CN117369424A - Vehicle-mounted chip processor and detection method thereof - Google Patents
Vehicle-mounted chip processor and detection method thereof Download PDFInfo
- Publication number
- CN117369424A CN117369424A CN202311676357.7A CN202311676357A CN117369424A CN 117369424 A CN117369424 A CN 117369424A CN 202311676357 A CN202311676357 A CN 202311676357A CN 117369424 A CN117369424 A CN 117369424A
- Authority
- CN
- China
- Prior art keywords
- functional module
- module
- instruction
- detection
- self
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000001514 detection method Methods 0.000 title claims abstract description 98
- 238000000034 method Methods 0.000 claims abstract description 39
- 238000004092 self-diagnosis Methods 0.000 claims abstract description 24
- 230000008569 process Effects 0.000 claims abstract description 22
- 230000001960 triggered effect Effects 0.000 claims abstract description 4
- 238000004590 computer program Methods 0.000 claims description 10
- 238000003860 storage Methods 0.000 claims description 8
- 230000006870 function Effects 0.000 description 31
- 238000012545 processing Methods 0.000 description 21
- 238000010586 diagram Methods 0.000 description 15
- 238000012986 modification Methods 0.000 description 5
- 230000004048 modification Effects 0.000 description 5
- 230000006399 behavior Effects 0.000 description 2
- 230000003287 optical effect Effects 0.000 description 2
- 230000003068 static effect Effects 0.000 description 2
- 238000012360 testing method Methods 0.000 description 2
- 230000004075 alteration Effects 0.000 description 1
- 239000012634 fragment Substances 0.000 description 1
- 238000004519 manufacturing process Methods 0.000 description 1
- 238000004904 shortening Methods 0.000 description 1
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B23/00—Testing or monitoring of control systems or parts thereof
- G05B23/02—Electric testing or monitoring
- G05B23/0205—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults
- G05B23/0208—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterized by the configuration of the monitoring system
- G05B23/0213—Modular or universal configuration of the monitoring system, e.g. monitoring system having modules that may be combined to build monitoring program; monitoring system that can be applied to legacy systems; adaptable monitoring system; using different communication protocols
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/20—Pc systems
- G05B2219/24—Pc safety
- G05B2219/24065—Real time diagnostics
Abstract
The embodiment of the invention provides a vehicle-mounted chip processor and a detection method of the vehicle-mounted chip processor, comprising a decoder, a register and an execution unit; the execution unit comprises a self-checking module and a plurality of functional modules; the first functional module is used for executing the first program instruction obtained from the decoder; the first program instruction is an instruction for realizing the function of setting the vehicle, which is set in the user application program; the user application program is triggered to run based on the user behavior; the self-checking module is used for generating a detection instruction corresponding to the self-diagnosis starting instruction based on the self-diagnosis starting instruction acquired from the decoder and sending the detection instruction to the corresponding second functional module; the self-diagnosis starting instruction is an instruction used for detecting the functional module and arranged in the user application program; the second functional module is a functional module which is not started in the running process of the user application program; the self-checking module is also used for determining whether the second functional module fails or not based on the detection data fed back by the second functional module.
Description
Technical Field
The invention relates to the field of safety function control, in particular to a vehicle-mounted chip processor and a detection method of the vehicle-mounted chip processor.
Background
ASIL is an automotive safety class and the ISO 26262 standard defines a risk classification system for functional safety of road vehicles. ISO 26262 identifies four ASIL a, ASIL B, ASIL C, ASIL D in order of security level. Among them, ASIL a represents the lowest level of automotive hazard, while ASIL D represents the highest level of automotive hazard. For example, at the ASIL B level, the coverage rate at which the onboard chip processor detects a failure during operation is 90% or more, and at the ASIL D level, the coverage rate at which the onboard chip processor detects a failure during operation is 99% or more.
At present, in order to meet ASIL, a processor part of the vehicle-mounted chip processor comprises a main CPU and a redundant CPU, wherein the main CPU and the redundant CPU synchronously run and continuously compare and output, and if the output results are different, the fault of the vehicle-mounted chip processor during the running period is detected. But the cost of the on-board chip processor is high due to the large area of the CPU.
In summary, how to reduce the cost of the vehicle-mounted chip processor on the premise that the vehicle-mounted chip processor meets the ASIL is a technical problem to be solved currently.
Disclosure of Invention
The embodiment of the invention provides a vehicle-mounted chip processor and a detection method of the vehicle-mounted chip processor, which are used for solving the problem of high cost of the vehicle-mounted chip processor in the prior art due to large area of a CPU.
In a first aspect, an embodiment of the present invention provides a vehicle-mounted chip processor, including a decoder, a register, and an execution unit; the execution unit comprises a self-checking module and a plurality of functional modules; a first functional module for executing the first program instructions obtained from the decoder; the first program instruction is an instruction for realizing the function of setting the vehicle, which is set in the user application program; the user application program is triggered to run based on user behavior; the self-checking module is used for generating a detection instruction corresponding to the self-diagnosis starting instruction based on the self-diagnosis starting instruction acquired from the decoder and sending the detection instruction to the corresponding second functional module; the self-diagnosis starting instruction is an instruction which is set in the user application program and used for detecting a functional module; the second functional module is a functional module which is not started in the running process of the user application program; the self-checking module is further used for determining whether the second functional module fails or not based on detection data fed back by the second functional module; and the register is used for storing the detection result of the second functional module.
In the above technical solution, since not all the functional modules need to operate when executing the instruction for implementing the function setting of the vehicle set in the user application program, only the first functional module needs to execute the first program instruction, and the second functional module does not operate. Therefore, when the first functional module executes the first program instruction, whether the second functional module fails or not is detected through the self-checking module, so that when the instruction for realizing the vehicle function setting set in the user application program is executed, the functional module which is not started in the running process of the user application program is detected, the functional module which is required to be detected in the software safety detection is reduced when the software safety detection is executed later, and the execution time of the software safety detection is reduced.
Optionally, the method further comprises: a third functional module, configured to obtain a second program instruction from the decoder and execute the second program instruction after determining that a detection result of the third functional module is not stored in the register; the second program instruction is an instruction set in the software security detection application and used for detecting whether the third functional module has a fault or not; the software security detection application is configured to execute when the onboard chip processor is in an idle state.
In the above technical solution, when the on-vehicle chip processor is in an idle state, software security detection is needed to detect whether a functional module in the on-vehicle chip processor fails. When the vehicle-mounted chip processor is in a working state, the self-detection module detects the second functional module, so that the software safety detection only needs to detect the third functional module which is not detected by the self-detection module. In this way, the number of functional modules required for the software security check can be reduced, thereby reducing the time required for the software security check to be performed.
Optionally, the plurality of functional modules include an optional functional module and an optional functional module; the self-checking module is electrically connected with each optional functional module respectively; the necessary function module is a function module which is started in the execution process of any user application program; the optional functional module is any functional module except the necessary functional module in the plurality of functional modules; the first functional module is one of the necessary functional modules or one of the optional functional modules; the second functional module is one of the selectable functional modules; the third functional module is one of the necessary functional modules or one of the optional functional modules other than the second functional module.
In the above technical scheme, since the optional modules need to be started each time the first program instruction is executed, the self-checking modules are respectively connected with the optional modules, so that the self-checking modules can detect the optional modules which are not started in the process of executing the first program instruction, thereby improving the efficiency of detecting the functional modules.
Optionally, the self-checking module is specifically configured to determine whether the second functional module fails based on the detection data fed back by the second functional module and the preset data of the second functional module.
In the technical scheme, the self-checking module can quickly determine whether the second functional module fails or not through the detection data fed back by the second functional module.
Optionally, a fault collector is also included; the fault collector is used for collecting fault information of the second functional module and reporting the fault information.
In the technical scheme, the fault information of the second functional module can be timely reported through the fault collector.
In a second aspect, a method for detecting a vehicle-mounted chip processor provided by an embodiment of the present invention includes: in the running process of a user application program, generating a detection instruction corresponding to a self-diagnosis starting instruction based on the self-diagnosis starting instruction in the user application program, and sending the detection instruction to a corresponding functional module; the self-diagnosis starting instruction is used for detecting a functional module which is not started in the running process of the user application program; based on the detection data fed back by the functional module, determining whether the functional module fails or not and reporting failure information when the functional module fails.
Optionally, the method further comprises: when the vehicle-mounted chip processor is in an idle state, starting a software security detection application; determining each function module which is detected by each user application program when the vehicle-mounted chip processor is in a working state; and detecting each function module which is not detected completely through the software security detection application.
Optionally, the method further comprises: marking the functional module as a functional module with detection completion based on detection data fed back by the functional module; and determining each functional module which is detected by each user application program when the vehicle-mounted chip processor is in a working state, wherein the functional module comprises: and after the software security detection application is completed last time, the functional module marked as the completed detection is the functional module which is completed to be detected by each user application program when the vehicle-mounted chip processor is in a working state.
Optionally, determining whether the functional module fails based on the detection data fed back by the functional module includes: and determining whether the functional module fails or not based on the detection data fed back by the functional module and the preset data of the functional module.
In a third aspect, an embodiment of the present invention provides a computer readable storage medium storing a computer program executable by a computer device, where the program when executed on the computer device causes the computer device to execute a method for detecting an on-vehicle chip processor according to the second aspect.
Drawings
Fig. 1 is a schematic diagram of an STL detection hardware function according to an embodiment of the present invention;
fig. 2 is a schematic structural diagram of a vehicle-mounted chip processor according to an embodiment of the present invention;
FIG. 3 is a diagram showing a connection relationship between a self-checking module and a plurality of functional modules according to an embodiment of the present invention;
fig. 4 is a schematic structural diagram of a vehicle-mounted chip processor according to an embodiment of the present invention;
FIG. 5 is a flowchart of a detection method of a vehicle-mounted chip processor according to an embodiment of the present invention;
FIG. 6 is a flowchart of a method for detecting a processor of a vehicle-mounted chip by software security according to an embodiment of the present invention;
fig. 7 is a schematic structural diagram of an electronic device according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention will be described in further detail below with reference to the accompanying drawings, and it is apparent that the described embodiments are only some embodiments of the present invention, not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
ASIL is a vehicle safety class in which the individual systems in a vehicle are different for the ASIL required. For example, airbags, antilock braking systems, and power steering systems must reach ASIL D class, which is the most severe class applied to safety assurance because of the highest risk of failure. The lowest level of the safety level range, such as a back light and other components, only needs to reach ASIL A level. The headlights and brake lights are typically of the ASIL B class, while the cruise control is typically of the ASIL C class.
In one possible scenario, STL is a software security detection application that can be an important component of security-related designs in automobiles, industries, and other markets where applications need to run. Where STL is used to test whether a fault occurs within the hardware functional logic.
Fig. 1 is a schematic diagram of an STL detection hardware function according to an embodiment of the present invention. As can be seen from the figure, the STL is usually called to detect whether the function of the hardware has faults when the hardware part is idle, so that the output of normal function logic is not affected, and whether the function of the hardware has faults can be detected by utilizing time fragments when the STL is idle and waiting. Thus, the method is applicable to a variety of applications. The execution time of the STL is only the idle time of the hardware part. In one possible scenario, if only one processor is on-chip, i.e., one processor is in control of the normal operation of the various systems of the vehicle, the processor's idle time is very limited. At the same time, the STL must be executed for less than the Fault Tolerance Test Interval (FTTI), where the FTTI is not the same for each system in the vehicle. For example, FTTIs for braking systems, airbag systems are very short. Therefore, it is difficult to implement STL with a smaller execution time than FTTI when FTTI is very short.
In summary, the embodiment of the invention provides a vehicle-mounted chip processor, which is used for shortening the execution time of an STL, and realizing that the execution time of the STL is smaller than FTTI.
As shown in fig. 2, a schematic structural diagram of a vehicle-mounted chip processor according to an embodiment of the present invention is shown, where the chip 200 includes: decoder 210, register 220, and execution unit 230; the execution unit 230 includes a self-checking module 231 and a plurality of functional modules 232; wherein the functional module 232 is divided into a first functional module 233 and a second functional module 234. A first functional module 233 for executing the first program instructions obtained from the decoder 210; the first program instruction is an instruction for realizing the function of setting the vehicle, which is set in the user application program; the user application program is triggered to run based on the user behavior; a self-checking module 231, configured to generate a detection instruction corresponding to the self-diagnosis start instruction based on the self-diagnosis start instruction acquired from the decoder 210 and send the detection instruction to the corresponding second functional module; the self-diagnosis starting instruction is an instruction used for detecting the functional module and arranged in the user application program; the second functional module 234 is a functional module that is not started during the running process of the user application program; the self-checking module 231 is further configured to determine whether the second functional module 234 fails based on the detection data fed back by the second functional module; the register 220 is configured to store a detection result of the second functional module 234.
In the embodiment of the present invention, since not all the functional modules need to be started when executing the first program instruction, only the first functional module needs to execute the first program instruction, and the second functional module does not start. Therefore, when the first functional module executes the first program instruction, whether the second functional module fails or not is detected through the self-checking module, so that when the instruction for realizing the vehicle function setting set in the user application program is executed, the functional module which is not started in the running process of the user application program is detected, the functional module which is required to be detected in the software safety detection is reduced when the software safety detection is executed later, and the execution time of the software safety detection is reduced.
Optionally, the vehicle-mounted chip processor further includes a third functional module, where the third functional module is configured to obtain a second program instruction from the decoder and execute the second program instruction after determining that the detection result of the third functional module is not stored in the register; the second program instruction is an instruction set in the software security detection application and used for detecting whether the third functional module has a fault or not; the software security detection application is for execution when the onboard chip processor is in an idle state.
In the embodiment of the invention, when the vehicle-mounted chip processor is in an idle state, software safety detection is needed to detect whether the functional module in the vehicle-mounted chip processor has faults. When the vehicle-mounted chip processor is in a working state, the self-detection module detects the second functional module, so that the software safety detection only needs to detect the third functional module which is not detected by the self-detection module. In this way, the number of functional modules required for the software security check can be reduced, thereby reducing the time required for the software security check to be performed.
As shown in fig. 3, a connection relationship diagram between a self-checking module and a plurality of functional modules provided in an embodiment of the present invention, where the plurality of functional modules include a necessary functional module and an optional functional module; the self-checking module is electrically connected with each optional functional module respectively; the necessary function module is a function module which is started in the execution process of any user application program; the selectable functional module is any functional module except the necessary functional module in the plurality of functional modules; the first functional module is one of the necessary functional modules or one of the optional functional modules; the second functional module is one of the selectable functional modules; the third functional module is one of the necessary functional modules or one of the optional functional modules other than the second functional module.
In the embodiment of the present invention, since it can be found that, when the instruction for implementing the function of setting the vehicle is set in the user application program is executed, not all the functional modules need to execute the first program instruction, where the functional modules that need to execute the first program instruction are determined as the necessary modules, but some of the functional modules do not need to be started every time the first program instruction is executed. For example, if the functional module includes a logic operation module, a floating point number processing module, a vector processing module, a multiplier-divider module, a data signal processing module, an address operation module, and a read-write data module, when the first program instruction indicates braking, the module to be started is the logic operation module, the floating point number processing module, the multiplier-divider module, the data signal processing module, the address operation module, and the read-write data module, where the vector processing module does not need to be started. When the first program instruction indicates to start the lamp, the modules to be started are a logic operation module, a multiplier-divider module, an address operation module and a data reading-writing module. When the first program instruction indicates that the vehicle window is opened, the modules to be started are a logic operation module, an address operation module and a data reading and writing module, wherein the floating point number processing module, the multiplier-divider module, the data signal processing module and the vector processing module are not started. In summary, it can be seen that the logic operation module, the address operation module, and the read/write data module are required to be started each time the first program instruction is executed, but the floating-point number processing module, the multiplier-divider module, the data signal processing module, and the vector processing module are not required to be started each time the first program instruction is executed, so that the logic operation module, the address operation module, and the read/write data module can be set as the necessary modules, and the floating-point number processing module, the multiplier-divider module, the data signal processing module, and the vector processing module can be set as the optional modules. Because the optional modules need to be started when the first program instruction is executed each time, the self-checking modules are respectively connected with the optional modules, and in this way, the self-checking modules can detect the optional modules which are not started in the process of executing the first program instruction, so that the efficiency of detecting the functional modules is improved.
Optionally, the self-checking module is specifically configured to determine whether the second functional module fails based on the detection data fed back by the second functional module and the preset data of the second functional module. Specifically, if the detection data fed back by the second functional module received by the self-checking module is different from the preset data of the second functional module, determining that the second functional module fails. If the detection data fed back by the second functional module received by the self-checking module is the same as the preset data of the second functional module, determining that the second functional module has no fault.
Fig. 4 is a schematic structural diagram of a vehicle-mounted chip processor according to an embodiment of the present invention. The on-board chip processor 200 further includes a fault collector 240, where the fault collector 240 is configured to collect fault information of the second functional module and report the fault information.
As shown in fig. 5, a flowchart of a detection method of a vehicle-mounted chip processor according to an embodiment of the present invention is provided, where the method includes the following steps:
step 501, in the running process of the user application program, based on the self-diagnosis starting instruction in the user application program, generating a detection instruction corresponding to the self-diagnosis starting instruction and sending the detection instruction to the corresponding functional module.
In the embodiment of the invention, not all the functional modules need to be started in the running process of the user application program, so that the user application program not only can start the functional module which needs to execute the user application program, but also carries the self-diagnosis starting instruction, wherein the self-diagnosis starting instruction is used for detecting the functional module which is not started in the running process of the user application program, and based on the self-diagnosis starting instruction in the user program, the detection instruction corresponding to the self-diagnosis starting instruction is generated and sent to the corresponding functional module.
Step 502, determining whether the functional module fails based on the detection data fed back by the functional module, and reporting failure information when the functional module fails.
In the embodiment of the invention, if the detection data fed back by the function module received by the self-checking module is different from the preset data of the function module, the function module is determined to be faulty. If the detection data fed back by the self-checking module and the preset data of the functional module are the same, the functional module is determined to not have faults.
As can be seen from the above steps 501 to 502, by detecting the functional module that is not started in the running process of the application program during the running process of the user application program, the efficiency of detecting the functional module is improved, and the time for detecting the security of the subsequent software is shortened.
As shown in fig. 6, a flowchart of a method for detecting a processor of a vehicle-mounted chip by using software security according to an embodiment of the present invention is provided, and the method includes the following steps:
in step 601, when the on-board chip processor is in an idle state, a software security detection application is started.
In the embodiment of the invention, when the vehicle-mounted chip processor is in an idle state, the software security detection application is started to detect the functional module.
Step 602, determining each functional module detected by each user application program when the on-board chip processor is in an operating state.
In the embodiment of the invention, when the vehicle-mounted chip processor is in a working state, namely when the user application program is executed, based on detection data fed back by the functional module, the self-checking module determines whether the functional module fails, marks the functional module as a functional module with detection completed, and stores the functional module with detection completed and a detection result corresponding to the functional module with detection completed into the register. After the software security detection application is completed last time, the functional module marked as the completed detection is the functional module which is completed by each user application program when the vehicle-mounted chip processor is in an operating state. And when the vehicle-mounted chip processor is in an idle state, acquiring the function module which is detected from the register.
And 603, detecting each function module which is not detected completely through the software security detection application.
In the embodiment of the invention, after the function modules which are detected are obtained from the register, each function module which is not detected is detected by the software security detection application.
According to the steps 601 to 603, it can be seen that, when the vehicle-mounted chip processor is in an operating state, the function modules which are not started in the running process of the user application program are detected, so that the number of the function modules required to be detected by the software security detection application is reduced when the following vehicle-mounted chip processor is in an idle state, and the time required to be detected by the software security detection application is further reduced.
Based on the same technical concept, the embodiment of the present application further provides an electronic device, as shown in fig. 7, where the electronic device 700 includes at least one processor 701, and a memory 702 connected to the at least one processor, in the embodiment of the present application, a specific connection medium between the processor 701 and the memory 702 is not limited, and in fig. 7, the processor 701 and the memory 702 are connected by a bus, for example. The buses may be divided into address buses, data buses, control buses, etc.
In the embodiment of the present application, the memory 702 stores instructions executable by the at least one processor 701, and the at least one processor 701 can execute the steps included in the detection method of the on-board chip processor by executing the instructions stored in the memory 702.
Where the processor 701 is a control center of a computing device, various interfaces and lines may be utilized to connect various portions of the computing device, implement data processing by executing or executing instructions stored in the memory 702 and invoking data stored in the memory 702. The processor 701 may be a general purpose processor such as a Central Processing Unit (CPU), digital signal processor, application specific integrated circuit (Application Specific Integrated Circuit, ASIC), field programmable gate array or other programmable logic device, discrete gate or transistor logic, discrete hardware components, and may implement or perform the methods, steps, and logic blocks disclosed in embodiments of the present application.
The memory 702 is a non-volatile computer-readable storage medium that can be used to store non-volatile software programs, non-volatile computer-executable programs, and modules. The Memory 702 may include at least one type of storage medium, and may include, for example, flash Memory, hard disk, multimedia card, card Memory, random access Memory (Random Access Memory, RAM), static random access Memory (Static Random Access Memory, SRAM), programmable Read-Only Memory (Programmable Read Only Memory, PROM), read-Only Memory (ROM), charged erasable programmable Read-Only Memory (Electrically Erasable Programmable Read-Only Memory), magnetic Memory, magnetic disk, optical disk, and the like.
Based on the same technical concept, the embodiments of the present application also provide a computer readable storage medium storing a computer program executable by a computing device, which when executed on an electronic device, causes the electronic device to perform the steps of the above-described detection method of the on-vehicle chip processor.
It will be appreciated by those skilled in the art that embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to the application. It will be understood that each flow and/or block of the flowchart illustrations and/or block diagrams, and combinations of flows and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
While preferred embodiments of the present application have been described, additional variations and modifications in those embodiments may occur to those skilled in the art once they learn of the basic inventive concepts. It is therefore intended that the following claims be interpreted as including the preferred embodiments and all such alterations and modifications as fall within the scope of the application.
It will be apparent to those skilled in the art that various modifications and variations can be made in the present application without departing from the spirit or scope of the application. Thus, if such modifications and variations of the present application fall within the scope of the claims and the equivalents thereof, the present application is intended to cover such modifications and variations.
Claims (10)
1. A vehicle-mounted chip processor, comprising: a decoder, a register and an execution unit; the execution unit comprises a self-checking module and a plurality of functional modules;
a first functional module for executing the first program instructions obtained from the decoder; the first program instruction is an instruction for realizing the function of setting the vehicle, which is set in the user application program; the user application program is triggered to run based on user behavior;
the self-checking module is used for generating a detection instruction corresponding to the self-diagnosis starting instruction based on the self-diagnosis starting instruction acquired from the decoder and sending the detection instruction to the corresponding second functional module; the self-diagnosis starting instruction is an instruction which is set in the user application program and used for detecting a functional module; the second functional module is a functional module which is not started in the running process of the user application program;
the self-checking module is further used for determining whether the second functional module fails or not based on detection data fed back by the second functional module;
and the register is used for storing the detection result of the second functional module.
2. The processor as in claim 1, further comprising:
a third functional module, configured to obtain a second program instruction from the decoder and execute the second program instruction after determining that a detection result of the third functional module is not stored in the register; the second program instruction is an instruction set in the software security detection application and used for detecting whether the third functional module has a fault or not; the software security detection application is configured to execute when the onboard chip processor is in an idle state.
3. The processor of claim 1 or 2, wherein the plurality of functional modules includes an optional functional module and an optional functional module; the self-checking module is electrically connected with each optional functional module respectively;
the necessary function module is a function module which is started in the execution process of any user application program;
the optional functional module is any functional module except the necessary functional module in the plurality of functional modules;
the first functional module is one of the necessary functional modules or one of the optional functional modules; the second functional module is one of the selectable functional modules; the third functional module is one of the mandatory functional modules or one of the optional functional modules other than the second functional module.
4. The processor of claim 3, wherein the self-checking module is specifically configured to determine whether the second functional module is malfunctioning based on the detection data fed back by the second functional module and the preset data of the second functional module.
5. The processor of claim 3, further comprising a fault collector;
the fault collector is used for collecting fault information of the second functional module and reporting the fault information.
6. The detection method of the vehicle-mounted chip processor is characterized by comprising the following steps of:
in the running process of a user application program, generating a detection instruction corresponding to a self-diagnosis starting instruction based on the self-diagnosis starting instruction in the user application program, and sending the detection instruction to a corresponding functional module; the self-diagnosis starting instruction is used for detecting a functional module which is not started in the running process of the user application program;
based on the detection data fed back by the functional module, determining whether the functional module fails or not and reporting failure information when the functional module fails.
7. The method as recited in claim 6, further comprising:
when the vehicle-mounted chip processor is in an idle state, starting a software security detection application;
determining each function module which is detected by each user application program when the vehicle-mounted chip processor is in a working state;
and detecting each function module which is not detected completely through the software security detection application.
8. The method as recited in claim 7, further comprising:
marking the functional module as a functional module with detection completion based on detection data fed back by the functional module;
and determining each functional module which is detected by each user application program when the vehicle-mounted chip processor is in a working state, wherein the functional module comprises:
and after the software security detection application is completed last time, the functional module marked as the completed detection is the functional module which is completed to be detected by each user application program when the vehicle-mounted chip processor is in a working state.
9. The method according to any one of claims 6 to 8, wherein determining whether the functional module is malfunctioning based on the detection data fed back by the functional module comprises:
and determining whether the functional module fails or not based on the detection data fed back by the functional module and the preset data of the functional module.
10. A computer readable storage medium having stored thereon a computer program/instruction, which when executed by a processor, implements the steps of the method according to any of claims 6-9.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202311676357.7A CN117369424B (en) | 2023-12-08 | 2023-12-08 | Vehicle-mounted chip processor and detection method thereof |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202311676357.7A CN117369424B (en) | 2023-12-08 | 2023-12-08 | Vehicle-mounted chip processor and detection method thereof |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN117369424A true CN117369424A (en) | 2024-01-09 |
| CN117369424B CN117369424B (en) | 2024-03-01 |
Family
ID=89395059
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202311676357.7A Active CN117369424B (en) | 2023-12-08 | 2023-12-08 | Vehicle-mounted chip processor and detection method thereof |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN117369424B (en) |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| EP0076655A1 (en) * | 1981-10-01 | 1983-04-13 | Stratus Computer, Inc. | Computer peripheral control apparatus |
| JPH01219727A (en) * | 1988-02-26 | 1989-09-01 | Olympus Optical Co Ltd | Camera possessing self check function |
| JPH06282454A (en) * | 1993-03-26 | 1994-10-07 | Nippon Telegr & Teleph Corp <Ntt> | Automatic fault diagnostic system |
| CN107817394A (en) * | 2017-08-17 | 2018-03-20 | 山东电工豪迈节能科技有限公司 | A kind of device and method of charging pile long-distance intelligent self-test |
| CN108803560A (en) * | 2018-05-03 | 2018-11-13 | 南京航空航天大学 | Synthesization DC solid-state power controller and failure decision diagnostic method |
| CN112690082A (en) * | 2020-12-24 | 2021-04-23 | 格力博(江苏)股份有限公司 | Self-checking feedback method, self-checking feedback system and intelligent mower |
-
2023
- 2023-12-08 CN CN202311676357.7A patent/CN117369424B/en active Active
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| EP0076655A1 (en) * | 1981-10-01 | 1983-04-13 | Stratus Computer, Inc. | Computer peripheral control apparatus |
| JPH01219727A (en) * | 1988-02-26 | 1989-09-01 | Olympus Optical Co Ltd | Camera possessing self check function |
| JPH06282454A (en) * | 1993-03-26 | 1994-10-07 | Nippon Telegr & Teleph Corp <Ntt> | Automatic fault diagnostic system |
| CN107817394A (en) * | 2017-08-17 | 2018-03-20 | 山东电工豪迈节能科技有限公司 | A kind of device and method of charging pile long-distance intelligent self-test |
| CN108803560A (en) * | 2018-05-03 | 2018-11-13 | 南京航空航天大学 | Synthesization DC solid-state power controller and failure decision diagnostic method |
| CN112690082A (en) * | 2020-12-24 | 2021-04-23 | 格力博(江苏)股份有限公司 | Self-checking feedback method, self-checking feedback system and intelligent mower |
Non-Patent Citations (2)
| Title |
|---|
| 初晓军: "机载雷达BIT设计研究", 《航空电子技术》, vol. 34, no. 4, 31 December 2003 (2003-12-31), pages 23 - 27 * |
| 陈玉: "分布式配电自动化系统的研究", 《安徽电气工程职业技术学院学报刊》, vol. 10, no. 3, 31 October 2005 (2005-10-31), pages 10 - 13 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN117369424B (en) | 2024-03-01 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US6421790B1 (en) | Method and circuit for analysis of the operation of a microcontroller using signature analysis of data and instructions | |
| CN111527477B (en) | Determining reliability of vehicle control commands using voting mechanisms | |
| CN107077407B (en) | Vehicle control device | |
| US6415394B1 (en) | Method and circuit for analysis of the operation of a microcontroller using signature analysis during operation | |
| US6496946B2 (en) | Electronic control apparatus with memory validation and method | |
| CN105501227B (en) | Road emergency activation | |
| US20130191701A1 (en) | Method for monitoring a data memory | |
| DE102008033675A1 (en) | Control system for control module of vehicle e.g. car to control brakes, comprises first and second cores of integrated circuit of primary processors producing first- and second control signal using first- and second CPU respectively | |
| US8117490B2 (en) | Microprocessor memory management | |
| CN117369424B (en) | Vehicle-mounted chip processor and detection method thereof | |
| CN113934898A (en) | Fault code classified storage method, device, equipment and storage medium | |
| KR102636306B1 (en) | Method and device for monitoring the condition of an electronic circuit unit of a vehicle | |
| EP3629176B1 (en) | Fault detection circuit with progress register and status register | |
| KR100345115B1 (en) | Method for diagnosing logics | |
| CN106033220A (en) | Method of detecting ECU Flash erasing and writing state and system thereof | |
| CN114859868B (en) | Error-proofing processing method for off-line configuration of passenger car combination instrument system | |
| CN116610090A (en) | Fault processing method and device and electronic equipment | |
| CN114030439B (en) | Configuration method and device of air bag controller and computer storage medium | |
| JP2000035923A (en) | Abnormality detecting method and abnormality detecting device | |
| CN116501156B (en) | Power supply time sequence control method, device, equipment and storage medium | |
| CN113548028B (en) | Method and system for guaranteeing reliability of braking system of formula racing car without man | |
| CN116150771B (en) | Redundancy processing device, redundancy processing method, redundancy processing system and intelligent vehicle | |
| US7248976B2 (en) | Method and system for the validation of fault symptoms | |
| CN116605243A (en) | Method and device for determining functional safety target of vehicle and electronic equipment | |
| CN111382090A (en) | Storage method and device, use method and device of configuration data of vehicle |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |