CN112140887B - Shutdown circuit for vehicle fault and vehicle with shutdown circuit - Google Patents
Shutdown circuit for vehicle fault and vehicle with shutdown circuit Download PDFInfo
- Publication number
- CN112140887B CN112140887B CN201910498361.6A CN201910498361A CN112140887B CN 112140887 B CN112140887 B CN 112140887B CN 201910498361 A CN201910498361 A CN 201910498361A CN 112140887 B CN112140887 B CN 112140887B
- Authority
- CN
- China
- Prior art keywords
- transistor
- resistor
- mcu
- vehicle
- control unit
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000004891 communication Methods 0.000 claims description 8
- 238000010586 diagram Methods 0.000 description 8
- 230000007246 mechanism Effects 0.000 description 6
- 238000012545 processing Methods 0.000 description 5
- 230000000694 effects Effects 0.000 description 3
- 230000006872 improvement Effects 0.000 description 3
- 230000009471 action Effects 0.000 description 2
- 238000011161 development Methods 0.000 description 2
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000001514 detection method Methods 0.000 description 1
- 239000000446 fuel Substances 0.000 description 1
- 238000000034 method Methods 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 230000008569 process Effects 0.000 description 1
Classifications
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B60—VEHICLES IN GENERAL
- B60L—PROPULSION OF ELECTRICALLY-PROPELLED VEHICLES; SUPPLYING ELECTRIC POWER FOR AUXILIARY EQUIPMENT OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRODYNAMIC BRAKE SYSTEMS FOR VEHICLES IN GENERAL; MAGNETIC SUSPENSION OR LEVITATION FOR VEHICLES; MONITORING OPERATING VARIABLES OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRIC SAFETY DEVICES FOR ELECTRICALLY-PROPELLED VEHICLES
- B60L3/00—Electric devices on electrically-propelled vehicles for safety purposes; Monitoring operating variables, e.g. speed, deceleration or energy consumption
- B60L3/0023—Detecting, eliminating, remedying or compensating for drive train abnormalities, e.g. failures within the drive train
- B60L3/0084—Detecting, eliminating, remedying or compensating for drive train abnormalities, e.g. failures within the drive train relating to control modules
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B60—VEHICLES IN GENERAL
- B60W—CONJOINT CONTROL OF VEHICLE SUB-UNITS OF DIFFERENT TYPE OR DIFFERENT FUNCTION; CONTROL SYSTEMS SPECIALLY ADAPTED FOR HYBRID VEHICLES; ROAD VEHICLE DRIVE CONTROL SYSTEMS FOR PURPOSES NOT RELATED TO THE CONTROL OF A PARTICULAR SUB-UNIT
- B60W50/00—Details of control systems for road vehicle drive control not related to the control of a particular sub-unit, e.g. process diagnostic or vehicle driver interfaces
- B60W50/02—Ensuring safety in case of control system failures, e.g. by diagnosing, circumventing or fixing failures
Landscapes
- Engineering & Computer Science (AREA)
- Automation & Control Theory (AREA)
- Transportation (AREA)
- Mechanical Engineering (AREA)
- Human Computer Interaction (AREA)
- Life Sciences & Earth Sciences (AREA)
- Sustainable Development (AREA)
- Sustainable Energy (AREA)
- Power Engineering (AREA)
- Electronic Switches (AREA)
- Safety Devices In Control Systems (AREA)
Abstract
The embodiment of the invention discloses a turn-off circuit for a vehicle fault and a vehicle thereof, wherein the circuit comprises: the device comprises an MCU, an SBC, a turn-off path circuit and n driving chips, wherein the MCU is used for detecting whether the electronic control unit has a safety fault or not and outputting a low-level signal to the turn-off path circuit and the SBC when the electronic control unit detects that the electronic control unit has the safety fault; the SBC is used for detecting whether the electronic control unit has a safety fault or not, and outputting a low-level signal to the turn-off path circuit and the MCU when the electronic control unit detects that the electronic control unit has the safety fault; the turn-off path circuit is used for outputting a turn-off signal to the n driving chips according to the low-level signal so as to control the n driving chips; the n driving chips are used for stopping working under the control of the closing signal. The turn-off circuit and the vehicle thereof can prevent the vehicle from outputting error information when the vehicle is in fault, and ensure the driving safety and reliability.
Description
Technical Field
The invention relates to the technical field of vehicles, in particular to a shutdown circuit for a vehicle fault and the vehicle.
Background
Currently, with the increasing development of the automobile industry, automobiles have become an important vehicle for people to travel in daily life. The number of automobiles is rapidly increased, and the improvement of the automobiles is also promoted day by day, so that the automobiles are more convenient to use in daily life of people, and the life of people is improved.
Both the whole vehicle controller (VCU, vehicle control unit) in the electric vehicle and the electronic control unit (ECU, electronic Control Unit) in the traditional fuel vehicle are core electronic control units for realizing the whole vehicle control decision, and the running of the whole vehicle is reliable in the running process of the vehicle, so that the safety of the vehicle is high. Once the core electronic control unit runs wrong, the safety of drivers and passengers is threatened, so that the running conditions of the core electronic control units such as VCU, ECU and the like are effectively monitored, and the output error information is turned off in an emergency when the faults occur, so that the safety running of the core electronic control unit is necessary.
In the prior art, the development of the functional safety of the automobile is still in a preliminary stage, and only the description of the whole functional safety architecture of the electronic control unit is presented at present, for example, the driver is prompted when a fault occurs. The emergency shutdown aspect in the functional safety of the electronic control unit is not developed, namely, when the electronic control unit fails, the error information output by the electronic control unit cannot be turned off in an emergency mode, so that a great deal of inconvenience is brought to a user, the user experience is poor, and the driving safety and reliability cannot be guaranteed.
Disclosure of Invention
The invention provides a turn-off circuit for a vehicle fault and the vehicle thereof, which can prevent the vehicle from outputting error information and ensure the driving safety and reliability.
The technical scheme is as follows:
the embodiment of the invention provides a shutdown circuit for a vehicle in fault, which comprises the following components: MCU, SBC, turn-off path circuit, n driving chips, wherein,
The MCU is electrically connected with the SBC, the MCU is provided with an input port and an output port, the input port and the output port are electrically connected with the turn-off path circuit, and the MCU is used for detecting whether the electronic control unit has a safety fault or not and outputting a low-level signal to the turn-off path circuit and the SBC when the electronic control unit detects that the electronic control unit has the safety fault;
the SBC is provided with an input/output port, the input/output port is electrically connected with the turn-off path circuit, and is used for detecting whether the electronic control unit has a safety fault or not and outputting a low-level signal to the turn-off path circuit and the MCU when the electronic control unit detects that the electronic control unit has the safety fault;
The turn-off path circuit is electrically connected with the MCU, the SBC and the n driving chips and is used for outputting a turn-off signal to the n driving chips according to a low-level signal so as to control the n driving chips;
the n driving chips are used for stopping working under the control of the closing signal, wherein n is an integer greater than 0.
In a preferred embodiment of the present invention, the turn-off path circuit includes a first resistor, a second resistor, a third resistor, a fourth resistor, a fifth resistor, a sixth resistor to an n+5 resistor, a diode, a first transistor and a second transistor, one end of the first resistor is connected to a power supply, the other end is connected to a gate of the first transistor, one end of the second resistor is connected to an input/output port of the SBC and is further connected to a cathode of the diode, the other end of the second resistor is connected to an anode of the diode and is further connected to an output port of the MCU, and is further connected to an input port of the MCU through the third resistor, a source of the first transistor is grounded, a drain of the first transistor is further connected to a gate of the second transistor through the fourth resistor, a source of the second transistor is grounded, and a drain of the second transistor is further connected to the power supply through the fifth resistor, and is further connected to n corresponding to n pins of the n+5, where n can be driven to be larger than n.
In a preferred embodiment of the present invention, the anode of the diode is further connected to the output port of the MCU through an n+6th resistor.
In a preferred embodiment of the present invention, the first transistor and the second transistor are NMOS transistors.
In a preferred embodiment of the present invention, the turn-off path circuit further includes a third transistor, a fourth transistor, and an n+7 resistor, the turn-off path circuit further includes m driving driver chips, the m driving driver chips are respectively and correspondingly provided with a power pin, a source electrode of the third transistor is grounded, a gate electrode of the third transistor is connected to a power supply through the n+7 resistor, a drain electrode of the third transistor is connected to a gate electrode of the fourth transistor and is also connected to the power supply through the n+7 resistor, a drain electrode of the fourth transistor is connected to a corresponding power pin of the m driving chips, and a source electrode of the fourth transistor is connected to the power supply, where m is an integer greater than 0.
In a preferred embodiment of the present invention, the third transistor is an NMOS transistor and the fourth transistor is a PMOS transistor.
In a preferred embodiment of the present invention, the MCU, SBC, m driving chips are disposed in the electronic control unit.
In a preferred embodiment of the present invention, the SBC and the MCU monitor each other through a watchdog communication manner.
In a preferred embodiment of the present invention, the electronic control unit is a VCU or an ECU, and the MCU, SBC, n driving chips are disposed in the electronic control unit.
The embodiment of the invention also provides a vehicle, which comprises: the circuit is turned off when the vehicle fails.
The technical scheme provided by the embodiment of the invention has the beneficial effects that:
Independently detecting whether the electronic control unit has a safety fault through the MCU or the SBC, and outputting a low-level signal to the turn-off path circuit when the electronic control unit is detected to have the safety fault; the off path circuit outputs off signals to the n driving chips according to the low level signals so as to control the n driving chips to stop working. Therefore, the driving output related to functional safety can be closed, the vehicle is prevented from outputting error information, the whole vehicle system enters a safety mode, and the driving safety and reliability are ensured.
The foregoing description is only an overview of the present invention, and is intended to be implemented in accordance with the teachings of the present invention, as well as the preferred embodiments thereof, together with the following detailed description of the invention, given by way of illustration only, together with the accompanying drawings.
Drawings
Fig. 1 is a block diagram showing a structure of a shutdown circuit at the time of a vehicle failure according to a first embodiment of the present invention;
Fig. 2 is a circuit diagram of a shutdown circuit at the time of a vehicle failure provided by the first embodiment of the invention;
fig. 3 is a circuit diagram of a shutdown circuit at the time of a vehicle failure according to a third embodiment of the present invention.
Detailed Description
In order to further describe the technical means and effects adopted by the invention to achieve the preset aim, the following detailed description refers to the specific implementation, structure, characteristics and effects of the shutdown circuit and the vehicle thereof when the vehicle is in fault according to the invention with reference to the accompanying drawings and the preferred embodiments.
The foregoing and other features, aspects, and advantages of the present invention will become more apparent from the following detailed description of the preferred embodiments when taken in conjunction with the accompanying drawings. While the invention may be susceptible to further details of embodiments and examples of means and effects for achieving the desired purpose, the drawings are provided for the purpose of reference and illustration only and are not intended to be limiting.
First embodiment
Fig. 1 is a block diagram of a vehicle failure-time shutdown circuit provided in a first embodiment of the present invention. The turn-off circuit can prevent the vehicle from outputting error information when the vehicle is in fault, and ensure the driving safety and reliability. Referring to fig. 1, the shutdown circuit for vehicle failure of the present embodiment includes: a micro control unit (Microcontroller Unit, MCU) 10, a system base chip (System Basis Chip, SBC) 11, a turn-off path circuit 12, N driving chips N1, N2.
Specifically, the MCU 10 is electrically connected to the SBC 11, the MCU 10 has an input port and an output port, both of which are electrically connected to the shutdown path circuit 12, and the MCU 10 is configured to detect whether a safety failure occurs in an electronic control unit (e.g., VCU or ECU), and output a low level signal to the shutdown path circuit 12 and the SBC 11 when the safety failure occurs in the electronic control unit.
The MCU 10 may be disposed in an electronic control unit (for example, VCU or ECU), and the MCU 10 may be used as a control unit, and may be an MCU conforming to ISO26262, where the MCU generally has two Input Output ports independent of other functions, one is an Output port IO out, and the other is an Input port IO in, where the Output port IO out and the Input port IO in are both connected to the shutdown path circuit 12.
And the SBC 11 is electrically connected with the MCU 10, the SBC 11 is provided with an input/output port, the input/output port is electrically connected with the turn-off path circuit 12, and the SBC 11 is used for detecting whether the electronic control unit has a safety fault or not and outputting a low-level signal to the turn-off path circuit 12 and the MCU 10 when the electronic control unit detects that the electronic control unit has the safety fault.
The SBC 11 may be disposed in the electronic control unit, the SBC 11 may include an input/output port IO, which is connected to the off-path circuit 12, the SBC 11 may be an L9788 chip of ST company, and the WDA port of the L9788 chip may have both input and output functions, so that the SBC 11 only needs one input/output port IO, otherwise, needs to connect two input/output IO ports as the MCU 11.
The off path circuit 12 is electrically connected to the MCU 10, the SBC 11, and the N driving chips N1, N2..nn, and is configured to output an off signal to the N driving chips according to the low level signal, so as to control the N driving chips N1, N2..nn.
N driving chips N1, N2..nn are electrically connected to the off-path circuit 12 for stopping operation under control of the off signal.
The N driving chips N1 and N2. Each driving chip N1, N2..nn may have enable pins EN1, EN2, EN3, …, ENn, respectively, the enable pins EN1, EN2, …, ENn (N is an integer greater than 0) are used to control the driving chips N1, N2, N3...nn to stop working under the control of a shutdown signal, and in a normal working state of the electronic control unit, it is used to control the driving chips N1, N2, N3...nn to work normally, so that the driving chips N1, N2..nn output I/O driving signals, communication signals, etc. to control good operation of the whole vehicle. Therefore, when the electronic control unit is detected to have a safety fault, the emergency shutdown function can be realized, the n driving chips are controlled to stop working, the vehicle is prevented from outputting error information, and the driving safety and reliability are ensured.
In summary, in the shutdown circuit for vehicle fault provided by the embodiment of the present invention, whether the electronic control unit has a safety fault is independently detected by the MCU or the SBC, and when the electronic control unit has a safety fault, a low-level signal is output to the shutdown path circuit; the off path circuit outputs off signals to the n driving chips according to the low level signals so as to control the n driving chips to stop working. Therefore, the driving output related to functional safety can be closed, the vehicle is prevented from outputting error information, the whole vehicle system enters a safety mode, and the driving safety and reliability are ensured.
Second embodiment
Fig. 2 is a circuit diagram of a shutdown circuit at the time of a vehicle failure according to a second embodiment of the present invention. Please refer to fig. 2, wherein fig. 2 is an improvement of fig. 1. Fig. 2 differs from fig. 1 in that fig. 2 is a specific circuit diagram of fig. 1.
Specifically, the off-path circuit 12 includes a resistor R1 (first resistor), a resistor R2 (second resistor), a resistor R3 (third resistor), a resistor R4 (fourth resistor), a resistor R5 (fifth resistor), a resistor R6 (sixth resistor), a resistor R7 (seventh resistor),. The resistor rn+5 (n+5-th resistor), a diode D1, a transistor Q1 (first transistor), and a transistor Q2 (second transistor). Where n is an integer greater than 0 (n=1, 2 …).
One end of the resistor R1 is connected to the power supply VCC, and the other end is connected to the gate of the transistor Q1. One end of the resistor R2 is connected with the input/output port IO of the SBC 11 and is also connected with the cathode of the diode D1, the other end of the resistor R2 is connected with the anode of the diode D1 and is also connected with the output port IO out of the MCU 10 and is also connected with the input port IO in of the MCU 10 through the resistor R3. The source of the transistor Q1 is grounded, the drain of the transistor Q1 is connected to the gate of the transistor Q2, and is also connected to the power supply VCC through a resistor R4. The source of the transistor Q2 is grounded, and the drain of the transistor Q2 is connected to the power source VCC through a resistor R5, and is correspondingly connected to the corresponding enable pins EN1, EN2, EN3, …, ENn of the N driving chips N1, N2, N3. through resistors R6, R7, R8.
Preferably, the anode of the diode D1 may also be connected to the output port IO out of the MCU 10 through a resistor R (n+6th resistor). If the output port IO out of the MCU 10 can have the function of input detection at the same time, the resistor R may be omitted.
The transistors Q1 and Q2 may be NMOS transistors or NPN transistors.
The operation of the shutdown circuit in the event of a vehicle failure is described in detail below:
Firstly, under the normal operation condition of the electronic control unit (for example VCU or ECU), the input/output port IO of the SBC 11 and the output port IO out of the MCU 10 are both at high level or open/drain output, so that under the action of the pull-up resistor R1, the gate of the transistor Q1 is at high level, the transistor Q1 is in the off state, the gate of the transistor Q2 is at high level, the transistor Q2 is also in the off state, the drain of the transistor Q2 is at high level, so that the enable pins EN1, EN2, EN3, …, ENn of the driving chips N1, N2, N3. are all at high level, so as to be used for outputting I/O driving signals, communication signals, etc. to control the good operation of the whole vehicle.
In addition, when the SBC 11 detects that the electronic control unit of the vehicle has a safety fault, the SBC 11 pulls down the level of the input/output port IO, the low level is pulled down to be low level through both ends of the diode D1, then the input port IO in of the MCU 10 is pulled down through the resistor R3, and the MCU 10 enters a safety processing mechanism after detecting that the input port IO in is low level; meanwhile, the gate of the transistor Q1 is at a low level, so that the transistor Q1 is in an on state, the drain of the transistor Q1 is pulled low, the transistor Q2 is turned on, and the drain of the transistor Q2 is at a low level, so that the enable pins EN1, EN2, EN3, …, and ENn of the driving chips N1, N2, N3. are all turned off, and an emergency turn-off function is realized.
In addition, when the MCU 10 detects that there is a safety failure in the electronic control unit of the vehicle, the MCU 10 pulls down the output port IO out, pulls down the input port IO in through the resistor R and the resistor R3, pulls down the input port IO of the SBC through the resistor R2, so that the SBC enters the safety processing mechanism, in addition, the gate of the transistor Q1 is at a low level, so that the transistor Q1 is in a conductive state, the drain of the transistor Q1 is pulled down, the transistor Q2 is conductive, and the drain of the transistor Q2 is at a low level, so that the enable pins EN1, EN2, EN3, …, and ENn of the driving chips N1, N2, N3. are all turned off, and an emergency shutdown function is realized.
In summary, in the shutdown circuit for vehicle fault provided by the embodiment of the present invention, whether the electronic control unit has a safety fault is independently detected by the MCU or the SBC, and when the electronic control unit has a safety fault, a low-level signal is output to the shutdown path circuit; the off path circuit outputs off signals to the n driving chips according to the low level signals so as to control the n driving chips to stop working. Therefore, the driving output related to functional safety can be closed, the vehicle is prevented from outputting error information, the whole vehicle system enters a safety mode, and the driving safety and reliability are ensured.
Third embodiment
Fig. 3 is a circuit diagram of a shutdown circuit at the time of a vehicle failure according to a third embodiment of the present invention. Please refer to fig. 3, wherein fig. 3 is an improvement of fig. 2. Fig. 3 differs from fig. 2 in that fig. 3 is a further circuit diagram of fig. 2.
Specifically, the off-path circuit 12 may further include a transistor Q3 (third transistor), a transistor Q4 (fourth transistor), a resistor R0 (n+7th resistor), and m driving chips K1, K2.. The m driving chips K1 and K2. are respectively provided with power pins VC1, VC2, … and VCm. The m driving chips K1, K2...km are different from the driving chips N1, N2, N3...nn in the types of pins, the former has power pins VC1, VC2, …, VCm, and the latter has enable pins EN1, EN2, …, ENn, but the functions of the two are the same, and the m driving chips K1, K2...km can also be used for outputting I/O driving signals, communication signals, etc. under the normal working state of the electronic control unit, so as to control the good operation of the whole vehicle. That is, when the driving chip controls the driving output to the enable pin, the circuit structure of fig. 2 is required, and when the driving chip controls the driving output to the power source, the circuit structure of fig. 3 is also required to realize the function of turning off the driving output of the driving chips K1, K2, K3..
The source of the transistor Q3 is grounded, the gate of the transistor Q3 is connected to the power supply VCC through a resistor R0, the drain of the transistor Q3 is connected to the gate of the transistor Q4, and is also connected to the power supply VCC through a resistor R0, the drain of the transistor Q4 is connected to the corresponding power supply pins VC1, VC2, VC3, …, VCm of m driving chips K1, K2, K3., and the source of the transistor Q4 is connected to the power supply VCC. The transistor Q3 may be an NMOS transistor or an NPN transistor. The transistor Q4 may be a PMOS transistor or a PNP transistor.
The operation of the shutdown circuit in the event of a vehicle failure is described in detail below:
Firstly, under the normal operation condition of the electronic control unit (for example VCU or ECU), the input/output port IO of the SBC 11 and the output port IO out of the MCU 10 are both at high level or open/drain output, so that under the action of the pull-up resistor R1, the gate of the transistor Q1 is at high level, the transistor Q1 and the transistor Q3 are both in the off state, the gate of the transistor Q2 is at high level, the transistor Q2 is also in the off state, the drain of the transistor Q2 is at high level, so that the enable pins EN1, EN2, EN3, …, ENn of the driving chips N1, N2, N3., nn are all at high level, so as to be used for outputting I/O driving signals, communication signals and the like, so as to control the good operation of the whole vehicle. The gate of the transistor Q4 is at a high level, and the transistor Q4 is in a conductive state, so that the power supply VCC supplies power to the power supply pins VC1, VC2, VC3, …, VCm of the driving chips K1, K2, K3..
In addition, when the SBC 11 detects that the electronic control unit of the vehicle has a safety fault, the SBC 11 pulls down the level of the input/output port IO, the low level is pulled down to be low level through both ends of the diode D1, then the input port IO in of the MCU 10 is pulled down through the resistor R3, and the MCU 10 enters a safety processing mechanism after detecting that the input port IO in is low level; meanwhile, the gates of the transistor Q1 and the transistor Q3 are also at low level, so that the transistor Q1 and the transistor Q3 are in an on state, the drain of the transistor Q1 is pulled low, the transistor Q2 is turned on, the drain of the transistor Q2 is at low level, and therefore the enable pins EN1, EN2, EN3, … and ENn of the driving chips N1, N2, N3. are all turned off, thereby realizing the emergency shutdown function. The drain of the transistor Q3 is low, and the transistor Q4 is turned off, so that the power supply VCC cannot supply power to the driving chips K1, K2, K3...km, and the driving chips K1, K2, K3...km all stop working, and also realize an emergency shutdown function.
In addition, when the MCU 10 detects that there is a safety failure in the electronic control unit of the vehicle, the MCU 10 pulls down the output port IO out, pulls down the input port IO in through the resistor R and the resistor R3, pulls down the input port IO of the SBC through the resistor R2, so that the SBC enters the safety processing mechanism, in addition, the gate of the transistor Q1 is at a low level, so that the transistor Q1 is in a conductive state, the drain of the transistor Q1 is pulled down, the transistor Q2 is conductive, and the drain of the transistor Q2 is at a low level, so that the enable pins EN1, EN2, EN3, …, and ENn of the driving chips N1, N2, N3. are all turned off, and an emergency shutdown function is realized. The drain of the transistor Q3 is low, and the transistor Q4 is turned off, so that the power supply VCC cannot supply power to the driving chips K1, K2, K3...km, and the driving chips K1, K2, K3...km all stop working, and also realize an emergency shutdown function.
Preferably, the SBC 11 and the MCU 10 can monitor each other through a watchdog communication manner, if any one of the MCU 10 or the SBC 11 fails, such as crashes, the other chip will learn through the watchdog communication manner, so as to pull its IO low, implement an emergency shutdown function, and ensure the correct operation of the system. In the invention, the SBC 11 and the MCU 10 are both provided with a mechanism for detecting the safety faults of the electronic control unit, and the input/output port IO of the SBC 11, the input/output port IO in of the MCU 10 and the output port IO out are independently operated, wherein any chip (such as the SBC 11, the MCU 10 and the like) is in failure, and the shutdown of other devices is not influenced, so that the invention has independence.
It should be noted that, if the input, output or input/output ports of the chips (for example, the MCU 10, the SBC 11, the driving chips N1 to Nn, and the driving chips K1 to Km) are shorted to the power supply, the shutdown of other chips in the path will not be affected, first, if the input/output port IO of the SBC 11 is shorted to the power supply, the resistor R2 becomes a pull-up resistor, at this time, the output port IO out of the MCU 10 outputs a low level, and the gates of the transistor Q1 and the transistor Q3 can still be pulled down normally, so as to realize emergency shutdown. If the output port IO out or the input port IO in or both the output port IO out and the input port IO in of the MCU 10 are short-circuited to the power supply at the same time, the input and output ports IO of the SBC 11 are pulled down, and the grid electrodes of the transistor Q1 and the transistor Q3 can be pulled down normally, so that emergency turn-off is realized; if the enable pin of any one of the n driving chips is shorted to the power supply, the transistor Q2 is turned on to pull the enable pins of the other chips down because the resistor R6 to the resistor rn+5 are connected in series, and the m driving chips are controlled by the transistor Q3, so that the transistor Q3 is turned off to realize emergency turn-off.
It should be further noted that, the turn-off of the m driving chips is controlled by the power supply pins VC1, VC2, VC3, …, and VCm, and no failure mode exists in VC1, VC2, VC3, …, and VCm for short circuit of the power supply; in addition, the input/output port IO of the SBC 11, the input port IO in and the output port IO out of the MCU 10, and the enable pins EN1, EN2, EN3, …, ENn of the driving chip fail to cause a ground short circuit, so that the whole system or a part of the system can enter a safe processing mechanism or a shutdown state, and the state is safe and acceptable, so that the fail to ground short circuit belongs to the normal shutdown category and does not affect the realization of emergency shutdown of the invention.
According to the embodiment, the embodiment of the invention also discloses a vehicle, which comprises the shutdown circuit in the case of vehicle failure in the embodiment.
In summary, in the shutdown circuit for vehicle fault provided by the embodiment of the present invention, whether the electronic control unit has a safety fault is independently detected by the MCU or the SBC, and when the electronic control unit has a safety fault, a low-level signal is output to the shutdown path circuit; the off path circuit outputs off signals to the n driving chips according to the low level signals so as to control the n driving chips to stop working. So that the driving output related to the functional safety can be closed, the vehicle is prevented from outputting error information, the whole vehicle system enters a safety mode, the driving safety and reliability are ensured,
And the power supply pins of the m driving chips are controlled through the turn-off path circuit so as to control the m driving chips with the power supply pins to stop working, and further, the output of all driving chips related to functional safety is closed, so that the vehicle is prevented from outputting error information, the whole vehicle system is enabled to enter a safety mode, and the driving safety and reliability are ensured.
The present invention is not limited to the above-mentioned embodiments, but is intended to be limited to the following embodiments, and any modifications, equivalent changes and variations in the above-mentioned embodiments can be made by those skilled in the art without departing from the scope of the present invention.
Claims (8)
1. A shutdown circuit upon a vehicle failure, comprising: MCU, SBC, turn-off path circuit, n first driving chips, wherein,
The MCU is electrically connected with the SBC, the MCU is provided with an input port and an output port, the input port and the output port are electrically connected with the turn-off path circuit, and the MCU is used for detecting whether the electronic control unit has a safety fault or not and outputting a low-level signal to the turn-off path circuit and the SBC when the electronic control unit detects that the electronic control unit has the safety fault;
the SBC is provided with an input/output port, the input/output port is electrically connected with the turn-off path circuit, and is used for detecting whether the electronic control unit has a safety fault or not and outputting a low-level signal to the turn-off path circuit and the MCU when the electronic control unit detects that the electronic control unit has the safety fault;
The turn-off path circuit is electrically connected with the MCU, the SBC and the n first driving chips and is used for outputting a turn-off signal to the n first driving chips according to a low-level signal so as to control the n first driving chips;
The n first driving chips are used for stopping working under the control of the closing signal, wherein n is an integer greater than 0;
The turn-off path circuit comprises a first resistor, a second resistor, a third resistor, a fourth resistor, a fifth resistor, a sixth resistor, an n+5 resistor, a diode, a first transistor and a second transistor, wherein one end of the first resistor is connected with a power supply, the other end of the first resistor is connected with the grid of the first transistor, one end of the second resistor is connected with an input and output port of an SBC, the second resistor is further connected with a cathode of the diode, the other end of the second resistor is connected with an anode of the diode, the second resistor is further connected with an output port of the MCU, the third resistor is further connected with an input port of the MCU, a source electrode of the first transistor is grounded, a drain electrode of the first transistor is connected with a grid of the second transistor, the source electrode of the second transistor is grounded through the fourth resistor, the drain electrode of the second transistor is connected with the power supply through the fifth resistor, and the drain electrode of the second transistor is further connected with an n+5 resistor respectively corresponding to n pins of the first chip, and n is enabled to be a large integer corresponding to n, wherein n is a driving value of 0;
The turn-off path circuit further comprises a third transistor, a fourth transistor and an n+7th resistor, the turn-off path circuit further comprises m second driving chips when the vehicle fails, the m second driving chips are respectively and correspondingly provided with power supply pins, the source electrode of the third transistor is grounded, the grid electrode of the third transistor is connected with a power supply through the n+7th resistor, the drain electrode of the third transistor is connected with the grid electrode of the fourth transistor and is also connected with the power supply through the n+7th resistor, the drain electrode of the fourth transistor is connected with the corresponding power supply pins of the m second driving chips, and the source electrode of the fourth transistor is connected with the power supply, wherein m is an integer larger than 0.
2. The vehicle shutdown circuit of claim 1, wherein the anode of the diode is further connected to the output of the MCU through an n+6 resistor.
3. The vehicle fail-time shutdown circuit of claim 1, wherein the first transistor and the second transistor are both NMOS transistors.
4. The vehicle fail-time shutdown circuit of claim 1, wherein the third transistor is an NMOS transistor and the fourth transistor is a PMOS transistor.
5. The vehicle fail-safe shutdown circuit of claim 1, wherein the MCU, SBC, m second driver chips are disposed within an electronic control unit.
6. The vehicle fail-over circuit of claim 1, wherein the SBC and the MCU are monitored with respect to each other by means of watchdog communication.
7. The vehicle fail-time shutdown circuit according to claim 1, wherein the electronic control unit is a VCU or an ECU, and the MCU, SBC, n first driver chips are disposed in the electronic control unit.
8. A vehicle, characterized in that it comprises: the vehicle failure time shutdown circuit according to any one of claims 1 to 7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910498361.6A CN112140887B (en) | 2019-06-10 | 2019-06-10 | Shutdown circuit for vehicle fault and vehicle with shutdown circuit |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910498361.6A CN112140887B (en) | 2019-06-10 | 2019-06-10 | Shutdown circuit for vehicle fault and vehicle with shutdown circuit |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN112140887A CN112140887A (en) | 2020-12-29 |
| CN112140887B true CN112140887B (en) | 2024-05-03 |
Family
ID=73868323
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201910498361.6A Active CN112140887B (en) | 2019-06-10 | 2019-06-10 | Shutdown circuit for vehicle fault and vehicle with shutdown circuit |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112140887B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112901767A (en) * | 2021-01-15 | 2021-06-04 | 浙江大学 | Functional safety circuit for automobile electronic gear shifter and control method |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104199370A (en) * | 2014-09-18 | 2014-12-10 | 奇瑞汽车股份有限公司 | Automotive motor controller security monitoring circuit and control method thereof |
| CN106896755A (en) * | 2015-12-18 | 2017-06-27 | 联创汽车电子有限公司 | The load driving circuits of automobile-used single low side control |
| CN210390788U (en) * | 2019-06-10 | 2020-04-24 | 广州汽车集团股份有限公司 | Shutdown circuit in case of vehicle fault and vehicle thereof |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP6583610B2 (en) * | 2014-05-27 | 2019-10-02 | 三菱自動車工業株式会社 | Fault diagnosis device for vehicle charging system |
-
2019
- 2019-06-10 CN CN201910498361.6A patent/CN112140887B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104199370A (en) * | 2014-09-18 | 2014-12-10 | 奇瑞汽车股份有限公司 | Automotive motor controller security monitoring circuit and control method thereof |
| CN106896755A (en) * | 2015-12-18 | 2017-06-27 | 联创汽车电子有限公司 | The load driving circuits of automobile-used single low side control |
| CN210390788U (en) * | 2019-06-10 | 2020-04-24 | 广州汽车集团股份有限公司 | Shutdown circuit in case of vehicle fault and vehicle thereof |
Also Published As
| Publication number | Publication date |
|---|---|
| CN112140887A (en) | 2020-12-29 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN112078366B (en) | Electric vehicle and dual-power control system thereof | |
| US8937797B2 (en) | Method and apparatus to detect a broken wire condition in an integrated circuit | |
| WO2021253336A1 (en) | Vehicle-mounted driving circuit, vehicle-mounted driving chip, vehicle-mounted driving device and electronic device | |
| CN110829375B (en) | Power input circuit with improved reverse polarity protection | |
| CN112140887B (en) | Shutdown circuit for vehicle fault and vehicle with shutdown circuit | |
| JPH0883909A (en) | Semiconductor integrated circuit | |
| CN108146494A (en) | The electronic control unit of EPS | |
| CN210390788U (en) | Shutdown circuit in case of vehicle fault and vehicle thereof | |
| CN108388160B (en) | Expandable standard type universal PEDC logic module | |
| US12081203B2 (en) | Method and system for short to ground protection for a circuit including a FET device | |
| CN105322765B (en) | The motor drive circuit of the electronic brake system of dark current can be reduced | |
| US20040136129A1 (en) | Electric parts drive circuit | |
| JP2019193126A (en) | Power supply device | |
| CN101271317A (en) | Circuit device and corresponding method for controlling a load | |
| US20150194803A1 (en) | Electrical circuit for cutting off an electric power supply comprising transistors and fuses having redundant logic | |
| KR102502388B1 (en) | Control device and method for EPS power supply in vehicle | |
| CN220924038U (en) | Angular radar communication control circuit and vehicle control system | |
| WO2019029479A1 (en) | Digital switch detecting circuit and method | |
| CN215376129U (en) | Electronic equipment and control circuit applied to same | |
| KR101887904B1 (en) | An Apparatus And A Method For Detecting Short Circuit Of A Controller | |
| KR20150121804A (en) | Electronic Control Apparatus and Power Control Method for Electronic Power Steering | |
| CN217882956U (en) | Emergency power supply switching controller | |
| JP7105635B2 (en) | Method and safe state controller for providing power to an interface card | |
| KR102246702B1 (en) | Electronic Control Apparatus and Power Control Method for Electronic Power Steering | |
| US6519127B1 (en) | Solid state safety relay |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20211231 Address after: 511400 No.36 Longying Road, Shilou Town, Panyu District, Guangzhou City, Guangdong Province Applicant after: GAC AION New Energy Vehicle Co.,Ltd. Address before: 510030 23 building, Cheng Yue mansion 448-458, Dongfeng Middle Road, Yuexiu District, Guangzhou, Guangdong. Applicant before: GUANGZHOU AUTOMOBILE GROUP Co.,Ltd. |
|
| TA01 | Transfer of patent application right | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| CP03 | Change of name, title or address |
Address after: No. 36 Longying Road, Shilou Town, Panyu District, Guangzhou City, Guangdong Province Patentee after: GAC AION NEW ENERGY AUTOMOBILE Co.,Ltd. Country or region after: China Address before: No. 36 Longying Road, Shilou Town, Panyu District, Guangzhou City, Guangdong Province Patentee before: GAC AION New Energy Vehicle Co.,Ltd. Country or region before: China |