CN111061242A - Calibration system and method for motor controller of electric vehicle - Google Patents
Calibration system and method for motor controller of electric vehicle Download PDFInfo
- Publication number
- CN111061242A CN111061242A CN201811204073.7A CN201811204073A CN111061242A CN 111061242 A CN111061242 A CN 111061242A CN 201811204073 A CN201811204073 A CN 201811204073A CN 111061242 A CN111061242 A CN 111061242A
- Authority
- CN
- China
- Prior art keywords
- checking
- read
- processor
- verification
- motor controller
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 26
- 230000015654 memory Effects 0.000 claims abstract description 81
- 230000002159 abnormal effect Effects 0.000 claims abstract description 16
- 238000012795 verification Methods 0.000 claims description 90
- 238000010586 diagram Methods 0.000 description 3
- 230000007547 defect Effects 0.000 description 2
- 238000013461 design Methods 0.000 description 2
- 230000006870 function Effects 0.000 description 2
- 230000006872 improvement Effects 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 238000004364 calculation method Methods 0.000 description 1
- 238000004891 communication Methods 0.000 description 1
- 239000008358 core component Substances 0.000 description 1
- 230000007812 deficiency Effects 0.000 description 1
- 238000001514 detection method Methods 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 238000003745 diagnosis Methods 0.000 description 1
- 238000007689 inspection Methods 0.000 description 1
- 238000012544 monitoring process Methods 0.000 description 1
- 230000000750 progressive effect Effects 0.000 description 1
- 238000012827 research and development Methods 0.000 description 1
- 230000004044 response Effects 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B23/00—Testing or monitoring of control systems or parts thereof
- G05B23/02—Electric testing or monitoring
- G05B23/0205—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults
- G05B23/0208—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterized by the configuration of the monitoring system
- G05B23/0213—Modular or universal configuration of the monitoring system, e.g. monitoring system having modules that may be combined to build monitoring program; monitoring system that can be applied to legacy systems; adaptable monitoring system; using different communication protocols
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/20—Pc systems
- G05B2219/24—Pc safety
- G05B2219/24065—Real time diagnostics
Landscapes
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Engineering & Computer Science (AREA)
- Automation & Control Theory (AREA)
- Debugging And Monitoring (AREA)
Abstract
The invention provides a checking system and a checking method of an electric vehicle motor controller, wherein the checking system of the electric vehicle motor controller comprises a plurality of read only memories and a plurality of checking processors, one checking processor checks all the read only memories, or the plurality of checking processors respectively check the plurality of read only memories, and if the checking result obtained by the checking processors is abnormal, the checking processors enter a safe state.
Description
Technical Field
The invention relates to the technical field of automobile control, in particular to a system and a method for checking a motor controller of an electric automobile.
Background
At present, with the rapid development and the improvement of the popularity of new energy vehicles, more and more new energy vehicles appear on our lives and traffic roads, but the new energy vehicles bring low oil consumption, quick torque response and convenient travel to people, and simultaneously bring great challenges to the personal safety of passengers and passers-by, so the safety and the reliability of the new energy vehicles on the roads are more and more important. However, with the increase of the complexity of the entire vehicle system, the risks from system failures and random hardware failures are increasing, and the safety performance of the electronic control unit (motor drive control unit, entire vehicle control unit, etc.) playing an important role in the vehicle will be a hot point of future research and development.
The single chip microcomputer is used as a core component and a software carrier of the motor controller, bears a plurality of important functions such as operation, storage, communication, control, diagnosis and the like, and once random hardware failure of the single chip microcomputer occurs, events which violate safety targets, particularly personal safety, can be directly caused, so that the single chip microcomputer is very important for monitoring each hardware unit in the single chip microcomputer. In order to ensure data consistency and prevent the risks of data loss or damage stored in a Read Only Memory (ROM), unreadable ROM storage units, bus and address errors and the like, the ROM storage units in the single chip microcomputer need to be verified. In the existing scheme, a single-core processor chip is adopted, as shown in fig. 1, software in a check module 101 in a single-core processor chip 100 performs check sum calculation on an execution code and a data variable which need to be stored in a read only memory 200 region by using a CRC algorithm during compiling, and stores the execution code and the data variable together in a corresponding region of a ROM during software flashing, after a program is started and operated, all codes and data in the ROM are periodically read in a function, a new check sum is calculated by using the CRC algorithm, and the new check sum is compared with the check sum during compiling, so that the existence of the risk can be diagnosed, and once the software is detected, the software enters a well-defined safety state.
According to ISO26262 international safety standard, although the existing design can achieve the purpose of checking ROM and cover the above risks to some extent, the existing design method has the following disadvantages with the increase of system complexity: the method is limited to hardware resources, and the ROM inspection under the single-core system cannot meet the requirement of a whole vehicle factory on higher functional safety level. As the demand of software on ROM resources increases, the ROM detection method occupies more system running time.
Disclosure of Invention
The invention aims to provide a system and a method for checking a motor controller of an electric automobile, which aim to solve the problem of low checking safety of a read-only memory in the conventional motor controller of the electric automobile.
In order to solve the technical problem, the invention provides a checking system of an electric vehicle motor controller, which comprises a plurality of read only memories and a plurality of checking processors, wherein one checking processor checks all the read only memories, or the plurality of checking processors respectively check the plurality of read only memories, and if the checking result obtained by the checking processor is abnormal, the checking processor enters a safe state.
Optionally, in the verification system for the electric vehicle motor controller, if the number of the read-only memories is equal to that of the verification processors, one verification processor verifies all the read-only memories, or each verification processor verifies one read-only memory.
Optionally, in the checking system of the electric vehicle motor controller, the number of the read only memory and the number of the checking processors are both 2, and the checking system of the electric vehicle motor controller includes a first checking processor, a second checking processor, a first read only memory and a second read only memory.
Optionally, in the verification system for the electric vehicle motor controller, the first verification processor verifies the first read only memory, the second verification processor verifies the second read only memory, and if the verification results obtained by the first verification processor and the second verification processor are both normal, the verification ends.
Optionally, in the checking system of the electric vehicle motor controller, the first checking processor operates on data of the read only memory, the second checking processor checks the first read only memory, if the obtained checking result is abnormal, the second checking processor enters a safe state, if the obtained checking result is normal, the second checking processor checks the second read only memory, if the obtained checking result is abnormal, the second checking processor enters the safe state, and if the obtained checking result is normal, the checking ends.
Optionally, in the verification system of the electric vehicle motor controller, the verification processor performs CRC verification on the read only memory.
Optionally, in the verification system of the electric vehicle motor controller, the verification processor sets the address ranges of the read only memories respectively.
The invention also provides a method for checking the motor controller of the electric automobile, in a checking system of the motor controller of the electric automobile, one checking processor checks all the read-only memories, or a plurality of checking processors respectively check a plurality of the read-only memories, and if the checking result obtained by the checking processors is abnormal, the checking processors enter a safe state.
Optionally, in the method for checking a motor controller of an electric vehicle, the method further includes:
and the check processor is powered on, and checks the read-only memory after initializing the check software.
Optionally, in the method for checking a motor controller of an electric vehicle, the method further includes: and the verification processor defines the safety state before the data of the read-only memory is operated.
In the verification system of the electric vehicle motor controller and the method thereof provided by the invention, one verification processor verifies all the read only memories or a plurality of verification processors respectively verify a plurality of read only memories, so that the dual-core microprocessor is adopted, in the core division verification, the ROM resources are classified and the address range is divided, so that the large ROM resources are decomposed into a plurality of smaller ROM modules, and the decomposed ROM modules can be distributed to different cores for ROM verification, thereby improving the safety and saving the verification time.
In the new energy motor controller, the defect that the ROM occupies the running time of the system during checking can be reduced by using the multi-core processor to carry out ROM core checking; and the multi-core processor with the checking core can meet the requirement of a finished automobile manufacturer on high level of functional safety. In order to further increase the independence of software, the invention can also enable the ROM check to run only in the second check processor, divide the whole ROM module into more tiny modules and complete all the ROM checks within the time of guaranteeing fault tolerance.
Drawings
FIG. 1 is a schematic diagram of a prior art calibration system for a motor controller of an electric vehicle;
FIG. 2 is a schematic diagram of a calibration system for a motor controller of an electric vehicle according to an embodiment of the present invention;
FIGS. 3 to 4 are schematic diagrams illustrating a method for checking a motor controller of an electric vehicle according to another embodiment of the present invention;
shown in the figure:
the prior art is as follows: 100-single core processor chip; 101-a check module; 200-read only memory;
the invention comprises the following steps: 11-a first check processor; 111-a verification module; 21-a first read only memory; 12-a second check-up processor; 121-a check module; 22-a second read-only memory; 13-a third check processor; 131-a check module; 23-third read only memory.
Detailed Description
The following describes in detail a calibration system and method for an electric vehicle motor controller according to the present invention with reference to the accompanying drawings and specific embodiments. Advantages and features of the present invention will become apparent from the following description and from the claims. It is to be noted that the drawings are in a very simplified form and are not to precise scale, which is merely for the purpose of facilitating and distinctly claiming the embodiments of the present invention.
The core idea of the invention is to provide a system and a method for checking a motor controller of an electric vehicle, so as to solve the problem of low checking safety of a read-only memory in the existing motor controller of the electric vehicle.
In order to achieve the above idea, the present invention provides a system and a method for checking a motor controller of an electric vehicle, where the system for checking a motor controller of an electric vehicle includes a plurality of read only memories and a plurality of check processors, one check processor checks all the read only memories, or the plurality of check processors respectively check the plurality of read only memories, and if a check result obtained by the check processors is abnormal, the check processors enter a safe state.
< example one >
With the improvement of the complexity and the functional safety awareness of products, the method is limited by the fact that the existing hardware resource ROM verification cannot meet the requirement of a whole car factory on high functional safety level. To solve the deficiencies of the existing solutions, two aspects need to be considered: firstly, hardware resources; secondly, the ROM check occupies the system running time.
The main reason that the single-core system cannot meet the requirement of the whole vehicle factory for high functional safety level is that the monitoring software cannot be kept relatively independent from other functional software, and meanwhile, the ROM verification becomes long due to the increase of the utilization rate of the ROM resources, and the system performance is affected.
Therefore, this embodiment provides a verification system for an electric vehicle motor controller, where the verification system for an electric vehicle motor controller includes a plurality of read only memories and a plurality of verification processors, one of the verification processors verifies all of the read only memories, or the plurality of verification processors verifies the plurality of read only memories, and if a verification result obtained by the verification processors is abnormal, the verification processors enter a safe state.
Specifically, in the checking system of the electric vehicle motor controller, as shown in fig. 2, the number of the read only memory and the number of the checking processors are equal and are 3, and the first checking processor 11, the second checking processor 12, and the third checking processor 13 respectively include checking modules 111 to 131, the first read only memory 21, the second read only memory 22, and the third read only memory 23, so that one checking processor checks all the read only memories, or each checking processor checks one read only memory.
Specifically, in the checking system of the electric vehicle motor controller, the number of the read only memory and the number of the checking processors are both 2, and the checking system of the electric vehicle motor controller includes a first checking processor 11, a second checking processor 12, a first read only memory 21 and a second read only memory 22.
Further, as shown in fig. 3, in the verification system of the electric vehicle motor controller, the first verification processor 11 verifies the first read only memory 21, the second verification processor 12 verifies the second read only memory 22, and if the verification results obtained by the first verification processor 11 and the second verification processor 12 are both normal, the verification is finished.
Or, as shown in fig. 4, in the verification system of the electric vehicle motor controller, the first verification processor 11 operates the data of the read only memory, the second verification processor 12 verifies the first read only memory 21, if the obtained verification result is abnormal, the second verification processor 12 enters a safe state, if the obtained verification result is normal, the second verification processor 12 verifies the second read only memory 22, if the obtained verification result is abnormal, the second verification processor 12 enters a safe state, and if the obtained verification result is normal, the verification is finished.
In addition, in the checking system of the electric vehicle motor controller, the checking processor performs CRC checking on the read only memory. And the check processors respectively set the address ranges of the read-only memories.
In summary, the above embodiments describe in detail different configurations of the checking system of the electric vehicle motor controller, and it is understood that the present invention includes, but is not limited to, the configurations listed in the above embodiments, and any modifications made on the configurations provided in the above embodiments are within the scope of the present invention. One skilled in the art can take the contents of the above embodiments to take a counter-measure.
< example two >
As shown in fig. 3 to 4, in a verification system of an electric vehicle motor controller, one verification processor verifies all the read only memories, or a plurality of verification processors respectively verifies a plurality of the read only memories, and if a verification result obtained by the verification processor is abnormal, the verification processors enter a safe state.
Specifically, as shown in fig. 3, in the verification system of the electric vehicle motor controller, the first verification processor 11 verifies the first read only memory 21, the second verification processor 12 verifies the second read only memory 22, and if the verification results obtained by the first verification processor 11 and the second verification processor 12 are both normal, the verification is finished.
Or, as shown in fig. 4, in the verification system of the electric vehicle motor controller, the first verification processor 11 operates the data of the read only memory, the second verification processor 12 verifies the first read only memory 21, if the obtained verification result is abnormal, the second verification processor 12 enters a safe state, if the obtained verification result is normal, the second verification processor 12 verifies the second read only memory 22, if the obtained verification result is abnormal, the second verification processor 12 enters a safe state, and if the obtained verification result is normal, the verification is finished.
Specifically, in the method for checking a motor controller of an electric vehicle, the method further includes: and the check processor is powered on, and checks the read-only memory after initializing the check software. And the verification processor defines the safety state before the data of the read-only memory is operated.
In the verification system of the electric vehicle motor controller and the method thereof provided by the invention, one verification processor verifies all the read only memories or a plurality of verification processors respectively verify a plurality of read only memories, so that the dual-core microprocessor is adopted, in the core division verification, the ROM resources are classified and the address range is divided, so that the large ROM resources are decomposed into a plurality of smaller ROM modules, and the decomposed ROM modules can be distributed to different cores for ROM verification, thereby improving the safety and saving the verification time.
In the new energy motor controller, the defect that the ROM occupies the running time of the system during checking can be reduced by using the multi-core processor to carry out ROM core checking; and the multi-core processor with the checking core can meet the requirement of a finished automobile manufacturer on high level of functional safety. In order to further increase the independence of software, the invention can also enable the ROM check to run only in the second check processor 12, divide the whole ROM module into more tiny modules and complete all the ROM check within the time of guaranteeing fault tolerance.
The embodiments in the present description are described in a progressive manner, each embodiment focuses on differences from other embodiments, and the same and similar parts among the embodiments are referred to each other. For the system disclosed by the embodiment, the description is relatively simple because the system corresponds to the method disclosed by the embodiment, and the relevant points can be referred to the method part for description.
The above description is only for the purpose of describing the preferred embodiments of the present invention, and is not intended to limit the scope of the present invention, and any variations and modifications made by those skilled in the art based on the above disclosure are within the scope of the appended claims.
Claims (10)
1. The checking system of the electric vehicle motor controller is characterized by comprising a plurality of read only memories and a plurality of checking processors, wherein one checking processor checks all the read only memories, or the plurality of checking processors respectively check the plurality of read only memories, and if the checking result obtained by the checking processors is abnormal, the checking processors enter a safe state.
2. The checking system of the motor controller of the electric vehicle according to claim 1, wherein if the number of the read only memories and the number of the checking processors are equal, one checking processor checks all the read only memories, or each checking processor checks one read only memory.
3. The checking system of an electric vehicle motor controller according to claim 2, wherein the number of the read only memory and the number of the checking processors are each 2, and the checking system of an electric vehicle motor controller includes a first checking processor, a second checking processor, a first read only memory, and a second read only memory.
4. The system of claim 2, wherein the first verification processor verifies the first rom, the second verification processor verifies the second rom, and the verification ends if the verification results obtained by the first verification processor and the second verification processor are both normal.
5. The system of claim 2, wherein the first calibration processor runs data of the rom, the second calibration processor calibrates the first rom, the second calibration processor enters a safe state if the obtained calibration result is abnormal, the second calibration processor calibrates the second rom if the obtained calibration result is normal, the second calibration processor enters a safe state if the obtained calibration result is abnormal, and the calibration is finished if the obtained calibration result is normal.
6. The checking system of an electric vehicle motor controller according to claim 1, wherein the checking processor performs a CRC check on the read only memory.
7. The checking system of a motor controller of an electric vehicle according to claim 1, wherein the checking processor sets address ranges of the read only memories, respectively.
8. A method for checking an electric vehicle motor controller is characterized in that in a checking system of the electric vehicle motor controller, one checking processor checks all read-only memories, or a plurality of checking processors respectively check a plurality of read-only memories, and if the checking result obtained by the checking processors is abnormal, the checking processors enter a safe state.
9. The method for verifying the motor controller of the electric vehicle according to claim 8, further comprising:
and the check processor is powered on, and checks the read-only memory after initializing the check software.
10. The method for verifying the motor controller of the electric vehicle according to claim 8, further comprising: and the verification processor defines the safety state before the data of the read-only memory is operated.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811204073.7A CN111061242A (en) | 2018-10-16 | 2018-10-16 | Calibration system and method for motor controller of electric vehicle |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811204073.7A CN111061242A (en) | 2018-10-16 | 2018-10-16 | Calibration system and method for motor controller of electric vehicle |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN111061242A true CN111061242A (en) | 2020-04-24 |
Family
ID=70296584
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201811204073.7A Pending CN111061242A (en) | 2018-10-16 | 2018-10-16 | Calibration system and method for motor controller of electric vehicle |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN111061242A (en) |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102043648A (en) * | 2009-10-23 | 2011-05-04 | 中兴通讯股份有限公司 | Multi-core system and starting method thereof |
| CN102412847A (en) * | 2004-11-23 | 2012-04-11 | 三星电子株式会社 | Method and apparatus for decoding low density parity check code using united node processing |
| US20140068319A1 (en) * | 2012-09-06 | 2014-03-06 | International Business Machines Corporation | Error Detection And Correction In A Memory System |
| CN104914815A (en) * | 2015-04-15 | 2015-09-16 | 北汽福田汽车股份有限公司 | Processor monitoring method, device and system |
| CN106354581A (en) * | 2016-08-22 | 2017-01-25 | 华为技术有限公司 | Cyclic redundancy check method and multi-core processor |
| CN107291372A (en) * | 2016-03-30 | 2017-10-24 | 纬创资通股份有限公司 | Electronic device and data verification method thereof |
| CN108153611A (en) * | 2018-01-10 | 2018-06-12 | 芜湖美的厨卫电器制造有限公司 | Fault self-detection method, fault self-checking device, microcontroller and readable storage medium storing program for executing |
| CN108479061A (en) * | 2018-03-29 | 2018-09-04 | 腾讯科技（深圳）有限公司 | Operation data method of calibration, device, storage medium and the server of application |
-
2018
- 2018-10-16 CN CN201811204073.7A patent/CN111061242A/en active Pending
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102412847A (en) * | 2004-11-23 | 2012-04-11 | 三星电子株式会社 | Method and apparatus for decoding low density parity check code using united node processing |
| CN102043648A (en) * | 2009-10-23 | 2011-05-04 | 中兴通讯股份有限公司 | Multi-core system and starting method thereof |
| US20140068319A1 (en) * | 2012-09-06 | 2014-03-06 | International Business Machines Corporation | Error Detection And Correction In A Memory System |
| CN104914815A (en) * | 2015-04-15 | 2015-09-16 | 北汽福田汽车股份有限公司 | Processor monitoring method, device and system |
| CN107291372A (en) * | 2016-03-30 | 2017-10-24 | 纬创资通股份有限公司 | Electronic device and data verification method thereof |
| CN106354581A (en) * | 2016-08-22 | 2017-01-25 | 华为技术有限公司 | Cyclic redundancy check method and multi-core processor |
| CN108153611A (en) * | 2018-01-10 | 2018-06-12 | 芜湖美的厨卫电器制造有限公司 | Fault self-detection method, fault self-checking device, microcontroller and readable storage medium storing program for executing |
| CN108479061A (en) * | 2018-03-29 | 2018-09-04 | 腾讯科技（深圳）有限公司 | Operation data method of calibration, device, storage medium and the server of application |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10576990B2 (en) | Method and device for handling safety critical errors | |
| US6654910B1 (en) | Intelligent fault management | |
| US20190340116A1 (en) | Shared backup unit and control system | |
| CN103682506A (en) | Battery system and method for identifying unauthorized module replacement in battery system | |
| CN110955571B (en) | Fault management system for functional safety of vehicle-specification-level chip | |
| EP3249534B1 (en) | Vehicle control device | |
| CN112298152A (en) | Charging control method and automobile control equipment | |
| CN105955850A (en) | Abnormal reset processing method and system for vehicle control unit | |
| CN114385421A (en) | Data storage method and device, electronic equipment and storage medium | |
| CN114968646A (en) | Functional fault processing system and method | |
| CN102033765B (en) | BCM (Body Control Module) program upgrading method and vehicle-mounted electronic control system upgrading method | |
| CN111061242A (en) | Calibration system and method for motor controller of electric vehicle | |
| CN111376887B (en) | Parking brake control system and method | |
| Nag et al. | A novel multi-core approach for functional safety compliance of automotive electronic control unit according to ISO 26262 | |
| CN110865906B (en) | Motor initial position angle storage method and device, vehicle and storage medium | |
| CN110371055B (en) | Analysis method and device for automobile power supply signal | |
| CN114132175A (en) | Emergency processing system and method for automobile virtual instrument | |
| CN118093293B (en) | Storage failure detection and repair method and device in vehicle gauge chip | |
| KR20130003976A (en) | Electronic control power steering electronic control unit and running reset processing method using the same | |
| CN116135668B (en) | Vehicle steering redundancy control method, device, equipment and medium | |
| CN116382954A (en) | Fault management method and device for microcontroller | |
| CN118245296A (en) | ADAS-oriented super-heterogeneous chip security mechanism testing method and device | |
| CN117622053A (en) | Vehicle configuration method, device, electronic equipment, vehicle and storage medium | |
| CN118270017A (en) | Driving area controller, operation method thereof and vehicle | |
| CN117949805A (en) | Test method, test device, ATE equipment and computer readable storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20200424 |
|
| RJ01 | Rejection of invention patent application after publication |