CN114655145B - Power supply method of domain controller and domain controller - Google Patents

Power supply method of domain controller and domain controller Download PDF

Info

Publication number
CN114655145B
CN114655145B CN202011554319.0A CN202011554319A CN114655145B CN 114655145 B CN114655145 B CN 114655145B CN 202011554319 A CN202011554319 A CN 202011554319A CN 114655145 B CN114655145 B CN 114655145B
Authority
CN
China
Prior art keywords
type
power supply
chip
working
module
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202011554319.0A
Other languages
Chinese (zh)
Other versions
CN114655145A (en
Inventor
王林
叶锦
李相华
张树梅
任倩萌
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
SAIC Motor Corp Ltd
Original Assignee
SAIC Motor Corp Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by SAIC Motor Corp Ltd filed Critical SAIC Motor Corp Ltd
Priority to CN202011554319.0A priority Critical patent/CN114655145B/en
Publication of CN114655145A publication Critical patent/CN114655145A/en
Application granted granted Critical
Publication of CN114655145B publication Critical patent/CN114655145B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
    • B60R16/00—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for
    • B60R16/02—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements
    • B60R16/03—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements for supply of electrical power to vehicle subsystems or for
    • B60R16/033—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements for supply of electrical power to vehicle subsystems or for characterised by the use of electrical cells or batteries
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
    • B60R16/00—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for
    • B60R16/02—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements
    • B60R16/023—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements for transmission of signals between vehicle parts or subsystems
    • B60R16/0231—Circuits relating to the driving or the functioning of the vehicle
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
    • Y02D10/00—Energy efficient computing, e.g. low power processors, power management or thermal management

Landscapes

  • Engineering & Computer Science (AREA)
  • Mechanical Engineering (AREA)
  • Automation & Control Theory (AREA)
  • Power Sources (AREA)

Abstract

The application discloses a power supply method of a domain controller and the domain controller, wherein the power supply method of the domain controller utilizes a second type power supply chip to provide working power for a first type working module, and utilizes a processing module to monitor output voltage of the second type power supply chip so as to achieve the purpose of supplying power for a high-safety working module by utilizing a low-safety power supply chip on the basis of meeting the power supply safety requirement of the working module. This is because, in the power supply method of the domain controller provided in this embodiment, the low-security-level power supply chip (i.e., the second-class power supply chip) is only used to provide the working power supply for the first-class working module, and the work of monitoring the power supply security of the power supply chip is performed by the processing module of the domain controller, where the processing module can meet the monitoring of multiple failure modes of the output voltage of the second-class power supply chip, and meet the requirements of ISO26262 on the power supply security of the system.

Description

Power supply method of domain controller and domain controller
Technical Field
The present application relates to the field of microcontrollers, and more particularly, to a power supply method for a domain controller of a multi-power chip controller and a domain controller.
Background
In a hardware device of a motor vehicle, a domain controller is one of core devices that control other hardware to cooperate.
A domain controller typically includes a plurality of ASIL (Automotive Safety Integration Level, automotive safety integrity level) power chips with different levels of security and a plurality of work modules with different levels of security. In general, the power supply safety is monitored by a power supply chip, so that in order to prevent the power supply chip with a low safety level from interfering with the working module with a high safety level, the power supply chip with the low safety level cannot supply power to the working module with the high safety level according to the requirements of ISO 26262. However, due to the large variety of working modules within the domain controller, this is typically encountered in domain controller designs: the output voltage of the power chip with high safety level cannot meet the requirements of all the working modules with high safety level, while the power chip with low safety level just has the capability of providing the output voltage. At this time, if the low-security-level power chip directly supplies power to the high-security-level work module, the power supply security of the work module cannot be ensured, and if the low-security-level power chip is replaced with the high-security-level power chip, the cost of the domain controller increases.
Disclosure of Invention
In order to solve the technical problems, the application provides a power supply method of a domain controller and the domain controller, so as to achieve the purpose of supplying power to a high-safety-level working module by using a low-safety-level power supply chip on the basis of meeting the power supply safety requirements of the working module.
In order to achieve the technical purpose, the embodiment of the application provides the following technical scheme:
a power supply method of a domain controller, applied to the domain controller, the domain controller comprising: the system comprises a processing module, at least one first-type working module, at least one first-type power chip and at least one second-type power chip; the safety level of the first type power supply chip is not lower than that of the processing module, and the safety level of the processing module is not lower than that of the second type power supply chip and the first type working module; the safety level of the first type of working module is higher than that of the second type of power supply chip; the first type of working module refers to the working voltage required by the first type of power supply chip cannot be met, and the second type of power supply chip can be met; the power supply method of the domain controller comprises the following steps:
supplying power to the first type power supply chip and the second type power supply chip by using a power supply;
providing a working power supply for the processing module by using the first type power supply chip;
providing a working power supply for the first type of working modules by using the second type of power supply chips;
and monitoring the output voltage of the second type power supply chip by using the processing module, and stopping supplying power to the first type working module or controlling the first type working module to stop working when the output voltage of the second type power supply chip is abnormal.
Optionally, the monitoring, by the processing module, the output voltage of the second type of power chip includes:
and performing analog-digital conversion sampling on the output voltage of the first type of working module by using the processing module, monitoring a sampling result, and judging that the output voltage of the second type of power supply chip is abnormal when the sampling result is abnormal.
Optionally, the performing analog-digital conversion sampling on the output voltage of the second type power supply chip by using the processing module, and monitoring a sampling result, and when an abnormal situation occurs in the sampling result, determining that the output voltage of the second type power supply chip is abnormal includes:
and performing analog-digital conversion sampling on the output voltage of the second type power supply chip by using the processing module, monitoring a sampling result, and judging that the output voltage of the second type power supply chip is abnormal when any one or more of overvoltage, undervoltage, offset, oscillation and burr occur in the sampling result.
Optionally, stopping supplying power to the first type of working module or controlling the first type of working module to stop working when the output voltage of the second type of power supply chip is abnormal includes:
and when the output voltage of the second type power supply chip is abnormal, controlling the second type power supply chip to stop outputting the voltage.
Optionally, stopping supplying power to the first type of working module or controlling the first type of working module to stop working when the output voltage of the second type of power supply chip is abnormal includes:
and when the output voltage of the second type power supply chip is abnormal, controlling the first type working module to stop working.
A domain controller, comprising: the system comprises a processing module, at least one first-type working module, at least one first-type power chip and at least one second-type power chip; the safety level of the first type power supply chip is not lower than that of the processing module, and the safety level of the processing module is not lower than that of the second type power supply chip and the first type working module; the safety level of the first type of working module is higher than that of the second type of power supply chip; the first type of working module refers to the working voltage required by the first type of power supply chip cannot be met, and the second type of power supply chip can be met; the input ends of the first type power supply chip and the second type power supply chip are connected with a power supply;
the power output end of one first type of power chip is connected with the power input end of the processing module;
the output end of the second type power supply chip is connected with the power supply input end of the first type working module and the sampling input end of the processing module;
the control end of the processing module is connected with the second type power supply chip and/or the enabling end of the first type working module;
and monitoring the output voltage of the second type power supply chip by using the processing module, and stopping supplying power to the first type working module or controlling the first type working module to stop working when the output voltage of the second type power supply chip is abnormal.
As can be seen from the above technical solution, the embodiments of the present application provide a power supply method of a domain controller and a domain controller, where the power supply method of the domain controller uses a second type power supply chip to provide a working power supply for a first type working module, and uses the processing module to monitor an output voltage of the second type power supply chip, so as to achieve the purpose of using a low-security-level power supply chip to supply power to a high-security-level working module on the basis of meeting the power supply security requirements of the working module. This is because, in the power supply method of the domain controller provided in this embodiment, the low-security-level power supply chip (i.e., the second-class power supply chip) is only used to provide the working power supply for the first-class working module, and the work of monitoring the power supply security of the power supply chip is performed by the processing module of the domain controller, where the processing module can meet the monitoring of multiple failure modes of the output voltage of the second-class power supply chip, and meet the requirements of ISO26262 on the power supply security of the system.
Drawings
In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings that are required to be used in the embodiments or the description of the prior art will be briefly described below, and it is obvious that the drawings in the following description are only embodiments of the present application, and that other drawings may be obtained according to the provided drawings without inventive effort to a person skilled in the art.
FIG. 1 is a schematic diagram of a domain controller according to the prior art;
fig. 2 is a flow chart of a power supply method of a domain controller according to an embodiment of the present application;
FIG. 3 is a schematic diagram of a domain controller according to an embodiment of the present application;
FIG. 4 is a schematic diagram of a domain controller according to another embodiment of the present application;
fig. 5 is a schematic structural diagram of a domain controller according to another embodiment of the present application.
Detailed Description
In the prior art, the power supply safety of each working module in the domain controller is monitored by a power supply chip for supplying power to the domain controller, as shown in fig. 1, one power supply chip can supply power to one or more working modules with the safety level equal to or lower than the safety level of the power supply chip, and meanwhile, the power supply safety of the working modules is monitored, for example, in fig. 1, a power supply source supplies working power to a power supply chip 1 and a power supply chip 2, the safety level of the power supply chip 1 is an ASIL D, and the power supply chip 2 is a power supply for the working modules 1 and 2 of ASIL C; the power chip 2 has a security level of ASIL B and supplies power to the work module 3 having a security level of ASIL B, the work module 4 having a security level of ASIL a, and the work module 5 having a security level of QM. The types of power failure modes that can be monitored by the power chips of different security levels are different, and taking as an example the ASIL D security level, the ASIL D power chip needs to be able to diagnose the following failure modes: overvoltage, undervoltage, offset, ringing and glitch, ASIL C power chips need to be able to diagnose the following failure modes: overvoltage, undervoltage and offset, ASIL B power chips need to be able to diagnose the following failure modes: overvoltage and undervoltage. Accordingly, the operational module of the ASIL D requires a power chip for its power supply to be able to diagnose failure modes of overvoltage, undervoltage, offset, oscillation and glitches. In addition, the failure rates of the power supply chips themselves of ASIL D, ASIL C, ASIL B, ASIL a, and QM increase in turn, which is also why the power supply chips can only supply power to one or more work modules whose security level is equal to or lower than their own security level.
Therefore, in fig. 1, the power chip 1 with the security level of ASIL D is capable of supplying power to the working modules with the security levels of ASIL D, ASIL C, ASIL B, ASIL a and QM, and monitoring the power supply security of these working modules, and taking measures to the failed output or the working modules connected thereto when the power supply failure is monitored, so as to avoid the system hazard. The power supply chip with the safety level of ASIL B can only supply power to the working modules with the safety levels of ASIL B, ASIL A and QM, and simultaneously monitor the power supply safety of the working modules, and when the power supply failure is monitored, measures are taken for the failed output or the connected working modules, so that the system hazard is avoided.
As described in the background, this is often the case in domain controller design due to the large variety of working modules inside the domain controller: the output voltage of the power chip with high safety level cannot meet the requirements of all the working modules with high safety level, while the power chip with low safety level just has the capability of providing the output voltage. At this time, if the low-security-level power chip directly supplies power to the high-security-level work module, the power supply security of the work module cannot be ensured, and if the low-security-level power chip is replaced with the high-security-level power chip, the cost of the domain controller increases.
In view of this, an embodiment of the present application provides a power supply method of a domain controller, which is applied to the domain controller, where the domain controller includes: the system comprises a processing module, at least one first-type working module, at least one first-type power chip and at least one second-type power chip; the safety level of the first type power supply chip is not lower than that of the processing module, and the safety level of the processing module is not lower than that of the second type power supply chip and the first type working module; the safety level of the first type of working module is higher than that of the second type of power supply chip; the first type of working module refers to the working voltage required by the first type of power supply chip cannot be met, and the second type of power supply chip can be met; the power supply method of the domain controller comprises the following steps:
supplying power to the first type power supply chip and the second type power supply chip by using a power supply;
providing a working power supply for the processing module by using the first type power supply chip;
providing a working power supply for the first type of working modules by using the second type of power supply chips;
and monitoring the output voltage of the second type power supply chip by using the processing module, and stopping supplying power to the first type working module or controlling the first type working module to stop working when the output voltage of the second type power supply chip is abnormal.
The power supply method of the domain controller utilizes the processing module to monitor the output voltage of the second class power supply chip while utilizing the second class power supply chip to provide working power for the first class working module so as to achieve the purpose of supplying power for the high-safety working module by utilizing the low-safety power supply chip on the basis of meeting the power supply safety requirement of the working module. This is because, in the power supply method of the domain controller provided in this embodiment, the low-security-level power supply chip (i.e., the second-class power supply chip) is only used to provide the working power supply for the first-class working module, and the work of monitoring the power supply security of the power supply chip is performed by the processing module of the domain controller, where the processing module can meet the monitoring of multiple failure modes of the output voltage of the second-class power supply chip, and meet the requirements of ISO26262 on the power supply security of the system.
In addition, the failure rate of the processing module is lower, and the requirements of power supply safety of the working modules of all safety levels can be met.
The following description of the embodiments of the present application will be made clearly and fully with reference to the accompanying drawings, in which it is evident that the embodiments described are only some, but not all, of the embodiments of the present application. All other embodiments, which can be made by one of ordinary skill in the art without undue burden from the present disclosure, are within the scope of the present disclosure.
The embodiment of the application provides a power supply method of a domain controller, as shown in fig. 2, applied to the domain controller, where the domain controller includes: the system comprises a processing module, at least one first-type working module, at least one first-type power chip and at least one second-type power chip; the safety level of the first type power supply chip is not lower than that of the processing module, and the safety level of the processing module is not lower than that of the second type power supply chip and the first type working module; the safety level of the first type of working module is higher than that of the second type of power supply chip; the first type of working module refers to the working voltage required by the first type of power supply chip cannot be met, and the second type of power supply chip can be met; the power supply method of the domain controller comprises the following steps:
s101: supplying power to the first type power supply chip and the second type power supply chip by using a power supply;
s102: providing a working power supply for the processing module by using the first type power supply chip;
s103: providing a working power supply for the first type of working modules by using the second type of power supply chips;
s104: and monitoring the output voltage of the second type power supply chip by using the processing module, and stopping supplying power to the first type working module or controlling the first type working module to stop working when the output voltage of the second type power supply chip is abnormal.
It should be noted that, in this embodiment, since the second type power chip needs to provide power for the first type working module, the processing module needs to monitor the output voltage of the second type power chip, and stop supplying power to the first type working module with abnormal output voltage when the output voltage of the second type power chip is abnormal, the second type power chip needs to establish connection with the first type working module, and the processing module needs to establish connection with the first type working module, in some embodiments of the present application, the processing module also needs to establish connection with the second type power chip.
The first type of power chip can be ASIL D security level or ASIL C security level, etc., and the second type of power chip can be ASIL A security level or ASIL B security level or ASIL C security level, etc. The security level of the first type of working module can be QM or ASIL a or ASIL B or ASIL C, and the security level of the first type of power chip is only required to be ensured to be not lower than the security level of the processing module, and the security level of the processing module is not lower than the security level of the second type of power chip and the first type of working module. In addition, the first type of working module refers to a working module whose required working voltage cannot be met by the first type of power chip (for example, the first type of working module requires 1.3V voltage and cannot be provided by the first type of power chip), and the second type of power chip can be met and has a higher security level than that of the second type of power chip. Other working modules in the domain controller may be powered according to a power supply method in the prior art, which is not limited in this application.
The power supply method of the domain controller utilizes the processing module to monitor the output voltage of the second class power supply chip while utilizing the second class power supply chip to provide working power for the first class working module so as to achieve the purpose of supplying power for the high-safety working module by utilizing the low-safety power supply chip on the basis of meeting the power supply safety requirement of the working module. This is because, in the power supply method of the domain controller provided in this embodiment, the low-security-level power supply chip (i.e., the second-class power supply chip) is only used to provide the working power supply for the first-class working module, and the work of monitoring the power supply security of the power supply chip is performed by the processing module of the domain controller, where the processing module can meet the monitoring of multiple failure modes of the output voltage of the second-class power supply chip, and meet the requirements of ISO26262 on the power supply security of the system.
Domain controller architecture in which the power supply method of the domain controller shown in fig. 2 can be implemented referring to fig. 3, a power supply 10, a first type power supply chip 20, a second type power supply chip 30, a processing module 40, and a first type working module 50 are shown in fig. 3; the second type of power chip 30 is connected to the processing module 40 through an analog-to-digital conversion (Analog Convert Digtial, ADC) port of the processing module 40. In fig. 3, the processing module 40 transmits through the connection established with the first type of operating module or the second type of power chip by taking security measures including: and stopping supplying power to the first type of working modules or controlling the first type of working modules to stop working.
On the basis of the above embodiments, in one embodiment of the present application, the power supply method of the domain controller includes:
s201: supplying power to the first type power supply chip and the second type power supply chip by using a power supply;
s202: providing a working power supply for the processing module by using the first type power supply chip;
s203: providing a working power supply for the first type of working modules by using the second type of power supply chips;
s204: and performing analog-digital conversion sampling on the output voltage of the first type of working module by using the processing module, monitoring a sampling result, judging that the output voltage of the second type of power supply chip is abnormal when the sampling result is abnormal, and stopping supplying power to the first type of working module or controlling the first type of working module to stop working when the output voltage of the second type of power supply chip is abnormal.
In this embodiment, a specific method for monitoring the output voltage of the second type of power supply chip by using the processing module is provided, wherein the analog-to-digital conversion (Analog Convert Digtial, ADC) sampling refers to converting the output voltage in the form of an analog signal into the form of a digital signal and sampling the same.
The analog-to-digital conversion (Analog Convert Digtial, ADC) sampling function of the processing module has a high security level (ASIL D) and can meet the requirements of the ASIL D security level of the first type of working module.
On the basis of the above embodiment, in another embodiment of the present application, the power supply method of the domain controller includes:
s301: supplying power to the first type power supply chip and the second type power supply chip by using a power supply;
s302: providing a working power supply for the processing module by using the first type power supply chip;
s303: providing a working power supply for the first type of working modules by using the second type of power supply chips;
s304: and performing analog-digital conversion sampling on the output voltage of the first type of working module by using the processing module, monitoring a sampling result, judging that the output voltage of the second type of power supply chip is abnormal when any one or more of overvoltage, undervoltage, offset, oscillation and burr occur in the sampling result, and controlling the first type of working module to stop working when the output voltage of the second type of power supply chip is abnormal.
In the present embodiment, a specific method of determining an output voltage abnormality is proposed.
Referring to fig. 4, in fig. 4, a processing module controls a first type of working module to stop working by controlling a working state of the first type of working module.
On the basis of the above embodiment, in yet another embodiment of the present application, as shown in fig. 5, the power supply method of the domain controller includes:
s401: supplying power to the first type power supply chip and the second type power supply chip by using a power supply;
s402: providing a working power supply for the processing module by using the first type power supply chip;
s403: providing a working power supply for the first type of working modules by using the second type of power supply chips;
s404: and performing analog-digital conversion sampling on the output voltage of the first type of working module by using the processing module, monitoring a sampling result, judging that the output voltage of the second type of power chip is abnormal when any one or more of overvoltage, undervoltage, offset, oscillation and burr occur in the sampling result, and controlling the second type of power chip to stop voltage output when the output voltage of the second type of power chip is abnormal.
In this embodiment, a specific method for stopping power supply to the first type of working module when the output voltage of the second type of power supply chip is abnormal is provided.
The processing module needs to have the function of closing the second type power supply chip with abnormal output voltage, so that the processing module needs to be connected with the second type power supply chip.
Referring to fig. 5, in fig. 5, a processing module achieves the purpose of stopping supplying power to a first type of working module by controlling the output of a second type of power chip.
On the basis of the above embodiment, in still another embodiment of the present application, the power supply method of the domain controller includes:
s501: supplying power to the first type power supply chip and the second type power supply chip by using a power supply;
s502: providing a working power supply for the processing module by using the first type power supply chip;
s503: providing a working power supply for the first type of working modules by using the second type of power supply chips;
s504: and performing analog-digital conversion sampling on the output voltage of the second type power supply chip by using the processing module, monitoring a sampling result, judging that the output voltage of the second type power supply chip is abnormal when any one or more of overvoltage, undervoltage, offset, oscillation and burr occur in the sampling result, and controlling the first type working module to stop working when the output voltage of the second type power supply chip is abnormal and the output voltage of the second type power supply chip is abnormal.
In this embodiment, another specific method is provided for stopping supplying power to the first type of working module or controlling the first type of working module to stop working when the output voltage of the second type of power supply chip is abnormal.
Still referring to fig. 4, since the processing module needs to be able to control the first type of working module to stop working, the processing module needs to establish a connection with the first type of working module.
The domain controllers provided in the embodiments of the present application are described below, and a power supply method of a domain controller in the domain controllers described below may be referred to correspondingly to the power supply method of the domain controller described above.
Correspondingly, the embodiment of the application also provides a domain controller, as shown in fig. 3-5, which comprises: a processing module 40, at least one first type of working module 50, at least one first type of power chip 20 and at least one second type of power chip 30; wherein the security level of the first type power chip 20 is not lower than the security level of the processing module 40, and the security level of the processing module 40 is not lower than the security level of the second type power chip 30 and the first type working module 50; the security level of the first type working module 50 is higher than that of the second type power chip 30; the first type of working module 50 refers to the required working voltage of the first type of power chip 20 cannot be satisfied, and the second type of power chip 30 can be satisfied; the input ends of the first type power chip 20 and the second type power chip 30 are connected with a power supply;
a power output terminal of the first type power chip 20 is connected to a power input terminal of the processing module 40;
the output end of the second type power chip 30 is connected with the power input end of the first type working module 50 and the sampling input end of the processing module 40;
the control end of the processing module 40 is connected with the enabling end of the second type power chip 30 and/or the first type working module 50;
the processing module 40 is used to monitor the output voltage of the second type power chip 30, and stop supplying power to the first type working module 50 or control the first type working module 50 to stop working when the output voltage of the second type power chip 30 is abnormal.
It should be noted that, in fig. 3-5, only the working modules, a first type power chip 20, a second type power chip 30 and a first type working module 50 are shown, and in the practical application process, the domain controller may include a plurality of first type power chips 20, a plurality of second type power chips 30, a plurality of processing modules 50 and a plurality of first type working modules 50, which are not limited in this application, and the application is specific to practical situations.
In addition, fig. 3 to 5 also show a power supply 10 for supplying operating power to the first type power supply chip 20 and the second type power supply chip 30.
Alternatively, the processing module 40 may be a micro control unit (Microcontroller Unit, MCU).
Optionally, the security level of the first type power chip 20 is an ASIL D security level.
Optionally, the security level of the second type of power chip 30 is ASIL a, ASIL B, or ASIL C.
Optionally, the security level of the first class working module 50 is QM or ASIL a or ASIL B or ASIL C or ASIL D security level.
In the power supply method according to any of the foregoing embodiments, the second type power chip 30 is used to provide the working power for the first type working module 50, and the processing module 40 is used to monitor the output voltage of the second type power chip 30, so as to achieve the purpose of supplying power to the high-security working module by using the low-security power chip on the basis of meeting the power supply security requirement of the working module. This is because, in the power supply method of the domain controller provided in this embodiment, the low-security-level power supply chip (i.e. the second-type power supply chip 30) is only used for providing the first-type working module 50 with working power, and the work of monitoring the power supply security of the power supply chip is performed by the processing module 40 of the domain controller, and the processing module 40 can meet the monitoring of multiple failure modes of the output voltage of the second-type power supply chip 30, thereby meeting the requirement of the power supply security of the first-type working module 50.
In summary, the embodiments of the present application provide a power supply method of a domain controller and a domain controller, where the power supply method of the domain controller uses a second type power supply chip to provide a working power supply for a first type working module, and uses the processing module to monitor an output voltage of the second type power supply chip, so as to achieve the purpose of using a low-security-level power supply chip to supply power to a high-security-level working module on the basis of meeting a power supply security requirement of the working module. This is because, in the power supply method of the domain controller provided in this embodiment, the low-security-level power supply chip (i.e., the second-class power supply chip) is only used to provide the working power supply for the first-class working module, and the work of monitoring the power supply security of the power supply chip is performed by the processing module of the domain controller, where the processing module can meet the monitoring of multiple failure modes of the output voltage of the second-class power supply chip, and meet the requirements of ISO26262 on the power supply security of the system.
In the present specification, each embodiment is described in a progressive manner, and each embodiment is mainly described in a different point from other embodiments, and identical and similar parts between the embodiments are all enough to refer to each other.
The previous description of the disclosed embodiments is provided to enable any person skilled in the art to make or use the present application. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be applied to other embodiments without departing from the spirit or scope of the application. Thus, the present application is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims (6)

1. A power supply method for a domain controller, the method being applied to the domain controller, the domain controller comprising: the system comprises a processing module, at least one first-type working module, at least one first-type power chip and at least one second-type power chip; the safety level of the first type power supply chip is not lower than that of the processing module, and the safety level of the processing module is not lower than that of the second type power supply chip and the first type working module; the safety level of the first type of working module is higher than that of the second type of power supply chip; the first type of working module refers to the working voltage required by the first type of power supply chip cannot be met, and the second type of power supply chip can be met; the power supply method of the domain controller comprises the following steps:
supplying power to the first type power supply chip and the second type power supply chip by using a power supply;
providing a working power supply for the processing module by using the first type power supply chip;
providing a working power supply for the first type of working modules by using the second type of power supply chips;
and monitoring the output voltage of the second type power supply chip by using the processing module, and stopping supplying power to the first type working module or controlling the first type working module to stop working when the output voltage of the second type power supply chip is abnormal.
2. The method of claim 1, wherein monitoring the output voltage of the second type of power chip with the processing module comprises:
and performing analog-digital conversion sampling on the output voltage of the first type of working module by using the processing module, monitoring a sampling result, and judging that the output voltage of the second type of power supply chip is abnormal when the sampling result is abnormal.
3. The method according to claim 2, wherein the performing analog-digital conversion sampling on the output voltage of the second type power chip by using the processing module, and monitoring a sampling result, and determining that the output voltage of the second type power chip is abnormal when the sampling result is abnormal comprises:
and performing analog-digital conversion sampling on the output voltage of the second type power supply chip by using the processing module, monitoring a sampling result, and judging that the output voltage of the second type power supply chip is abnormal when any one or more of overvoltage, undervoltage, offset, oscillation and burr occur in the sampling result.
4. The method of claim 1, wherein the stopping the power supply to the first type of operation module or controlling the first type of operation module to stop operating when the output voltage of the second type of power chip is abnormal comprises:
and when the output voltage of the second type power supply chip is abnormal, controlling the second type power supply chip to stop outputting the voltage.
5. The method of claim 1, wherein the stopping the power supply to the first type of operation module or controlling the first type of operation module to stop operating when the output voltage of the second type of power chip is abnormal comprises:
and when the output voltage of the second type power supply chip is abnormal, controlling the first type working module to stop working.
6. A domain controller, comprising: the system comprises a processing module, at least one first-type working module, at least one first-type power chip and at least one second-type power chip; the safety level of the first type power supply chip is not lower than that of the processing module, and the safety level of the processing module is not lower than that of the second type power supply chip and the first type working module; the safety level of the first type of working module is higher than that of the second type of power supply chip; the first type of working module refers to the working voltage required by the first type of power supply chip cannot be met, and the second type of power supply chip can be met; the input ends of the first type power supply chip and the second type power supply chip are connected with a power supply;
the power output end of one first type of power chip is connected with the power input end of the processing module;
the output end of the second type power supply chip is connected with the power supply input end of the first type working module and the sampling input end of the processing module;
the control end of the processing module is connected with the second type power supply chip and/or the enabling end of the first type working module;
and monitoring the output voltage of the second type power supply chip by using the processing module, and stopping supplying power to the first type working module or controlling the first type working module to stop working when the output voltage of the second type power supply chip is abnormal.
CN202011554319.0A 2020-12-24 2020-12-24 Power supply method of domain controller and domain controller Active CN114655145B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202011554319.0A CN114655145B (en) 2020-12-24 2020-12-24 Power supply method of domain controller and domain controller

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202011554319.0A CN114655145B (en) 2020-12-24 2020-12-24 Power supply method of domain controller and domain controller

Publications (2)

Publication Number Publication Date
CN114655145A CN114655145A (en) 2022-06-24
CN114655145B true CN114655145B (en) 2023-12-22

Family

ID=82024572

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202011554319.0A Active CN114655145B (en) 2020-12-24 2020-12-24 Power supply method of domain controller and domain controller

Country Status (1)

Country Link
CN (1) CN114655145B (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN117724595B (en) * 2023-05-30 2024-09-17 荣耀终端有限公司 Power management circuit, method, apparatus, electronic device, and readable storage medium

Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2016162624A1 (en) * 2015-04-07 2016-10-13 Valeo Equipements Electriques Moteur Method for implementing a motor vehicle function in accordance with standard asil levels, corresponding system, and motor vehicle including such a system
WO2019024921A1 (en) * 2017-08-04 2019-02-07 华为技术有限公司 Power supply circuit, electronic assembly, mobile terminal, and power supply control method
CN208915113U (en) * 2018-09-30 2019-05-31 中国重汽集团济南动力有限公司 A kind of body control system and vehicle with functional safety
CN210167967U (en) * 2019-07-31 2020-03-20 比亚迪股份有限公司 Motor controller, power supply circuit of motor controller, and vehicle
CN210941656U (en) * 2019-09-19 2020-07-07 宝能汽车有限公司 Monitoring circuit and monitoring system of vehicle control unit and vehicle
CN111490524A (en) * 2020-05-20 2020-08-04 郑州精益达汽车零部件有限公司 DCDC converter with security level of ASI L B
CN111506466A (en) * 2020-04-24 2020-08-07 卡斯柯信号有限公司 Interactive redundancy monitoring system and method for key voltage
DE102019205237A1 (en) * 2019-04-11 2020-10-15 Audi Ag Displaying ASIL-D information using a less secure device

Patent Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2016162624A1 (en) * 2015-04-07 2016-10-13 Valeo Equipements Electriques Moteur Method for implementing a motor vehicle function in accordance with standard asil levels, corresponding system, and motor vehicle including such a system
WO2019024921A1 (en) * 2017-08-04 2019-02-07 华为技术有限公司 Power supply circuit, electronic assembly, mobile terminal, and power supply control method
CN208915113U (en) * 2018-09-30 2019-05-31 中国重汽集团济南动力有限公司 A kind of body control system and vehicle with functional safety
DE102019205237A1 (en) * 2019-04-11 2020-10-15 Audi Ag Displaying ASIL-D information using a less secure device
CN210167967U (en) * 2019-07-31 2020-03-20 比亚迪股份有限公司 Motor controller, power supply circuit of motor controller, and vehicle
CN210941656U (en) * 2019-09-19 2020-07-07 宝能汽车有限公司 Monitoring circuit and monitoring system of vehicle control unit and vehicle
CN111506466A (en) * 2020-04-24 2020-08-07 卡斯柯信号有限公司 Interactive redundancy monitoring system and method for key voltage
CN111490524A (en) * 2020-05-20 2020-08-04 郑州精益达汽车零部件有限公司 DCDC converter with security level of ASI L B

Also Published As

Publication number Publication date
CN114655145A (en) 2022-06-24

Similar Documents

Publication Publication Date Title
US9941692B2 (en) Overvoltage protection for a multivoltage vehicle electrical system
US9625894B2 (en) Multi-channel control switchover logic
US11349676B2 (en) Power providing device and method, power receiving device
CN114655145B (en) Power supply method of domain controller and domain controller
US10122291B2 (en) Redundant control device and method of HVDC system
JP2013025570A (en) Electronic control unit
JP5064762B2 (en) Discharge lamp drive unit
US20120303143A1 (en) Safety-extension base and control method thereof
KR102630314B1 (en) AC-DC converter employing high efficiency load sharing with parrallel structure
KR101141038B1 (en) Parallel DC/DC converter control system using CAN communication
KR101446929B1 (en) System for controlling power-up sequence
CN117254546A (en) System power supply structure, backup power supply device, control method, and storage medium
CN107731260B (en) SSD power supply method and system and SSD
JP6262323B2 (en) Power device control system
CN111049460B (en) Three-redundancy double-drive motor control platform and control method
JP7068458B2 (en) Conveyor control device
US7882276B2 (en) Input/output module for a programmable controller
CN212009368U (en) Servo controller based on FPGA
JP2017195654A (en) Protection circuit self-diagnosis device and protection circuit diagnostic method
US9209678B2 (en) Power converter system providing a load with electrical power
JP6073181B2 (en) Power converter and power conversion system
US10678205B2 (en) Instrumentation control system
CN109888766A (en) Bus electricity taking equipment, electricity utilization control method, device and system thereof, and electrical equipment
CN114537153B (en) Isolation system for high-low voltage signals of motor controller
JP2018136691A (en) DC concentrated power supply system

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant