Embodiment
In one embodiment, as shown in figure 1, a kind of redundancy structure control circuit of vehicle control syetem, including first
Control circuit 110, second control circuit 120, the first peripheral circuit 130, the second peripheral circuit 140, common circuit 150 and communication
Device 160, first control circuit 110 connects the first peripheral circuit 130 and the common circuit 150, second control circuit 120 connect
The second peripheral circuit 140 and the common circuit 150 are connect, first control circuit 110 passes through the control of the connection of communicator 160 second
Circuit 120, the first peripheral circuit 130, the second peripheral circuit 140 and the common circuit 150 are used to connect vehicle control syetem.
The output of first control circuit 110 first collection signal is to the first peripheral circuit 130 and common circuit 150, outside first
The data of circuit 130 and common circuit 150 according to the first collection signal acquisition vehicle control syetem are enclosed, obtain the first vehicle-mounted control
System data, and sending to first control circuit 110, first control circuit 110 is by communicator 160 by the first vehicle-mounted control
System data sends to second control circuit 120, first control circuit 110 and sends the first control signal to the first peripheral circuit
130 and common circuit 150, the first peripheral circuit 130 and common circuit 150 are according to the first control signal of reception to vehicle-mounted control
System is controlled;The output of second control circuit 120 second collection signal is to the second peripheral circuit 140 and common circuit 150, and the
It is vehicle-mounted to obtain second according to the data of the second collection signal acquisition vehicle control syetem for two peripheral circuits 140 and common circuit 150
Control system data, and send to second control circuit 120, second control circuit 120 and receive the first vehicle control syetem data,
The second control signal is sent to the second peripheral circuit 140 and common circuit 150, the second peripheral circuit 140 and common circuit 150
Vehicle control syetem is controlled according to the second control signal of reception.
Specifically, second control circuit 120 is additionally operable to send the second vehicle control syetem data to first control circuit
110, first control circuit 110 receives the second vehicle control syetem data, and sends second source enable signal to the second control
Circuit 120;Second control circuit 120 is additionally operable to send the first power supply enable signal to first control circuit 110.
Specifically, in normal working conditions, vehicle control syetem master control borad is controlled by first control circuit 110 is leading,
First control circuit 110 is realized by the first peripheral circuit 130 and common circuit 150 and the real time data of vehicle control syetem is adopted
Collection and control, while second control circuit 120, the second peripheral circuit 140 and common circuit 150 are also at working condition, enter one
Step, total voltage measurement/insulating monitoring circuit in the second peripheral circuit 140 is in running order, and first control circuit 110 is logical
Cross communicator 160 and send the first vehicle control syetem data to second control circuit 120, second control circuit 120 is according to the
The first vehicle control syetem data that two vehicle control syetem data and the first control circuit 110 received are sent, are realized to the
The monitoring of one control circuit 110 and the first peripheral circuit 130, wherein, the first vehicle control syetem data and the second vehicle-mounted control
Part identical data in system data at least be present, when monitoring the failure of 110 or first peripheral circuit of first control circuit 130
When, wherein, when the first vehicle control syetem data that second control circuit 120 receives do not change in preset time,
The failure of first control circuit 110 is thought, when second control circuit 120 monitors the first vehicle control syetem data and the second car
When the data for gathering same target present in borne control system data have inconsistent, that is, think corresponding first peripheral circuit
130 failures, second control circuit 120 send the second control signal to the second peripheral circuit 140 and common circuit 150 and realized to car
The control of borne control system, it is ensured that vehicle control syetem being capable of safe and reliable operation.
Further, in the process being compared to the first vehicle control syetem data and the second vehicle control syetem data
In, to prevent comparative result from malfunctioning, historical data is also stored with second control circuit 120, historical data is most main as reference
That wants is still contrasted with the value of the first vehicle control syetem data of synchronization and the second vehicle control syetem data, is come
Judge the first peripheral circuit 130 whether failure.
Further, first control circuit 110 is additionally operable to be realized to the according to the second vehicle control syetem data of reception
The monitoring of two control circuits 120, when monitoring that second control circuit 120 is abnormal, second source enable signal is sent to second
Control circuit 120 restarts second control circuit 120, wherein, refer to extremely when the second vehicle control syetem data received exist
When not changing in preset time, that is, think that second control circuit 120 is abnormal;Second control circuit 120 is additionally operable to according to reception
The first vehicle control syetem data monitoring to first control circuit 110 it is abnormal when, send the first power supply enable signal to first
Control circuit 110 restarts first control circuit 110, wherein, refer to extremely when the first vehicle control syetem data received exist
When not changing in preset time, that is, think that first control circuit 110 is abnormal.
The above-mentioned redundancy structure control circuit based on vehicle control syetem, reliability is high, and vehicle control syetem is effectively ensured
Safe and stable operation.
In one embodiment, as shown in Fig. 2 the redundancy structure control circuit of vehicle control syetem also includes the first power supply
170 and second source 180, the first power supply 170 connection first control circuit 110, second source 180 connects second control circuit
120。
Specifically, the first power supply 170 and second source 180 are respectively used to control electricity to first control circuit 110 and second
Road 120 powers.Further, second control circuit 120 is according to the first vehicle-mounted control exported by communicator 160 of reception
Extremely whether system data monitor the power supply 170 of first control circuit 110 or first and work in real time, the first vehicle control syetem data
It is that the vehicle control syetem data collected are converted to by preset format number by the first peripheral circuit 130 and common circuit 150
According to what is obtained, preset format is not unique, and in the present embodiment, preset data form is converted into binary data format, another
In outer embodiment or first control circuit 110 turns the initial data of the vehicle control syetem collected of reception
Preset format data are changed to retransmit to second control circuit 120.
When the first power supply 170 fails, the corresponding operation irregularity of first control circuit 110, when second control circuit 120 is logical
When to cross data that communicator 160 receives all be 0, then it is judged as that the first power supply 170 fails, when second control circuit 120 is logical
When to cross data that communicator 160 receives all be 1, then judge it is that first control circuit 110 itself fails, when monitoring first
When power supply 170 fails or first control circuit 110 itself fails, the first power supply enable signal control first control circuit is sent
110 feeder ears are restarted, and can effectively control the deadlock phenomenon of first control circuit 110, wherein, deadlock phenomenon is to represent to control
Chip operation abnormality, after restarting, first control circuit 110 can recover normal;Similarly, when the basis of first control circuit 110
The the second vehicle control syetem data exported by communicator 160 received judge second control circuit 120 or second source
During 180 operation irregularity, send second source enable signal control other side's feeder ear and restarted, can effectively control the second control electric
The deadlock phenomenon on road 120.
In one embodiment, the first peripheral circuit 130 include be all connected with first control circuit 110 total voltage measurement/
Relay adhesion detection circuit, insulating monitoring circuit, functional module control relay circuit, the first telecommunication circuit and the second communication
Circuit.
Specifically, total voltage measurement/relay adhesion detection circuit and insulating monitoring circuit are used to connect vehicle-mounted control system
To unite high-voltage line, functional module control relay circuit is used to connect vehicle control syetem function relay, measured by total voltage/
Relay adhesion detect in circuit acquisition system bus voltage and vehicle control syetem it is main just/the contact adhesion feelings of main negative relay
Condition, insulating monitoring circuit be used for detect vehicle control syetem insulation situation, functional module control relay circuit be used for control with
Vehicle control syetem unrelated function relay, such as heating relay, preliminary filling relay and charge relay etc. safely.
In the present embodiment, the first telecommunication circuit is CAN0_1 telecommunication circuits, for connecting the vehicle of vehicle control syetem
CAN interface, the second telecommunication circuit are CAN1_1 telecommunication circuits, for connecting being controlled from control CAN interface, first for vehicle control syetem
Circuit 110 processed sends the first collection signal extremely from control CAN interface, from control module by being connect from control CAN by the first telecommunication circuit
Mouth sends the data such as monomer voltage, temperature and gathered to first control circuit 110, first control circuit 110 by common circuit 150
To system power, relay status etc., and by the second telecommunication circuit by related data (voltage, temperature, electric current, relay shape
State etc.) send to vehicle CAN interface, so as to send to vehicle, vehicle by vehicle CAN interface understand first control circuit 110,
The working condition of first peripheral circuit 130 and common circuit 150.
In one embodiment, the second peripheral circuit 140 include be all connected with second control circuit 120 total voltage measurement/
Insulating monitoring circuit, third communication circuit and fourth communication circuit.
Specifically, total voltage measurement/insulating monitoring circuit is used for acquisition system bus voltage and system insulation data.At this
In embodiment, total voltage measurement/insulating monitoring circuit is used to connect vehicle control syetem high-voltage line, and third communication circuit is
CAN0_2 telecommunication circuits, for connecting the vehicle CAN interface of vehicle control syetem, fourth communication circuit is CAN1_2 communication electricity
Road, for connect vehicle control syetem from control CAN interface, second control circuit 120 pass through third communication circuit send second
Signal is gathered extremely from control CAN interface, is controlled from control module by sending the data such as monomer voltage, temperature from control CAN interface to second
Circuit 120 processed, second control circuit 120 collect system power, relay status etc. by common circuit 150, then pass through
Four telecommunication circuits send related data (voltage, temperature, electric current, relay status etc.) to vehicle CAN interface, so as to send to
Vehicle, vehicle understand the work of second control circuit 120, the second peripheral circuit 140 and common circuit 150 by vehicle CAN interface
Make state.
In one embodiment, common circuit 150 include current analog signal modulate circuit and it is main just/main negative relay control
System and detection circuit, current analog signal modulate circuit connection first control circuit 110 and second control circuit 120, it is main just/it is main
Negative Control is connected first control circuit 110 and second control circuit 120 with detection circuit.
Specifically, first control circuit 110 can be according to the first vehicle control syetem data of collection and the storage number to prestore
It is judged that common circuit 150 whether failure, and send the first control signal to common circuit 150, second control circuit 120 can root
According to the second vehicle control syetem data and the data storage that prestores of collection judge common circuit 150 whether failure, and transmission the
Two control signals are to common circuit 150, and in the present embodiment, current analog signal modulate circuit is used to connect vehicle control syetem
Current sensor, it is main just/main negative Control with detect circuit be used to connecting the master of vehicle control syetem just/main negative relay
Device, first control circuit 110 and second control circuit 120 by current analog signal modulate circuit acquisition system operating current,
First control circuit 110 and second control circuit 120 by it is main just/main negative Control and detection circuit monitoring master just/it is main
Negative relay working condition, confirms whether it is working properly.
In one embodiment, it is main just/main negative Control includes the first drive circuit, the second driving with detection circuit
Circuit and drain voltage detection circuit, the first drive circuit, the second drive circuit and drain voltage detection circuit are all connected with first
Control circuit 110 and second control circuit 120, drain voltage detection circuit connect the first drive circuit, the first drive circuit and
Second drive circuit is used to connect vehicle control syetem.
Specifically, backup of second drive circuit as the first drive circuit, the second drive circuit and the first drive circuit
Be all connected with master in vehicle control syetem just/main negative relay, drain voltage detection circuit is used to be adopted according to the first collection signal
Collect the first drain voltage of the first drive circuit and transmission to first control circuit 110, first control circuit 110 can be according to first
Drain voltage judges whether the first drive circuit is working properly, if the first drive circuit works are abnormal, first control circuit 110 is defeated
Go out the work that the first control signal controls the second drive circuit to take over the first drive circuit, main just/main negative relay work of monitoring
State, confirm whether it is working properly;At the same time, second control circuit 120 is also at working condition, sends the second collection letter
Number, drain voltage detection circuit is used for the second drain voltage according to the second collection drive circuit of signal acquisition first and sent extremely
Second control circuit 120, second control circuit 120 can judge whether the first drive circuit works just according to the second drain voltage
Often, realize to it is main just/main negative Control with detect in circuit circuit whether abnormal dual judgement, work as second control circuit
120 by the first vehicle control syetem data monitoring to 110 operation irregularity of first control circuit when, second control circuit 120 connects
The work of pipe first control circuit 110, and send the second control signal and drag down the first control signal, in order to avoid to vehicle control syetem
Impact, drain voltage detection circuit is used in real time according to the second drain electrode electricity of the second collection drive circuit of signal acquisition first
Press and send to whether second control circuit 120, second control circuit 120 judge the first drive circuit according to the second drain voltage
It is working properly, if the first drive circuit works are normal, send the second control signal and control the monitoring of the first drive circuit main just/main
Negative relay working condition, if operation irregularity, second control circuit 120 exports the second control signal and controls the second drive circuit to connect
Cross the work of the first drive circuit, main just/main negative relay working condition of monitoring.
In one embodiment, communicator 160 is radio communication device or wire communication device.
Specifically, radio communication device includes at least one of Zigbee and GPRS devices, wire communication device serial ports
Communication and I/O mouths, first control circuit 110 connect second control circuit 120 by serial communication with I/O mouths.
In the first vehicle control syetem data and the second vehicle control syetem data transmission procedure, for safe class phase
Relatively low data can be communicated by serial ports, and the important system failure for being related to endangering life safety, it can lead to
Cross I/O mouths to be communicated, further, the relatively low data of safe class are total voltage, current value and insulation values, Ke Yiyong
Serial communication, when just/main negative Control is with detection module operation irregularity based on important system failure, it can be entered with I/O mouths
Row communication.
Specifically, first control circuit 110 can detect the first telecommunication circuit and whether the second telecommunication circuit fails, and will
Judged result is sent to second control circuit 120 by communicator 160.
In one more detailed embodiment, as shown in figure 3, redundancy structure control circuit includes power supply 1, control chip
1st, total voltage measures 1/ relay adhesion detection circuit, insulating monitoring circuit, functional module control relay circuit, current analog
Signal conditioning circuit, Control and detection circuit, CAN0_1 telecommunication circuits, CAN1_1 telecommunication circuits, power supply 2, control core
Piece 2, total voltage measurement 2/ insulating monitoring 2 circuit, CAN0_2 telecommunication circuits and CAN1_2 telecommunication circuits, power supply 1, total voltage measurement
1/ relay adhesion detection circuit, insulating monitoring circuit, functional module control relay circuit, current analog signal conditioning electricity
Road, Control and detection circuit, CAN0_1 telecommunication circuits and CAN1_1 telecommunication circuits are all connected with control chip 1, power supply 2,
Total voltage measurement 2/ insulating monitoring 2 circuit, CAN0_2 telecommunication circuits and CAN1_2 telecommunication circuits, current analog signal modulate circuit
Control chip 2 is all connected with Control and detection circuit, total voltage measures 1/ relay adhesion detection circuit, insulating monitoring
Circuit connects vehicle control syetem high-voltage line with the total voltage measurement circuit of 2/ insulating monitoring 2, and current analog signal modulate circuit connects
Pick up borne control system current sensor, Control be connected with detection circuit vehicle control syetem master just/it is main bear relay,
Functional module control relay circuit connects the function relay of vehicle control syetem, CAN0_1 telecommunication circuits and CAN0_2 communications
Circuit connects the vehicle CAN interface of vehicle control syetem, and CAN1_1 telecommunication circuits connect vehicle-mounted control with CAN1_2 telecommunication circuits
System from control CAN interface.
Specifically, compared to traditional technology, control chip 2 is increased in high-tension system master control borad, control chip 2 possesses
Independently of the power supply circuit of control chip 1, and control chip 2 possess independent peripheral circuit CAN0_2 telecommunication circuits,
CAN1_2 telecommunication circuits, total voltage measure 2/ insulating monitoring 2, while control chip 2 shares peripheral circuit electric current with control chip 1
Analog signal conditioner, it is main just/main negative Control and detection, except I/ can be carried out between control chip 1 and control chip 2
O port communications, while SPI communication can also be carried out, there is power supply enable signal between control chip 1 and control chip 2, can control
The power-supplying circuit of other side processed, the abnormal control chip of timely repair.
Above-mentioned redundancy structure control circuit, in the case of system operation is normal, the redundancy structure control method can and
When detect system detect in the process of running and control aspect existing for it is abnormal, and correct in time, strengthening system fortune
Capable real-time and robustness;In the case where control chip 1, the first peripheral circuit 130 and power supply 1 fail at least partially,
Control chip 2 realizes rapidly control to high-tension system, it is ensured that system can safe operation, realize control system switching
Real-time, allow system reliability service, therefore there is high robustness, ensured the safety of the person and property, realized system
Safety and reliability.
Each technical characteristic of embodiment described above can be combined arbitrarily, to make description succinct, not to above-mentioned reality
Apply all possible combination of each technical characteristic in example to be all described, as long as however, the combination of these technical characteristics is not deposited
In contradiction, the scope that this specification is recorded all is considered to be.
Embodiment described above only expresses several embodiments of the present utility model, and its description is more specific and detailed,
But therefore it can not be interpreted as the limitation to utility model patent scope.It should be pointed out that the common skill for this area
For art personnel, without departing from the concept of the premise utility, various modifications and improvements can be made, these are belonged to
The scope of protection of the utility model.Therefore, the protection domain of the utility model patent should be determined by the appended claims.