CN116545217B - ARM core controller chip-based integrated motor controller with function safety ASIL-D - Google Patents
ARM core controller chip-based integrated motor controller with function safety ASIL-D Download PDFInfo
- Publication number
- CN116545217B CN116545217B CN202310345774.7A CN202310345774A CN116545217B CN 116545217 B CN116545217 B CN 116545217B CN 202310345774 A CN202310345774 A CN 202310345774A CN 116545217 B CN116545217 B CN 116545217B
- Authority
- CN
- China
- Prior art keywords
- power supply
- supply circuit
- circuit
- arm core
- signal
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000005070 sampling Methods 0.000 claims abstract description 72
- 238000012544 monitoring process Methods 0.000 claims abstract description 34
- 230000007246 mechanism Effects 0.000 claims abstract description 19
- 238000003745 diagnosis Methods 0.000 claims description 37
- 238000012545 processing Methods 0.000 claims description 11
- 238000004891 communication Methods 0.000 claims description 5
- 230000001360 synchronised effect Effects 0.000 claims description 4
- 238000004458 analytical method Methods 0.000 claims description 3
- 238000013461 design Methods 0.000 abstract description 13
- 238000001514 detection method Methods 0.000 abstract description 4
- 229920006132 styrene block copolymer Polymers 0.000 description 11
- 238000004519 manufacturing process Methods 0.000 description 5
- 230000010354 integration Effects 0.000 description 4
- 238000012795 verification Methods 0.000 description 4
- 238000012986 modification Methods 0.000 description 3
- 230000004048 modification Effects 0.000 description 3
- 230000002093 peripheral effect Effects 0.000 description 3
- 238000004364 calculation method Methods 0.000 description 2
- 230000000694 effects Effects 0.000 description 2
- 230000007774 longterm Effects 0.000 description 2
- 238000012360 testing method Methods 0.000 description 2
- XLYOFNOQVPJJNP-UHFFFAOYSA-N water Substances O XLYOFNOQVPJJNP-UHFFFAOYSA-N 0.000 description 2
- 230000002411 adverse Effects 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 238000010586 diagram Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 239000000463 material Substances 0.000 description 1
- 238000000034 method Methods 0.000 description 1
- 230000009467 reduction Effects 0.000 description 1
- 239000004065 semiconductor Substances 0.000 description 1
- 230000008054 signal transmission Effects 0.000 description 1
- 235000012431 wafers Nutrition 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H02—GENERATION; CONVERSION OR DISTRIBUTION OF ELECTRIC POWER
- H02M—APPARATUS FOR CONVERSION BETWEEN AC AND AC, BETWEEN AC AND DC, OR BETWEEN DC AND DC, AND FOR USE WITH MAINS OR SIMILAR POWER SUPPLY SYSTEMS; CONVERSION OF DC OR AC INPUT POWER INTO SURGE OUTPUT POWER; CONTROL OR REGULATION THEREOF
- H02M1/00—Details of apparatus for conversion
- H02M1/0083—Converters characterised by their input or output configuration
- H02M1/009—Converters characterised by their input or output configuration having two or more independently controlled outputs
-
- H—ELECTRICITY
- H02—GENERATION; CONVERSION OR DISTRIBUTION OF ELECTRIC POWER
- H02H—EMERGENCY PROTECTIVE CIRCUIT ARRANGEMENTS
- H02H7/00—Emergency protective circuit arrangements specially adapted for specific types of electric machines or apparatus or for sectionalised protection of cable or line systems, and effecting automatic switching in the event of an undesired change from normal working conditions
- H02H7/10—Emergency protective circuit arrangements specially adapted for specific types of electric machines or apparatus or for sectionalised protection of cable or line systems, and effecting automatic switching in the event of an undesired change from normal working conditions for converters; for rectifiers
- H02H7/12—Emergency protective circuit arrangements specially adapted for specific types of electric machines or apparatus or for sectionalised protection of cable or line systems, and effecting automatic switching in the event of an undesired change from normal working conditions for converters; for rectifiers for static converters or rectifiers
-
- H—ELECTRICITY
- H02—GENERATION; CONVERSION OR DISTRIBUTION OF ELECTRIC POWER
- H02M—APPARATUS FOR CONVERSION BETWEEN AC AND AC, BETWEEN AC AND DC, OR BETWEEN DC AND DC, AND FOR USE WITH MAINS OR SIMILAR POWER SUPPLY SYSTEMS; CONVERSION OF DC OR AC INPUT POWER INTO SURGE OUTPUT POWER; CONTROL OR REGULATION THEREOF
- H02M1/00—Details of apparatus for conversion
- H02M1/0003—Details of control, feedback or regulation circuits
-
- H—ELECTRICITY
- H02—GENERATION; CONVERSION OR DISTRIBUTION OF ELECTRIC POWER
- H02P—CONTROL OR REGULATION OF ELECTRIC MOTORS, ELECTRIC GENERATORS OR DYNAMO-ELECTRIC CONVERTERS; CONTROLLING TRANSFORMERS, REACTORS OR CHOKE COILS
- H02P29/00—Arrangements for regulating or controlling electric motors, appropriate for both AC and DC motors
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02T—CLIMATE CHANGE MITIGATION TECHNOLOGIES RELATED TO TRANSPORTATION
- Y02T10/00—Road transport of goods or passengers
- Y02T10/60—Other road transportation technologies with climate change mitigation effect
- Y02T10/72—Electric energy management in electromobility
Landscapes
- Engineering & Computer Science (AREA)
- Power Engineering (AREA)
- Control Of Electric Motors In General (AREA)
Abstract
The invention discloses an integrated motor controller of a functional safety ASIL-D based on an ARM core controller chip, which is used for providing a hardware foundation for the multifunctional integrated motor control of a new energy automobile and comprises an ARM core microprocessor, a multi-stage power supply circuit, a signal monitoring circuit and a state monitoring circuit, wherein the multi-stage power supply circuit comprises a main power supply circuit and a plurality of power supply circuits, and the input end of the main power supply circuit is connected with an external power supply and performs surge protection. The invention discloses an integrated motor controller based on an ARM core controller chip and used for functional safety ASIL-D, which realizes a multistage checking mechanism by designing an application circuit, a power signal and a control signal sampling and checking detection of an ARM core microprocessor, thereby realizing the ASIL-D scheme design of the integrated motor controller system, wherein a power supply adopts a multistage iteration series-parallel scheme, and realizing the heavy current power supply of the ARM processor chip.
Description
Technical Field
The invention belongs to the technical field of new energy automobile motor controllers, and particularly relates to an integrated motor controller of a functional safety ASIL-D based on an ARM core controller chip.
Background
The inverter is a power output device on the new energy automobile, is a core safety part for controlling the output parameters of the motor, controls the output power of the motor to drive the whole automobile to run, is the only power unit of the new energy automobile, and realizes the running and stopping of the automobile. At present, a driving motor controller of a new energy automobile generally adopts a controller chip with a traditional MCU architecture such as Infrax, NXP and the like as a core operation unit, and the MCU has long-term application in the industrial and automobile fields. The chip is generally in a global allocation state from wafers, package testing, testing and the like, is high in price, and has adverse effects of shortage of goods, low cost performance and the like on the cost of a new energy automobile and a motor controller. With the development of the domestic micro-processing semiconductor industry, ARM embedded technology can be applied to the inner core architecture of the domestic vehicle-standard MCU. The ARM architecture microprocessor has a long-term application foundation in other fields such as industry, and is widely applied to parts such as instruments, vehicle bodies, vehicles and the like in the prior new energy automobiles.
With the perfection of hardware and software support platforms of ARM core MCU, new energy automobile safety parts have started to use ARM core processor chips. The motor controller of the core safety part of the new energy automobile needs higher-level functional safety design, and the related perfection design needs to be carried out from the perspective of the motor controller system due to the key characteristic difference between the ARM core chip architecture and the traditional MCU.
At present, in order to achieve the ASIL-D system level, an integrated automobile motor controller generally adopts a scheme that a traditional MCU is matched with a system basic power supply chip (System Basis Chip, SBC), the SBC and the MCU are communicated to form verification check on the MCU, and the power supply output of the SBC supplies power to the MCU and other low-voltage peripheral circuits. Typically SBCs typically have 3-5 output channels.
The scheme has the obvious following disadvantages:
1) The traditional MCU microprocessor chip and SBC products are expensive and only the Infrax and NXP products have mature mass production products. The microprocessor chip related by the architecture scheme has higher price, which is very unfavorable for improving the cost performance of the product; and the production and supply mechanisms of the traditional MCU and the SBC are foreign, so that the risk of uncontrollable supply exists in the production of domestic new energy automobile products.
2) With the trend of integration and miniaturization of new energy automobiles, the integrated functions in a motor controller are more and more, and the output channel and the output current limit of an SBC in the traditional power supply scheme cannot meet the high-power requirement of the integration of the functions of the new energy automobiles;
3) The traditional MCU microprocessor chip has low main frequency and low calculation capability, and has high software load rate and poor running stability in an integrated motor controller system.
Accordingly, the above problems are further improved.
Disclosure of Invention
The invention mainly aims to provide an integrated motor controller of functional safety ASIL-D based on an ARM core controller chip, which comprises an ARM core microprocessor chip, an associated circuit, a multi-stage power circuit, a peripheral circuit, an IGBT driving circuit and a signal sampling circuit. The design of ASIL-D scheme of the integrated motor controller system is realized by designing an application circuit, a power supply signal and a control signal sampling and checking detection of the ARM core microprocessor, wherein the power supply adopts a multistage iteration series-connection and parallel-connection scheme to realize high-current power supply of an ARM processor chip; sampling detection is carried out on peripheral key signals, so that synchronous check of operation data and check data is realized; and an external WDG mode is adopted for the MCU, so that the monitoring of the running state of the MCU is realized, and the ASIL-D function safety level of the motor controller system is realized.
In order to achieve the above purpose, the invention provides an integrated motor controller of functional safety ASIL-D based on ARM core controller chip, which is used for providing hardware foundation for the multifunctional integrated motor control of new energy automobiles, and comprises an ARM core microprocessor, a multi-stage power supply circuit, a signal monitoring circuit and a state monitoring circuit, wherein:
the multi-stage power supply circuit comprises a main power supply circuit (namely a power supply circuit 1) and a plurality of secondary power supply circuits, wherein the input end of the main power supply circuit is connected with an external power supply and performs surge protection, and the output end of the main power supply circuit has the power supply voltage with a protection function to the power supply end of external parts (parts with the whole vehicle control functions such as a water pump, a fan, a sensor and the like) and the input end of each secondary power supply circuit;
the signal monitoring circuit samples the signals including enabling and outputting of the main power circuit and the secondary power circuits through the signal sampling circuit, and the obtained sampling data are transmitted to the ARM core microprocessor and monitored in real time by the ARM core microprocessor so as to ensure the stability and reliability of the power supply through reasonable diagnosis logic; the communication signals of all the related circuits are also monitored in real time by the ARM core microprocessor through a designed diagnosis mechanism so as to ensure that the power supply circuit is in a normal power supply state; for key signals comprising IGBT control signals and rotation sampling signals, judging whether the actual output result of sampling check is consistent with the calculated output result of the ARM core microprocessor or not to ensure the reliability and the correctness of the output signals;
the state monitoring circuit monitors the running state of the ARM core microprocessor through the watchdog circuit and is used for preventing running problems inside the chip from occurring so as to ensure the correctness and the effectiveness of output signals and monitoring signals.
As a further preferable embodiment of the above-described technical solution, the secondary power supply circuit includes a second power supply circuit (i.e., power supply circuit 2), a third power supply circuit (i.e., power supply circuit 3), a fourth power supply circuit (i.e., power supply circuit 4), a fifth power supply circuit (i.e., power supply circuit 5), and a sixth power supply circuit (i.e., power supply circuit 6), wherein:
the second power supply circuit is used as a next-stage serial power supply circuit of the main power supply circuit module, and converts the output of the main power supply circuit into an internal functional circuit comprising a logic circuit and a signal sampling circuit for supplying power;
the third power supply circuit is used as a next-stage serial power supply circuit of the second power supply circuit module, and the output of the second power supply circuit is converted into a power supply for directly supplying power to an ARM core microprocessor (CPU) so as to supply power to the ARM core microprocessor chip;
the fourth power supply circuit and the fifth power supply circuit are used as a next-stage serial power supply circuit of the main power supply circuit, and are connected in parallel and synchronous to supply power for an external functional circuit comprising an accelerator pedal and a brake pedal, so that functional robustness and signal safety level are ensured;
and the sixth power supply circuit is used as a next-stage serial power supply circuit of the main power supply circuit module, and converts the output of the main power supply circuit into a power supply for supplying power to the IGBT driving circuit, the motor rotating speed and the resolver circuit with angle analysis.
As a further preferable technical scheme of the technical scheme, the method is implemented as follows for reasonable diagnosis logic:
sampling voltage values of power supply circuits (comprising a main power supply circuit and each secondary power supply circuit) in real time through a signal sampling circuit to obtain voltage sampling data of each power supply circuit, and setting different diagnosis periods (for example, within a range of 100ms-1 s) and different diagnosis precision thresholds (for example, within 10 percent) for different power supply circuits so as to judge whether the voltage sampling data of each power supply circuit accords with the corresponding diagnosis precision threshold in the diagnosis period;
if the voltage sampling data is within the corresponding diagnosis precision threshold, the ARM core microprocessor outputs the safe information of the current power supply circuit, wherein the safe information is reliable and stable; if the voltage sampling data is not within the corresponding diagnosis precision threshold value, the ARM core microprocessor outputs alarm information which is not in reliable and stable state of the current power supply circuit and executes corresponding processing actions.
As a further preferable technical scheme of the technical scheme, the designed diagnosis mechanism is specifically implemented to monitor in real time:
and for different types of circuits in the associated circuits, sampling points matched with the corresponding circuits are selected for sampling so as to obtain corresponding sampling data, and different sampling data are diagnosed through different diagnosis mechanisms.
As a further preferable technical solution of the above technical solution, the judging, sampling and checking of the key signal is specifically implemented as follows:
the ARM core microprocessor ensures the reliability and the correctness of the output signal through the mutual check of the primary output signal (namely, the primary function signal in the figure) and the secondary signal (namely, the secondary function monitoring signal) sampling, wherein:
the primary output signal is the ARM core microprocessor to represent target output (such as output to an external part), and a value corresponding to the target output is stored in an output register;
the second-level signal is sampled and output by the signal sampling circuit, and the value corresponding to the sampled second-level signal is stored in a sampling register of the ARM core microprocessor;
the ARM core microprocessor establishes a checking mechanism, compares whether a value corresponding to the target output in the output register and a value in the sampling register are consistent according to a checking period (preferably 1ms-100 ms), if so, outputs safe information that the current output signal is reliable and correct, and otherwise, outputs alarm information that the current output signal is not reliable and correct.
Drawings
Fig. 1 is a schematic diagram of an integrated motor controller of the present invention based on an ARM core controller chip for functional safety ASIL-D.
Detailed Description
The following description is presented to enable one of ordinary skill in the art to make and use the invention. The preferred embodiments in the following description are by way of example only and other obvious variations will occur to those skilled in the art. The basic principles of the invention defined in the following description may be applied to other embodiments, variations, modifications, equivalents, and other technical solutions without departing from the spirit and scope of the invention.
In a preferred embodiment of the present invention, it should be noted by those skilled in the art that the inverter and external power source, etc. to which the present invention relates can be regarded as prior art.
Preferred embodiments.
As shown in fig. 1, the invention discloses an integrated motor controller of functional safety ASIL-D based on an ARM core controller chip, which is used for providing a hardware basis for multifunctional integrated motor control of a new energy automobile, and comprises an ARM core microprocessor, a multi-stage power supply circuit, a signal monitoring circuit and a state monitoring circuit, wherein:
the multi-stage power supply circuit comprises a main power supply circuit (namely a power supply circuit 1 in the figure) and a plurality of secondary power supply circuits, wherein the input end of the main power supply circuit is connected with an external power supply and performs surge protection, and the output end of the main power supply circuit has the power supply voltage with a protection function to the power supply end of external parts (parts with whole vehicle control functions such as a water pump, a fan and a sensor) and the input end of each secondary power supply circuit;
the signal monitoring circuit samples the signals including enabling and outputting of the main power circuit and the secondary power circuits through the signal sampling circuit, and the obtained sampling data are transmitted to the ARM core microprocessor and monitored in real time by the ARM core microprocessor so as to ensure the stability and reliability of the power supply through reasonable diagnosis logic; the communication signals of all the related circuits are also monitored in real time by the ARM core microprocessor through a designed diagnosis mechanism so as to ensure that the power supply circuit is in a normal power supply state; for key signals comprising IGBT control signals and rotation sampling signals, judging whether the actual output result of sampling check is consistent with the calculated output result of the ARM core microprocessor or not to ensure the reliability and the correctness of the output signals;
the state monitoring circuit monitors the running state of the ARM core microprocessor through the watchdog circuit and is used for preventing running problems inside the chip from occurring so as to ensure the correctness and the effectiveness of output signals and monitoring signals.
Specifically, the secondary power supply circuit includes a second power supply circuit (i.e., power supply circuit 2), a third power supply circuit (i.e., power supply circuit 3), a fourth power supply circuit (i.e., power supply circuit 4), a fifth power supply circuit (i.e., power supply circuit 5), and a sixth power supply circuit (i.e., power supply circuit 6), wherein:
the second power supply circuit is used as a next-stage serial power supply circuit of the main power supply circuit module, and converts the output of the main power supply circuit into an internal functional circuit comprising a logic circuit and a signal sampling circuit for supplying power;
the third power supply circuit is used as a next-stage serial power supply circuit of the second power supply circuit module, and the output of the second power supply circuit is converted into a power supply for directly supplying power to an ARM core microprocessor (CPU) so as to supply power to the ARM core microprocessor chip;
the fourth power supply circuit and the fifth power supply circuit are used as a next-stage serial power supply circuit of the main power supply circuit, and are connected in parallel and synchronous to supply power for an external functional circuit comprising an accelerator pedal and a brake pedal, so that functional robustness and signal safety level are ensured;
and the sixth power supply circuit is used as a next-stage serial power supply circuit of the main power supply circuit module, and converts the output of the main power supply circuit into a power supply for supplying power to the IGBT driving circuit, the motor rotating speed and the resolver circuit with angle analysis.
More specifically, for rational diagnostic logic is embodied as:
sampling voltage values of power supply circuits (comprising a main power supply circuit and each secondary power supply circuit) in real time through a signal sampling circuit to obtain voltage sampling data of each power supply circuit, and setting different diagnosis periods (for example, within a range of 100ms-1 s) and different diagnosis precision thresholds (for example, within 10 percent) for different power supply circuits so as to judge whether the voltage sampling data of each power supply circuit accords with the corresponding diagnosis precision threshold in the diagnosis period;
if the voltage sampling data is within the corresponding diagnosis precision threshold, the ARM core microprocessor outputs the safe information of the current power supply circuit, wherein the safe information is reliable and stable; if the voltage sampling data is not within the corresponding diagnosis precision threshold value, the ARM core microprocessor outputs alarm information which is not in reliable and stable state of the current power supply circuit and executes corresponding processing actions.
Further, the real-time monitoring of the designed diagnosis mechanism is specifically implemented as follows:
and for different types of circuits in the associated circuits, sampling points matched with the corresponding circuits are selected for sampling so as to obtain corresponding sampling data, and different sampling data are diagnosed through different diagnosis mechanisms.
1) For a spin-on circuit; monitoring the amplitude and the frequency of the feedback signal by real-time sampling;
2) For a current sampling circuit: sampling the power supply voltage and the sampling signal of the monitoring circuit chip in real time;
3) And the back sampling of driving signals of a driving chip of the IGBT driving circuit.
Multiple levels of diagnosis are performed, for example:
1) For signal diagnosis of the rotary circuit, mainly detecting whether output duplication, frequency and the like of the rotary signal are in a normal range; detecting whether the feedback signal is within normal electrical parameters; if the fault is not in the normal range, the register is required to record faults and is used for fault detection;
2) For the power diagnosis of the rotary transformer circuit, whether the power of the rotary transformer circuit is in a normal range is monitored, if the power is not in the normal range, the signal diagnosis is meaningless and can be covered; this diagnosis is of higher priority.
Further, the judging sampling checking of the key signals is specifically implemented as follows:
the ARM core microprocessor ensures the reliability and the correctness of the output signal through the mutual check of the primary output signal (namely, the primary function signal in the figure) and the secondary signal (namely, the secondary function monitoring signal) sampling, wherein:
the primary output signal is the ARM core microprocessor to represent target output (such as output to an external part), and a value corresponding to the target output is stored in an output register;
the second-level signal is sampled and output by the signal sampling circuit, and the value corresponding to the sampled second-level signal is stored in a sampling register of the ARM core microprocessor;
the ARM core microprocessor establishes a checking mechanism, compares whether a value corresponding to the target output in the output register and a value in the sampling register are consistent according to a checking period (preferably 1ms-100 ms), if so, outputs safe information that the current output signal is reliable and correct, and otherwise, outputs alarm information that the current output signal is not reliable and correct.
Preferably, the invention adopts ARM core domestic microprocessor as operation core, and matches with independent multi-stage power circuit to realize multifunctional integrated basic function; the traditional automobile MCU and the traditional SBC chip are avoided, the product competitiveness is improved, the supply risk is avoided, and a hardware foundation is provided for multifunctional integration. The ARM core micro-processing chip has high main frequency, can greatly improve the calculation speed of each function and reduce the software load rate.
The invention adopts the design of a multi-stage power supply monitoring circuit and a signal monitoring circuit, and matches with circuit working time sequence logic, thereby realizing the mutual verification of the primary output signal and the secondary signal sampling of key control signals and power supply signals. An external WDG (watchdog) chip is adopted, the WDG and the MCU are in timing communication while the microprocessor chip monitors the WDG power supply, the running state of the MCU is monitored, and the monitoring and verification of the running state of the ARM core microprocessor chip is realized.
On the basis of solving the more load requirements of the multifunctional integration of the new energy automobile, the SBC chip is avoided; the ASIL-D scheme design of the multifunctional integrated motor controller is realized through a multi-stage verification mechanism, and the whole scheme realizes the aims of cost reduction and efficiency enhancement and is easy to popularize in mass production.
For the (secondary) signal monitoring circuit, all power circuit modules are enabled to be monitored in real time by an ARM core microprocessor through a signal sampling circuit, and the stability and reliability of a power supply are ensured through reasonable diagnosis logic; all related circuit communication signals are also monitored by the ARM core micro-processing chip through a designed diagnosis mechanism, so that the normal state of the power supply circuit function is ensured. And aiming at key signals such as IGBT control signals, rotary sampling signals and the like, respectively designing a secondary monitoring circuit, and ensuring the reliability and the correctness of the output signals by sampling and checking whether the actual output result is consistent with the calculated output result of the ARM core microprocessor.
For the state monitoring circuit of the (three-level) ARM core microprocessor, the running state of the microprocessor is monitored through the WDG principle, so that the running problem inside a chip is prevented, and the correctness and the effectiveness of output signals and the correctness and the effectiveness of monitoring signals are ensured.
The invention has the beneficial effects that:
(1) The domestic ARM core microprocessor chip is adopted to replace a singlechip chip used by a traditional new energy automobile; the conventional SBC power scheme is replaced with an independent power scheme. The chip supply risk is avoided, and the cost performance competitiveness of the product is effectively improved. Meanwhile, the operation capability of the integrated motor controller is effectively improved, the software load rate is effectively reduced, and the product reliability is improved.
(2) The reliability of the integrated motor controller related to the functional circuit and the safety power supply design of the redundant circuit of the key model of the whole vehicle control are ensured by designing the serial and parallel schemes of the multi-stage power supply.
(3) The integrated motor controller function is realized by designing a primary function signal; designing a secondary function monitoring signal and a primary function signal to check and ensure the reliability and the effectiveness of the system signal; and the design of three-level MCU monitoring signals ensures the signal processing accuracy of ARM core micro-processing.
Based on the design scheme, the functional safety ASIL-D grade design of the integrated motor controller based on domestic ARM micro-processing is realized.
In the multifunctional integrated motor controller product, the integrated motor controller design utilizing the domestic ARM micro-processing is realized by utilizing the scheme of connecting the domestic ARM micro-processing chip and the independent power supply in series and in parallel, so that the supply risk of the processor chip and the SBC chip is avoided, the system cost is reduced, and the product competitiveness is improved. The reliability and the effectiveness of system signals are guaranteed by designing a primary signal transmission, a secondary monitoring signal sampling and checking mechanism, and the correctness of the ARM core processor is guaranteed by a tertiary monitoring signal mechanism. The integrated motor controller scheme of ASIL-D grade is realized while the original functional effect is ensured.
The integrated motor controller system mechanism design and circuit module design are realized, the system material cost is reduced, the chip supply risk is avoided, the product competitiveness is effectively improved, the mass production is easy, the integrated function computing capability is effectively improved, and the ASIL-D function safety level requirement of a whole vehicle factory on the integrated motor controller can be met.
It should be noted that technical features such as an inverter and an external power source related to the present application should be considered as the prior art, and specific structures, operating principles, and control modes and spatial arrangement related to the technical features may be selected conventionally in the art, and should not be considered as the point of the present application, which is not further specifically described in detail.
Modifications of the embodiments described above, or equivalents of some of the features may be made by those skilled in the art, and any modifications, equivalents, improvements or etc. within the spirit and principles of the present invention are intended to be included within the scope of the present invention.
Claims (5)
1. An integrated motor controller of functional safety ASIL-D based on ARM core controller chip for providing the hardware basis for the multi-functional integrated motor control of new energy automobile, its characterized in that includes ARM core microprocessor, multistage power supply circuit, signal monitoring circuit and state monitoring circuit, wherein:
the multi-stage power supply circuit comprises a main power supply circuit and a plurality of secondary power supply circuits, wherein the input end of the main power supply circuit is connected with an external power supply and performs surge protection, and the main power supply circuit outputs a power supply voltage with a protection function to the power supply end of an external part and the input end of each secondary power supply circuit;
the signal monitoring circuit samples the signals including enabling and outputting of the main power circuit and the secondary power circuits through the signal sampling circuit, and the obtained sampling data are transmitted to the ARM core microprocessor and monitored in real time by the ARM core microprocessor so as to ensure the stability and reliability of the power supply through reasonable diagnosis logic; the communication signals of all the related circuits are also monitored in real time by the ARM core microprocessor through a designed diagnosis mechanism so as to ensure that the power supply circuit is in a normal power supply state; for key signals comprising IGBT control signals and rotation sampling signals, judging whether the actual output result of sampling check is consistent with the calculated output result of the ARM core microprocessor or not to ensure the reliability and the correctness of the output signals;
the state monitoring circuit monitors the running state of the ARM core microprocessor through the watchdog circuit and is used for preventing running problems inside the chip from occurring so as to ensure the correctness and the effectiveness of output signals and monitoring signals.
2. The integrated motor controller of claim 1, wherein the secondary power supply circuit comprises a second power supply circuit, a third power supply circuit, a fourth power supply circuit, a fifth power supply circuit, and a sixth power supply circuit, wherein:
the second power supply circuit is used as a next-stage serial power supply circuit of the main power supply circuit module, and converts the output of the main power supply circuit into an internal functional circuit comprising a logic circuit and a signal sampling circuit for supplying power;
the third power supply circuit is used as a next-stage serial power supply circuit of the second power supply circuit module, and the output of the second power supply circuit is converted into a power supply for directly supplying power to the ARM core microprocessor so as to supply power to the ARM core microprocessor chip;
the fourth power supply circuit and the fifth power supply circuit are used as a next-stage serial power supply circuit of the main power supply circuit, and are connected in parallel and synchronous to supply power for an external functional circuit comprising an accelerator pedal and a brake pedal, so that functional robustness and signal safety level are ensured;
and the sixth power supply circuit is used as a next-stage serial power supply circuit of the main power supply circuit module, and converts the output of the main power supply circuit into a power supply for supplying power to the IGBT driving circuit, the motor rotating speed and the resolver circuit with angle analysis.
3. The integrated motor controller of claim 2, wherein the functional safety ASIL-D based on an ARM core controller chip is implemented for rational diagnostic logic:
the voltage value of the power supply circuit is sampled in real time through the signal sampling circuit so as to obtain voltage sampling data of each power supply circuit, different diagnosis periods and different diagnosis precision thresholds are set for different power supply circuits, and therefore whether the voltage sampling data of each power supply circuit accords with the corresponding diagnosis precision threshold in the diagnosis period is judged;
if the voltage sampling data is within the corresponding diagnosis precision threshold, the ARM core microprocessor outputs the safe information of the current power supply circuit, wherein the safe information is reliable and stable; if the voltage sampling data is not within the corresponding diagnosis precision threshold value, the ARM core microprocessor outputs alarm information which is not in reliable and stable state of the current power supply circuit and executes corresponding processing actions.
4. The integrated motor controller of functional safety ASIL-D based on an ARM core controller chip of claim 3, wherein the designed diagnostic mechanism is implemented to monitor in real time as follows:
and for different types of circuits in the associated circuits, sampling points matched with the corresponding circuits are selected for sampling so as to obtain corresponding sampling data, and different sampling data are diagnosed through different diagnosis mechanisms.
5. The integrated motor controller of functional safety ASIL-D based on an ARM core controller chip of claim 4, wherein the judging, sampling and checking of the key signal is implemented as follows:
the ARM core microprocessor ensures the reliability and the correctness of the output signal through the mutual check of the primary output signal and the secondary signal, wherein:
the first-level output signal is represented by the ARM core microprocessor and is used for representing target output and storing a value corresponding to the target output into an output register;
the second-level signal is sampled and output by the signal sampling circuit, and the value corresponding to the sampled second-level signal is stored in a sampling register of the ARM core microprocessor;
the ARM core microprocessor establishes a checking mechanism, compares whether a value corresponding to the target output in the output register and a value in the sampling register are consistent according to the checking period, if so, outputs safe information that the current output signal is reliable and correct, and otherwise, outputs alarm information that the current output signal is not reliable and correct.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202310345774.7A CN116545217B (en) | 2023-04-03 | 2023-04-03 | ARM core controller chip-based integrated motor controller with function safety ASIL-D |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202310345774.7A CN116545217B (en) | 2023-04-03 | 2023-04-03 | ARM core controller chip-based integrated motor controller with function safety ASIL-D |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN116545217A CN116545217A (en) | 2023-08-04 |
| CN116545217B true CN116545217B (en) | 2024-04-09 |
Family
ID=87442574
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202310345774.7A Active CN116545217B (en) | 2023-04-03 | 2023-04-03 | ARM core controller chip-based integrated motor controller with function safety ASIL-D |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN116545217B (en) |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101698265A (en) * | 2009-10-29 | 2010-04-28 | 华南理工大学 | Full-digital dual-inverter alternating magnetic control arc generation device |
| CN102006010A (en) * | 2010-12-23 | 2011-04-06 | 湖南科技大学 | Variable frequency driving control method and device for high-power mine hoist |
| CN102510238A (en) * | 2011-11-30 | 2012-06-20 | 中国科学院电工研究所 | Program-control pulse generator used for repetition frequency high-voltage pulse power supply |
| KR20140072543A (en) * | 2012-12-05 | 2014-06-13 | 삼성전기주식회사 | Gate driving device and inverter having the same |
| CN206657225U (en) * | 2017-04-28 | 2017-11-21 | 国网安徽省电力公司安庆供电公司 | A kind of New-energy electric vehicle charging station monitor terminal |
| CN112894095A (en) * | 2021-01-11 | 2021-06-04 | 华南理工大学 | Digital underwater welding power supply capable of outputting multiple external characteristics and working method thereof |
-
2023
- 2023-04-03 CN CN202310345774.7A patent/CN116545217B/en active Active
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101698265A (en) * | 2009-10-29 | 2010-04-28 | 华南理工大学 | Full-digital dual-inverter alternating magnetic control arc generation device |
| CN102006010A (en) * | 2010-12-23 | 2011-04-06 | 湖南科技大学 | Variable frequency driving control method and device for high-power mine hoist |
| CN102510238A (en) * | 2011-11-30 | 2012-06-20 | 中国科学院电工研究所 | Program-control pulse generator used for repetition frequency high-voltage pulse power supply |
| KR20140072543A (en) * | 2012-12-05 | 2014-06-13 | 삼성전기주식회사 | Gate driving device and inverter having the same |
| CN206657225U (en) * | 2017-04-28 | 2017-11-21 | 国网安徽省电力公司安庆供电公司 | A kind of New-energy electric vehicle charging station monitor terminal |
| CN112894095A (en) * | 2021-01-11 | 2021-06-04 | 华南理工大学 | Digital underwater welding power supply capable of outputting multiple external characteristics and working method thereof |
Also Published As
| Publication number | Publication date |
|---|---|
| CN116545217A (en) | 2023-08-04 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106809000B (en) | Method and device for acquiring cooling performance information of cooling system and electric automobile | |
| CN104417394B (en) | Controller for an electric motor, and a method for controlling torque output of the electric motor | |
| CN102904504A (en) | Permanent magnet synchronous motor system for automobile | |
| CN107097652A (en) | Detection processing method and device for output torque of driving motor and vehicle | |
| CN110936821B (en) | Automobile motor controller, control system and automobile | |
| CN110588441A (en) | Integrated FVS system for hydrogen fuel cell automobile | |
| CN110293953A (en) | Vehicle operation mode control method, device, equipment and readable storage medium storing program for executing | |
| CN108016385A (en) | Electric automobile master controller | |
| CN113131440B (en) | Motor control system and motor control device | |
| CN109884449B (en) | Real-time detection method for open-circuit fault of three-phase inverter bridge arm of motor driving system | |
| CN116545217B (en) | ARM core controller chip-based integrated motor controller with function safety ASIL-D | |
| CN214281029U (en) | High-reliability intelligent power distribution control switch with breakpoint recovery function | |
| CN112710922B (en) | Open-circuit fault diagnosis method for double-active-bridge DC-DC converter | |
| CN108562786A (en) | A kind of high pressure sampling system and method | |
| CN110562047B (en) | Redundant torque monitoring system based on master-slave hardware architecture | |
| CN103378773A (en) | Direct current permanent magnet brushless motor controller | |
| CN216086138U (en) | Overcurrent protection circuit of high-voltage motor controller | |
| WO2023050082A1 (en) | Battery sampling chip and battery management system | |
| CN206259880U (en) | A kind of intelligence control system for detecting motor speed | |
| CN202797890U (en) | Direct current inverter air conditioner and compressor driving current protection circuit | |
| CN115793510A (en) | Frequency converter control device, motor and control method thereof | |
| CN202690498U (en) | Electric automobile electric drive controller fan control circuit | |
| CN207670349U (en) | Electric vehicle master controller | |
| CN112964985A (en) | Combined test system and method for electric drive system and power battery system | |
| CN111091094A (en) | Fault diagnosis method of photovoltaic cascade grid-connected inverter based on PCA-SVM secondary classification |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |