CN117075581A - Fault injection testing method, device, system, equipment and storage medium - Google Patents
Fault injection testing method, device, system, equipment and storage medium Download PDFInfo
- Publication number
- CN117075581A CN117075581A CN202311129712.9A CN202311129712A CN117075581A CN 117075581 A CN117075581 A CN 117075581A CN 202311129712 A CN202311129712 A CN 202311129712A CN 117075581 A CN117075581 A CN 117075581A
- Authority
- CN
- China
- Prior art keywords
- state
- target
- rollback
- controller
- fault injection
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000002347 injection Methods 0.000 title claims abstract description 85
- 239000007924 injection Substances 0.000 title claims abstract description 85
- 238000012360 testing method Methods 0.000 title claims abstract description 68
- 238000000034 method Methods 0.000 claims abstract description 32
- 230000006870 function Effects 0.000 claims description 13
- 238000001514 detection method Methods 0.000 claims description 3
- 230000001360 synchronised effect Effects 0.000 claims 2
- 239000000523 sample Substances 0.000 claims 1
- 238000010998 test method Methods 0.000 abstract description 4
- 238000010586 diagram Methods 0.000 description 6
- 239000000243 solution Substances 0.000 description 6
- 238000004590 computer program Methods 0.000 description 5
- 238000005516 engineering process Methods 0.000 description 5
- 239000000446 fuel Substances 0.000 description 4
- 230000006399 behavior Effects 0.000 description 2
- 230000007613 environmental effect Effects 0.000 description 2
- 239000002803 fossil fuel Substances 0.000 description 2
- 230000002159 abnormal effect Effects 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B23/00—Testing or monitoring of control systems or parts thereof
- G05B23/02—Electric testing or monitoring
- G05B23/0205—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults
- G05B23/0218—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterised by the fault detection method dealing with either existing or incipient faults
- G05B23/0256—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterised by the fault detection method dealing with either existing or incipient faults injecting test signals and analyzing monitored process response, e.g. injecting the test signal while interrupting the normal operation of the monitored system; superimposing the test signal onto a control signal during normal operation of the monitored system
Landscapes
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Engineering & Computer Science (AREA)
- Automation & Control Theory (AREA)
- Testing And Monitoring For Control Systems (AREA)
Abstract
The embodiment of the application discloses a fault injection test method, a device, a system, equipment and a storage medium. The method is applied to a master controller of a vehicle-mounted controller system, the system further comprises a slave controller, and the master controller and the slave controller are used for carrying out real-time state synchronization according to a set period; the method comprises the following steps: determining a target security state to be rolled back; stopping system service when fault injection corresponding to any safety state is received; wherein, any security state is different from the target security state; so that when the slave controller detects that the master controller stops the system service, the control system operates normally based on the latest state synchronization data; and when a state rollback instruction is received, acquiring target state data corresponding to the target safety state from all the pre-stored safety states and the corresponding state data, and controlling the system to rollback to the target safety state based on the target state data. By applying the scheme provided by the embodiment of the application, the accuracy of fault injection test can be improved.
Description
Technical Field
The application relates to the technical field of vehicle-mounted controllers, in particular to a fault injection testing method, a device, a system, equipment and a storage medium.
Background
With the progress of technology, the functions and performances of automobiles are continuously improved. In 1950, automobiles began to popularize air conditioners, radios and other devices, making driving more comfortable. In 1970 s, automobiles began to adopt electronic ignition systems and electronic fuel injection technologies, improving fuel utilization and engine performance. In recent years, with the enhancement of environmental awareness, electric automobiles become a new pet in the automobile industry. The electric automobile not only reduces the dependence on fossil fuel, but also reduces the exhaust emission, and is more environment-friendly. However, the higher the intelligent degree of the electric automobile is, the more complicated the electronic and electric system is, and the requirement on functional safety also reaches an unprecedented height.
In order to better verify the functional safety of the vehicle-mounted electronic and electric system, fault injection test can be conducted on the vehicle-mounted electronic and electric system. However, in the known art, it is difficult to determine the extent and extent of fault injection, resulting in the accuracy of the fault test being affected. Therefore, how to improve the accuracy of the fault injection test is a technical problem to be solved.
Disclosure of Invention
The application provides a fault injection test method, a device, a system, equipment and a storage medium, which are used for improving the accuracy of fault injection test. The specific technical scheme is as follows.
In a first aspect, an embodiment of the present application provides a fault injection test method, where the method is applied to a master controller of a vehicle-mounted controller system, where the system further includes a slave controller, where the master controller and the slave controller perform real-time state synchronization according to a set period; the method comprises the following steps:
determining a target security state to be rolled back from preset security states;
stopping system service when fault injection corresponding to any safety state is received; wherein the any one of the security states is different from the target security state; so that when the slave controller detects that the master controller stops the system service, the control system normally operates based on the latest state synchronization data;
and when a state rollback instruction is received, acquiring target state data corresponding to the target safety state from each safety state and corresponding state data stored in advance, and controlling the system to rollback to the target safety state based on the target state data.
In the embodiment of the application, the fault injection range and degree of the redundant controller system can be accurately controlled, and whether the switching of the test system between two states meets the requirement or not can be tested, so that the accurate test of the controller system can be realized, and the accuracy of the fault injection test is improved. And by controlling the safety state corresponding to the fault injection, the introduction of new faults or errors can be avoided, and the accuracy of the fault injection test is further improved. In addition, the fault injection method provided by the embodiment of the application is simple in implementation mode, does not need special equipment and tools for implementation, does not need professional testers for testing, and can reduce the cost of fault testing.
Optionally, the method further comprises:
recording a first moment when the state rollback instruction is received and a second moment when the system is controlled to rollback to the target safety state;
and calculating state rollback time length according to the first time and the second time, and determining whether the rollback time length meets preset requirements.
Optionally, the status data at least includes: control parameters and system data.
Optionally, the security state includes: the motor is complete in function operation, motor assistance is limited, and three-phase or six-phase of the motor is shut down.
In a second aspect, an embodiment of the present application provides a fault injection testing device, where the device is applied to a master controller of a vehicle-mounted controller system, and the system further includes a slave controller, where the master controller and the slave controller perform real-time state synchronization according to a set period; the device comprises:
the state determining module is used for determining a target security state to be rolled back from preset security states;
the fault injection module is used for stopping system service when fault injection corresponding to any safety state is received; wherein the any one of the security states is different from the target security state; so that when the slave controller detects that the master controller stops the system service, the control system normally operates based on the latest state synchronization data;
and the state rollback module is used for acquiring target state data corresponding to the target safety state from all the pre-stored safety states and the corresponding state data when receiving a state rollback instruction, and controlling the system to rollback to the target safety state based on the target state data.
Optionally, the apparatus further includes:
the time recording module is used for recording a first time when the state rollback instruction is received and a second time when the system is controlled to rollback to the target safety state;
and the duration detection module is used for calculating state rollback duration according to the first moment and the second moment and determining whether the rollback duration meets preset requirements.
Optionally, the status data at least includes: control parameters and system data.
Optionally, the security state includes: the motor is complete in function operation, motor assistance is limited, and three-phase or six-phase of the motor is shut down.
In a third aspect, an embodiment of the present application provides a vehicle-mounted controller system, where the system includes a master controller and a slave controller, where the master controller and the slave controller perform real-time state synchronization according to a set period;
the main controller is used for determining a target safety state to be rolled back from preset safety states;
the main controller is also used for stopping system service when receiving fault injection corresponding to any one of the safety states; wherein the any one of the security states is different from the target security state;
the slave controller is used for controlling the normal operation of the system based on the latest state synchronization data when detecting that the master controller stops the system service;
and the main controller is also used for acquiring target state data corresponding to the target safety state from all the pre-stored safety states and the corresponding state data when receiving a state rollback instruction, and controlling the system to rollback to the target safety state based on the target state data.
Optionally, the main controller is further configured to record a first time when the state rollback instruction is received, and a second time when the system is controlled to rollback to the target safe state; and calculating state rollback time length according to the first time and the second time, and determining whether the rollback time length meets preset requirements.
Optionally, the status data at least includes: control parameters and system data.
Optionally, the security state includes: the motor is complete in function operation, motor assistance is limited, and three-phase or six-phase of the motor is shut down.
In a fourth aspect, an embodiment of the present application provides a computer apparatus, including: a memory and a processor, the memory and the processor coupled;
the memory is used for storing one or more computer instructions;
the processor is configured to execute the one or more computer instructions to implement the fault injection testing method as described in the first aspect.
In a fifth aspect, embodiments of the present application provide a computer readable storage medium having stored thereon one or more computer instructions executable by a processor to implement the fault injection test method as described in the first aspect above.
In a sixth aspect, the present application provides a computer program product comprising a computer program which, when executed by a processor, implements the fault injection testing method of the first aspect.
Drawings
In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below. It is apparent that the drawings in the following description are only some embodiments of the application. Other figures may be derived from these figures without inventive effort for a person of ordinary skill in the art.
Fig. 1 is a schematic flow chart of a fault injection testing method according to an embodiment of the present application;
FIG. 2 is a schematic structural diagram of a fault injection testing device according to an embodiment of the present application;
fig. 3 is a schematic structural diagram of a vehicle-mounted controller system according to an embodiment of the present application;
fig. 4 is a schematic structural diagram of a computer device according to an embodiment of the present application.
Detailed Description
The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present application. It will be apparent that the described embodiments are only some, but not all, embodiments of the application. All other embodiments, which can be made by those skilled in the art based on the embodiments of the application without any inventive effort, are intended to be within the scope of the application.
It should be noted that the terms "comprising" and "having" and any variations thereof in the embodiments of the present application and the accompanying drawings are intended to cover non-exclusive inclusions. A process, method, system, article, or apparatus that comprises a list of steps or elements is not limited to only those listed but may alternatively include other steps or elements not listed or inherent to such process, method, article, or apparatus.
With the progress of technology, the functions and performances of automobiles are continuously improved. In 1950, automobiles began to popularize air conditioners, radios and other devices, making driving more comfortable. In 1970 s, automobiles began to adopt electronic ignition systems and electronic fuel injection technologies, improving fuel utilization and engine performance. In recent years, with the enhancement of environmental awareness, electric automobiles become a new pet in the automobile industry. The electric automobile not only reduces the dependence on fossil fuel, but also reduces the exhaust emission, and is more environment-friendly. However, the higher the intelligent degree of the electric automobile is, the more complicated the electronic and electric system is, and the requirement on functional safety also reaches an unprecedented height.
In order to better verify the functional safety of the vehicle-mounted electronic and electric system, fault injection test can be conducted on the vehicle-mounted electronic and electric system. Specifically, fault injection testing may be performed using a specific method to perform fault injection to a running test object, such as by a specific test interface in software or by specially prepared hardware. However, known fault injection testing techniques also suffer from several drawbacks, including:
1. it is difficult to determine the extent and extent of fault injection: in fault injection testing, it is often necessary to select appropriate fault injection points and fault injection modes. For example, a fault inside the analog chip, such as a logic error, voltage disturbance, or the like, or a fault simulating an external environment, such as a temperature change, electromagnetic disturbance, or the like, may be selected. However, determining the extent and extent of fault injection is a challenge because different fault injection patterns may result in different system behaviors, and the extent of fault injection may also affect the reliability of the test results.
2. New faults may be introduced: fault injection testing techniques may introduce new faults or errors when simulating a system fault. This is because the fault injection process itself may have an impact on the system, resulting in unexpected behavior or errors in the system after the injection of the fault.
3. The reliability of the test results is limited: the test results of fault injection testing techniques may be affected by a number of factors, including the manner in which the fault is injected, the extent and extent of the fault injection, the current state of the system, and so on. Therefore, the reliability of the test results may be limited, and it is difficult to accurately evaluate the fault tolerance and reliability of the system.
4. The test cost is higher: the fault injection test technology requires special equipment and tools to implement, and also requires special testers to test, and the investment of the equipment, tools and human resources increases the cost of the test.
In order to solve the above problems, embodiments of the present application provide a fault injection testing method, device, system, device and storage medium, and the following details of the embodiments of the present application are described.
In the embodiment of the application, the fault injection test can be performed based on a vehicle-mounted controller system, which is a redundant controller system and can include a master control unit (also referred to as a master chip) and a slave control unit (also referred to as a slave chip). The master chip is responsible for normal operation and control of the system, and the slave chip is in a standby state and ready to take over the functions of the master chip at any time. The master chip and the slave chip perform real-time state synchronization according to a set period, that is, under normal conditions, the slave chip has the same state information as the master chip at any moment, and when the master chip fails or is abnormal, the slave chip can detect the state change of the master chip and immediately take over the function of the master chip. The slave chip can restore the system to the previous safe state according to the internally stored state information, and the normal operation of the system is ensured.
Fig. 1 is a flow chart of a fault injection testing method according to an embodiment of the present application, where the method may be applied to a main controller of a vehicle-mounted controller system, and the method includes the following steps:
s110: and determining the target security state to be rolled back from the preset security states.
For example, in a vehicle-mounted control system, according to the technical difficulty of entering a safe state after the failure of the redundant controller from low to high, the safe state can be divided into 4 levels, namely 4 rollback targets, including a time point and a system configuration, which are respectively:
a full performance complete function operation
B confidence loss functional part is lost
C essential confidence loss function is largely lost
D total shut down function is completely lost
Specifically, as in a motor controller, the B state may represent motor assist limitation, the C state may represent motor three-phase shutdown, and the D state may represent motor six-phase shutdown.
In the embodiment of the application, before fault injection, a rollback target can be determined first, that is, after fault injection is performed, the system needs to return to a safe state so as to accurately perform fault injection test on the system, and whether the system can normally operate according to the set rollback target after fault injection is tested.
For example, one security state may be randomly selected as the target security state among the above-set security states; alternatively, according to a preset selection rule, for example, according to the arrangement sequence of the safety states, a safety state may be sequentially selected as the target safety state during each fault test, which is not limited in the embodiment of the present application.
S120: stopping system service when fault injection corresponding to any safety state is received; wherein the any one of the security states is different from the target security state; and when the slave controller detects that the master controller stops the system service, the control system operates normally based on the latest state synchronization data.
For example, a fault may be injected through software through a fixed interface and when the fault is injected into the host controller, the host controller will cease system service. The injected faults correspond to the safety states and are different from the target safety states, so that whether the system can be switched from one safety state to the other safety state can be tested, and accurate fault injection test is achieved.
In the embodiment of the application, the slave controller can detect the running state of the master controller in real time, and when the master controller is detected to stop the system service, the slave controller can take over the master controller, that is, can control the system to run normally based on the latest state synchronization data.
And after the fault is injected, the main controller can collect the state data corresponding to the safety state, so that after the state data corresponding to each safety state is stored, the system can be controlled to switch at each safety state time, and the consistency and the correctness of the data of the system in the switching and rollback processes can be ensured. Wherein, the status data may at least include: control parameters and system data.
S130: and when a state rollback instruction is received, acquiring target state data corresponding to the target safety state from each safety state and corresponding state data stored in advance, and controlling the system to rollback to the target safety state based on the target state data.
In the embodiment of the application, the switching condition of the system between each safety state can be accurately tested. Specifically, when a fault is injected, a state rollback instruction may be input to control the system to rollback to the target safe state determined in step S110.
After receiving the state rollback instruction, the main controller can acquire target state data corresponding to the target safety state from all the pre-stored safety states and corresponding state data, and control the system to rollback to the target safety state based on the target state data. For example, the host controller system may use the target state data to alter the corresponding data to control the system to enter a target safe state.
In one implementation, the slave chip may be used directly to perform a rollback operation on the master chip for the changed system or other systems (of the same type), such as the states A-B, A-C, A-D, even B-C, B-D, C-D, etc. described above, to verify whether the internal fault handling measures of the controller system are valid or not and whether the time requirements are met.
When testing the system time requirement, specifically, the main controller can record a first moment when a state rollback instruction is received and a second moment when the control system rolls back to a target safety state; and calculating state rollback time according to the first time and the second time, and determining whether the rollback time meets the preset requirement. For example, it may be determined whether the rollback duration is less than or equal to a preset duration, if so, indicating that the duration of switching between the two states meets the requirements, and if not, indicating that the duration of switching between the two states does not meet the requirements.
In the embodiment of the application, the fault injection range and degree of the redundant controller system can be accurately controlled, and whether the switching of the test system between two states meets the requirement or not can be tested, so that the accurate test of the controller system can be realized, and the accuracy of the fault injection test is improved. And by controlling the safety state corresponding to the fault injection, the introduction of new faults or errors can be avoided, and the accuracy of the fault injection test is further improved. In addition, the fault injection method provided by the embodiment of the application is simple in implementation mode, does not need special equipment and tools for implementation, does not need professional testers for testing, and can reduce the cost of fault testing.
As shown in fig. 2, a schematic structural diagram of a fault injection testing device provided by an embodiment of the present application is shown, where the device is applied to a master controller of a vehicle-mounted controller system, and the system further includes a slave controller, where the master controller and the slave controller perform real-time state synchronization according to a set period; the device comprises:
a state determining module 210, configured to determine a target security state to be rolled back from preset security states;
the fault injection module 220 is configured to stop system service when fault injection corresponding to any one of the safety states is received; wherein the any one of the security states is different from the target security state; so that when the slave controller detects that the master controller stops the system service, the control system normally operates based on the latest state synchronization data;
the state rollback module 230 is configured to, when receiving a state rollback instruction, obtain target state data corresponding to the target security state from all pre-stored security states and corresponding state data, and control the system to rollback to the target security state based on the target state data.
Optionally, the apparatus further includes:
the time recording module is used for recording a first time when the state rollback instruction is received and a second time when the system is controlled to rollback to the target safety state;
and the duration detection module is used for calculating state rollback duration according to the first moment and the second moment and determining whether the rollback duration meets preset requirements.
Optionally, the status data at least includes: control parameters and system data.
Optionally, the security state includes: the motor is complete in function operation, motor assistance is limited, and three-phase or six-phase of the motor is shut down.
In the embodiment of the application, the fault injection range and degree of the redundant controller system can be accurately controlled, and whether the switching of the test system between two states meets the requirement or not can be tested, so that the accurate test of the controller system can be realized, and the accuracy of the fault injection test is improved. And by controlling the safety state corresponding to the fault injection, the introduction of new faults or errors can be avoided, and the accuracy of the fault injection test is further improved. In addition, the fault injection method provided by the embodiment of the application is simple in implementation mode, does not need special equipment and tools for implementation, does not need professional testers for testing, and can reduce the cost of fault testing.
The device embodiment corresponds to the method embodiment, and has the same technical effects as the method embodiment, and the specific description refers to the method embodiment. The apparatus embodiments are based on the method embodiments, and specific descriptions may be referred to in the method embodiment section, which is not repeated herein.
The embodiment of the application also provides a vehicle-mounted controller system, as shown in fig. 3, the system comprises a master controller 310 and a slave controller 320, and the master controller 310 and the slave controller 320 perform real-time state synchronization according to a set period;
the main controller 310 is configured to determine a target security state to be rolled back from preset security states;
the main controller 310 is further configured to stop a system service when receiving a fault injection corresponding to any one of the security states; wherein the any one of the security states is different from the target security state;
the slave controller 320 is configured to control the system to operate normally based on the latest state synchronization data when detecting that the master controller 310 stops the system service;
the main controller 310 is further configured to, when receiving a state rollback instruction, obtain target state data corresponding to the target security state from all pre-stored security states and corresponding state data, and control the system to rollback to the target security state based on the target state data.
Optionally, the main controller 310 is further configured to record a first time when the state rollback instruction is received, and a second time when the system is controlled to rollback to the target safe state; and calculating state rollback time length according to the first time and the second time, and determining whether the rollback time length meets preset requirements.
Optionally, the status data at least includes: control parameters and system data.
Optionally, the security state includes: the motor is complete in function operation, motor assistance is limited, and three-phase or six-phase of the motor is shut down.
In the embodiment of the application, the fault injection range and degree of the redundant controller system can be accurately controlled, and whether the switching of the test system between two states meets the requirement or not can be tested, so that the accurate test of the controller system can be realized, and the accuracy of the fault injection test is improved. And by controlling the safety state corresponding to the fault injection, the introduction of new faults or errors can be avoided, and the accuracy of the fault injection test is further improved. In addition, the fault injection method provided by the embodiment of the application is simple in implementation mode, does not need special equipment and tools for implementation, does not need professional testers for testing, and can reduce the cost of fault testing.
Next, referring to fig. 4, fig. 4 is a schematic structural diagram of a computer device according to an embodiment of the present application, where the computer device includes:
one or more processors 40;
the processor 40 is coupled to a storage means 41, which storage means 41 is adapted to store one or more programs,
when the one or more programs are executed by the one or more processors 40, the electronic device is caused to implement a solution of a fault injection testing method as described in fig. 1.
The embodiment of the application also provides a computer readable storage medium, on which a computer program is stored, which when executed by a processor implements a technical scheme of a fault injection testing method as described in fig. 1.
The present application provides a computer program product comprising a computer program which when executed by a processor implements a solution of a fault injection testing method as described in fig. 1.
Those of ordinary skill in the art will appreciate that: the drawing is a schematic diagram of one embodiment and the modules or flows in the drawing are not necessarily required to practice the application.
Those of ordinary skill in the art will appreciate that: the modules in the apparatus of the embodiments may be distributed in the apparatus of the embodiments according to the description of the embodiments, or may be located in one or more apparatuses different from the present embodiments with corresponding changes. The modules of the above embodiments may be combined into one module, or may be further split into a plurality of sub-modules.
Finally, it should be noted that: the above embodiments are only for illustrating the technical solution of the present application, and are not limiting; although the application has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical scheme described in the foregoing embodiments can be modified or some of the technical features thereof can be replaced by equivalents; such modifications and substitutions do not depart from the spirit and scope of the technical solutions of the embodiments of the present application.
Claims (10)
1. The fault injection testing method is characterized by being applied to a master controller of a vehicle-mounted controller system, wherein the system further comprises a slave controller, and the master controller and the slave controller are synchronized in real time according to a set period; the method comprises the following steps:
determining a target security state to be rolled back from preset security states;
stopping system service when fault injection corresponding to any safety state is received; wherein the any one of the security states is different from the target security state; so that when the slave controller detects that the master controller stops the system service, the control system normally operates based on the latest state synchronization data;
and when a state rollback instruction is received, acquiring target state data corresponding to the target safety state from each safety state and corresponding state data stored in advance, and controlling the system to rollback to the target safety state based on the target state data.
2. The method according to claim 1, wherein the method further comprises:
recording a first moment when the state rollback instruction is received and a second moment when the system is controlled to rollback to the target safety state;
and calculating state rollback time length according to the first time and the second time, and determining whether the rollback time length meets preset requirements.
3. The method according to claim 1, wherein the status data comprises at least: control parameters and system data.
4. A method according to any one of claims 1-3, wherein the secure state comprises: the motor is complete in function operation, motor assistance is limited, and three-phase or six-phase of the motor is shut down.
5. The fault injection testing device is characterized in that the device is applied to a master controller of a vehicle-mounted controller system, the system further comprises a slave controller, and the master controller and the slave controller are synchronized in real time according to a set period; the device comprises:
the state determining module is used for determining a target security state to be rolled back from preset security states;
the fault injection module is used for stopping system service when fault injection corresponding to any safety state is received; wherein the any one of the security states is different from the target security state; so that when the slave controller detects that the master controller stops the system service, the control system normally operates based on the latest state synchronization data;
and the state rollback module is used for acquiring target state data corresponding to the target safety state from all the pre-stored safety states and the corresponding state data when receiving a state rollback instruction, and controlling the system to rollback to the target safety state based on the target state data.
6. The apparatus of claim 5, wherein the apparatus further comprises:
the time recording module is used for recording a first time when the state rollback instruction is received and a second time when the system is controlled to rollback to the target safety state;
and the duration detection module is used for calculating state rollback duration according to the first moment and the second moment and determining whether the rollback duration meets preset requirements.
7. A vehicle-mounted controller system, which is characterized by comprising a master controller and a slave controller, wherein the master controller and the slave controller are used for carrying out real-time state synchronization according to a set period;
the main controller is used for determining a target safety state to be rolled back from preset safety states;
the main controller is also used for stopping system service when receiving fault injection corresponding to any one of the safety states; wherein the any one of the security states is different from the target security state;
the slave controller is used for controlling the normal operation of the system based on the latest state synchronization data when detecting that the master controller stops the system service;
and the main controller is also used for acquiring target state data corresponding to the target safety state from all the pre-stored safety states and the corresponding state data when receiving a state rollback instruction, and controlling the system to rollback to the target safety state based on the target state data.
8. The method of claim 7, wherein the step of determining the position of the probe is performed,
the main controller is further configured to record a first time when the state rollback instruction is received, and a second time when the system is controlled to rollback to the target security state; and calculating state rollback time length according to the first time and the second time, and determining whether the rollback time length meets preset requirements.
9. A computer device, comprising: a memory and a processor, the memory and the processor coupled;
the memory is used for storing one or more computer instructions;
the processor is configured to execute the one or more computer instructions to implement the fault injection testing method of any of claims 1 to 4.
10. A readable storage medium having stored thereon one or more computer instructions, the instructions being executable by a processor to implement the fault injection testing method of any of claims 1 to 4.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202311129712.9A CN117075581A (en) | 2023-09-01 | 2023-09-01 | Fault injection testing method, device, system, equipment and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202311129712.9A CN117075581A (en) | 2023-09-01 | 2023-09-01 | Fault injection testing method, device, system, equipment and storage medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN117075581A true CN117075581A (en) | 2023-11-17 |
Family
ID=88705969
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202311129712.9A Pending CN117075581A (en) | 2023-09-01 | 2023-09-01 | Fault injection testing method, device, system, equipment and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN117075581A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN118391242A (en) * | 2024-06-27 | 2024-07-26 | 浙江云计算数据中心有限公司 | Automatic monitoring method, terminal and medium for secondary pump controller |
-
2023
- 2023-09-01 CN CN202311129712.9A patent/CN117075581A/en active Pending
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN118391242A (en) * | 2024-06-27 | 2024-07-26 | 浙江云计算数据中心有限公司 | Automatic monitoring method, terminal and medium for secondary pump controller |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US8543286B2 (en) | Vehicle hardware integrity analysis systems and methods | |
| US9058419B2 (en) | System and method for verifying the integrity of a safety-critical vehicle control system | |
| CN117075581A (en) | Fault injection testing method, device, system, equipment and storage medium | |
| JPH01267742A (en) | System for diagnosing trouble | |
| CN113946145A (en) | Detection method and device for vehicle control unit | |
| JP4476494B2 (en) | Method and apparatus for monitoring calculation element in automobile | |
| US6615379B1 (en) | Method and apparatus for testing a logic device | |
| CA2326248A1 (en) | Methods and apparatus for generating maintenance messages | |
| CN114062806B (en) | Vehicle testing method and device | |
| CN111552584B (en) | Testing system, method and device for satellite primary fault diagnosis isolation and recovery function | |
| CN112356818B (en) | Function safety monitoring method for range extender control system | |
| CN116882125A (en) | Method, device, equipment and storage medium for testing performance of vehicle chassis | |
| US8225646B2 (en) | Throttle body sweep diagnostic system and method | |
| CN111060845A (en) | Fault processing method, device, equipment and storage medium | |
| KR20010056021A (en) | Method for diagnosing logics | |
| CN111782499B (en) | Test case generation method and system | |
| CN102005251A (en) | Method for testing a memory | |
| CN112965010B (en) | Fault detection method and device of electronic actuator, electronic control equipment and medium | |
| JP2005014743A (en) | Failure part detection device for vehicle | |
| CN110955554A (en) | Fault processing method, device, equipment and storage medium | |
| CN111026093A (en) | Method and system for judging abnormal power-off of ECU | |
| CN218570256U (en) | Feedback bus signal detection circuit and device of OBD interface | |
| CN114294416B (en) | Clutch sensor fault diagnosis method, device, equipment and storage medium | |
| CN113844453B (en) | Method and device for determining opening value of accelerator pedal, electronic terminal and storage medium | |
| CN216386110U (en) | Vehicle liquefied natural gas pressure detection device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |