CN116788173A - Service type regional controller for vehicle - Google Patents
Service type regional controller for vehicle Download PDFInfo
- Publication number
- CN116788173A CN116788173A CN202210664994.1A CN202210664994A CN116788173A CN 116788173 A CN116788173 A CN 116788173A CN 202210664994 A CN202210664994 A CN 202210664994A CN 116788173 A CN116788173 A CN 116788173A
- Authority
- CN
- China
- Prior art keywords
- power
- module
- microprocessor
- regional
- service type
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000012545 processing Methods 0.000 claims abstract description 29
- 238000004891 communication Methods 0.000 claims description 31
- 230000007246 mechanism Effects 0.000 claims description 8
- 230000002093 peripheral effect Effects 0.000 claims description 6
- 238000003745 diagnosis Methods 0.000 claims description 5
- 238000007781 pre-processing Methods 0.000 claims description 5
- 238000005070 sampling Methods 0.000 claims description 5
- 230000005540 biological transmission Effects 0.000 claims description 4
- 230000002159 abnormal effect Effects 0.000 claims description 3
- 238000004364 calculation method Methods 0.000 abstract description 3
- 238000010586 diagram Methods 0.000 description 7
- 238000011161 development Methods 0.000 description 3
- 238000004519 manufacturing process Methods 0.000 description 3
- 238000000034 method Methods 0.000 description 2
- 238000012544 monitoring process Methods 0.000 description 2
- 230000006855 networking Effects 0.000 description 2
- 230000008569 process Effects 0.000 description 2
- HEZMWWAKWCSUCB-PHDIDXHHSA-N (3R,4R)-3,4-dihydroxycyclohexa-1,5-diene-1-carboxylic acid Chemical compound O[C@@H]1C=CC(C(O)=O)=C[C@H]1O HEZMWWAKWCSUCB-PHDIDXHHSA-N 0.000 description 1
- 206010063385 Intellectualisation Diseases 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000010276 construction Methods 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 238000005538 encapsulation Methods 0.000 description 1
- 230000003993 interaction Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000005192 partition Methods 0.000 description 1
- 230000001360 synchronised effect Effects 0.000 description 1
Classifications
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B60—VEHICLES IN GENERAL
- B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
- B60R16/00—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for
- B60R16/02—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements
- B60R16/023—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements for transmission of signals between vehicle parts or subsystems
- B60R16/0231—Circuits relating to the driving or the functioning of the vehicle
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B60—VEHICLES IN GENERAL
- B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
- B60R16/00—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for
- B60R16/02—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements
- B60R16/023—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements for transmission of signals between vehicle parts or subsystems
- B60R16/0238—Electrical distribution centers
Landscapes
- Engineering & Computer Science (AREA)
- Mechanical Engineering (AREA)
- Automation & Control Theory (AREA)
- Small-Scale Networks (AREA)
Abstract
The application discloses a service type regional controller for vehicles.A multi-core heterogeneous microprocessor integrating a micro control unit and a micro processing unit core is used as a core chip of the service type regional controller, a dual-core lock step micro control unit which is internally provided with functional safety requirements is used as a regional power distribution module, a safety redundancy output module and a control core of a regional gateway, and software functions with specific requirements on real-time performance and safety performance are operated; the built-in micro-processing unit is utilized to provide calculation force support for the data processing of the controllers and the sensors in the area, and a service interface is provided for the domain controllers or the central computer; and the power supply management, the network management, the power consumption management and the functional safety management are carried out on the controllers, the intelligent sensors and the intelligent executors in the area, and service interfaces are provided for the controllers outside the area through the high-speed Ethernet, so that the requirements of the software-defined automobile are met.
Description
Technical Field
The application relates to a vehicle controller, in particular to a vehicle service type regional controller used on a modern automobile.
Background
The current automobile electronic and electric architecture mainly comprises an electronic unit consisting of a plurality of scattered operation units and control units, an electric unit consisting of an engine, a servo motor, an electromagnetic valve and the like, an executing mechanism consisting of mechanisms such as a mechanical mechanism, a hydraulic mechanism, a valve mechanism and the like. As shown in fig. 1, most of automobiles generally adopt a distributed electronic and electric architecture, tens or hundreds of automobile controllers (electronic units) divide the control of functional domains of an automobile body, a chassis, power, information entertainment and the like according to the distributed electronic and electric architecture, are connected to an on-board gateway through buses such as a CAN (controller area network), a LIN (local interconnect network) and the like, and perform message routing and signal routing among the buses through the on-board gateway. The vehicle controller and the sensor and the actuator connected with the vehicle controller are independently powered, the whole vehicle is quite complex in structure and high in design and manufacturing cost. The vehicle controllers according to the technical scheme of the application refer to the vehicle controllers.
As the related functions to be realized by the automobile are more and more complex, the number of the automobile controllers is more and more, as shown in fig. 2, part of the automobile starts to integrate each functional domain, each functional domain realizes the software function in the domain by a high-performance domain controller, and is connected with a plurality of sensors and actuators through a CAN bus, and cross-domain information interaction is realized by connecting an ethernet with a high-performance ethernet gateway. Although the logic of the existing domain controller divides the whole vehicle into a plurality of functional domains according to the functions of the electronic components, and then a core processor with more excellent processing capacity is adopted to control each domain, so that the purpose of replacing the current distributed automobile electronic and electric architecture is achieved. Because each domain controller has multiple functions (such as a chassis domain controller, a power domain controller, a vehicle body domain controller, an information domain controller, an automatic driving domain controller and the like), and particularly the power domain controller has very complex functions, the domain controller has very high development difficulty, and only a part of the domain controllers can be integrated into the domain controller at present, thereby achieving the aims of partially reducing the weight of the controller and the wire harness and reducing the cost and the power consumption. The domain controllers related to the technical scheme of the application refer to the domain controllers.
Under the development trend of vehicle intellectualization and networking, a new demand is put forward on an electronic and electric architecture of an automobile through software definition of the automobile (the functions of the automobile can be configured through software), the electronic and electric architecture gradually evolves from a distributed type to a centralized type, and a concept of partition management of the automobile is formed. Under the central centralized electronic and electric architecture as shown in fig. 3, the regional controllers in the different regions such as the left front region, the left rear region, the right front region and the right rear region are connected with a central computer through a trunk ethernet, the intelligent sensors and the actuators in the regions are connected to the regional controllers through a CAN, LIN or FlexRay network, and dual-power redundant power supply and intelligent hierarchical power supply in the regions are realized. The regional controller is required to take on the role of an intra-regional network and is responsible for communication data distribution of the regional controller, the sensor and the executor, and real-Time service is provided for a central computer through a Time sensitive network TSN (Time-Sensitive Networking); the intelligent distribution box in the area is assumed, and a distributed grading distribution network mode is generally adopted, wherein a primary distribution network adopts dual-power redundant power supply to transmit power to an area controller, and a secondary distribution network is responsible for continuously transmitting the power downwards to each controller, actuator and sensor in the area by the area controller; in addition, the regional controller needs to realize the function characteristic control of the specific region, for example, the regional controller needs to have a safety output function to ensure that the functional safety target is achieved if the regional controller relates to a function with a higher functional safety level requirement. However, the existing vehicle-mounted intelligent distribution box and gateway are independent unit components, and cannot be timely detected when power distribution faults occur and redundant safety output is provided for a functional safety-related controller; meanwhile, the whole vehicle wire harness is too complex, and the complexity of the whole vehicle distribution structure, the weight of the whole vehicle and the manufacturing cost of the whole vehicle are increased easily. The area controllers related to the technical scheme of the application refer to the area controllers, and the related areas refer to the areas.
Disclosure of Invention
The application provides a vehicle service type regional controller which adopts a functional management mode combining regional power distribution management, regional gateway management and safety output management, can reduce the complexity of the whole vehicle wiring harness, reduce the whole volume and weight of the vehicle service type controller and improve the power distribution control speed efficiency and safety, and aims to solve the problems that the gateways are independent functional components and can not timely detect and provide redundant safety output for the functional safety related regional controller when power distribution faults occur in the existing vehicle service type controller, and the whole vehicle wiring harness is too complex, so that the complexity of the whole vehicle distribution structure is increased, the weight of the whole vehicle is increased, the manufacturing cost of the whole vehicle is increased and the like.
The application adopts the concrete technical scheme for solving the technical problems that: a service type area controller for a vehicle, characterized in that: the multi-core heterogeneous power supply system comprises a multi-core heterogeneous microprocessor, a power supply module, an area gateway module, an area power distribution module and a safety output module;
the multi-core heterogeneous microprocessor is internally provided with a micro control unit and a micro processing unit;
the micro control unit adopts a dual-core lock step mode and is used for processing the functional strategies of the regional power distribution module, the safety output module and the regional gateway module which have requirements on real-time performance and safety performance;
the micro-processing unit is communicated with the micro-control unit through an internal bus and a message mechanism and is used for preprocessing signals of a vehicle controller or a sensor in the area;
the power supply module is used for supplying power to the microprocessor and the peripheral devices;
the safety output module adopts an H bridge motor driving chip for driving two H bridge motors simultaneously, the H bridge motor driving chip is in communication connection with the microprocessor through an SPI bus, a motor driving PWM signal is connected with a PWM output pin of the microprocessor through a PWM1 pin, motor driving output current is output to an ADC acquisition channel of the microprocessor through a CSO1 pin, and an output current value is fed back in real time.
The vehicle service type regional controller adopts a functional management mode combining regional power distribution management, regional gateway management and safety output management, can reduce the complexity of the whole vehicle wire harness, reduce the whole volume and weight of the vehicle service type controller, and improve the speed efficiency and safety of power distribution control. The dual-core lock-step micro control unit which is internally arranged and meets the functional safety requirement is used as a control core of the regional power supply distribution module, the safety output module and the regional gateway, the safety redundancy output module effectively realizes the safety redundancy output management, and runs the software function with specific requirements on the real-time performance and the safety performance; the built-in micro-processing unit is used for providing processing support for the data processing of the controllers and the sensors in the area and providing a service interface for the domain controllers or the central computer; and carrying out power supply management, network management, power consumption management and functional safety management on the controllers, the intelligent sensors and the intelligent executors in the area, and providing a high-speed processing service interface for the controllers outside the area through a high-speed Ethernet. When the power supply of the controller or the intelligent executor in the area fails, the controller or the intelligent executor is redundantly replaced according to the functional safety requirements, so that the functional safety target is ensured to be met. The safety output management effectiveness of the service type regional controller for the vehicle is improved.
Preferably, the multi-core heterogeneous microprocessor at least comprises 3 micro control units with double-core lock steps and a security level of ASIL B or more and at least comprises 1 micro processing unit. The S32G274A chip of the NXP comprises 3 ARM Cortex-M7 dual-core lock-step micro-control units and 4 ARM Cortex-A53 core micro-processing units, and the micro-control units meet the ASIL D security level. The micro-processing management energy efficiency of the service type regional controller for the vehicle is improved.
Preferably, the power chip model that the power module adopted is VR5510 of NXP, and the built-in watchdog of power module's power chip is based on the question and answer communication monitoring microprocessor running state of time window, and microprocessor resets through reset signal control microprocessor when the operation of microprocessor is unusual. The power management efficiency of each functional module of the vehicle service type regional controller is improved.
Preferably, the power module is connected with the microprocessor through I2C communication, and the microprocessor configures the power module and feeds the window watchdog through I2C communication. When the microprocessor is reset, the power module provides safe output to control the intelligent high-side driving chip to provide continuous power supply to the outside, so that the sustainable power supply stability, reliability and effectiveness of each functional module of the automotive regional controller are improved.
Preferably, the regional power distribution module adopts an intelligent high-side driving chip with diagnosis, protection and current sampling functions to replace the traditional relay and fuse combination, and manages the power supply of controllers, intelligent actuators and intelligent sensors in the region. The diagnostic, protection and functional safety output function effectiveness of the service type regional controller for the vehicle on power supply in the region is improved.
Preferably, the microprocessor IS connected to an IS function pin of an intelligent high-side driving chip adopted by the regional power distribution module through an ADC function pin, and IS used for collecting an output current value and judging a fault state according to a specific current value. The effectiveness of the regional power distribution module on power supply current monitoring and power supply fault checking is improved.
Preferably, the regional distribution module and the safety output module adopt independent power lines, and can still provide a functional safety output function when the regional distribution power lines are abnormally connected, wherein the regional distribution power lines adopt the 1 st power line, and the safety output module adopts the 2 nd power line. The service type regional controller for the vehicle can still provide the safety output management effectiveness of the required functions when regional power distribution is abnormal.
Preferably, the regional gateway module is provided with Ethernet gateway, CAN/CANFD gateway, LIN gateway, flexRay vehicle-mounted network bus and SENT communication interface function. The network communication service connection of the vehicle service type regional controller is improved, and the safety, reliability and effectiveness are multiple-azimuth.
Preferably, the Ethernet gateway supports at least 3 paths of 1000Base-T1 and at least 4 paths of 100Base-T1 Ethernet interfaces, the CAN/CANFD gateway supports at least 16 paths of CAN/CANFD interfaces, and the transmission rate is up to 5MBits/s. The regional control transmission efficiency of the service type regional controller for the vehicle is improved.
The beneficial effects of the application are as follows: the vehicle service type regional controller adopts a functional management mode combining regional power distribution management, regional gateway management and safety output management, can reduce the complexity of the whole vehicle wire harness, reduce the whole volume and weight of the vehicle service type controller, and improve the speed efficiency and safety of power distribution control. The dual-core lock-step micro control unit which is internally arranged and meets the functional safety requirement is used as a control core of the regional power supply distribution module, the safety output module and the regional gateway, the safety redundancy output module effectively realizes the safety redundancy output management, and runs the software function with specific requirements on the real-time performance and the safety performance; the built-in micro-processing unit is used for providing processing support for the data processing of the controllers and the sensors in the area and providing a service interface for the domain controllers or the central computer; and carrying out power supply management, network management, power consumption management and functional safety management on the controller, the intelligent sensor and the intelligent actuator in the area, and configuring to provide a service interface for the controller outside the area through a high-speed Ethernet so as to further meet the requirements of the software-defined automobile.
Description of the drawings:
the application is described in further detail below with reference to the drawings and the detailed description.
FIG. 1 is a schematic diagram of a prior art distributed electronic-electrical architecture divided by domain;
FIG. 2 is a schematic diagram of a domain-centric electronic and electrical architecture of the prior art having a domain controller as a core;
FIG. 3 is a schematic diagram of a vehicular service type regional controller applied to a central centralized electrical and electronic architecture with a central computer as a core;
FIG. 4 is a schematic diagram of a service type zone controller for a vehicle according to the present application;
FIG. 5 is a schematic diagram showing a power module structure of a service type regional controller for a vehicle according to the present application;
FIG. 6 is a schematic view of a power distribution module in a service area controller for a vehicle according to the present application;
FIG. 7 is a schematic diagram of a safety output module in a service type regional controller for vehicles according to the present application;
fig. 8 is a schematic diagram of a regional gateway module in a vehicular service type regional controller according to the present application.
Detailed Description
Examples:
in the embodiments shown in fig. 4, 5, 6, 7 and 8, a service type area controller for a vehicle includes a multi-core heterogeneous microprocessor 20, a power module 10, an area gateway module 50, an area power distribution module 40 and a safety output module 40; the multi-core heterogeneous microprocessor is internally provided with a micro control unit and a micro processing unit; the micro control unit adopts a dual-core lock step mode and is used for processing functional strategy software strategies of the regional power distribution module, the safety output module and the regional gateway module which have specific requirements on real-time performance and safety performance; the micro-processing unit is communicated with the micro-control unit through an internal bus and a message mechanism, and is used for preprocessing signals of the vehicle controllers or sensors in the area and providing service interfaces for other area controllers or central computers; the power supply module is used for supplying power to the microprocessor and other peripheral devices; the safety output module adopts an H-bridge motor driving chip for driving two H-bridge motors simultaneously, the type of the H-bridge motor driving chip is TLE92104-232QX, the H-bridge motor driving chip is in communication connection with the microprocessor 20 through an SPI bus, a motor driving PWM signal is connected with a PWM output pin of the microprocessor 20 through a PWM1 pin, motor driving output current is output to an ADC acquisition channel of the microprocessor 20 through a CSO1 pin, and an output current value is fed back in real time; when the power supply of the controller or the intelligent executor in the area fails, the controller or the intelligent executor is redundantly replaced according to the functional safety requirements, so that the functional safety target is ensured to be met.
The multi-core heterogeneous microprocessor at least comprises 3 double-core lock steps and at least comprises 1 micro-processing unit, wherein the security level of the micro-control unit is more than ASIL B. The S32G274A chip like the NXP comprises 3 ARM Cortex-M7 dual-core lock-step micro-control units (see micro-control unit 1, micro-control unit 2 and micro-control unit 3 shown in figure 4) and 4 ARM Cortex-A53 core micro-processing units (see micro-processing units 1-4 shown in figure 4), wherein the micro-control units meet the ASIL D security level. The microprocessor 20 and the safety output module are provided with but not limited to an output control line, a diagnosis control line, a current sampling interface and an SPI (serial peripheral interface), and the microprocessor 20 and the regional power distribution module are provided with but not limited to the output control line, the diagnosis control line and the current sampling interface.
The power chip model that power module adopted is VR5510 of NXP, and power module's power chip embeds the watchdog, and the microprocessor running state is monitored in the question-answer communication based on time window, and microprocessor operation is abnormal time through reset signal control microprocessor reset. The power module is connected with the microprocessor through I2C communication, and the microprocessor configures the power module and feeds the window watchdog through I2C communication. The microprocessor can configure the period of the watchdog in the power module and the duty ratio of the feeding time window through I2C communication during initialization, and in the effective time window, the microprocessor reads the seed register in the power module through I2C communication and writes the calculation result into the result register of the power module according to a preset algorithm, whether the result in the calculation result register of the watchdog in the power module is correct or not, if so, the feeding is successful and a 16-bit pseudo-random number is generated to update the seed register of the power module. The "dog feeding" in the "window dog feeding" refers to that when a program is designed, the time required for counting the full number is firstly calculated according to the number of digits of the watchdog counter and the clock period of the system, namely, the watchdog counter is not full in the time, then the watchdog counter is told to restart counting in the time, namely, the counter is cleared, the process is called "dog feeding", so that the dog is fed once in a period of time, the dog is always not full as long as the program normally operates, and once faults such as dead circulation occur, the counter is cleared in time, the overflow is caused to be full, and the system is restarted, namely, the watchdog principle is that the watchdog is restarted.
The regional power distribution module adopts an intelligent high-side driving chip of the Infrax BTS70012-1ESP with diagnosis, protection and current sampling functions to replace the traditional relay and fuse combination, and manages the power supply of controllers, intelligent actuators and intelligent sensors in the region. Microprocessor 20 IS connected to the IS function pin of the intelligent high-side driver chip employed by the area distribution module through the ADC function pin for collecting the output current value and judging the fault state according to the specific current value.
The regional distribution Power line adopts independent Power lines, still can provide the function safety output function when regional distribution Power line connects abnormally with safe output module, and wherein regional distribution Power line adopts 1 st Power line Power1, and safe output module adopts 2 nd Power line Power2 (see FIG. 4). The regional gateway module is provided with interface functions such as an Ethernet gateway, a CAN/CANFD gateway, a LIN gateway, a FlexRay vehicle-mounted network bus, SENT communication and the like. The Ethernet gateway supports at least 3 paths of 1000Base-T1 and at least 4 paths of 100Base-T1 Ethernet interfaces, the CAN/CANFD gateway supports at least 16 paths of CAN/CANFD interfaces, and the transmission rate is up to 5MBits/s.
As shown in fig. 4, the present application provides a service type zone controller for responsible for hierarchical distribution of controllers, actuators and sensors in a zone, data distribution and functional characteristics implementation of a specific zone of a vehicle, which mainly includes: power module 10, microprocessor 20, regional power distribution module 30, safety output module 40, and regional gateway module 50.
The power module 10 adopts a NXP VR5510 power management chip to process an input power supply and supply power to the microprocessor 20 and peripheral chips; meanwhile, a window watchdog 11 based on a time window question and answer is arranged in the microprocessor to monitor the running state of the microprocessor.
The microprocessor module 20 adopts a NXP S32G274A multi-core heterogeneous chip, and three ARM Cortex-M7 cores with double cores locked in steps meeting the ASIL D function security level are arranged in the ARM Cortex-M7 cores and are used for running regional power distribution, safety output and regional gateway function software; four ARM Cortex-A53 kernels are arranged in the system and used for processing functional software with low real-time requirements and larger operand requirements.
The regional power distribution module 30 is used for managing power supply of controllers, actuators and sensors in the regional, and each power supply interface can set an overcurrent value according to load conditions, including power supply safety in the power distribution region.
The safety output module 40 executes a safety strategy according to the functional safety requirement when the controller and the internal modules of the microprocessor 20 in the area fail, provides a backup output function, and ensures that the functional safety target in the area is achieved.
The regional gateway module 50 is responsible for data distribution of controllers, actuators and sensors in the region and comprises a CAN, a LIN, an Ethernet, a FlexRay vehicle-mounted network, a SENT and other interfaces; and simultaneously, a 1000Base-T1 interface is provided for connecting other regional controllers and a central computer, and a service interface of the region is provided for the regional controllers and the central computer.
Based on the above description, the application discloses a service type regional controller for a vehicle, which is used for carrying out regional management on the vehicle under a central centralized electronic and electric architecture, plays roles of a gateway, a switch and an intelligent distribution box in a regional division, provides data distribution and distribution management, and realizes the functional characteristics of a specific region of the vehicle. The vehicle service type regional controller performs service encapsulation on the functions of the controller and the executor in the region and provides a service interface for the central computer; and pre-processing the sensor data in the area and providing the sensor data to the central computer through the service interface. Meanwhile, the vehicle service type regional controller is also responsible for remote upgrading of the regional controller, flexible configuration of functions in the region is realized, and requirements of personalized configuration and continuous upgrading of functions of the vehicle are met. The specific implementation of each module is described in detail below.
The power module 10 filters the 12V dc power input from the previous stage of power distribution and inputs the filtered power to the VR5510 power management chip, as shown in fig. 5, where the chip first performs DCDC preprocessing on the 12V input power to reduce the voltage to 3.3V power VPRE; the power management chip is internally provided with three BUCK modules BUCK1, BUCK2 and BUCK3, VPRE is used as an input power supply, the BUCK1 and the BUCK2 are connected in parallel to output 0.8V voltage for supplying power to the inner core of the microprocessor 20, and the BUCK3 outputs 1.1V for supplying power to an LPDDR (Low Power Double Data Rate SDRAM low power consumption double rate synchronous dynamic random access memory) chip at the periphery of the microprocessor 20.
The power management chip is internally provided with three LDO (Low Dropout regulator low dropout linear regulator) modules LDO1, LDO2 and LDO3, VPRE is taken as an input power supply, the output 1.8V of the LDO1 is used for supplying power to the processor 20, the output 1.8V of the LDO2 is used for supplying power to an LPDDR chip on the periphery of the microprocessor 20, and the output 3.3V of the LDO3 is used for supplying power to a peripheral chip IO of the microprocessor 20.
The power management chip is internally provided with a boost module VBOOST, takes VPWR as an input power supply, and outputs 5V for supplying power to the chip at the periphery of the microprocessor 20; the power management chip is internally provided with a high-voltage low-dropout linear regulator (HVLDO), takes VPRE as an input power supply, and outputs 0.8V voltage after being processed by the HVLDO for supplying power to the microprocessor 20 core in a standby mode.
The power module management chip is internally provided with a window watchdog 11 based on a time window question and answer, the microprocessor 20 is connected with the power module management chip through an I2C bus interface (see figure 4), the microprocessor 20 sends seed data to the power module 10 management chip in a set time window, and then calculates a result according to a specified algorithm and sends the result to the power module management chip; the Power module management chip counts errors of the window watchdog 11, when the error value reaches a set maximum value, a RESET signal RESET and a safety output signal Power Supply are output according to a set strategy, the RESET signal RESET RESETs the microprocessor 20 to enable the microprocessor 20 to restore normal operation, and the safety output signal Power Supply is used for enabling each functional module to output a safe state during RESET of the microprocessor 20, for example, the Power distribution module of a driving area continues to Supply Power to a controller in the area.
The regional power distribution module 30 uses an intelligent high-side drive chip U1 with the model of BTS70012-1ESP to control the power supply of controllers, actuators and sensors in the region. As shown IN fig. 6, the VS pin of the intelligent high-side driving chip is connected to the Power supply 1Power1 of the upper stage distribution input, and the microprocessor 20 is connected to the IN pin of the intelligent high-side driving chip through a GPIO for controlling the output of the Power supply; in addition, the microprocessor 20 is connected to the DEN pin of the intelligent high-side driving chip through GPIO for controlling the diagnostic function of the chip; the microprocessor 20 IS connected to the IS pin of the intelligent high-side driving chip through an ADC, and IS used for collecting the output current value and judging the fault state according to the specific current value.
The safety output module 40 mainly includes a high-side drive, a low-side drive, an H-bridge motor drive, a three-phase brushless dc motor BLDC drive, and the like, and is configured according to specific functional requirements of a specific region. As shown in FIG. 7, the H-bridge motor M is driven by an Infrax TLE92104-232QX pre-driving chip U5, and can drive two H-bridges; the chip is communicated with the microprocessor 20 through an SPI bus, a motor driving PWM signal is connected with a PWM output pin of the microprocessor 20 through a PWM1 pin, motor driving output current is output to an ADC acquisition channel of the microprocessor 20 through a CSO1 pin, and an output current value is fed back in real time.
The regional gateway module 50 supports the functions of CAN, CANFD, flexRay vehicle-mounted network, LIN, SENT communication, message routing and signal routing among various networks of the vehicle-mounted Ethernet, and the like, wherein the vehicle-mounted Ethernet supports various physical layer modes of IEEE100Base-T1 and IEEE1000Base-T, and meets the communication requirements of controllers, actuators and sensors in the region. As shown in fig. 8, the microprocessor 20 has an LLCE (Low Latency Communication Engine low-latency communication engine) built in to route the CAN/CANFD, LIN, flexRay communication in the area according to the set routing table, and the most routing operation is completed by transferring the micro control unit inside the microprocessor 20 to the LLCE inside, without retransmitting the message to the micro control unit; however, for a message that needs to be received and processed by the signal routing or micro-control unit, the LLCE will transmit the message to the micro-control unit for processing according to the routing table configuration.
The microprocessor 20 built-in PFE (Packet Forwarding Engine) module supports three MII (Media Independent Interface media independent interface), RMII (Reduced Media Independent Interface simplified media independent interface), RGMII (Reduced Gigabit Media Independent Interface simplified gigabit media independent interface), SGMII (Serial Gigabit Media Independent Interface serial gigabit media independent interface) selectable ethernet interfaces pfe_mac0, pfe_mac1, pfe_mac2, and built-in switching functions that meet AVB (Audio Video Bridging ethernet audio video bridging) and TSN (Time Sensitive Network time sensitive network) requirements. FIG. 8 is an example of a vehicle-mounted Ethernet implementation in regional gateway module 50, employing PFE_MAC0 configuration as Port7 connection of the external Marvel88Q 5050 switch chip for SGMII mode connection, while configuring the switch chip through SMI (Serial Management Interface serial management interface) interface; PFE_MAC1 and PFE_MAC2 are configured as RGMII interfaces and are connected with an external Marvel88Q2110 Ethernet transceiver to realize IEEE1000Base-T communication. The 88Q5050 of the Marvel is an 8-port exchange chip, the port7 is an SGMII interface used for connecting the microprocessor 20, the port 5 and the port 8 are configured as RGMII interfaces, and the RGMII interfaces are connected with an external Marvel88Q2110 Ethernet transceiver to realize IEEE1000Base-T communication; port 1 to port 4 are built with IEEE100Base-T1 transceiver, providing 4 paths of IEEE100Base-T1 communication interfaces; port 6 houses an IEEE100Base-Tx transceiver for external diagnostic communications. In summary, a 4-way IEEE1000Base-T communication interface, a 4-way IEEE100Base-T1 communication interface, and a 1-way IEEE100Base-Tx communication interface are provided in this example.
The application provides a service type regional controller for a vehicle, which is characterized in that the related parts of the claims are further described in detail by combining with the attached drawings, the specific circuit connection is shown in the circuit structures of fig. 4, 5, 6, 7 and 8, and the development description of each circuit connection is not performed. It should be noted that the described implementation examples are only a part of implementation details related to the solution of the present application, and are not a complete technical implementation.
The foregoing and construction describes the basic principles, principal features and advantages of the present application product, as will be appreciated by those skilled in the art. The foregoing examples and description are provided to illustrate the principles of the application and to provide various changes and modifications without departing from the spirit and scope of the application as defined by the appended claims. The scope of the application is defined by the appended claims and equivalents thereof.
Claims (9)
1. A service type area controller for a vehicle, characterized in that: the multi-core heterogeneous power supply system comprises a multi-core heterogeneous microprocessor, a power supply module, an area gateway module, an area power distribution module and a safety output module;
the multi-core heterogeneous microprocessor is internally provided with a micro control unit and a micro processing unit;
the micro control unit adopts a dual-core lock step mode and is used for processing the functional strategies of the regional power distribution module, the safety output module and the regional gateway module which have requirements on real-time performance and safety performance;
the micro-processing unit is communicated with the micro-control unit through an internal bus and a message mechanism and is used for preprocessing signals of a vehicle controller or a sensor in the area;
the power supply module is used for supplying power to the microprocessor and the peripheral devices;
the safety output module adopts an H bridge motor driving chip for driving two H bridge motors simultaneously, the H bridge motor driving chip is in communication connection with the microprocessor through an SPI bus, a motor driving PWM signal is connected with a PWM output pin of the microprocessor through a PWM1 pin, motor driving output current is output to an ADC acquisition channel of the microprocessor through a CSO1 pin, and an output current value is fed back in real time.
2. The service type zone controller for vehicles according to claim 1, wherein: the microprocessor at least comprises 3 micro control units with double-core lock steps and a safety level of ASIL B or more, and at least comprises 1 micro processing unit.
3. The service type zone controller for vehicles according to claim 1, wherein: the power chip type that power module adopted is VR5510 of NXP, and power module's power chip embeds the watchdog, and the microprocessor running state is monitored in the question-answer communication based on time window, and microprocessor operation is abnormal time through reset signal control microprocessor reset.
4. The service type zone controller for vehicles according to claim 1, wherein: the power module is connected with the microprocessor through I2C communication, and the microprocessor configures the power module and feeds the window watchdog through I2C communication.
5. The service type zone controller for vehicles according to claim 1, wherein: the regional power distribution module adopts an intelligent high-side driving chip with diagnosis, protection and current sampling functions to replace the traditional relay and fuse combination, and manages the power supply of controllers, intelligent actuators and intelligent sensors in the regional.
6. The service type zone controller for vehicles according to claim 1, wherein: the microprocessor IS connected to an IS function pin of an intelligent high-side driving chip adopted by the regional power distribution module through an ADC function pin and IS used for collecting output current values and judging fault states according to specific current values.
7. The service type zone controller for vehicles according to claim 1, wherein: the regional distribution module and the safety output module adopt independent power lines respectively, and can still provide a functional safety output function when the regional distribution power lines are connected abnormally, wherein the regional distribution power lines adopt the 1 st power line, and the safety output module adopts the 2 nd power line.
8. The service type zone controller for vehicles according to claim 1, wherein: the regional gateway module is provided with Ethernet gateway, CAN/CANFD gateway, LIN gateway, flexRay vehicle-mounted network bus and SENT communication interface function.
9. The service type area controller for vehicle according to claim 8, wherein: the Ethernet gateway at least supports 3 paths of 1000Base-T1 and at least 4 paths of 100Base-T1 Ethernet interfaces, the CAN/CANFD gateway at least supports 16 paths of CAN/CANFD interfaces, and the transmission rate is up to 5MBits/s.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210664994.1A CN116788173A (en) | 2022-06-13 | 2022-06-13 | Service type regional controller for vehicle |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210664994.1A CN116788173A (en) | 2022-06-13 | 2022-06-13 | Service type regional controller for vehicle |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN116788173A true CN116788173A (en) | 2023-09-22 |
Family
ID=88038590
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202210664994.1A Pending CN116788173A (en) | 2022-06-13 | 2022-06-13 | Service type regional controller for vehicle |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN116788173A (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115743001A (en) * | 2022-11-29 | 2023-03-07 | 重庆长安汽车股份有限公司 | Vehicle control method, device, electronic apparatus, storage medium, and program product |
| CN117369348A (en) * | 2023-12-07 | 2024-01-09 | 中国汽车技术研究中心有限公司 | Central domain controller based on security domain and computing domain |
-
2022
- 2022-06-13 CN CN202210664994.1A patent/CN116788173A/en active Pending
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115743001A (en) * | 2022-11-29 | 2023-03-07 | 重庆长安汽车股份有限公司 | Vehicle control method, device, electronic apparatus, storage medium, and program product |
| CN115743001B (en) * | 2022-11-29 | 2024-05-28 | 重庆长安汽车股份有限公司 | Vehicle control method, device, electronic apparatus, storage medium, and program product |
| CN117369348A (en) * | 2023-12-07 | 2024-01-09 | 中国汽车技术研究中心有限公司 | Central domain controller based on security domain and computing domain |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN116788173A (en) | Service type regional controller for vehicle | |
| US8930036B2 (en) | Reconfigurable interface-based electrical architecture | |
| CN109849686B (en) | Trusted network control chassis system and control method of electric automobile | |
| EP3407566A1 (en) | Automobile electrical system and isolation system for automobile electrical system | |
| CN207725389U (en) | A kind of electronic parking control system with redundancy parking function | |
| CN106740585A (en) | CAN Bus in Electric entire car controller | |
| CN101123561A (en) | Intelligent car body network system | |
| CN206664500U (en) | A kind of whole pure electric vehicle complex control system | |
| CN102658801A (en) | Controller area network (CAN) system network management method for new energy vehicle | |
| CN104718532A (en) | Interface for interchanging data between redundant programs for controlling a motor vehicle | |
| CN112327799B (en) | Train network controller and system | |
| CN205787747U (en) | There is functional safety protection and the entire car controller of integrated gateway | |
| CN114435279A (en) | Vehicle area controller, vehicle control system and vehicle | |
| CN109787892A (en) | General hybrid vehicle gateway controller | |
| CN101634853A (en) | Bus-type automobile body control system and method | |
| JP2007220050A (en) | Fault-tolerant node architecture for distributed system | |
| CN117002461A (en) | Brake control system and brake control method for single-side EPB redundancy | |
| CN117284258A (en) | Brake control system and brake control method with complete EPB redundancy | |
| JP2023531044A (en) | Vehicle Controllers, Vehicle Integrated/Integrated Units, and Vehicles | |
| CN110221536A (en) | A kind of Car's door controlling device | |
| CN116165875A (en) | Cold backup control system and method for vehicle chassis controller | |
| CN115384528A (en) | Centralized chassis domain control architecture and method | |
| CN112147928B (en) | Dual-CAN-bus multi-redundancy hot backup flight control computer system and method | |
| CN116039540A (en) | Whole vehicle electric control system of new energy commercial vehicle of platformization | |
| CN115848298B (en) | Regional gateway based on multiple cores, power control system and power control method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |