belt geometry. A load limiter that is too stiff produces high chest deflection; a load limiter that is too soft allows excessive forward excursion and possible contact with the interior. The pulse shape determines how much chest deflection is unavoidable: a front-loaded pulse with a high peak deceleration requires more belt force to keep the occupant in the seat, which increases chest deflection unless the airbag shares more of the load.

Coupling Example: Pulse Shape Change

Suppose a vehicle is modified from a front-loaded pulse (peak at 40 ms, 45 g) to a rear-loaded pulse (peak at 70 ms, 35 g) by adding a crushable front structure. The total velocity change is the same (56 km/h). The rear-loaded pulse gives the RCM more time to decide, so the airbag fires later. The occupant's forward motion begins later, and the airbag has more time to inflate. However, the rear-loaded pulse also means the vehicle decelerates more slowly at first, so the occupant's relative velocity at the time of belt loading is lower. This reduces the required belt force and allows a lower load limit, which reduces chest deflection. The trade-off is that the rear-loaded pulse may increase occupant excursion later in the event, requiring careful tuning of the airbag venting and the load limiter switching point.

Practical Tuning Workflow

Tuning the restraint system to the pulse is an iterative process. A typical workflow proceeds as follows:

1. Characterize the pulse. Run a full-vehicle frontal barrier simulation or sled test at the target severity (e.g., 56 km/h, 40% offset, or 25 km/h rigid pole). Record the vehicle deceleration at the RCM accelerometer location. Extract the pulse onset, peak, duration, and shape.
2. Set the RCM firing threshold. Using the pulse, determine the time at which the RCM velocity change reaches the firing threshold. This is the airbag fire time (Tf). Verify that Tf plus the inflator rise time is less than the time to head contact.
3. Select the load limiter. Using the occupant mass and the pulse severity, calculate the required belt force to keep the occupant's forward excursion within the available ride-down distance. Start with a fixed load limit and then evaluate a variable limit if the occupant size range is wide.
4. Run occupant simulation. Use a validated MADYMO or LS-DYNA occupant model with the pulse as input. Extract HIC15, HIC36, chest deflection, chest acceleration (3 ms clip), and femur loads.
5. Iterate. Adjust airbag vent size, inflator output, load limiter force, and pretensioner timing until all injury metrics are below the target thresholds with margin. Document the final calibration.

Common Failure Modes and Troubleshooting

Three failure modes are common when the pulse-restraint coupling is not properly tuned. First, late airbag deployment: the head contacts the airbag while it is still inflating, producing a high HIC and possible neck injury. Symptom: HIC15 above 700 in simulation with a head contact time earlier than the full-inflation time. Remedy: advance the RCM firing threshold or increase inflator output. Second, excessive chest deflection: the load limiter is too stiff for the pulse severity. Symptom: chest deflection above 50 mm in simulation with a belt force above 4.5 kN. Remedy: reduce the load limit or increase airbag sharing of the upper torso load. Third, occupant excursion: the load limiter is too soft, allowing the occupant to move forward into the interior. Symptom: head or chest contact with the steering wheel or instrument panel. Remedy: increase the load limit or add a second-stage load limiter that engages after a defined belt payout.

The key insight is that the pulse is not a fixed input to be accepted; it is a design variable that can be shaped by the vehicle structure. A front-loaded pulse demands a more aggressive restraint system, while a rear-loaded pulse allows a gentler restraint system. The best results come from co-tuning the structure and the restraint system, not from optimizing either in isolation.