2. Airbag system architecture and deployment physics

An airbag is not a single device but a distributed restraint subsystem. Understanding why it deploys out of position — and how to reason about the resulting injury risk — requires a working model of its architecture and of the physics that govern the deployment event. This chapter builds that model from the component level upward: the inflator as a gas generator, the module as a mechanical and structural assembly, the sensor set as the event-detection layer, and the deployment timeline as the sequence that connects detection to a fully pressurized cushion in tens of milliseconds.

Inflators: The Gas-Generation Core

The inflator is a pyrotechnic or hybrid gas generator. In a driver-side module it is typically a compact cylindrical steel or aluminum vessel mounted at the center of the steering wheel; passenger-side inflators are larger and often housed in a canister behind the instrument panel. Three families dominate:

• Pyrotechnic inflators burn a solid propellant (commonly sodium azide in legacy designs, now largely replaced by non-azide formulations such as guanidine nitrate blends) to produce gas directly. They are simple and fast but produce hot, particulate-laden gas that must pass through a filter and cooling screen.
• Hybrid inflators combine a small pyrotechnic charge with a stored compressed gas (argon or helium mixture). The burning charge heats and releases the stored gas, giving a cooler, cleaner output with a more controllable pressure curve.
• Stored-gas inflators rely primarily on a pressurized vessel with a fast-acting rupture disc or pyrotechnic valve; they are used where very rapid, cool inflation is required.

The inflator's output is characterized by its mass flow rate and gas temperature, which together determine how quickly the cushion fills. A representative driver inflator might deliver on the order of 100–150 g of gas in roughly 30–40 ms, with peak internal cushion pressure in the 200–400 kPa range during the fill phase. These are illustrative values for reasoning about timing, not specifications for any particular vehicle.

Modules: Structure, Tear Seams, and the Cushion

The module packages the inflator, the folded cushion, and the housing that anchors them to the vehicle. Two features matter most for out-of-position analysis. First, the tear seam — a molded thinned section in the cover — is designed to split along a defined path when internal pressure rises. The seam's geometry determines the direction and speed of cover flap opening, and a flap opening toward an occupant is itself a strike hazard. Second, the fold pattern of the cushion controls the trajectory of the emerging fabric: a cushion that unfolds upward and outward toward the occupant's chest behaves very differently from one that first expands laterally.

The module housing is bolted to a structural member — the steering wheel armature, the cross-car beam, or a dedicated bracket. Mounting stiffness matters: a compliant mount lets the module recoil, altering the cushion's trajectory relative to a fixed reference frame. In out-of-position scenarios, the occupant's body may be within the module's deployment envelope, so the cushion contacts the occupant before it is fully inflated, and the interaction is governed by the cushion's unfolding geometry rather than by its final inflated shape.

Sensors and the Event-Detection Layer

Deployment decisions are made by the airbag control unit (ACU), which fuses signals from several sensor types:

The ACU applies a crash discrimination algorithm to the accelerometer signal: it integrates deceleration to estimate velocity change (Δv) and compares the result against calibrated thresholds that vary with crash severity and, in some systems, with occupant state. A frontal algorithm might require a Δv of roughly 15–25 km/h within a defined window before commanding deployment; below that, the belt and seat structure are expected to manage the occupant. The algorithm must also reject non-deployment events — rough roads, hammer blows, door slams — which is why discrimination uses signal shape and duration, not magnitude alone.

The Deployment Timeline

The timeline is the heart of out-of-position physics. Consider a frontal event at 50 km/h against a rigid barrier. The vehicle's deceleration pulse begins at t = 0. The ACU must decide within roughly 10–20 ms; the squib fires; the inflator begins generating gas; the cushion emerges from the module and reaches the occupant. The full sequence from impact to a pressurized cushion typically completes in 30–50 ms for a driver frontal airbag.

Two features of this timeline drive out-of-position injury mechanics. First, the cushion is still inflating when it reaches the occupant in a close-proximity scenario: the occupant is struck by fabric moving at high velocity, and the cushion's internal pressure is still rising. Second, the occupant's body is not yet decelerated by the belt, so the relative velocity between cushion and occupant is at its maximum. The result is a concentrated load on a small contact area — the classic mechanism of airbag-induced injury to the face, neck, and chest in out-of-position occupants.

Reading the Architecture as a System

The components are not independent. The inflator's output curve sets the cushion's fill rate; the module's tear seam and fold pattern set the cushion's trajectory; the sensor set and algorithm set the time-to-fire; and the occupant's position relative to the module sets whether the cushion meets the occupant during the fill phase or after it. A change in any one element shifts the others. This is why out-of-position assessment cannot be reduced to a single "safe distance" figure: the relevant quantity is the occupant's position as a function of time relative to the cushion's expanding surface, and that relationship is specific to the module, the inflator, and the crash pulse.

With this architecture in hand, the next analytical step is to quantify how occupant position, cushion expansion, and contact velocity interact — the subject of the chapters that follow.