CN209381811U - A kind of system reducing electric machine controller ASIL grade - Google Patents

Abstract

The utility model provides a kind of system for reducing electric machine controller ASIL grade, including entire car controller, electric machine controller, battery management system and the motor being connect with wheel, the output end of the entire car controller is connect with the electric machine controller, battery management system respectively, the output end of the battery management system is connect with the electric machine controller, the three-phase current output end of the electric machine controller is connect with the motor, is in series with current Hall sensor between the three-phase current output end and the motor of the electric machine controller.The beneficial effects of the utility model are: can be under the premise of guaranteeing that vehicle level meets identical ASIL grade torque functional safety, the ASIL grade for reducing electric machine controller, so that the complexity and technological difficulties of electric machine controller are reduced, integral vehicle cost and project risk are effectively reduced.

Description

A kind of system reducing electric machine controller ASIL grade

Technical field

The utility model relates to electric car more particularly to a kind of systems for reducing electric machine controller ASIL grade.

Background technique

Electric car is because its energy-saving and emission-reduction, pollution are small, and as each big city gradually limits board, the hair of electric car industry Exhibition is become better and better.Pure electric automobile more because of its environment-friendly advantage, becomes the mainstream of the strategy of energy conservation and new energy development.

Vehicle intellectualized in recent years, networking, motorized become the trend of automobile future development, and as nobody is automatic The rise of driving, automobile general safety turn to active safety, the probability of happening to fail in reduction system, control from passive security Risk processed.

With the electrical E/E system of vehicle electric and ADAS(DAS (Driver Assistant System)) quantity is continuously increased, vehicle safety, section Energy, environmental protection, low-carbon, integrated, information-based, intelligent, networking, automation function are more and more, and the E/E(electronics in vehicle/ Electrically) system is more and more.Promote based on " IEC 61508 ", to meet the specific of the electric system of road vehicle Demand and the birth for writing " ISO 26262 ".

Because the execution of ISO26262 standard will largely reduce traffic thing caused by the failure of vehicle level Therefore failure rate and the risk recalled, outstanding vehicle factor (BMW, masses, Toyota, general etc.) is for major components both at home and abroad Factory proposes the requirement of high functional safety grade and security target, and proposes that being unsatisfactory for ISO26262 standard is not eligible for participating in throwing Mark activity.It is domestic and international outstanding components factory that thus exploitation, which meets the electric car components of functional safety (ISO26262) standard, Quotient's technical problem urgently to be resolved.

The implementation of ISO26262 standard and according to the standard development product, cost is that cost that is high, paying will compare It is larger.Software development uses AUTOSAR(automobile open system framework) the platform progress Embedded exploitation of software；Due to needing to examine Worry safety leads to entire hardware component and the cost of design is also very big.Entirety gets off the cost of product can be very high, whole The cost of vehicle certainly will not be low, moreover without corresponding client, after exploitation will not quickly cost-recovering, complete product certification Also not within the foreseeable future with realization product volume production, many enterprises are unwilling to undertake the cost of this part, are constantly in the state of looking around.But From the point of view of the support of national policy and the state of development of electric car industry, commercial vehicle market is gradually saturated, automobile industry enterprise Battlefield is gradually turned to passenger car by industry, therefore passenger car market will welcome one section of outbreak period, and passenger car develops requirement than quotient Also bigger with Che Genggao, difficulty, passenger car main product currently on the market meets fewer and fewer, the institute again of functional safety requirement To solve the safety problem of vehicle, the technological reserve for carrying out related fields becomes imperative and very urgent, it will improves enterprise The core competitiveness of industry.

When components manufacturer, the country carries out functional safety program planning at present, all experiences according further to external vehicle enterprise HARA (hazard analysis and risk assessment) analysis is done based on dynamical system from vehicle level, obtains the function peace of vehicle level Full target and corresponding ASIL grade, are carrying out decomposing each components.Components manufacturer develops according to the demand of vehicle factor Meet the product of functional safety requirement, it is likely that the entire car controller and electric machine controller occurred in existing scheme all carries out torque Functional safety design, the exploitation complexity for meeting the components of functional safety requirement is big, technical difficulty is high, the project cycle is long, opens Send out costly, development risk it is big；And period of cost recovery is long.It is not improved from functional safety grade from the point of view of vehicle level, The functional safety grade of confirmation vehicle is carried out only according to the highest functional safety grade of all components, that just belongs to a kind of waste And expand cost.

There are four ASIL grades (Automotive Safety Integration Level, vehicle safety grade) etc. Grade, respectively ASIL A, ASIL B, ASIL C, ASIL D, wherein ASIL A is the lowest class, and ASIL D is highest level. ASIL grade determines the requirement of whole system safety, and ASIL higher grade, higher to the security requirement of system, is real The cost now paid safely is bigger, it is meant that the diagnosis coverage rate of hardware is higher, and development process is stringenter, corresponding development cost Increase, development cycle extension, demands strict technology.To solve the above difficult point, while being also required to reach identical in vehicle level Functional safety grade proposes the scheme for reducing electric machine controller ASIL grade.

VCU(entire car controller) according to Driving Scene and vehicle condition real time monitoring vehicle operation, driver intention is executed, It is the brain of vehicle.BMS(battery management system) be automotive power support, be the core of vehicle energy management.MCU (electric machine controller) is the core component for driving vehicle.The security target of VCU under normal conditions: torque safety, high-voltage safety； The security target of BMS: high-voltage safety；The security target of MCU: torque safety.

The development of ISO26262 standard at home only only has several years, everybody is unfamiliar with the understanding of standard.Domestic vehicle Enterprise do whole vehicle functions it is safe when, all according further to the experience of external vehicle enterprise from vehicle level based on dynamical system HARA (hazard analysis and risk assessment) analysis is done, electric machine controller and vehicle control are obtained according to existing Control of Electric Vehicles strategy The torque safety target and ASIL C grade of device processed.Components manufacturer goes exploitation to meet according to functional safety demand and security target The product that functional safety requires.Can inevitably make in this way the exploitation complexity of functional safety components increases, technical difficulty is excessively high, Project development expense is also compared with high, project development risk is big；And period of cost recovery is long.See Fig. 1, existing vehicle level motor Controller function security architecture block diagram, its working principle is that: VCU(entire car controller) it (steps on the gas and steps on according to the intention of driver The depth of plate) throttle signal is converted into corresponding torque signal, pass through CAN(controller local area network) bus communication is to MCU (electric machine controller) sends corresponding torque request order, and MCU exports corresponding torque according to the torque request order of VCU.MCU By acquiring the phase current and angle value inverse actual torque of motor, it is compared and preset value if giving torque with CAN Difference in torque is more than to enter safe condition cutting torque output after ± 50N.m.According to present principle Analysis VCU and MCU Torque output function will do function security level, show that torque functional safety grade is ASIL C by HARA analysis at present, Security target is directly shutdown torque output when torque occurs abnormal；Other component BMS(battery management system) high voltage functionality Safety is ASIL C；The torque functional safety of VCU is ASIL C；The warning function of instrument is ASIL A safely.VCU's and MCU Torque functional safety is relatively high and two systems do torque functional safety, the principle vehicle decomposed according to ASIL grade The ASIL grade of level, which is not improved, also increases the development difficulty of VCU and MCU.

Both existing design electric machine controller and entire car controller carry out torque functional safety design, but vehicle layer The ASIL grade in face is not improved, and the ASIL grade of vehicle is determined by the highest ASIL grade of all components of vehicle.

The shortcomings that prior art is: both electric machine controller and entire car controller require to do torque functional safety To ASIL C grade.Complexity, technical difficulty are larger；Development cost is high, project development risk is bigger.

Therefore, under the premise of guaranteeing that vehicle level meets torque functional safety, the ASIL of electric machine controller how is reduced Grade is those skilled in the art's technical problem urgently to be resolved.

Summary of the invention

In order to solve the problems in the prior art, the utility model, which provides, a kind of reduces electric machine controller ASIL grade System.

The utility model provides a kind of system for reducing electric machine controller ASIL grade, including entire car controller, motor Controller, battery management system and the motor being connect with wheel, the output end of the entire car controller respectively with the motor control Throttle signal is directly changed into torque according to driver intention and asked by device processed, battery management system connection, the entire car controller Evaluation is simultaneously sent to electric machine controller, and the output end of the battery management system is connect with the electric machine controller, the motor The three-phase current output end of controller is connect with the motor, and the electric machine controller send the torque that the torque request value generates To the motor, the motor executes torque according to the torque request value and exports, the three-phase current output of the electric machine controller Current Hall sensor, the output end of the current Hall sensor and the full-vehicle control are in series between end and the motor Device connection, the current Hall sensor export collected current sampling signal to the entire car controller, the motor It is connected with rotary transformer, the output end of the rotary transformer is connect with the entire car controller, and the rotary transformer will Collected angular samples signal is exported to the entire car controller, and the entire car controller believes collected current sample Number, angular samples signal resolution be current value and angle value, on the one hand, the entire car controller will the current value that obtains of parsing and Angle value is exported to the electric machine controller as value of feedback and is adjusted for PID, generates torque；On the other hand, the vehicle control Current value and angle value that device processed is obtained according to parsing calculate the actual torque value of the motor, by the reality for the motor being calculated Border torque value is compared with the torque request value that entire car controller issues electric machine controller, using the two whether unanimously as whether Into the Rule of judgment of safe condition.Three-phase current sensor and rotary transformer in the present invention, make entire car controller Entire car controller and electric machine controller are carried out physical connection, altogether by the cooperation that can enter depth with the producer of electric machine controller Enjoy the current value and angle value of entire car controller parsing.

The output end of the entire car controller passes through CAN bus and institute respectively as a further improvement of the utility model, State electric machine controller, battery management system connection, the high-voltage output end of the battery management system and the electric machine controller High voltage input terminal connection, the torque output of the motor are connected with wheel.

As a further improvement of the utility model, it is described reduce electric vehicle motor controller ASIL grade system also Including gas pedal, the throttle signal output end of the gas pedal is connect with the input terminal of the entire car controller.

The beneficial effects of the utility model are: identical ASIL grade torque functional safety can be met guaranteeing vehicle level Under the premise of, the ASIL grade of electric machine controller is reduced, so that the complexity and technological difficulties of electric machine controller are reduced, vehicle Cost and project risk are effectively reduced.

Detailed description of the invention

Fig. 1 is existing vehicle level electric machine controller functional safety block architecture diagram.

Fig. 2 is a kind of schematic diagram for the system for reducing electric machine controller ASIL grade of the utility model.

Fig. 3 is a kind of torque safety ASIL C ranking score for the system for reducing electric machine controller ASIL grade of the utility model Xie Tu.

Specific embodiment

The utility model is described in further detail for explanation and specific embodiment with reference to the accompanying drawing.

As shown in Figure 2 to Figure 3, a kind of system reducing electric machine controller ASIL grade, including entire car controller (VCU) 2, Electric machine controller (MCU) 4, battery management system (BMS) 3 and the motor that connect with wheel, the output end of the entire car controller 2 It is connect respectively with the electric machine controller 4, battery management system 3, the entire car controller 2 exports torque request value to described Electric machine controller 4, the output end of the battery management system 3 are connect with the electric machine controller 4, the electric machine controller 4 Three-phase current output end is connect with the motor 5, and the electric machine controller 4 is to the 5 output torque value request of motor, the electricity Current Hall sensor 7, current Hall sensor 7 are in series between the three-phase current output end and the motor 5 of machine controller 4 Two-phase can be acquired or acquire three-phase, the output end of the current Hall sensor 7 is connect with the entire car controller 2, The current Hall sensor 7 exports collected current sampling signal to the entire car controller 2, and the motor 5 connects There is rotary transformer 8, the output end of the rotary transformer 8 is connect with the entire car controller 2, and the rotary transformer 8 will Collected angular samples signal is exported to the entire car controller 2, and the entire car controller 2 believes collected current sample Number, angular samples signal resolution be current value and angle value, on the one hand, the entire car controller 2 will the current value that obtains of parsing It exports as value of feedback to the electric machine controller 4 with angle value and is adjusted for PID, generate torque；On the other hand, the vehicle Current value and angle value that controller 2 is obtained according to parsing calculate the actual torque value of the motor 5, the motor that will be calculated Whether 5 actual torque value is compared with the torque request value that entire car controller 2 issues electric machine controller 4, consistent with the two As whether enter safe condition Rule of judgment.

As shown in Fig. 2, the output end of the entire car controller 2 passes through CAN bus and the electric machine controller 4, electricity respectively Pond management system 3 connects, and the high voltage input terminal of the high-voltage output end of the battery management system 3 and the electric machine controller 4 connects It connects, the torque output of the motor 5 is connected with wheel 5.

As shown in Fig. 2, the system for reducing electric vehicle motor controller ASIL grade further includes gas pedal 1, institute The throttle signal output end for stating gas pedal 1 is connect with the input terminal of the entire car controller 2.

As shown in Figure 2 to Figure 3, a kind of system reducing electric machine controller ASIL grade, specific work process are as follows:

The throttle signal of gas pedal 1 is directly changed into torque request value and is sent out by CAN communication by S1, entire car controller 2 Give electric machine controller 4；

S2, the electric machine controller 4 export the torque request value of the entire car controller 2 by motor 5 to wheel 6；

S3, the entire car controller 2 acquire the current acquisition signal of the motor 5 by current Hall sensor 7, described Entire car controller 2 acquires the angle acquisition signal of the motor 5 by rotary transformer 8, and the entire car controller 2 will collect Current acquisition signal and angle acquisition signal after parsing obtains current value and angle value, on the one hand, the full-vehicle control The current value that parsing obtains and angle value are exported as value of feedback to the electric machine controller 4 and are used for PID adjusting by device 2, are generated Torque；On the other hand, the current value and angle value that the entire car controller 2 is obtained according to parsing calculate the reality of the motor 5 The actual torque value for the motor 5 being calculated and entire car controller 2 are issued the torque request value of electric machine controller 4 by torque value It is compared, if the actual torque value of motor 5 is consistent with the torque request value that entire car controller 2 issues electric machine controller 4, Do not enter safe condition, if the actual torque value of motor 5 and entire car controller 2 issue the torque request value of electric machine controller 4 It is inconsistent, then enter safe condition.

In step s3, if the torque that the actual torque value of motor 5 issues electric machine controller 3 with entire car controller 2 is asked Evaluation is inconsistent, then entire car controller 2 is sent to battery management system 3 by CAN communication and disconnects main contactor request, cutting electricity Both the high input voltage of machine controller 4, electric machine controller 2 and entire car controller 4 cut off torque output and enter safe condition, To guarantee vehicle safety.

A kind of system reducing electric machine controller ASIL grade provided by the utility model, according to ISO26262 standard Understand, formulates functional safety solution from vehicle level, original VCU and MCU is carried out to the scheme of torque safety ASIL C VCU torque safety ASIL C(C is decomposed into according to ASIL grade in ISO26262 standard), MCU torque safety QM(C), then do not have to Following ISO26262 standard and develop can make vehicle reach identical ASIL grade.As shown in Fig. 2, VCU passes through current Hall Sensor 7 and rotary transformer 8 acquire vehicle actual current signal and angle signal, and VCU is to collected current signal and angle Degree signal is parsed, and is given to inside VCU respectively and is carried out PID adjusting (FOC vector calculation for the calculating of actual torque value and MCU The functional module of method control).Throttle signal is directly changed into torque request value according to driving intention by VCU, and passes through CAN communication It is sent to MCU, then MCU calculates actual torque with the angle value and current value of parsing inside VCU directly in response to corresponding torque Value, is compared with the VCU torque request value for issuing MCU, if inconsistent, VCU is sent to BMS by CAN communication and disconnects master Both contactor request, cutoff high, MCU and VCU cut off torque output and enter safe condition, to guarantee vehicle safety. Each security target and corresponding ASIL grade in this scheme, the torque functional safety grade of VCU are ASIL C (C)；Moment of torsion control It is exactly QM (C) with torque output.According to 26262 standard of ISO, MCU is developed with regard to only needing to follow QM grade；The high pressure of BMS Cutting off security level is ASIL C(C).

In the present invention, the producer of entire car controller 2 and electric machine controller 4 can enter the cooperation of depth for vehicle Controller 2 and electric machine controller 4 carry out physical connection, share current value and angle value that entire car controller 2 parses.

A kind of system reducing electric machine controller ASIL grade provided by the utility model, vehicle torque functional safety only need VCU is accomplished into ASIL C(C), MCU torque safety accomplishes QM(C), that is, it can guarantee that vehicle level meets torque functional safety, makes It obtains the complexity of electric machine controller 4 and technological difficulties is reduced, integral vehicle cost and project risk are effectively reduced.Note: QM It is the grade that quality requirement is not belonging to functional safety system；ASIL grade is divided into four grades and is respectively as follows: ASIL A, ASIL B,ASIL C,ASIL D.ASIL D is highest level.

A kind of system reducing electric machine controller ASIL grade provided by the utility model, has the advantage that

1, propose that a kind of electric car can reach identical ASIL C grade, but electric machine controller torque function in vehicle level Safety does not have to carry out functional safety design again, need to only accomplish QM(C), entire car controller 2 is reduced to ASIL from original ASIL C C(C)；

2, product does not have to the design in terms of progress torque functional safety, largely reduces the complexity of functional safety exploitation And technological difficulties；Electric machine controller components functional safety project development cost and material are reduced originally, to reduce the cost of vehicle； Functional safety project development risk is reduced simultaneously；

3, only need to increase by one group of three-phase current Hall and rotary transformer, VCU passes through current Hall sensor 7 and rotation Transformer 8 acquires vehicle actual current signal and angle signal, VCU solve collected current signal and angle signal Analysis is given to inside VCU respectively and carries out the PID adjusting (function of FOC vector operation control for the calculating of actual torque value and MCU Module)；

4, the producer of entire car controller 2 and electric machine controller 4 can enter the cooperation of depth for entire car controller 2 and motor Controller 4 carries out physical connection, shares current value and angle value that entire car controller 2 parses.

It, cannot the above content is specific preferred embodiment further detailed description of the utility model is combined Assert that the specific implementation of the utility model is only limited to these instructions.For the ordinary skill of the utility model technical field For personnel, without departing from the concept of the premise utility, a number of simple deductions or replacements can also be made, should all regard To belong to the protection scope of the utility model.

Claims (3)

1. it is a kind of reduce electric machine controller ASIL grade system, it is characterised in that: including entire car controller, electric machine controller, Battery management system and the motor being connect with wheel, the output end of the entire car controller respectively with the electric machine controller, electricity The connection of pond management system, it is concurrent that throttle signal according to driver intention is directly changed into torque request value by the entire car controller Electric machine controller is given, the output end of the battery management system is connect with the electric machine controller, the electric machine controller Three-phase current output end is connect with the motor, and the corresponding torque of the torque request value is sent to described by the electric machine controller Motor executes torque output, connects between the three-phase current output end of electric machine controller described in vehicle and the motor to drive There is current Hall sensor, the output end of the current Hall sensor is connect with the entire car controller, the current Hall Sensor exports collected current sampling signal to the entire car controller, and the motor is connected with rotary transformer, institute The output end for stating rotary transformer is connect with the entire car controller, and the rotary transformer is by collected angular samples signal To the entire car controller, collected current sampling signal, angular samples signal resolution are by the entire car controller for output Current value and angle value, on the one hand, the current value and angle value that the entire car controller obtains parsing are exported as value of feedback PID to the electric machine controller for electric machine controller is adjusted, and generates torque.

2. the system according to claim 1 for reducing electric machine controller ASIL grade, it is characterised in that: the full-vehicle control The output end of device passes through CAN bus respectively and connect with the electric machine controller, battery management system, the battery management system High-voltage output end is connect with the high voltage input terminal of the electric machine controller, and the torque output of the motor is connected with wheel.

3. the system according to claim 1 for reducing electric machine controller ASIL grade, it is characterised in that: the reduction motor The system of controller ASIL grade further includes gas pedal, the throttle signal output end and the full-vehicle control of the gas pedal The input terminal of device connects.