CN104842903B - A kind of electric automobile electric-control system, electric automobile and failure information delivery method - Google Patents

A kind of electric automobile electric-control system, electric automobile and failure information delivery method Download PDF

Info

Publication number
CN104842903B
CN104842903B CN201410791046.XA CN201410791046A CN104842903B CN 104842903 B CN104842903 B CN 104842903B CN 201410791046 A CN201410791046 A CN 201410791046A CN 104842903 B CN104842903 B CN 104842903B
Authority
CN
China
Prior art keywords
electric
entire car
electric automobile
security monitoring
cpu
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201410791046.XA
Other languages
Chinese (zh)
Other versions
CN104842903A (en
Inventor
王野
黎刚
闫永亮
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beiqi Foton Motor Co Ltd
Original Assignee
Beiqi Foton Motor Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beiqi Foton Motor Co Ltd filed Critical Beiqi Foton Motor Co Ltd
Priority to CN201410791046.XA priority Critical patent/CN104842903B/en
Publication of CN104842903A publication Critical patent/CN104842903A/en
Application granted granted Critical
Publication of CN104842903B publication Critical patent/CN104842903B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • BPERFORMING OPERATIONS; TRANSPORTING
    • B60VEHICLES IN GENERAL
    • B60RVEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
    • B60R16/00Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for
    • B60R16/02Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements
    • B60R16/023Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements for transmission of signals between vehicle parts or subsystems
    • B60R16/0231Circuits relating to the driving or the functioning of the vehicle

Abstract

The invention discloses a kind of electric automobile electric-control system, electric automobile and electric automobile safety failure information transmitting methods.The electric automobile electric-control system includes:Entire car controller;Electric machine controller;Battery management system;CAN, it links together entire car controller, electric machine controller (2) and battery management system, carries out information transmission, and described information includes fault message;And it is hard, when entire car controller (1) detects systemic-function Safe Failure failure, fault message can be sent to by electric machine controller (2) and battery management system (3) by CAN, while fault message can be sent into electric machine controller (2) and battery management system (3) by rigid line (5).Fault message is more reliably passed to CCU system by the electric automobile electric-control system of the present invention when can occur functional safety failure of removal in system, and then greatly improves the functional safety rank of electric automobile electric-control system.

Description

A kind of electric automobile electric-control system, electric automobile and failure information delivery method
Technical field
The present invention relates to electric automobile security technology area, more particularly to a kind of electric automobile electric-control system, with it Electric automobile and corresponding electric automobile safety failure information transmitting methods.
Background technology
The efficient of electric automobile, energy-conservation, the advantage of low stain, have become the Main way of contemporary automotive development.Electricity Electrical automobile electric-control system mainly includes:Entire car controller (VCU), electric machine controller (MCU) and battery management system (BMS).
In the prior art, in order to improve the functional safety of electric automobile electric-control system, in entire car controller, motor control The functional safety design and failure handling mechanisms of each system itself are all introduced in device, battery management system respectively.From single electricity For control control system, it is possible to achieve to the functional safety failure from internal system, allow single electric-control system to reach one Plant preferable functional safety grade.
But, allow the vehicle of electric automobile to be attained by higher functional safety grade, it is necessary to the automatically controlled system of electric automobile Three big core components of system can cooperate with processing function Safe Failure failure.At present, entire car controller (VCU), motor Controller (MCU) and battery management system (BMS) are to carry out fault message transmission by CAN, allow the automatically controlled system of electric automobile Three big core components (subsystem) of system can obtain functional safety failure of removal information in time, and allow each part to enter in time Row malfunction handles and enters safe mode.
The method that functional safety fault message transmission is carried out using CAN, it is possible to achieve single automatically controlled subsystem occurs Other related electric control systems are conveyed information to during functional safety failure.But, when there are the failures such as CAN failure, just Directly fault message can not be passed to other related electric control subsystems of correlation.
It is desirable to have a kind of technical scheme overcome or at least mitigate prior art drawbacks described above in one or many It is individual.
The content of the invention
It is an object of the invention to provide a kind of electric automobile electric-control system come overcome or at least mitigate prior art it is upper State one or more of defect.
To achieve the above object, the present invention provides a kind of electric automobile electric-control system, the electric automobile electric-control system bag Include:Entire car controller;Electric machine controller;Battery management system;CAN;And rigid line, wherein, the CAN will be described Entire car controller, electric machine controller and battery management system link together, and carry out information transmission, and described information is believed including failure Breath, the rigid line is connected between entire car controller and electric machine controller, battery management system, is when entire car controller is detected Unite functional safety failure of removal when, fault message can be sent to by electric machine controller and battery management system by CAN, together When fault message can be sent to by electric machine controller and battery management system by rigid line, wherein, the entire car controller includes Host CPU and security monitoring CPU, the security monitoring CPU monitors the working condition of the host CPU, when function occurs in main CPU system During safety failure, the security monitoring CPU is sent to motor by the CAN and by the rigid line by fault message Controller and battery management system.
Preferably, communicated and pacified by spi bus between the host CPU of the entire car controller and security monitoring CPU Full data exchange.
Preferably, the entire car controller further comprises a switching tube, the security monitoring CPU of the entire car controller It is connected by the switching tube with the rigid line, when there is functional safety failure in the main CPU system, the security monitoring CPU exports a low level or high level by the switching tube to the rigid line.
The present invention also provides a kind of electric automobile, and the electric automobile includes electric automobile electric-control system as described above.
The present invention also provides a kind of electric automobile safety failure information transmitting methods, in the process, works as full-vehicle control When device detects systemic-function Safe Failure failure, fault message is sent to by electric machine controller and cell tube by CAN Reason system, while fault message is sent to by electric machine controller and battery management system by one group of hard signal, wherein, in institute State in method, the entire car controller includes host CPU and security monitoring, the security monitoring CPU monitors the work of the host CPU State, when functional safety failure occurs in main CPU system, the security monitoring CPU is by the CAN and by described Fault message is sent to electric machine controller and battery management system by rigid line.
Preferably, in the process, spi bus is passed through between the host CPU of the entire car controller and security monitoring CPU Communicated and security data exchange.
Preferably, in the process, the entire car controller further comprises a switching tube, the entire car controller Security monitoring CPU be connected by the switching tube with the rigid line, when there is functional safety failure in the main CPU system, The security monitoring CPU exports a low level or high level by the switching tube to the rigid line.
More may be used during functional safety failure of removal can occur in system in electric automobile electric-control system provided by the present invention Fault message is passed into CCU system by ground.The dual redundant of hard-wire transfer is added to transmit by being transmitted based on CAN network Method, more reliably the functional safety information of electric-control system can be transmitted between multiple controller systems, and Carry out reliable functional safety troubleshooting in time.The functional safety rank of electric automobile electric-control system can be greatly improved.
Brief description of the drawings
Fig. 1 is the schematic diagram of electric automobile electric-control system according to an embodiment of the invention.
Reference:
1 Entire car controller 5 Rigid line
2 Electric machine controller 11 Host CPU
3 Battery management system 12 Security monitoring CPU
4 CAN 13 Spi bus
Embodiment
To make the purpose, technical scheme and advantage of the invention implemented clearer, below in conjunction with the embodiment of the present invention Accompanying drawing, the technical scheme in the embodiment of the present invention is further described in more detail.In the accompanying drawings, identical from beginning to end or class As label represent same or similar element or the element with same or like function.Described embodiment is the present invention A part of embodiment, rather than whole embodiments.The embodiments described below with reference to the accompanying drawings are exemplary, it is intended to uses It is of the invention in explaining, and be not considered as limiting the invention.Based on the embodiment in the present invention, ordinary skill people The every other embodiment that member is obtained under the premise of creative work is not made, belongs to the scope of protection of the invention.Under Embodiments of the invention are described in detail with reference to accompanying drawing for face.
In the description of the invention, it is to be understood that term " " center ", " longitudinal direction ", " transverse direction ", "front", "rear", The orientation or position relationship of the instruction such as "left", "right", " vertical ", " level ", " top ", " bottom " " interior ", " outer " is based on accompanying drawing institutes The orientation or position relationship shown, is for only for ease of the description present invention and simplifies description, rather than indicate or imply signified dress Put or element there must be specific orientation, with specific azimuth configuration and operation, therefore it is not intended that to present invention protection The limitation of scope.
Included according to the electric automobile electric-control system of the present invention:Entire car controller;Electric machine controller;Battery management system; CAN;And rigid line.The entire car controller, electric machine controller and battery management system are connected to one by the CAN Rise, carry out information transmission, described information includes fault message, and the rigid line is connected to entire car controller and electric machine controller, electricity Between the management system of pond, for when entire car controller detects systemic-function Safe Failure failure, failure to be believed by rigid line Breath is sent to electric machine controller and battery management system.
Included according to the electric automobile safety failure information transmitting methods of the present invention:When entire car controller detects system work( During energy Safe Failure failure, fault message is sent to by electric machine controller and battery management system by CAN, passed through simultaneously Fault message is sent to electric machine controller and battery management system by one group of hard signal.
Using electric automobile electric-control system provided by the present invention, or the electric automobile safety failure provided using the present invention Information transmitting methods, more reliably related control is passed to when can occur functional safety failure of removal in system by fault message Device system processed.By transmitted based on CAN network plus hard-wire transfer the method transmitted of dual redundant, can more reliably will be automatically controlled The functional safety information of system is transmitted between multiple controller systems, and is carried out at reliable functional safety failure in time Reason.The functional safety rank of electric automobile electric-control system can be greatly improved.
Fig. 1 is the schematic diagram of electric automobile electric-control system according to an embodiment of the invention.Electric automobile electricity shown in Fig. 1 Control system includes entire car controller (VCU) 1, electric machine controller (MCU) 2, battery management system (BMS) 3, CAN 4 and rigid line 5。
Entire car controller 1, electric machine controller 2 and battery management system 3 are three big core groups of electric automobile electric-control system Into part.CAN 4 links together entire car controller 1, electric machine controller 2 and battery management system 3, enters row information biography Pass, described information includes fault message.Rigid line 5 be connected to entire car controller 1 and electric machine controller 2, battery management system 3 it Between, for when entire car controller detects systemic-function Safe Failure failure, fault message to be sent into motor by rigid line 5 Controller 2 and battery management system 3.Wherein, the fault message includes systemic-function safety failure information.Functional safety be according to Rely the correct operation to input in system or equipment, it is a part for all safety.When each specific security function is obtained It must realize, and when performance rate is satisfied necessary to each security function, functional safety target just reaches.
Entire car controller 1 includes host CPU 11 and security monitoring CPU 12, the monitoring host CPUs 11 of security monitoring CPU 12 Working condition.Advantageously, led between the host CPU 11 and security monitoring CPU 12 of entire car controller 1 by spi bus News and security data exchange.Preferably, main frame is used as using host CPU 11.SPI is Serial Peripheral Interface (SPI) (Serial Peripheral Interface) abbreviation.Spi bus at least includes a clock lines, a data input line and a number According to output line.
When functional safety failure occurs in the system of host CPU 11, security monitoring CPU can be signaled to by spi bus 12.At this moment, fault message can be sent to the motor outside entire car controller 1 by security monitoring CPU 12 by CAN 4 simultaneously Controller 2 and battery management system 3.Meanwhile, security monitoring CPU 12 can pass through in entire car controller 1 a switching tube simultaneously Send out a low level signal.This low level signal can be sent to electric machine controller 2 and battery management system by rigid line 5 System 3.That is, when functional safety failure occurs in main CPU system, security monitoring CPU is by CAN and passes through rigid line Fault message is sent to electric machine controller and battery management system.
It is pointed out that switching tube can be triode, IGCT etc., as long as on-off action can be played.Need It is noted that the switching tube can be individual devices, it can also be integrated in security monitoring CPU 12 or other chips.
It is understood that when functional safety failure occurs in the system of host CPU 11, security monitoring CPU 12 can also lead to The switching tube crossed in entire car controller 1 sends out a high level signal, and transmits the fault message.
By above-mentioned electric automobile electric-control system, applied to electric automobile, it is possible to increase the work(of electric automobile electric-control system Can level of security.
Specifically, a kind of electric automobile safety failure information transmitting methods can be used.In the process, when vehicle control When device processed detects systemic-function Safe Failure failure, fault message is sent to by electric machine controller and battery by CAN Management system, while fault message is sent into electric machine controller and battery management system by one group of hard signal.
Preferably, the entire car controller includes host CPU and security monitoring, and the security monitoring CPU monitors the host CPU Working condition, when functional safety failure occurs in main CPU system, the security monitoring CPU passes through the CAN and logical Cross the rigid line and fault message is sent to electric machine controller and battery management system.
The present invention is in electric automobile electric-control system functional safety fault message is transmitted and is handled, except in multiple automatically controlled systems Fault message transmission is carried out by conventional CAN between system, also increases the rigid line transmission channels of a malfunction.When whole When vehicle controller detects systemic-function Safe Failure failure, fault message can be sent to by electric machine controller by CAN And battery management system, while fault message can be sent into electric machine controller and battery management system by one group of hard signal System.The benefit so done is exactly, no matter the CAN or failure rigid line transmission channels between multiple controller systems are between the two Any one goes wrong, and is still able to directly transmitting fault message into other electronic controller systems.This method can be with Greatly improve the functional safety rank of system and the reliability of troubleshooting.In addition, to improve electric automobile core electric-control system Security, independent security monitoring CPU is employed in entire car controller safety is carried out to the main CPU system of entire car controller Monitoring, and realize the functional safety trouble handling function of entire car controller.
Two functional safety failure transmission channels can realize it is reliable functional safety fault message is sent to it is associated Electric-control system, it can be ensured that the reliable delivery of the functional safety fault message of electric automobile electric-control system is simultaneously effectively raised The functional safety grade of system.
The electric automobile electric-control system functional safety fault handling method of the present invention can be realized:If controller system it Between CAN communication failure when, fault message can be passed to by CCU system by rigid line and carry out troubleshooting.Such as When fruit hardware failure, transmission fault message can be carried out by CAN and allow CCU system to carry out troubleshooting.
It is last it is to be noted that:The above embodiments are merely illustrative of the technical solutions of the present invention, rather than its limitations.To the greatest extent The present invention is described in detail with reference to the foregoing embodiments for pipe, it will be understood by those within the art that:It is still Technical scheme described in foregoing embodiments can be modified, or which part technical characteristic is equally replaced Change;And these modifications or replacement, the essence of appropriate technical solution is departed from the essence of various embodiments of the present invention technical scheme God and scope.

Claims (7)

1. a kind of electric automobile electric-control system, it is characterised in that including:
Entire car controller (1);
Electric machine controller (2);
Battery management system (3);
CAN (4), the entire car controller (1), electric machine controller (2) and battery management system (3) are connected to one by it Rise, carry out information transmission, described information includes fault message;And
Rigid line (5), it is connected between entire car controller (1) and electric machine controller (2), battery management system (3), when vehicle control When device (1) processed detects systemic-function Safe Failure failure, fault message can be sent to by electric machine controller by CAN (2) and battery management system (3), while fault message can be sent into electric machine controller (2) and battery management by rigid line (5) System (3).
Wherein, the entire car controller (1) includes host CPU (11) and security monitoring CPU (12), the security monitoring CPU (12) The working condition of the host CPU (11) is monitored, when there is functional safety failure in host CPU (11) system, the security monitoring CPU (12) electric machine controller (2) and battery are sent to by the CAN (4) and by the rigid line (5) by fault message Management system (3).
2. electric automobile electric-control system as claimed in claim 1, it is characterised in that the host CPU of the entire car controller (1) (11) communicated and security data exchange by spi bus (13) between security monitoring CPU (12).
3. electric automobile electric-control system as claimed in claim 1, it is characterised in that the entire car controller further comprises one Individual switching tube, the security monitoring CPU (12) of the entire car controller (1) is connected by the switching tube with the rigid line (5), When functional safety failure occurs in host CPU (11) system, the security monitoring CPU (12) is by the switching tube to described hard Line (5) exports a low level or high level.
4. a kind of electric automobile, it is characterised in that including the automatically controlled system of electric automobile as any one of claim 1-3 System.
5. a kind of electric automobile safety failure information transmitting methods, it is characterised in that when entire car controller detects systemic-function During Safe Failure failure, fault message is sent to by electric machine controller and battery management system by CAN, while passing through one Fault message is sent to electric machine controller and battery management system by group hard signal,
Wherein, the entire car controller (1) includes host CPU (11) and security monitoring CPU (12), the security monitoring CPU (12) The working condition of the host CPU (11) is monitored, when there is functional safety failure in host CPU (11) system, the security monitoring CPU (12) electric machine controller (2) and battery are sent to by the CAN (4) and by the rigid line (5) by fault message Management system (3).
6. electric automobile safety failure information transmitting methods as claimed in claim 5, it is characterised in that the entire car controller (1) communicated and security data exchange by spi bus (13) between host CPU (11) and security monitoring CPU (12).
7. electric automobile safety failure information transmitting methods as claimed in claim 6, it is characterised in that the entire car controller Further comprise a switching tube, the security monitoring CPU (12) of the entire car controller (1) by the switching tube with it is described hard Line (5) is connected, and when functional safety failure occurs in the host CPU (11) system, the security monitoring CPU (12) is opened by described Rigid line described in Guan Guanxiang (5) exports a low level or high level.
CN201410791046.XA 2014-12-18 2014-12-18 A kind of electric automobile electric-control system, electric automobile and failure information delivery method Active CN104842903B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201410791046.XA CN104842903B (en) 2014-12-18 2014-12-18 A kind of electric automobile electric-control system, electric automobile and failure information delivery method

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201410791046.XA CN104842903B (en) 2014-12-18 2014-12-18 A kind of electric automobile electric-control system, electric automobile and failure information delivery method

Publications (2)

Publication Number Publication Date
CN104842903A CN104842903A (en) 2015-08-19
CN104842903B true CN104842903B (en) 2017-10-10

Family

ID=53843016

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201410791046.XA Active CN104842903B (en) 2014-12-18 2014-12-18 A kind of electric automobile electric-control system, electric automobile and failure information delivery method

Country Status (1)

Country Link
CN (1) CN104842903B (en)

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106601000B (en) * 2015-10-20 2019-12-10 中国科学院微电子研究所 new energy automobile electric control system and method
CN105799517B (en) * 2016-05-05 2019-04-30 新誉集团有限公司 A kind of failure protection method and system for electric car electric control gear
CN106240493A (en) * 2016-07-21 2016-12-21 安徽师范大学 Electric automobile wire-controlled apparatus based on CAN
CN108839565B (en) * 2018-06-11 2021-01-05 浙江吉利汽车研究院有限公司 High-voltage control method and device for hybrid electric vehicle and electronic equipment
CN109484474B (en) * 2018-09-19 2021-06-08 上海汽车工业(集团)总公司 EPS control module and control system and control method thereof
CN111103128A (en) * 2018-10-26 2020-05-05 上海汽车集团股份有限公司 Fault type diagnosis method and device

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101339432A (en) * 2008-08-19 2009-01-07 上海汽车集团股份有限公司 Finished automobile controller monitoring system and its implementing method
CN101544215A (en) * 2009-05-12 2009-09-30 奇瑞汽车股份有限公司 High-voltage double-loop safety system of electric vehicle and method thereof
CN101722859A (en) * 2009-12-15 2010-06-09 浙江吉利汽车研究院有限公司 High-voltage safety system of hybrid electric vehicle
CN101931253A (en) * 2010-08-31 2010-12-29 重庆长安汽车股份有限公司 CAN bus-based pure electric vehicle charging method and system
CN102717714A (en) * 2012-06-08 2012-10-10 北京汽车新能源汽车有限公司 Pure electric vehicle braking energy recovery control system and method based on DCT (Data Communication Terminal)

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101339432A (en) * 2008-08-19 2009-01-07 上海汽车集团股份有限公司 Finished automobile controller monitoring system and its implementing method
CN101544215A (en) * 2009-05-12 2009-09-30 奇瑞汽车股份有限公司 High-voltage double-loop safety system of electric vehicle and method thereof
CN101722859A (en) * 2009-12-15 2010-06-09 浙江吉利汽车研究院有限公司 High-voltage safety system of hybrid electric vehicle
CN101931253A (en) * 2010-08-31 2010-12-29 重庆长安汽车股份有限公司 CAN bus-based pure electric vehicle charging method and system
CN102717714A (en) * 2012-06-08 2012-10-10 北京汽车新能源汽车有限公司 Pure electric vehicle braking energy recovery control system and method based on DCT (Data Communication Terminal)

Also Published As

Publication number Publication date
CN104842903A (en) 2015-08-19

Similar Documents

Publication Publication Date Title
CN104842903B (en) A kind of electric automobile electric-control system, electric automobile and failure information delivery method
CN104579606B (en) Double-unit traction controller network system redundancy design method
CN202480896U (en) Safety redundancy device for automobile power battery system
CN106302064A (en) The data transfer optimization method and system of binary-channel redundancy CAN used for electric vehicle
CN103490966A (en) Dual-redundancy CAN bus data receiving and processing method
CN104669268B (en) A kind of redundancy underwater robot self-control system based on Hot Spare and method
CN104503272A (en) Automatic train driving system based on double-system hot standby redundancy
CN103869781B (en) A kind of non-similar triplex redundance machine on-board electrical Electrical Load Management Center
CN103490959A (en) Dual-redundancy CAN bus fault detection method
CN108614527A (en) A kind of safety level DCS field control stations
CN105978045A (en) Redundant control device and method of hvdc system
CN102320318A (en) MVB (multifunction vehicle bus) dual-redundancy car door network system
CN106850271A (en) A kind of distribution main website and terminal communication network failure analysis method
CN106525030B (en) A kind of method of navigation system double redundancy control and display
CN205195721U (en) Subway monitoring system information acquisition device
CN104007657B (en) The docking facilities and method of a kind of triplex level redundancy system and double redundant system
CN208344148U (en) Entire car controller and electric car
CN105573941A (en) Multi-source data synthesizing method
CN102801594A (en) CAN (Controller Area Network) bus repeater of electro-hydraulic control system of coal mine hydraulic bracket
CN105915375B (en) The activestandby state management method of Dual-Computer Hot-Standby System
CN205051134U (en) 100G cable module based on CFP2 interface
CN108616435A (en) Double redundant system data transmission methods based on high-speed serial bus
CN108710807A (en) It is gone beyond one's commission management method and its system based on regional electrical energy system
CN204652031U (en) A kind of bypass module redundant control device for Modular UPS
CN106300300A (en) A kind of redundancy communication method for DC control and protection system

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
EXSB Decision made by sipo to initiate substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant