CN105159200A - Overall vehicle controller based on function safety - Google Patents
Overall vehicle controller based on function safety Download PDFInfo
- Publication number
- CN105159200A CN105159200A CN201510602111.4A CN201510602111A CN105159200A CN 105159200 A CN105159200 A CN 105159200A CN 201510602111 A CN201510602111 A CN 201510602111A CN 105159200 A CN105159200 A CN 105159200A
- Authority
- CN
- China
- Prior art keywords
- cpu
- module
- host cpu
- dual
- circuit
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B19/00—Programme-control systems
- G05B19/02—Programme-control systems electric
- G05B19/04—Programme control other than numerical control, i.e. in sequence controllers or logic controllers
- G05B19/042—Programme control other than numerical control, i.e. in sequence controllers or logic controllers using digital processors
- G05B19/0428—Safety, monitoring
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/30—Nc systems
- G05B2219/31—From computer integrated manufacturing till monitoring
- G05B2219/31006—Monitoring of vehicle
Abstract
The invention provides an overall vehicle controller based on function safety, which comprises a dual-CPU module, a signal processing circuit, an analog quantity output circuit, latches, a dual-intelligent MOS module, a level conversion circuit, a sensor module, an EEPROM and a watchdog, wherein the signal processing circuit is connected with the dual-CPU module; the dual-CPU module is composed of a main CPU and a safety CPU for acquisition and control of accelerator and brake signals, power driving output and CAN communication; the main CPU is connected with the analog quantity output circuit for adjusting an analog output numerical value; the main CPU and the safety CPU are respectively connected with the two latches and transmit signals to the dual-intelligent MOS module; the main CPU is respectively connected with the level conversion circuit, the EEPROM and the watchdog; and the level conversion circuit is respectively connected with the sensor module and an SPI FLASH. Through adopting the dual-CPU module, the other CPU can be ensured to normally detect main input signals and control signals after one CPU has a fault, and usability and safety of the vehicle can be improved.
Description
Technical field
The present invention relates to automobile manufacturing field, be specifically related to a kind of entire car controller based on functional safety.
Background technology
Along with the continuous increase of city vehicle, the continuous deterioration of environment and traditional energy day by day exhausted, the cry of people to integral new-energy passenger is more and more higher.Macro policy highlights good industrial development environment.Can predict, new-energy automobile will take off.
Entire car controller is one of three large core components of new-energy automobile, is brain and the command system of whole car.Realize the functions such as car load drived control, energy optimal control, feedback braking control and network management, be the core control part of whole automobile, entire car controller plays decisive role to the dynamic property of new forms of energy car, economy, security, operability and reliability.
Summary of the invention
The object of this invention is to provide a kind of entire car controller based on functional safety, adopt dual-CPU architecture, possesses remote upgrade function, be integrated with the functions such as power drive, switching value, analog quantity detection, analog output, gyroscope, limping signal switching, shell protection grade reaches IP67, improves security and versatility.
The technical solution used in the present invention is: a kind of entire car controller based on functional safety, comprise dual processors module, signal processing circuit, analogue quantity output circuit, latch, two intelligent MOS module, level shifting circuit, sensor assembly, EEPROM and house dog; Described signal processing circuit connects dual processors module, and wherein dual processors module is made up of host CPU and safe CPU, exports and CAN communication for the data acquisition and controlling of throttle and brake signal, power drive; Described host CPU connection mode analog quantity output circuit, for adjusting modulating output numerical value; Described host CPU and safe CPU are connected with two latchs respectively, and transfer signals in two intelligent MOS module; Host CPU connects level shifting circuit, EEPROM and house dog respectively, and described level shifting circuit is connecting sensor module and SPIFLASH respectively.
Further, two-way communication is carried out by UART interface between described host CPU and safe CPU.
Further, the diagnostic signal delivery outlet in described two intelligent MOS module is connected with the diagnostic signal input port on host CPU.
The beneficial effect that the present invention produces is:
By adopting dual processors module, ensure that a CPU have fault after another one CPU can normally detect main input signals and control signal, improve availability and the security of vehicle.
Accompanying drawing explanation
Fig. 1 is electrical block diagram of the present invention.
Embodiment
Below in conjunction with accompanying drawing, the present invention is further illustrated.
As shown in Figure 1, a kind of entire car controller based on functional safety, comprise signal processing circuit, dual processors module, analogue quantity output circuit, two intelligent MOS module, level shifting circuit, EEPROM, sensor assembly, house dog and SPIFLASH, for key signal by two CPU co-controllings, as throttle signal collection and control, braking signal collection and control, power stage and CAN communication.
Dual processors module is made up of host CPU and safe CPU, wherein host CPU adopts MC9S12XEP100 chip, safe CPU adopts SPC5604 chip, when the input signal processing circuit such as throttle signal or control signal processes, and the sampled signal after process is sent to respectively the sampled signal interface of host CPU and safe CPU, carry out switched communication by UART mouth between host CPU and safe CPU.Between host CPU and safe CPU, reserved four I/O signal lines, facilitate the later stage to expand.The CAN of host CPU and safe CPU links together respectively by CAN transceiver, safe CPU can control the shutoff of the CAN transceiver of host CPU by STB pin, when safe CPU finds that host CPU can turn off the CAN communication adapter CAN of host CPU time abnormal, ensure the reliability of communication.
After the sampled signal of dual processors module through receiving processes, control the output power signal of throttle or brake, and signal is carried out power stage by latch pass to two intelligent MOS module.It is that after preventing power-supply fluctuation from causing cpu reset, output state is uncontrollable in order to ensure the stable of control signal that CPU is connected with latch.Two intelligent MOS module can be diagnosed output power, and is again beamed back in host CPU by diagnostic signal, makes host CPU according to diagnostic message Modulating Power signal, enables two intelligent MOS module stablize output power.
Host CPU connects level shifting circuit by SPI interface, and by the acceleration condition in the horizontality of gyroscope and acceleration sensor Real-Time Monitoring car load and three directions, optimizes car load drived control accordingly.
The pwm signal that host CPU generates generates simulating signal by analogue quantity output circuit, by the low-pass filter be made up of R221, C137, R224, C140, change pwm signal into direct current signal, then export after amplifying twice by the scaling circuit in the same way that amplifier forms, circuit is simple and reliable.
Claims (3)
1. based on an entire car controller for functional safety, it is characterized in that: comprise dual processors module, signal processing circuit, analogue quantity output circuit, latch, two intelligent MOS module, level shifting circuit, sensor assembly, EEPROM and house dog; Described signal processing circuit connects dual processors module, and wherein dual processors module is made up of host CPU and safe CPU, exports and CAN communication for the data acquisition and controlling of throttle and brake signal, power drive; Described host CPU connection mode analog quantity output circuit, for adjusting modulating output numerical value; Described host CPU and safe CPU are connected with two latchs respectively, and transfer signals in two intelligent MOS module; Host CPU connects level shifting circuit, EEPROM and house dog respectively, and described level shifting circuit is connecting sensor module and SPIFLASH respectively.
2. a kind of entire car controller based on functional safety according to claim 1, is characterized in that: carry out two-way communication by UART interface between described host CPU and safe CPU.
3. a kind of entire car controller based on functional safety according to claim 1, is characterized in that: the diagnostic signal delivery outlet in described two intelligent MOS module is connected with the diagnostic signal input port on host CPU.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201510602111.4A CN105159200B (en) | 2015-09-21 | 2015-09-21 | A kind of entire car controller based on functional safety |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201510602111.4A CN105159200B (en) | 2015-09-21 | 2015-09-21 | A kind of entire car controller based on functional safety |
Publications (2)
Publication Number | Publication Date |
---|---|
CN105159200A true CN105159200A (en) | 2015-12-16 |
CN105159200B CN105159200B (en) | 2018-07-31 |
Family
ID=54800087
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201510602111.4A Expired - Fee Related CN105159200B (en) | 2015-09-21 | 2015-09-21 | A kind of entire car controller based on functional safety |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN105159200B (en) |
Cited By (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN105822433A (en) * | 2016-03-11 | 2016-08-03 | 奇瑞汽车股份有限公司 | Aero engine redundant ECU controller and control method thereof |
CN108108564A (en) * | 2017-12-29 | 2018-06-01 | 安徽皖通邮电股份有限公司 | The apparatus and method that a kind of raising system starts speed |
CN108656920A (en) * | 2017-03-31 | 2018-10-16 | 比亚迪股份有限公司 | The control method of finished and dynamical system of hybrid vehicle |
CN110231794A (en) * | 2019-07-09 | 2019-09-13 | 四川米众网络科技股份有限公司 | Serial communication controller based on safe cpu chip |
CN111267631A (en) * | 2020-04-01 | 2020-06-12 | 郑州精益达汽车零部件有限公司 | HP 2-based SIC motor controller circuit driving structure for passenger car |
Citations (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20020029098A1 (en) * | 2000-09-04 | 2002-03-07 | Hitachi Ltd. | Vehicle control system and automobile using the same |
KR20090087199A (en) * | 2008-02-12 | 2009-08-17 | 한국오므론전장주식회사 | Electronic control system for vehicle and control method thereof |
CN201504221U (en) * | 2009-09-08 | 2010-06-09 | 上海汽车集团股份有限公司 | Variable frequency control system of motor |
CN201613866U (en) * | 2009-11-23 | 2010-10-27 | 浙江吉利汽车研究院有限公司 | Controller of whole electric vehicle |
CN102490614A (en) * | 2011-11-15 | 2012-06-13 | 上海三运电机控制技术有限公司 | Comprehensive protection control method for controller drive system of electric automobile |
CN203224778U (en) * | 2013-03-14 | 2013-10-02 | 朱银娟 | High-safety-performance ECU architecture for electric car |
CN103625506A (en) * | 2013-11-22 | 2014-03-12 | 江苏大学 | Braking command signal generating device of driver controller |
CN203643815U (en) * | 2013-12-12 | 2014-06-11 | 东风汽车公司 | Vehicle controller based on safety function |
CN104097586A (en) * | 2013-04-11 | 2014-10-15 | 陈言平 | Integral controller of electric automobile |
CN104228589A (en) * | 2014-09-05 | 2014-12-24 | 北京新能源汽车股份有限公司 | High-grade safety device based on double CPUs (Central Processing Unit) of pure electric vehicle |
CN204340923U (en) * | 2014-12-09 | 2015-05-20 | 北汽福田汽车股份有限公司 | A kind of whole-control system and there is its vehicle |
-
2015
- 2015-09-21 CN CN201510602111.4A patent/CN105159200B/en not_active Expired - Fee Related
Patent Citations (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20020029098A1 (en) * | 2000-09-04 | 2002-03-07 | Hitachi Ltd. | Vehicle control system and automobile using the same |
KR20090087199A (en) * | 2008-02-12 | 2009-08-17 | 한국오므론전장주식회사 | Electronic control system for vehicle and control method thereof |
CN201504221U (en) * | 2009-09-08 | 2010-06-09 | 上海汽车集团股份有限公司 | Variable frequency control system of motor |
CN201613866U (en) * | 2009-11-23 | 2010-10-27 | 浙江吉利汽车研究院有限公司 | Controller of whole electric vehicle |
CN102490614A (en) * | 2011-11-15 | 2012-06-13 | 上海三运电机控制技术有限公司 | Comprehensive protection control method for controller drive system of electric automobile |
CN203224778U (en) * | 2013-03-14 | 2013-10-02 | 朱银娟 | High-safety-performance ECU architecture for electric car |
CN104097586A (en) * | 2013-04-11 | 2014-10-15 | 陈言平 | Integral controller of electric automobile |
CN103625506A (en) * | 2013-11-22 | 2014-03-12 | 江苏大学 | Braking command signal generating device of driver controller |
CN203643815U (en) * | 2013-12-12 | 2014-06-11 | 东风汽车公司 | Vehicle controller based on safety function |
CN104228589A (en) * | 2014-09-05 | 2014-12-24 | 北京新能源汽车股份有限公司 | High-grade safety device based on double CPUs (Central Processing Unit) of pure electric vehicle |
CN204340923U (en) * | 2014-12-09 | 2015-05-20 | 北汽福田汽车股份有限公司 | A kind of whole-control system and there is its vehicle |
Cited By (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN105822433A (en) * | 2016-03-11 | 2016-08-03 | 奇瑞汽车股份有限公司 | Aero engine redundant ECU controller and control method thereof |
CN108656920A (en) * | 2017-03-31 | 2018-10-16 | 比亚迪股份有限公司 | The control method of finished and dynamical system of hybrid vehicle |
CN108656920B (en) * | 2017-03-31 | 2020-08-25 | 比亚迪股份有限公司 | Whole vehicle control method and power system of hybrid electric vehicle |
CN108108564A (en) * | 2017-12-29 | 2018-06-01 | 安徽皖通邮电股份有限公司 | The apparatus and method that a kind of raising system starts speed |
CN110231794A (en) * | 2019-07-09 | 2019-09-13 | 四川米众网络科技股份有限公司 | Serial communication controller based on safe cpu chip |
CN111267631A (en) * | 2020-04-01 | 2020-06-12 | 郑州精益达汽车零部件有限公司 | HP 2-based SIC motor controller circuit driving structure for passenger car |
CN111267631B (en) * | 2020-04-01 | 2023-05-26 | 郑州智驱科技有限公司 | SIC motor controller circuit driving structure for passenger car based on HP2 |
Also Published As
Publication number | Publication date |
---|---|
CN105159200B (en) | 2018-07-31 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN105159200A (en) | Overall vehicle controller based on function safety | |
CN102055633B (en) | Satellite-borne double-CAN (Controller Area Network) bus node failure self-restoration system | |
CN105416206A (en) | Electric automobile whole-vehicle controller and control method | |
CN103053137A (en) | Processing system, processing device and power supply control method | |
CN109728643A (en) | Power receiving device, the control method of power receiving device and storage medium | |
CN101995876A (en) | M-BUS controller | |
CN205353751U (en) | Train network system | |
CN105116772A (en) | Device used for aircraft cabin interface management and operation method | |
CN104276048A (en) | Low-voltage management system and method of distributed battery management system | |
CN102146942B (en) | Overload protecting system of hydraulic device of rescuing and obstacle-clearing car | |
CN103532724B (en) | A kind of MOST network interface circuit and MOST network state control method | |
CN103472746A (en) | Double-main-control device and redundancy control method of double-main-control device | |
CN104361652A (en) | Data recording device of network control and monitoring system of train | |
CN110166334B (en) | Spatial information system based on SpaceVPX standard | |
CN101362443A (en) | Locomotive remote controlling device | |
CN202502362U (en) | Vehicle body power management system based on dual core control | |
CN202043121U (en) | Terminal unit equipment and firefighting emergency evacuation illumination intelligent system thereof | |
CN202034166U (en) | Monitoring and communication module of cooling device for high-voltage transformer | |
CN203299811U (en) | ABS unibus communication device of automobile anti-lock brake system | |
CN204719474U (en) | A kind of emergent sniffing robot power source management control system | |
CN204116869U (en) | A kind of director demon download circuit | |
CN204361784U (en) | The remote control that a kind of total powerstation is powered | |
CN204993448U (en) | On -vehicle network device | |
CN205355194U (en) | Distributed battery management system | |
CN203225545U (en) | Distributed power management system of vehicle-mounted electronic apparatus |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant | ||
CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20180731 Termination date: 20190921 |
|
CF01 | Termination of patent right due to non-payment of annual fee |