2. Restraint system architecture

A modern automotive restraint system is not a collection of independent safety devices; it is a coordinated, event-driven architecture in which every component has a defined role, a defined trigger condition, and a defined interaction with the others. Understanding this architecture is a prerequisite for launch readiness management, because a defect in any single element — a misrouted harness, an incorrectly calibrated occupant classification sensor (OCS), or a pretensioner that fires outside its timing window — can degrade the entire system's performance in a crash event.

System-Level Architecture and the Sensing-to-Actuation Chain

The restraint system operates as a closed-loop chain: crash sensing → decision logic → actuator deployment → occupant interaction. The Airbag Control Unit (ACU), sometimes called the SDM (Sensing and Diagnostic Module), sits at the center. It receives acceleration signals from front and side satellite sensors, processes them through a crash discrimination algorithm, and issues firing commands to squibs in airbag modules and pretensioners. The Occupant Classification Sensor provides occupant state information — occupant presence, size classification, and seat position — that modifies or suppresses deployment decisions.

The key architectural principle is distributed sensing with centralized decision-making. Satellite sensors are mounted at the crush zones (front bumper area, B-pillar, door modules), while the ACU is typically located on the vehicle's center tunnel. This separation means harness routing, connector integrity, and signal latency become launch-critical characteristics.

Restraint System Signal and Actuation Architecture Sensing Layer Front Satellite Sensors Side Impact Sensors Rollover / Gyro Sensor Seat Belt Buckle Switch Airbag Control Unit Crash Discrimination Deployment Decision Logic Fault Detection & Logging Occupant Classification Sensor Bladder / Capacitive Mat Weight → Classification → Suppression Actuation Layer Driver / Passenger Frontal Airbag Side Airbag / Curtain Airbag Seat Belt Pretensioner Load Limiter (Force Limiter) Accel / Pressure Occupant State Firing Commands Mechanical Coupling: Seat Belt System Retractor → Pretensioner (pyrotechnic or motor) → Load Limiter (torsion bar / wire) → Webbing → Buckle Force path: Pretensioner removes slack → Load limiter caps belt force at threshold → Controlled occupant ride-down Signal Path Legend Sensor input (analog / digital bus) Occupant classification data Actuation / firing command Note: OCS may suppress passenger frontal airbag deployment when occupant is classified as child seat or empty.

Airbag Modules: Frontal, Side, and Curtain

Frontal airbags are designed to manage the occupant's forward excursion during a full-frontal or offset frontal impact. The driver airbag is housed in the steering wheel hub; the passenger airbag deploys from the instrument panel. Both use a pyrotechnic inflator — typically a hybrid inflator combining compressed gas with a solid propellant — that fills the cushion in approximately 30–50 ms. The cushion then vents through calibrated fabric porosity or active venting to absorb energy as the occupant loads it.

Side airbags are mounted in the seat backrest or door module and deploy in lateral impacts. Curtain airbags deploy from the roof rail to protect the head and prevent ejection. The architectural distinction matters for launch readiness: side and curtain airbags require side satellite sensors with much shorter decision windows (typically 5–15 ms), and their deployment must be coordinated with seat position and occupant size.

Seat Belt System: Pretensioners and Load Limiters

The seat belt remains the primary restraint. Its architecture includes three functional elements that work in sequence:

  • Retractor and webbing: The retractor spools the belt and provides comfort-level tension through a torsion spring. The webbing is engineered with specific elongation characteristics.
  • Pretensioner: On receiving a firing command, the pretensioner removes slack from the belt system — typically 50–150 mm of webbing — within 10–20 ms. This couples the occupant to the restraint earlier in the crash pulse. Pretensioners may be pyrotechnic (ball-in-tube or rack-and-piston) or motor-driven (reversible, used for pre-crash positioning).
  • Load limiter: After pretensioning, the load limiter caps the maximum force transmitted through the belt to the occupant. This is achieved through a torsion bar in the retractor that twists at a calibrated force, or through a wire-bending element. A typical load limiter threshold is 3–5 kN, though this varies by vehicle and occupant classification.

The interaction between pretensioner and load limiter defines the occupant's ride-down. If the pretensioner fires too late, the occupant has already moved forward and the load limiter may not engage in time. If the load limiter threshold is too high, the occupant experiences excessive chest deflection; too low, and the occupant may contact the steering wheel or instrument panel. This is why the restraint system is validated as an integrated whole, not as individual components.

Occupant Classification Sensor (OCS)

The OCS determines whether the passenger seat is occupied, and if so, classifies the occupant into categories such as adult, child, or child restraint (CRS). This classification directly modifies the passenger frontal airbag deployment: for an empty seat or a rear-facing child seat, the airbag is suppressed; for a small occupant, the airbag may deploy at reduced output.

Two common OCS technologies are:

Technology Principle Typical Output Launch Consideration
Bladder-based (pressure) Fluid-filled bladder under seat cushion measures pressure distribution Analog pressure signal → weight estimate Temperature and altitude sensitivity; requires seat build variation control
Capacitive mat Electric field change detects occupant presence and body coupling Capacitance → classification state Humidity and seat foam dielectric properties affect calibration

For launch readiness, the OCS is one of the highest-risk items because its performance depends on seat assembly tolerances, foam compression set, and environmental conditions. A common failure mode is "OCS not calibrated" or "OCS drift" after seat installation, which triggers a telltale and disables passenger airbag deployment. The diagnostic trouble code (DTC) typically sets when the measured classification is outside the expected range for a known load.

Integration and Launch-Critical Interfaces

The restraint system's launch readiness depends on several cross-component interfaces:

  • Harness and connector integrity: Squib circuits are monitored for resistance. A resistance outside the window (typically 1.7–2.5 Ω) sets a DTC and may disable deployment. Connector position assurance (CPA) and terminal crimp quality are critical.
  • Sensor mounting and orientation: Satellite sensors have a defined positive axis. A sensor rotated 180° during assembly will invert the crash signal and may cause non-deployment or late deployment.
  • OCS seat build: The OCS mat or bladder must be installed without folds, wrinkles, or pinches. Seat foam density and trim thickness must match the calibration dataset.
  • Software calibration: The ACU calibration includes deployment thresholds, pretensioner timing, and OCS classification boundaries. These are vehicle-specific and must be verified against the correct part number and calibration ID.
Launch Readiness Checkpoint: Before sign-off, verify that every restraint ECU reports the correct calibration ID, that all squib loop resistances are within specification, that OCS classification matches the reference load at three test points (empty, child seat, adult), and that no restraint-related DTCs are stored or pending.

Practical Verification Example

Consider a passenger car at the end of assembly line. The technician connects the diagnostic tool and reads the ACU. The following observations are made:

ACU Part Number: 89170-XXXXX
Calibration ID: 89170-XXXXX-A2
Squib Loop Resistances:
  Driver Frontal: 2.1 Ω  (spec: 1.7–2.5 Ω)  PASS
  Passenger Frontal: 2.3 Ω  (spec: 1.7–2.5 Ω)  PASS
  Driver Pretensioner: 2.0 Ω  (spec: 1.7–2.5 Ω)  PASS
  Passenger Pretensioner: 2.4 Ω  (spec: 1.7–2.5 Ω)  PASS
OCS Status: Adult Classified
DTCs: None

If the passenger frontal squib reads 3.8 Ω, the circuit is open or has high resistance. The technician should inspect the connector at the passenger airbag module, check for terminal push-out or corrosion, and verify harness routing. If the OCS reports "Not Calibrated" after a seat replacement, the seat must be re-zeroed using the specified procedure — typically with the seat empty and the ignition on for a defined period — and the classification re-verified with a known weight.

These checks are not merely diagnostic formalities. They are the final confirmation that the restraint architecture — sensing, decision, actuation, and occupant classification — is intact and will perform as designed in a crash event.

← Previous 📖 Contents Next →