A kind of vehicle torque control method for meeting functional safety requirement
Technical field
, will more particularly to functional safety design is met based on one kind the present invention relates to pure electric automobile security control field
The vehicle torque control method asked.
Background technology
As the integrated level of automotive electronics electric appliance and complexity are higher and higher in world wide, to automotive electronics electric operation
The security of proposition constantly rises.Signal interaction is more and more intensive between each module of electric automobile, in order to ensure signal acquisition, place
Reason and the correctness of transmission, using the vehicle torque control method for meeting functional safety design requirement, realization avoids VCU unexpected
Operator torque demands instruct the security target sent.Entire car controller is parsed according to accelerator pedal and brake pedal opening amount signal
The requested torque information of driver.In order to ensure torque information parsing it is safe and reliable, the signal of entire car controller (VCU) is adopted
Collection and security monitorings of the VCU to torque information are just particularly important.The security of vehicle moment of torsion control is improved, becoming one must
Will and it is difficult the problem of.
The content of the invention
For the prior art, safe and reliable in order to ensure torque information parsing, the signal of entire car controller (VCU) is adopted
Collection and security monitorings of the VCU to torque information, the present invention provide a kind of vehicle torque control method for meeting functional safety requirement.
In order to solve the above-mentioned technical problem, a kind of vehicle moment of torsion control side for meeting functional safety requirement proposed by the present invention
Method, VCU include moment of torsion processing module, torque safety monitoring module, controller monitoring module and output multilevel iudge module, institute
Stating torque safety monitoring module includes safe torque computing module, faulted-phase judgment module and CAN line transport modules, the vehicle
Torque control method comprises the following steps:
Step 1) driver is filed a request torque signal by pedal operation to VCU;
Step 2) VCU collection gas pedals opening amount signal, gear signal, rotating speed of transmission shaft signal and brake pedal aperture
Signal, initial torque T0 is obtained by parsing above-mentioned signal;
Step 3) VCU gathers the gear shifting signal of driver at this time, and is based on the initial torque T0 being calculated in step 2),
Obtain correcting torque T 00 by moment of torsion processing module, T00=λ × T0, λ are correction factor, when the current vehicle that VCU is collected
When information of shifting gears is carries out upshift operation, λ 90%, when the current vehicle gearshift information that VCU is collected is to carry out downshift operation
When, λ 110%;
Step 4) VCU is according to regenerative braking information acquisition the regenerative braking torque T2, torque control value T1=T00+ of collection
T2;
Gas pedal opening amount signal that step 5) safe torque computing module is collected according to VCU, rotating speed of transmission shaft signal
Parse to obtain monitoring torque T 0 ' with brake pedal opening amount signal;If T0 '=T0, B0 is to faulted-phase judgment module for output, if
T0 ' ≠ T0, output B1 to faulted-phase judgment module;
In signal acquisition process, safe torque computing module real-time judge whether there is open failure or short-circuit failure,
When there are open failure or short-circuit failure, output A1 values are to faulted-phase judgment module, when there is no open failure or short
Road failure exports A0 values to faulted-phase judgment module;
CRC check, frame format detection, response error detection, position detection and position in CAN lines transport module detection CAN lines
This five kinds of security mechanisms are filled, to fail, export if there are any of the above described one or more security mechanisms in CAN line transmitting procedures
Otherwise C1, exports C0 to faulted-phase judgment module to faulted-phase judgment module;
Step 6) torque safety monitoring module is passed according to above-mentioned collection breakdown judge, torque arithmetic breakdown judge and CAN lines
The value of the result output fault message Error 1 of defeated breakdown judge is as follows:
The working status of the processor of step 7) controller monitoring module real time monitoring VCU, including ROM verifications, standard RAM
Verification, RAM verifications, program flow verification and clock check;To fail, export if there are any of the above described one or more inspection mechanisms
Otherwise fault message Error2=1, exports fault message Error2=0 to output multilevel iudge to output multilevel iudge module
Module;
Step 8) exports multilevel iudge module according to torque control value T1, fault message Error 1 and fault message Error
2 value, final output actual torque value T2 or vehicle are run with minimum idling moment of torsion:
The limp-home mode is the minimum idling moment of torsion of a vehicle demarcated in advance, when enter limp-home mode it
Afterwards, the torque request for driver is to be used as VCU torque outputs using minimum idling moment of torsion.
Compared with prior art, the beneficial effects of the invention are as follows:
Design requirement of the invention based on functional safety, especially considers the torque safety monitoring of driver torque request,
Monitored by torque safety, torque controller monitors the peace for avoiding unexpected operator torque's order from sending for realizing ASIL D
Full target, improves the security of vehicle moment of torsion control.
Brief description of the drawings
Fig. 1 is the vehicle torque control method block diagram that the present invention meets functional safety requirement;
Fig. 2 is the vehicle moment of torsion control flow chart that the present invention meets functional safety requirement;
Fig. 3 is that vehicle moment of torsion judges flow in the vehicle moment of torsion control of the invention for meeting functional safety requirement.
Embodiment
Technical solution of the present invention is described in further detail with specific embodiment below in conjunction with the accompanying drawings, it is described specific
Embodiment is only explained the present invention, is not intended to limit the invention.
As depicted in figs. 1 and 2, a kind of vehicle torque control method for meeting functional safety requirement proposed by the present invention, VCU
Include moment of torsion processing module, torque safety monitoring module, controller monitoring module and output multilevel iudge module, the moment of torsion
Security monitoring module includes safe torque computing module, faulted-phase judgment module and CAN line transport modules.
The vehicle torque control method comprises the following steps:
Step 1) driver is filed a request torque signal by pedal operation to VCU;
Step 2) VCU collection gas pedals opening amount signal, gear signal, rotating speed of transmission shaft signal and brake pedal aperture
Signal, initial torque T0 is obtained by the signal of acquisition by parsing;It is by gathering gas pedal and brake pedal signal, by mould
Analog quantity is converted into percentage figures amount signal, is multiplied by the driving that current vehicle gear information and rotating speed of transmission shaft information are calculated
The maximum exportable moment of torsion of motor obtains initial torque T0;
Step 3) VCU gathers the gear shifting signal of driver at this time, and is based on the initial torque T0 being calculated in step 2),
Obtain correcting torque T 00 by moment of torsion processing module, VCU collection current vehicle gearshift information, considers normal gear shift operation, by step
The rapid initial torque T0 2) obtained is multiplied by current correction factor and amendment torque T 00 is calculated;T00=λ × T0, λ are to correct
Number, when the current vehicle gearshift information that VCU is collected is carries out upshift operation, λ 90%, when the current vehicle that VCU is collected
Gearshift information for carry out downshift operation when, λ 110%;
Step 4) VCU is calculated according to the regenerative braking information acquisition regenerative braking torque T2 of collection by step 3)
Correct torque T 00 and add regenerative braking torque T2, obtain torque control value T1 at this time, T1=T00+T2;
Step 5) is as shown in figure Fig. 1, Fig. 2 and Fig. 3, and in signal acquisition process, safe torque computing module real-time judge is
No there are open failure, either short-circuit failure is when there are open failure or short-circuit failure, output A1 values to faulted-phase judgment
Module, A0 values are exported to faulted-phase judgment module when there is no open failure or short-circuit failure;As shown in figure 3,
Gas pedal opening amount signal that the safe torque computing module of VCU is collected according to VCU, rotating speed of transmission shaft signal and
Brake pedal opening amount signal parses to obtain monitoring torque T 0 ' according to the computational methods identical with step 2);If T0 '=T0, card
Bright torque arithmetic process does not have mistake, and B0 is to faulted-phase judgment module for output, if T0 ' ≠ T0, it was demonstrated that torque arithmetic process is deposited
In mistake, output B1 to faulted-phase judgment module;
CRC check, frame format detection, response error detection, position detection and position in CAN lines transport module detection CAN lines
This five kinds of security mechanisms are filled, to fail, export if there are any of the above described one or more security mechanisms in CAN line transmitting procedures
C1 is to faulted-phase judgment module, if this five kinds of mechanism all inerrancies, output C0 to faulted-phase judgment module;
Step 6) torque safety monitoring module is passed according to above-mentioned collection breakdown judge, torque arithmetic breakdown judge and CAN lines
The value of the result output fault message Error 1 of defeated breakdown judge is as follows:
The working status of the processor of step 7) controller monitoring module real time monitoring VCU, including ROM verifications, standard RAM
Verification, RAM verifications, program flow verification and clock check;If there are any of the above described one or more inspection mechanism failure zhe3 cards
It is bright to break down, then fault message Error2=1 is exported to output multilevel iudge module, if not having failure, exports failure
Information Error2=0 to output multilevel iudge module;
Step 8) exports multilevel iudge module according to torque control value T1, fault message Error 1 and fault message Error
2 value, final output actual torque value T2 or vehicle are run with minimum idling moment of torsion:
The limp-home mode is the minimum idling moment of torsion of a vehicle demarcated in advance, when enter limp-home mode it
Afterwards, vehicle will not respond the torque request of driver, and the torque request for driver is turned round using minimum idling moment of torsion as VCU
Square output valve.
To sum up, the design requirement of the invention based on functional safety, especially considers the torque safety of driver torque request
Monitoring, is monitored, torque controller monitoring realizes ASIL D avoids unexpected operator torque from ordering hair by torque safety
The security target gone out, improves the security of vehicle moment of torsion control.
Although above in conjunction with attached drawing, invention has been described, and the invention is not limited in above-mentioned specific implementation
Mode, above-mentioned embodiment is only schematical, rather than restricted, and those of ordinary skill in the art are at this
Under the enlightenment of invention, without deviating from the spirit of the invention, many variations can also be made, these belong to the present invention's
Within protection.