[go: up one dir, main page]
More Web Proxy on the site http://driver.im/

CN113043969B - Vehicle function safety monitoring method and system - Google Patents

Vehicle function safety monitoring method and system Download PDF

Info

Publication number
CN113043969B
CN113043969B CN202110326644.XA CN202110326644A CN113043969B CN 113043969 B CN113043969 B CN 113043969B CN 202110326644 A CN202110326644 A CN 202110326644A CN 113043969 B CN113043969 B CN 113043969B
Authority
CN
China
Prior art keywords
fault
module
processing
safety monitoring
notification
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202110326644.XA
Other languages
Chinese (zh)
Other versions
CN113043969A (en
Inventor
李丰军
周剑光
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Automotive Innovation Corp
Original Assignee
China Automotive Innovation Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Automotive Innovation Corp filed Critical China Automotive Innovation Corp
Priority to CN202110326644.XA priority Critical patent/CN113043969B/en
Publication of CN113043969A publication Critical patent/CN113043969A/en
Application granted granted Critical
Publication of CN113043969B publication Critical patent/CN113043969B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • BPERFORMING OPERATIONS; TRANSPORTING
    • B60VEHICLES IN GENERAL
    • B60RVEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
    • B60R16/00Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for
    • B60R16/02Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements
    • B60R16/023Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements for transmission of signals between vehicle parts or subsystems
    • B60R16/0231Circuits relating to the driving or the functioning of the vehicle

Landscapes

  • Engineering & Computer Science (AREA)
  • Automation & Control Theory (AREA)
  • Mechanical Engineering (AREA)
  • Debugging And Monitoring (AREA)

Abstract

The embodiment of the invention provides a vehicle function safety monitoring method and a system, wherein the method specifically comprises the following steps: monitoring the running state of the vehicle function, and reporting a fault notification to a fault debouncing module when a fault occurs; the fault debounce module confirms a fault type; the fault management module starts an overtime timer to track the processing flow of the fault and informs the corresponding application software layer to carry out fault pretreatment according to the corresponding information of the fault table; after the preprocessing is finished, the fault management module closes the overtime timer, and triggers the fault state notification module to notify a corresponding module of the fault processing, so as to perform a functional safety processing flow. The invention meets the requirements of real-time performance, independence and diversity in the functional safety fault management work through a unified fault management flow.

Description

Vehicle function safety monitoring method and system
Technical Field
The invention relates to a vehicle function safety monitoring method and a system, in particular to the technical field of vehicle safety.
Background
With the rapid development of automotive electronics, the complexity of automotive electronic and electrical systems is increasing, and ensuring the safety and reliability of automotive electronic and electrical systems becomes a problem for all whole car factories and suppliers. The international standard organization sets an ISO 26262 functional safety standard according to requirements, and provides guidance for the development of an automobile electronic and electrical system from the aspects of processes, technologies and the like.
In the prior art, a functional safety monitoring system only implements processing under system abnormal conditions by means of fault diagnosis, system degradation and the like, and as shown in fig. 1 and fig. 2, it does not explain which monitoring framework the system implements management of corresponding fault diagnosis, configuration of system degradation policies and the like. The existing method for realizing functional safety is an E-Gas framework, which is a functional safety multi-stage monitoring scheme about an engine control system proposed by seven host factories such as Benz, BMW, audi and the like, wherein the first layer is a functional layer and mainly realizes some control algorithm functions; the second layer is a function monitoring layer which mainly monitors the functions of the first layer, and the third layer is a system monitoring layer which mainly monitors the system level of the whole equipment and also needs to be responsible for responding to errors detected by monitoring of each level. However, how many errors are managed in the third layer of the framework is not described in particular detail, and with the fact that electronic control units on automobiles are more and more complicated, particularly automatic driving controllers, many errors and faults of the whole system can be monitored, and the monitoring is difficult due to complicated functions.
Disclosure of Invention
The invention aims to: one objective is to provide a vehicle functional safety monitoring method and system to solve the above problems in the prior art, and meet the requirements of real-time performance, independence and diversity in functional safety fault management work through a unified fault management process.
The technical scheme is as follows: in a first aspect, a method for monitoring vehicle functional safety is provided, which specifically includes the following steps:
constructing a vehicle function safety monitoring system: the method comprises the steps of constructing a fault management module, a state machine, a fault state notification module, a debouncing module, a functional safety processing module and a fault information table;
the vehicle function safety monitoring system carries out self-test when being electrified;
when the self-test result is normal, the fault management module starts a state machine;
otherwise, the fault state notification module feeds back self-test failure information to the debounce module;
the debouncing module confirms the fault type according to the self-test failure information and sends the fault type to a fault management module;
the fault management module inquires in the fault information table according to the received fault type, and checks the fault consistency according to the inquiry result, if the consistency check is passed, the fault management module informs the application software layer module to carry out fault preprocessing according to the storage information in the fault information table;
after the fault preprocessing is finished, triggering a fault state notification module by a fault management module to send a functional safety processing notification, wherein the safety processing notification is used for triggering a functional safety processing module; the functional safety processing module is used for processing the generated faults.
In some implementations of the first aspect, the self-test procedure is implemented by a self-test function; the self-testing function is used for carrying out one-time integrity and safety self-testing on modules in the whole vehicle function safety monitoring system in one-time automobile driving period.
In some implementation manners of the first aspect, when the fault is not confirmed within the corresponding time or event period, the fault reporting processing is cancelled.
In some implementations of the first aspect, the fault management module triggers the fault status notification module after the fault pre-processing is completed;
the fault state notification module notifies a corresponding application program to execute safety function operation; the corresponding application program is used for executing a program corresponding to the processing strategy; the processing policy is a fault processing method inquired in the fault information table according to the generated fault.
In some implementation manners of the first aspect, when the fault notification occurs, a flow of fault preprocessing is timed, and if a processing time configured in advance is exceeded, a processing method of the timeout fault is executed.
In some implementations of the first aspect, the fault information table is to store fault policy information; the fault strategy information comprises a fault identification number, fault preprocessing overtime time, a fault preprocessing application software layer notification module and fault debouncing strategy information.
In a second aspect, a vehicle functional safety monitoring system is provided, the system comprising:
the self-testing module is arranged for carrying out integrity and safety self-testing on the modules in the whole vehicle function safety monitoring system;
the diagnostic test triggering module is used for triggering a diagnostic test in the running process of the system;
the error monitoring module is arranged for monitoring the functional operation state of the automobile electronic and electric system;
the fault reporting module is set to report a fault notice to the fault debouncing module when a fault occurs;
the fault debouncing module is arranged for receiving the fault notification, judging the fault type and sending the fault type to the fault management module;
the fault management module is set to receive the fault type, start a fault timeout timer and call a fault information table to inquire a fault processing strategy; the fault timeout timer is set to monitor a fault handling process;
a failure policy information storage module configured to store failure handling policy information;
the fault consistency checking module is used for checking the consistency of the fault table information;
a fault status notification module configured to notify the application software layer to perform a functional safety operation.
In a third aspect, a computer device is proposed, comprising a memory and a processor, the memory storing a computer program, characterized in that the processor implements the steps of the vehicle function safety monitoring method when executing the computer program.
In a fourth aspect, a computer-readable storage medium is proposed, on which a computer program is stored which, when being executed by a processor, carries out the steps of the vehicle functional safety monitoring method.
Has the advantages that: the invention provides a vehicle function safety monitoring method and a vehicle function safety monitoring system, which are used for realizing unified monitoring management on safety faults generated by vehicle functions through a generalized processing flow.
On one hand, by adding a timeout mechanism, the interval of fault tolerance time is met, so that the requirement of real-time performance is met; on the other hand, the support of the safety strategy is realized through the calibration of the fault information table, and the diversified requirements are met.
The invention completes unified fault flow management and systematized process of monitoring the vehicle function fault by the trigger mechanisms of power on and power off, period, event and the like, and solves the problem of complicated fault monitoring caused by complicated vehicle electric control unit.
Drawings
Fig. 1 is a schematic diagram of a prior art frame.
Fig. 2 is a schematic diagram of a security mechanism in the prior art.
FIG. 3 is a flow chart of a method according to an embodiment of the present invention.
FIG. 4 is a diagram of an application framework according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the present application more apparent, the present application is described in further detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the present application and are not intended to limit the present application.
The embodiment of the application provides a vehicle function safety monitoring method and system, and systematic and unified monitoring management is realized from a multi-layer monitoring angle by formulating a general safety monitoring framework.
In one embodiment, as shown in fig. 3, there is provided a vehicle function safety monitoring method, comprising the steps of:
monitoring the running state of vehicle functions, and reporting a fault notification to a fault debouncing module when a fault occurs;
specifically, after the vehicle function safety monitoring system is powered on, in order to ensure the normal operation of the safety monitoring function, a self-test function built in a self-test module is called to perform one-time integrity and safety self-test on modules in the whole vehicle function safety monitoring system, and meanwhile, the correctness of a related safety mechanism in a diagnosis test triggering mechanism is verified through the self-test function. The self-test occurs in one automobile running period, namely in the process from ignition running to flameout, and when the self-test fails and a fault is generated, relevant error information is fed back to the system. In the design process, in order to achieve the whole functional safety target, a plurality of diagnostic mechanisms are provided for systematic failure and hardware random failure, and the mechanisms can ensure that the failure probability of the whole system is smaller than a certain standard value. Therefore, during the operation of the system, the self-test function in the self-test module can trigger related diagnostic tests in a power-on, power-off, periodic or event type, and the whole diagnostic test trigger system is managed. Wherein, power-on and power-off indicate that the vehicle function safety monitoring system is powered on and powered off; periodic represents events that occur periodically; the event-type representation triggers for a certain function selected by the user.
When the self-test result after the system is powered on is normal, the fault management module starts a state machine to trigger the execution of the safety mechanism at regular time according to the related information in the fault information table. Wherein the execution of the security mechanism may also be triggered upon detection of a related event.
In the monitoring process of functional safety, when a system fails, the debounce module receives failure notification information through a calling interface. The fault notification may be a notification that the bottom layer calls an upper interface, or the upper application software layer obtains a relevant error state in a periodic query manner to execute a relevant safety operation.
And step two, the fault debouncing module confirms the fault type and carries out corresponding preprocessing.
Specifically, as shown in fig. 4, the fault debounce module receives the fault notification through the interface and confirms the type of the generated fault. After the fault type is confirmed, the fault management module starts an overtime timer to track the processing flow of the corresponding fault. In the process of fault processing, a fault management module inquires a corresponding fault debouncing mode based on time or event times according to a fault information table, simultaneously performs fault consistency detection, informs application modules in corresponding application software layers to preprocess faults when the results are consistent, and cancels the fault reporting processing if the faults are not confirmed in corresponding time or event periods.
The fault information table is a module for storing fault policy information, and the fault information includes, but is not limited to, a fault identification number, a fault preprocessing timeout time, a fault preprocessing application software layer notification module, fault debounce policy information, and the like. The fault consistency check is to ensure the correctness of the fault information table and ensure that all fault information is not illegally tampered. And fault consistency check is executed after each power-on or fault information calibration.
And when receiving fault information reported by the application software layer, the safety mechanism or the self-diagnosis module, the fault management module starts a fault timeout timer for monitoring whether delay exists in related operation of the fault, and if the fault preprocessing does not receive a reply signal of finishing preprocessing within a specified time, executes a processing flow corresponding to the timeout fault.
And step three, after the preprocessing is finished, the corresponding fault processing module performs corresponding functional safety processing.
Specifically, after the application module in the application software layer preprocesses the fault, the fault management module closes the timeout timer tracking the corresponding fault processing flow, and triggers the fault state notification module to notify the corresponding fault processing module to perform the corresponding functional safety processing.
In one embodiment, a vehicle function safety monitoring system is provided for implementing a vehicle function safety monitoring method, and specifically includes the following modules:
the self-testing module is arranged for carrying out integrity and safety self-testing on the modules in the whole vehicle function safety monitoring system;
the diagnostic test triggering module is used for triggering a diagnostic test in the running process of the system;
the error monitoring module is arranged for monitoring the functional operation state of the automobile electronic and electric system;
the fault reporting module is arranged to report a fault notification to the fault debouncing module when a fault occurs;
the fault debouncing module is arranged for receiving the fault notification, judging the fault type and sending the fault type to the fault management module;
the fault management module is set to receive the fault type, start a fault overtime timer and call a fault information table to inquire a fault processing strategy; the fault timeout timer is set to monitor a fault handling process;
a failure policy information storage module configured to store failure handling policy information;
the fault consistency checking module is used for checking the consistency of the fault table information;
a fault status notification module configured to notify the application software layer to perform a functional safety operation.
In one embodiment, a computer device is proposed, comprising a memory and a processor, the memory storing a computer program, wherein the processor realizes the steps of a vehicle functional safety monitoring method when executing the computer program.
In one embodiment, a computer-readable storage medium is proposed, on which a computer program is stored which, when being executed by a processor, carries out the steps of a method for vehicle functional safety monitoring.
As noted above, while the present invention has been shown and described with reference to certain preferred embodiments, it is not to be construed as limited to the invention itself. Various changes in form and detail may be made therein without departing from the spirit and scope of the invention as defined by the appended claims.

Claims (9)

1. A vehicle function safety monitoring method is characterized by comprising the following steps:
constructing a vehicle function safety monitoring system: the method comprises the steps of constructing a fault management module, a state machine, a fault state notification module, a fault debouncing module, a functional safety processing module and a fault information table;
the vehicle function safety monitoring system carries out self-test when being electrified; the self-test process is realized through a self-test function; the self-testing function is used for carrying out one-time integrity and safety self-testing on modules in the whole vehicle function safety monitoring system in one-time automobile driving period;
when the self-test result is normal, the fault management module starts a state machine;
on the contrary, the fault state notification module feeds back self-test failure information to the fault debouncing module;
the fault debouncing module confirms the fault type according to the self-test failure information and sends the fault type to a fault management module; the fault debouncing module receives a fault notification through an interface and confirms the type of the generated fault;
the fault management module inquires in the fault information table according to the received fault type, checks the fault consistency according to the inquiry result, and informs the application software layer module to carry out fault pretreatment according to the storage information in the fault information table if the consistency check is passed;
after the fault pretreatment is finished, the fault management module triggers the fault state notification module to send a function safety processing notification, and the safety processing notification is used for triggering the function safety processing module; the functional safety processing module is used for processing the generated faults.
2. The vehicle functional safety monitoring method according to claim 1,
and when the fault is not confirmed in the corresponding time or event period, the fault reporting processing is cancelled.
3. The vehicle functional safety monitoring method according to claim 1,
after the fault preprocessing is finished, the fault management module triggers a fault state notification module;
the fault state notification module notifies a corresponding application program to execute safety function operation; the corresponding application program is used for executing a program corresponding to the processing strategy; the processing policy is a fault processing method inquired in the fault information table according to the generated fault.
4. The vehicle function safety monitoring method according to claim 1, wherein when a fault notification occurs, a fault preprocessing process is timed, and if a preset processing time is exceeded, a timeout fault processing method is executed.
5. The vehicle functional safety monitoring method according to claim 1, wherein the fault information table is used to store fault strategy information; the fault strategy information comprises a fault identification number, fault preprocessing overtime time, a fault preprocessing application software layer notification module and fault debouncing strategy information.
6. A vehicle function safety monitoring system for realizing the method of any one of claims 1 to 5, which is characterized by comprising the following steps:
the self-testing module is arranged for carrying out integrity and safety self-testing on the modules in the whole vehicle function safety monitoring system;
the diagnostic test triggering module is used for triggering a diagnostic test in the running process of the system;
the error monitoring module is arranged for monitoring the functional operation state of the automobile electronic and electrical system;
the fault reporting module is arranged to report a fault notification to the fault debouncing module when a fault occurs;
the fault debouncing module is arranged for receiving the fault notification, judging the fault type and sending the fault type to the fault management module;
the fault management module is set to receive the fault type, start a fault overtime timer and call a fault information table to inquire a fault processing strategy;
a failure policy information storage module configured to store failure handling policy information;
the fault consistency checking module is used for checking the consistency of the fault table information;
an overtime timer configured to time a fault pre-processing procedure;
a fault status notification module configured to notify the application software layer to perform a functional safety operation.
7. The vehicle functional safety monitoring system according to claim 6, wherein the fault timeout timer is configured to monitor a fault handling process.
8. A computer arrangement comprising a memory and a processor, the memory storing a computer program, characterized in that the processor, when executing the computer program, carries out the steps of the vehicle functional safety monitoring method according to any one of claims 1 to 5.
9. A computer-readable storage medium, on which a computer program is stored, which, when being executed by a processor, carries out the steps of the vehicle functional safety monitoring method according to any one of claims 1 to 5.
CN202110326644.XA 2021-03-26 2021-03-26 Vehicle function safety monitoring method and system Active CN113043969B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202110326644.XA CN113043969B (en) 2021-03-26 2021-03-26 Vehicle function safety monitoring method and system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202110326644.XA CN113043969B (en) 2021-03-26 2021-03-26 Vehicle function safety monitoring method and system

Publications (2)

Publication Number Publication Date
CN113043969A CN113043969A (en) 2021-06-29
CN113043969B true CN113043969B (en) 2022-12-16

Family

ID=76515656

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202110326644.XA Active CN113043969B (en) 2021-03-26 2021-03-26 Vehicle function safety monitoring method and system

Country Status (1)

Country Link
CN (1) CN113043969B (en)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114715051A (en) * 2022-03-30 2022-07-08 上海航盛实业有限公司 Safety maintenance system suitable for vehicle-mounted intelligent cabin
CN114968646A (en) * 2022-07-27 2022-08-30 南京芯驰半导体科技有限公司 Functional fault processing system and method

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2013182445A (en) * 2012-03-02 2013-09-12 Ricoh Co Ltd Fault handling support device, fault handling support system, fault handling support method, and fault handling support program

Family Cites Families (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE4400203C1 (en) * 1994-01-05 1995-08-03 Daimler Benz Ag Method for monitoring vehicle functional components
JP2000148540A (en) * 1998-11-06 2000-05-30 Nec Eng Ltd Processor system
DE102006037125A1 (en) * 2006-08-09 2008-02-14 Daimler Ag Drive system for a drive unit of a motor vehicle
CN103391207B (en) * 2012-05-08 2016-11-16 上海富欣智能交通控制有限公司 The Fault Management System of isomery
CN104750742A (en) * 2013-12-31 2015-07-01 南京理工大学常熟研究院有限公司 Fault diagnosis method and system for heading machine hydraulic system
DE102014220781A1 (en) * 2014-10-14 2016-04-14 Robert Bosch Gmbh Fail-safe E / E architecture for automated driving
CN206217810U (en) * 2016-10-17 2017-06-06 宝沃汽车(中国)有限公司 The remote monitoring diagnostic system of vehicle termination, vehicle and vehicle
CN109367501B (en) * 2018-09-07 2023-12-26 阿波罗智能技术(北京)有限公司 Automatic driving system, vehicle control method and device
CN110308732B (en) * 2019-07-25 2023-08-04 北京智行者科技股份有限公司 Failure detection method of automatic driving controller and automatic driving controller
CN111963287B (en) * 2020-08-21 2022-04-29 中国重汽集团济南动力有限公司 OBD interaction system, method and device for vehicle engine and post-processing

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2013182445A (en) * 2012-03-02 2013-09-12 Ricoh Co Ltd Fault handling support device, fault handling support system, fault handling support method, and fault handling support program

Also Published As

Publication number Publication date
CN113043969A (en) 2021-06-29

Similar Documents

Publication Publication Date Title
CN113043969B (en) Vehicle function safety monitoring method and system
US20190079835A1 (en) Apparatus and method for enhancing reliability of watchdog circuit for controlling central processing device for vehicle
US6859696B2 (en) System and method for monitoring machine status
CN117130832B (en) Monitoring reset method and system of multi-core heterogeneous system, chip and electronic equipment
WO2022095896A1 (en) Method for managing ecu on vehicle, and ecu and readable storage medium
Ruiz et al. A safe generic adaptation mechanism for smart cars
CN114385421A (en) Data storage method and device, electronic equipment and storage medium
CN114995330A (en) Vehicle CAN bus intrusion detection test method and test system
CN117707023A (en) On-board domain controller chip device, system and function safety method
CN114968646A (en) Functional fault processing system and method
US6584432B1 (en) Remote diagnosis of data processing units
US6526527B1 (en) Single-processor system
US7694179B2 (en) Suspected place identifying apparatus and processing method
CN112763813A (en) Apparatus and method for detecting cause of battery discharge of vehicle
CN117472623A (en) Method, device, equipment and storage medium for processing memory fault
US20080178292A1 (en) Method and Device for Monitoring an Unauthorized Memory Access of a Computing Device, in Particular in a motor Vehicle
CN106383507B (en) Fault management method for vehicle engine control system
JP2001350735A (en) Method for mutual monitoring among plural data processors
US11726853B2 (en) Electronic control device
CN115617557A (en) Abnormality supervision system, abnormality supervision method, storage medium, and vehicle
CN112799370B (en) Control device, and vehicle-mounted system software restoration method and system
CN118312342A (en) Storage method, storage device, electronic equipment and readable storage medium for diagnostic event
CN103391207B (en) The Fault Management System of isomery
CN113500913B (en) Drawing assembly of full liquid crystal instrument
Salkham et al. Design of a CDD-Based Fault Injection Framework for AUTOSAR Systems

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant