CN219096584U

CN219096584U - Electronic controller and vehicle

Info

Publication number: CN219096584U
Application number: CN202222994813.XU
Authority: CN
Inventors: 冯晓宇
Original assignee: Guangzhou Automobile Group Co Ltd
Current assignee: Guangzhou Automobile Group Co Ltd
Priority date: 2022-11-10
Filing date: 2022-11-10
Publication date: 2023-05-30
Anticipated expiration: 2032-11-10

Abstract

The application discloses an electronic controller and a vehicle. The electronic controller comprises a communication module, a first fault monitoring module aiming at the communication module, a second fault monitoring module aiming at the first fault monitoring module, a car lamp driving module, a power management and voltage monitoring module and a logic circuit module. Specifically, the communication module, the first fault monitoring module and the power management and voltage monitoring module in the electronic controller can drive the car lamp to light through the logic circuit module under the condition of respectively generating faults. The fault detection mechanism of each module in the electronic controller is perfected, so that when any module in the electronic controller fails, the vehicle lamp can be turned on to remind a rear vehicle of paying attention to driving safety.

Description

Electronic controller and vehicle

Technical Field

The present application relates to the field of vehicle control technology, and more particularly, to an electronic controller and a vehicle.

Background

The automobile brake lamp is used for warning a driver in the vehicle so as to reduce the probability of rear-end collision accidents of the vehicle. Specifically, three brake lamps are generally installed at the tail of each automobile, namely a left brake lamp, a right brake lamp and a high-order brake lamp.

In the prior art, automotive brake lights may be controlled by an electronic controller (Electronic Control Unit, ECU). The ECU is connected between the brake and the brake lamp of the vehicle and is used for generating corresponding brake lamp control instructions to control the brake lamp to be lighted under the condition that a brake signal generated by a driver stepping on the brake is received. However, when a module inside the ECU fails, a brake lamp may not be normally turned on, increasing the probability of occurrence of a rear-end collision accident.

Disclosure of Invention

The embodiment of the application provides an electronic controller and a vehicle.

In a first aspect, some embodiments of the present application provide an electronic controller for use in a vehicle that includes a lamp. The electronic controller comprises a communication module, a first fault monitoring module aiming at the communication module, a second fault monitoring module aiming at the first fault monitoring module, a car lamp driving module, a power management and voltage monitoring module and a logic circuit module. The communication module is connected with the first fault monitoring module; the second fault monitoring module is connected with the first fault monitoring module; the power management and voltage monitoring module is respectively connected with the first fault monitoring module, the communication module, the car lamp driving module and the second fault monitoring module; the input end of the logic circuit module is respectively connected with the first fault monitoring module, the second fault monitoring module and the power management and voltage monitoring module, and the module output end of the logic circuit module is connected with the car lamp driving module; the lamp driving module is connected between the first fault monitoring module and the lamp.

Wherein in some alternative embodiments, the input of the logic circuit module comprises a first input, the first input being connected to the first fault-monitoring module.

Wherein in some alternative embodiments, the input of the logic circuit module includes a second input, the second input being connected to the second fault-monitoring module.

Wherein, in some alternative embodiments, the power management and voltage monitoring module comprises a voltage output unit and a voltage monitoring unit; the input end of the logic circuit module comprises a third input end; the voltage monitoring unit is connected between the voltage output unit and the third input end.

Wherein, in some alternative embodiments, the voltage output unit is respectively connected to the first fault monitoring module, the second fault monitoring module and the communication module; the voltage output unit outputs a first output voltage to the first fault monitoring module, outputs a second output voltage to the second fault monitoring module, and outputs a third output voltage to the communication module.

Wherein, in some alternative embodiments, the power management and voltage monitoring module further comprises a voltage step-down unit and a voltage comparison unit; the voltage reducing unit is connected with the voltage input end of the voltage output unit; the input end of the logic circuit module also comprises a fourth input end; the input end of the voltage comparison unit is connected with the voltage output end of the voltage reduction unit, and the output end of the voltage comparison module is connected with the fourth input end.

Wherein, in some alternative embodiments, the vehicle lamp includes a first vehicle lamp and a second vehicle lamp, the vehicle lamp driving module includes a first driving unit and a second driving unit, the first driving unit is connected between the module output end of the logic circuit module and the first vehicle lamp, and the second driving unit is connected between the module output end of the logic circuit module and the second vehicle lamp.

Wherein in some alternative embodiments, the first driving unit and the second driving unit are further connected to the first fault monitoring module, respectively; the first fault monitoring module is configured to: triggering the second driving unit to drive the second lamp to light under the condition that the first driving unit is determined to be in fault; or triggering the first driving unit to drive the first vehicle lamp to light up in the case that the second driving unit is determined to be in fault.

Wherein, in some alternative embodiments, the vehicle comprises a first battery pack and a second battery pack, and the power management and voltage monitoring module further comprises a first protection unit and a second protection unit; the first protection unit is connected between the first battery pack and the first driving unit, and the second protection unit is connected between the second battery pack and the second driving unit.

In a second aspect, some embodiments of the present application further provide a vehicle including a vehicle lamp and the electronic controller described above.

The application provides an electronic controller and a vehicle. The electronic controller comprises a communication module, a first fault monitoring module aiming at the communication module, a second fault monitoring module aiming at the first fault monitoring module, a car lamp driving module, a power management and voltage monitoring module and a logic circuit module. Specifically, since the first fault monitoring module is connected to the communication module, the first fault monitoring module may be configured to send a first trigger signal to the logic circuit module in the event of a fault in the communication module. Because the second fault monitoring module is connected to the first fault monitoring module, the second fault monitoring module may be configured to send a second trigger signal to the logic circuit module when the first fault monitoring module fails. The power management and voltage monitoring module may be configured to send a third trigger signal to the logic circuit module in the event of a failure of the power management and voltage monitoring module. The logic circuit module is used for triggering the car lamp driving module to drive the car lamp to light under the condition that at least one of the first trigger signal, the second trigger signal and the third trigger signal is received. Therefore, the communication module, the first fault monitoring module and the power management and voltage monitoring module in the electronic controller can drive the car lamp to be lightened through the logic circuit module under the condition of faults respectively, so that the fault detection mechanism of each module in the electronic controller is perfected, and when any module in the electronic controller fails, the car lamp can be lightened to remind a rear car of paying attention to driving safety.

Drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings that are needed in the description of the embodiments will be briefly introduced below, it being obvious that the drawings in the following description are only some embodiments of the present application, and that other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.

Fig. 1 is a schematic structural diagram of a vehicle according to an embodiment of the present application.

Fig. 2 is a block diagram of a module of the electronic controller in the vehicle of fig. 1.

FIG. 3 is another block diagram of the electronic controller of the vehicle of FIG. 1.

Fig. 4 is a schematic diagram of a logic circuit module according to an embodiment of the present application.

Detailed Description

In order to enable those skilled in the art to better understand the present application, the following description will make clear and complete descriptions of the technical solutions in the embodiments of the present application with reference to the accompanying drawings in the embodiments of the present application. It will be apparent that the described embodiments are only some, but not all, of the embodiments of the present application. All other embodiments, which can be made by those skilled in the art based on the embodiments herein without making any inventive effort, are intended to be within the scope of the present application.

Referring to fig. 1, an embodiment of the present application provides an electronic controller 100 and a vehicle 200 configured with the electronic controller 100. Where vehicle 200 refers to a vehicle driven or towed by a power plant for passenger or for transporting items, including but not limited to cars, buses, and the like. Specifically, the vehicle 200 includes the lamp 210, the battery pack 230, the vehicle bus 250, and the electronic controller 100 described above, wherein the electronic controller 100 is connected to the lamp 210, the battery pack 230, and the vehicle bus 250, respectively. Specifically, the vehicle lamp 210 may be a brake light (e.g., left brake light, right brake light, high-mounted brake light, etc.) of the vehicle 200. In some possible embodiments, the vehicle lamp 210 can include a first lamp 2100 and a second lamp 2120, the first lamp 2100 and the second lamp 2120 being hardwired to the electronic controller 100 by the vehicle, respectively. Specifically, the first lamp 2100 may be a left brake lamp of the vehicle 200 and the second lamp 2120 may be a right brake lamp of the vehicle 200.

The battery pack 230 is used to power the electronic controller 100, and in particular, the battery pack 230 may be a nickel-cadmium battery pack, a nickel-hydrogen battery pack, a lithium ion battery pack, or the like. In some possible embodiments, the battery pack 230 may include a first battery pack 2300 and a second battery pack 2320, where the first battery pack 2300 and the second battery pack 2320 may be connected to the electronic controller 100 through power cables, respectively, so as to implement redundant power supply to the electronic controller 100, so as to ensure that in a case where one battery pack fails, the electronic controller 100 can supply power through the other battery pack, and ensure that the electronic controller 100 can work normally.

The vehicle bus 250 is used to transmit data to the electronic controller 100. In one aspect, the vehicle bus 250 is connected to a plurality of sensors in the vehicle 200 for transmitting the travel data (e.g., vehicle speed, tire speed, etc.) acquired by the sensors to the electronic controller 100. On the other hand, the vehicle bus 250 is connected to a plurality of actuators (e.g., brakes, gears, etc.) in the vehicle 200, and is configured to send control commands generated by the electronic controller 100 to the actuators, thereby controlling the actuators to operate. Specifically, the vehicle bus 250 may be a controller area network bus (Controller Area Network, CAN bus).

Referring to fig. 2, the electronic controller 100 includes a first fault-monitoring module 110, a communication module 120, a lamp driving module 130, a second fault-monitoring module 140, a power-management and voltage-monitoring module 150, and a logic circuit module 160. Wherein the communication module 120 is connected to the first fault monitoring module 110. The lamp driving module 130 is connected between the first failure monitoring module 110 and the lamp 210. The second fault monitoring module 140 is connected to the first fault monitoring module 110. The power management and voltage monitoring module 150 is connected to the first fault monitoring module 110, the communication module 120, the lamp driving module 130 and the second fault monitoring module 140, respectively. The input terminal 1600 of the logic circuit module 160 is connected to the first fault monitoring module 110, the second fault monitoring module 140, and the power management and voltage monitoring module 150, respectively, and the module output terminal 1650 of the logic circuit module 160 is connected to the lamp driving module 130. Specifically, since the first fault monitoring module 110 is connected to the communication module 120, the first fault monitoring module 110 may be configured to send a first trigger signal to the logic circuit module 160 in the event of a fault in the communication module 120. Since the second fault monitoring module 140 is connected to the first fault monitoring module 110, the second fault monitoring module 140 may be configured to send a second trigger signal to the logic circuit module 160 in the event of a fault in the first fault monitoring module 110. The power management and voltage monitoring module 150 may be configured to send a third trigger signal to the logic circuit module 160 in the event of a failure of its own. The specific generation and transmission processes of the first trigger signal, the second trigger signal, and the third trigger signal are described in detail below. The logic circuit module 160 may be configured to trigger the lamp driving module 130 to drive the lamp 210 to be lighted if at least one of the first trigger signal, the second trigger signal, and the third trigger signal is received.

Therefore, the communication module 120, the first fault monitoring module 110 and the power management and voltage monitoring module 150 in the electronic controller 100 provided by the application can drive the car lamp 210 to be lightened through the logic circuit module 160 under the condition of faults respectively, so that the fault detection mechanism of each module in the electronic controller 100 is perfected, and when any module in the electronic controller 100 breaks down, the car lamp 210 can be lightened to remind a rear vehicle of paying attention to driving safety.

The respective modules included in the electronic controller 100 in this embodiment are described below.

Referring to fig. 3 and 4, the first fault monitoring module 110 is a control center of the electronic controller 100, and is configured to process and parse signal data generated during operation of the vehicle 200, and generate corresponding control instructions to control an actuator in the vehicle 200 to operate. In particular, the first fault monitoring module 110 may be a micro control unit (Microcontroller Unit, MCU). In the present embodiment, the first fault-monitoring module 110 is connected to the communication module 120, and the communication module 120 is connected to the vehicle bus 250 of the vehicle 200, that is, the first fault-monitoring module 110 acquires signal data transmitted by the vehicle bus 250 through the communication module 120. Specifically, first fault-monitoring module 110 includes an RX/TX port through which first fault-monitoring module 110 is connected to communication module 120, communication module 120 includes a CANFD1 port, and communication module 120 is connected to vehicle bus 250 through the CANFD1 port.

The communication module 120 is configured to convert signals between the vehicle bus 250 and the first fault monitoring module 110, taking the vehicle bus 250 as a CAN bus as an example, the communication module 120 CAN convert a differential signal in the CAN bus into a TTL signal and send the TTL signal to the first fault monitoring module 110, and CAN also convert the TTL signal output by the first fault monitoring module 110 into a differential signal and send the differential signal to the CAN bus. In particular, the communication module 120 may be a CAN transceiver.

In this embodiment, the first fault-monitoring module 110 is connected to the communication module 120, and the first fault-monitoring module 110 may be configured to send a first trigger signal to the logic circuit module 160 in the event of a fault in the communication module 120. Specifically, the first fault monitoring module 110 is provided with an E2E diagnosis unit, and the E2E diagnosis unit can obtain the working state of the communication module 120, and send a first trigger signal to the logic circuit module 160 when the working state of the communication module 120 is a fault state. The fault condition of the communication module 120 may include, among other things, communication link anomalies and functional anomalies. Communication link anomalies may include open circuit, short voltage, short to ground, etc., faults on the CANFD1 ports or the RX/TX ports. The malfunction may include the communication module 120 failing to receive a signal, receiving a signal in error, delaying a received signal, jamming a received signal, etc.

Specifically, the input 1600 of the logic circuit module 160 may include a first input 1610 (i.e., an IN4 port IN fig. 4), where the first input 1610 is connected to the first fault-monitoring module 110. In the embodiment shown in fig. 3, the first fault-monitoring module 110 further includes a GPI01 port, which GPI01 port is connected to the first input 1610 on the logic circuit module 160. When the E2E diagnostic unit in the first fault monitoring module 110 determines that the communication module 120 is faulty, a first trigger signal is sent to the first input 1610 on the logic circuit module 160 through the GPI01 port. The first input 1610 on the logic circuit module 160, upon receiving the first trigger signal, triggers the lamp driving module 130 to drive the lamp 210 to light, and in particular, the first trigger signal may be an electrical signal (e.g., a high level signal). Therefore, in the case of a fault, the communication module 120 in the electronic controller 100 provided in this embodiment drives the vehicle lamp 210 (e.g. brake lamp) to light up through the logic circuit module 160 to remind the following vehicle of driving safety. Specifically, a specific driving process of the lamp driving module 130 is explained in detail below.

The second fault monitoring module 140 is connected to the first fault monitoring module 110, and the second fault monitoring module 140 may be configured to monitor whether the first fault monitoring module 110 is in a fault state. Specifically, the second fault monitoring module 140 may be a watchdog chip, which is essentially a timer circuit, configured to obtain the operation state of the first fault monitoring module 110 at intervals of a preset time, and send a second trigger signal to the logic circuit module 160 when the operation state of the first fault monitoring module 110 is a fault state. Wherein, the fault status of the first fault monitoring module 110 indicates that the first fault monitoring module 110 has abnormal operation or has an error operation. Specifically, the model of the watchdog chip may be SP706, TPL5010, or the like, and the present embodiment is not particularly limited.

Specifically, the input 1600 of the logic circuit module 160 may include a second input 1620 (i.e., the IN3 port of fig. 4), and the second input 1620 is connected to the second fault monitoring module 140. In the embodiment shown in FIG. 3, the second fault-monitoring module 140 also includes an FS0B port that is connected to the second input 1620 on the logic circuit module 160. The first fault monitoring module 110 further includes an SPI0 port, and the first fault monitoring module 110 is connected to the second fault monitoring module 140 through the SPI0 port. That is, the second fault monitoring module 140 may obtain the working state of the first fault monitoring module 110 through the SPI0 port or the serial port on the first fault monitoring module 110, and send the second trigger signal to the second input terminal 1620 on the logic circuit module 160 through the FS0B port when determining that the first fault monitoring module 110 has a fault. The second input 1620 on the logic circuit module 160 triggers the lamp driving module 130 to drive the lamp 210 to light up upon receiving the second trigger signal, which may be an electrical signal (e.g., a high level signal). Therefore, in the case of a failure of the first failure monitoring module 110 in the electronic controller 100 provided in the present embodiment, the second failure monitoring module 140 drives the vehicle lamp 210 (e.g. brake lamp) to light up through the logic circuit module 160, so as to remind the following vehicle of driving safety.

In this embodiment, the first and second fault-monitoring

modules

110, 140 may also each include a RST port. Specifically, the RST port of the first fault monitoring module 110 is connected to the RST port of the second fault monitoring module 140, and the second fault monitoring module 140 is further configured to send a reset signal to the RST port of the first fault monitoring module 110 through the RST port when determining that the first fault monitoring module 110 has a fault, and the first fault monitoring module 110 initializes a program therein when receiving the reset signal, thereby restoring the normal operation of the first fault monitoring module 110.

The power management and voltage monitoring module 150 is connected to the first fault monitoring module 110, the communication module 120, the lamp driving module 130 and the second fault monitoring module 140, respectively, for supplying power to the above modules. Specifically, the power management and voltage monitoring module 150 is further connected to a battery pack 230 in the vehicle 200, and is configured to convert the electric energy in the battery pack 230 into the corresponding power supply voltages of the first fault monitoring module 110, the communication module 120, the lamp driving module 130 and the second fault monitoring module 140. Specifically, in the present embodiment, the power management and voltage monitoring module 150 may include a voltage output unit 1500 and a voltage monitoring unit 1510. The voltage input end 1501 of the voltage output unit 1500 is connected to the battery pack 230, and the output ends of the voltage output unit 1500 are respectively connected to the first fault monitoring module 110, the communication module 120, the lamp driving module 130, and the second fault monitoring module 140, for converting the input voltage of the voltage output unit 1500 into a specified output voltage. Specifically, the voltage output unit 1500 may be a voltage converter.

In this embodiment, the voltage output unit 1500 may include a first output terminal (i.e., VDD port in fig. 3), a second output terminal (i.e., VCC port in fig. 3), and a third output terminal (i.e., VTRK port in fig. 3). The first fault monitoring module 110 may further include a VDD port connected to a first output terminal on the voltage output unit 1500, that is, the voltage output unit 1500 outputs a first output voltage to the VDD port of the first fault monitoring module 110 through the first output terminal. The first output voltage may be a virtual device driving voltage (Virtual Device Driver, VDD), i.e., an operating voltage of the internal devices in the first fault monitoring module 110. Specifically, the first output voltage is less than or equal to 3V, for example, the first output voltage is 3V, 1.8V, 1.5V, or the like.

In this embodiment, the first fault monitoring module 110, the communication module 120, the lamp driving module 130, and the second fault monitoring module 140 may further include VCC ports, which are connected to the second output terminals on the voltage output unit 1500, respectively, that is, the voltage output unit 1500 outputs the second output voltage to the VCC ports of the first fault monitoring module 110, the communication module 120, the lamp driving module 130, and the second fault monitoring module 140 through the second output terminals. The second output voltage may be a circuit voltage (Voltage To Current Converter, VCC), i.e. the supply voltage of the respective module. Specifically, the second output voltage is greater than 3V, for example, the second output voltage is 12V, 5V, 3.3V, or the like.

In this embodiment, the communication module 120 may further include a VTRK port connected to the third output terminal on the voltage output unit 1500, that is, the voltage output unit 1500 outputs the third output voltage to the VTRK port of the communication module 120 through the third output terminal. The third output voltage may be a tracking voltage. Specifically, the magnitude of the tracking voltage is determined by the specific implementation chip of the communication module 120, and the embodiment is not particularly limited.

In this embodiment, the third trigger signal includes a first trigger sub-signal, and the voltage monitoring unit 1510 is connected between the voltage output unit 1500 and the logic circuit module 160, and is configured to monitor the output voltage of the voltage output unit 1500, and send the first trigger sub-signal to the logic circuit module 160 when detecting that the output voltage of the voltage output unit 1500 is an abnormal voltage. Specifically, the output voltage of the voltage output unit 1500 may include at least one output voltage of the first, second, and third output voltages described above. The output voltage is an abnormal voltage representing the occurrence of phenomena such as overvoltage, undervoltage, jitter, etc. of the output voltage, or the voltage output unit 1500 has a fault that the voltage cannot be converted or is erroneously converted. At this time, the voltage monitoring unit 1510 transmits a first trigger sub-signal to the logic circuit module 160. Specifically, the voltage monitoring unit 1510 may be a voltage monitor, which may be implemented by a plurality of power electronic devices, or may be a dedicated voltage monitoring chip. In some possible embodiments, the voltage monitoring unit 1510 may be integrated in the same chip as the voltage output unit 1500, forming a power management chip.

Specifically, the input 1600 of the logic circuit module 160 may include a third input 1630 (i.e., an IN2 port IN fig. 4), and the third input 1630 is connected to the voltage monitoring unit 1510. In the embodiment shown in fig. 3, the voltage monitoring unit 1510 further includes an FS0A port, and the FS0A port is connected to a third input 1630 on the logic circuit module 160. That is, the voltage monitoring unit 1510 transmits the first trigger sub-signal to the third input terminal 1630 on the logic circuit module 160 through the FS0A port in case that it is determined that the output voltage of the voltage output unit 1500 is an abnormal voltage. The third input 1630 on the logic circuit module 160, upon receiving the first trigger sub-signal, triggers the lamp driving module 130 to drive the lamp 210 to light, and in particular, the first trigger sub-signal may be an electrical signal (e.g., a high level signal). Therefore, in the case of a failure of the voltage output unit 1500 in the electronic controller 100 provided in this embodiment, the voltage monitoring unit 1510 drives the vehicle lamp 210 (e.g. brake lamp) to light up through the logic circuit module 160, so as to remind the following vehicle of driving safety.

In this embodiment, the power management and voltage monitoring module 150 may include a step-down unit 1520 and a voltage comparison unit 1530. The step-down unit 1520 is connected between the voltage input terminal 1501 of the voltage output unit 1500 and the battery pack 230, and is configured to convert the output voltage of the battery pack 230 into the input voltage of the voltage output unit 1500, thereby supplying power to the voltage output unit 1500. Specifically, the voltage step-down unit 1520 may be a dc voltage step-down circuit, which may implement a dc voltage step-down function by a plurality of power electronics, or may be a dedicated dc voltage step-down chip. In the present embodiment, the output voltage of the battery pack 230 is 12V, and the output voltage of the step-down unit 1520 (i.e., the input voltage of the voltage output unit 1500) is 5V.

In the present embodiment, the third trigger signal includes a second trigger sub-signal, and the voltage comparing unit 1530 is connected between the voltage step-down unit 1520 and the logic circuit module 160, and is configured to detect whether the output voltage of the voltage step-down unit 1520 is less than a specified threshold, and send the second trigger sub-signal to the logic circuit module 160 if the output voltage of the voltage step-down unit 1520 is detected to be less than the specified threshold. Specifically, the voltage comparing unit 1530 may be a voltage comparator, designating a threshold as a default parameter in the voltage comparator, for example, designating the threshold as 0.7V. That is, in case that the output voltage of the voltage step-down unit 1520 is less than 0.7V, the voltage comparison unit 1530 transmits the second trigger sub-signal to the logic circuit module 160. The voltage comparing unit 1530 may be one or more power electronic devices to perform a voltage comparing function, or may be a dedicated voltage comparing chip. Here, the output voltage of the voltage step-down unit 1520 being smaller than the specified threshold may be caused by an open circuit or a short circuit of an external pin of the voltage step-down unit 1520, or may be caused by a malfunction (e.g., failing to implement voltage step-down) of components inside the voltage step-down unit 1520.

Specifically, the input 1600 of the logic circuit module 160 may include a fourth input 1640 (i.e., the IN1 port IN fig. 4), and the fourth input 1640 is connected to the voltage comparing unit 1530. In the embodiment shown in fig. 3, the voltage comparing unit 1530 includes an input terminal 1531 (i.e., the CTL port in fig. 3) and an output terminal 1533 (i.e., the vbat_sw1 port in fig. 3). The input end 1531 of the voltage comparing unit 1530 is connected to the voltage output end 1521 of the step-down unit 1520 (i.e., the vcc_5v5 port in fig. 3), and the output end 1533 of the voltage comparing unit 1530 is connected to the fourth input end 1640. Accordingly, the voltage comparing unit 1530 transmits the second trigger sub-signal to the fourth input terminal 1640 on the logic circuit module 160 through the vbat_sw1 port in case that it is determined that the output voltage of the voltage step-down unit 1520 is less than the designated threshold value. The fourth input 1640 on the logic circuit module 160, upon receiving the second trigger sub-signal, triggers the lamp driving module 130 to drive the lamp 210 to light, and in particular, the second trigger sub-signal may be an electrical signal (e.g., a high level signal). Therefore, in the case of a failure of the step-down unit 1520 in the electronic controller 100 provided in the present embodiment, the voltage comparing unit 1530 drives the lamp 210 (e.g., brake lamp) to be turned on through the logic circuit module 160, so as to remind the following vehicle of driving safety. Here, the voltage comparing unit 1530 is directly supplied with power through the battery pack 230 in the vehicle 200, so that the voltage comparing unit 1530 can still be in a normal operation state when the step-down unit 1520 is out of order.

In some possible embodiments, the power management and voltage monitoring module 150 may further include a protection unit 1540. The protection unit 1540 is connected between the voltage step-down unit 1520 and the battery pack 230, for filtering the output voltage of the battery pack 230, and for performing a voltage isolation function. Specifically, the protection unit 1540 may be a diode having a positive electrode connected to the battery pack 230 and a negative electrode connected to an input terminal of the voltage step-down unit 1520 (i.e., VSUP port in fig. 3). Here, in the case where the power management and voltage monitoring module 150 includes the protection unit 1540, the output voltage of the step-down unit 1520 is smaller than the specified threshold value may be caused by the abnormal function (e.g., excessive step-down) of the protection unit 1540.

In this embodiment, the logic circuit module 160 may be an or gate chip. The OR gate chip may include a plurality of inputs 1600, and a module output 1650 (i.e., FS0M port in FIG. 4). For outputting an electrical signal at the module output 1650 in case at least one input 1600 of the plurality of inputs 1600 receives an electrical signal (i.e., a trigger signal). Specifically, IN the present embodiment, the or gate chip has four input terminals 1600 (i.e., IN1 port, IN2 port, IN3 port, IN4 port IN fig. 4). Therefore, when any one of the four input terminals 1600 receives the trigger signal, the module output terminal 1650 outputs an electrical signal to drive the lamp driving module 130 connected to the logic circuit module 160 to operate. In some possible embodiments, the logic circuit module 160 may also be a logic circuit capable of implementing "or logic", which is not specifically limited in this embodiment.

The lamp driving module 130 is connected between the module output 1650 of the logic circuit module 160 and the lamp 210, and is configured to drive the lamp 210 to be turned on when receiving the electrical signal output from the logic circuit module 160. In addition, the lamp driving module 130 is further connected to the first fault monitoring module 110, so when the first fault monitoring module 110 receives a lamp turn-on command sent by the vehicle 200, the first fault monitoring module 110 can control the lamp driving module 130 to further drive the lamp 210 to turn on. Specifically, the lamp driving module 130 may be implemented by a plurality of power electronics, or may be a dedicated driving chip.

In the present embodiment, the lamp driving module 130 may include a first driving unit 1300 and a second driving unit 1320, wherein the first driving unit 1300 is connected between the module output 1650 of the logic circuit module 160 and the first lamp 2100 for driving the first lamp 2100 to be lighted. The second driving unit 1320 is connected between the module output 1650 of the logic circuit module 160 and the second lamp 2120 for driving the second lamp 2120 to light. Specifically, the first driving unit 1300 and the second driving unit 1320 may be implemented by a plurality of power electronics, or may be dedicated driving chips. In the embodiment shown in fig. 3, the first driving unit 1300 includes a saf_di_lbl port and an OUTPUT1 port, the saf_di_lbl port being connected to the module OUTPUT 1650 of the logic circuit module 160, the OUTPUT1 port being connected to the first vehicle lamp 2100. When the first driving unit 1300 receives the electric signal OUTPUT from the logic circuit module 160 through the saf_di_lbl port, it transmits a first driving signal to the first lamp 2100 through the OUTPUT1 port, and thus drives the first lamp 2100 to be lighted. Likewise, the second driving unit 1320 includes a saf_di_hbl port connected to the module OUTPUT 1650 of the logic circuit module 160 and an OUTPUT2 port connected to the second lamp 2120. When receiving the electrical signal OUTPUT from the logic circuit module 160 through the saf_di_hbl port, the second driving unit 1320 transmits a second driving signal to the second lamp 2120 through the OUTPUT2 port, thereby driving the second lamp 2120 to light. Therefore, the present embodiment achieves redundancy control of the lamps by providing the first driving unit 1300 connected to the first lamp 2100 and the second driving unit 1320 connected to the second lamp 2120 so that, in the event of a failure of one of the first driving unit 1300 and the second driving unit 1320, the logic circuit module 160 can control the other driving unit so that at least one lamp 210 can be lighted, ensuring running safety of the following vehicle.

In the present embodiment, the first driving unit 1300 and the second driving unit 1320 are also connected to the first failure monitoring module 110, respectively. In the embodiment shown in fig. 3, the first driving unit 1300 further includes a P1 port and an SPI3 port, the first fault monitoring module 110 further includes a PWM port and an SPI3 port, the P1 port of the first driving unit 1300 is connected to the PWM port of the first fault monitoring module 110, and the SPI3 port of the first driving unit 1300 is connected to the SPI3 port of the first fault monitoring module 110. Likewise, the second driving unit 1320 further includes a P2 port and an SPI2 port, the first fault monitoring module 110 further includes an SPI2 port, the P2 port of the second driving unit 1320 is connected to the PWM port of the first fault monitoring module 110, and the SPI2 port of the second driving unit 1320 is connected to the SPI2 port of the first fault monitoring module 110.

Specifically, in an aspect, the first fault monitoring module 110 may send a control instruction to the P1 port of the first driving unit 1300 and the P2 port of the second driving unit 1320 through the PWM port upon receiving the lamp turn-on instruction sent from the vehicle 200, and then light the first lamp 2100 and the second lamp 2120 through the first driving unit 1300 and the second driving unit 1320, respectively.

On the other hand, the first fault monitoring module 110 may acquire the operating state of the first driving unit 1300 through the SPI3 port, and when the operating state of the first driving unit 1300 is in an abnormal state, that is, when it is determined that the first driving unit 1300 is faulty, send a control signal to the P2 port of the second driving unit 1320 through the PWM port, and further trigger the second driving unit 1320 to drive the second vehicle lamp 2120 to light. Specifically, the abnormal state of the first driving unit 1300 may include an abnormality of a link between the first driving unit 1300 and the first lamp 2100 (e.g., open circuit, short ground, etc.), or an abnormality of a link between the first driving unit 1300 and the first fault monitoring module 110 (e.g., open circuit, short voltage, short ground, etc.), or an abnormality of a function of the first driving unit 1300 (e.g., the first driving unit 1300 cannot output the first driving signal, a signal delay, a signal clamping phenomenon, etc.). As an implementation manner, the first fault monitoring module 110 may obtain the first output current of the first driving unit 1300 through the SPI3 port, where the first output current is the current output by the first driving unit 1300 to the first lamp 2100, and further determine whether the first driving unit 1300 is abnormal according to the first output current. Specifically, in the case where the first output current is within the first specified interval, it is determined that the operation state of the first driving unit 1300 is a normal state; otherwise, the operation state of the first driving unit 1300 is determined to be an abnormal state. Therefore, the first fault monitoring module 110 in this embodiment can timely drive the second lamp 2120 to light up in the case that the first driving unit 1300 fails, so as to ensure the driving safety of the rear vehicle.

In yet another aspect, the first fault monitoring module 110 may further obtain the operating state of the second driving unit 1320 through the SPI2 port, and send a control signal to the P1 port of the first driving unit 1300 through the PWM port when the operating state of the second driving unit 1320 is in an abnormal state, that is, when it is determined that the second driving unit 1320 is faulty, so as to trigger the first driving unit 1300 to drive the first vehicle lamp 2100 to light. Specifically, the abnormal state of the second driving unit 1320 may include an abnormality of a link between the second driving unit 1320 and the second lamp 2120 (e.g., open circuit, short, etc.), or an abnormality of a link between the second driving unit 1320 and the first failure monitoring module 110 (e.g., open circuit, short voltage, short, etc.), or an abnormality of a function of the second driving unit 1320 (e.g., the second driving unit 1320 cannot output the second driving signal, a signal delay, a signal clamping phenomenon, etc.). As one implementation, the first fault monitoring module 110 may obtain the second output current of the second driving unit 1320 through the SPI2 port, where the second output current is a current output by the second driving unit 1320 to the second vehicle lamp 2120, and further determine whether the second driving unit 1320 is abnormal according to the second output current. Specifically, in the case where the second output current is within the second designated section, it is determined that the operation state of the second driving unit 1320 is the normal state; otherwise, it is determined that the operation state of the second driving unit 1320 is an abnormal state. Therefore, the first fault monitoring module 110 in this embodiment can timely drive the first lamp 2100 to be turned on in the event of a fault in the second driving unit 1320, thereby ensuring the driving safety of the rear vehicle.

In this embodiment, the first driving unit 1300 and the second driving unit 1320 may further include a VCC port connected to the VCC port on the voltage output unit 1500 to enable power supply to the first driving unit 1300 and the second driving unit 1320, respectively.

In this embodiment, the first driving unit 1300 may further include a vbat_a port, and the first driving unit 1300 is connected to the first battery pack 2300 through the vbat_a port, that is, the first battery pack 2300 performs redundant power supply to the first driving unit 1300. Therefore, in the event of a failure of the power management and voltage monitoring module 150 in the electronic controller 100, the first driving unit 1300 may still be powered by the first battery pack 2300 to be in a normal operating state. In some possible embodiments, the power management and voltage monitoring module 150 further includes a first protection unit 1550, where the first protection unit 1550 is connected between the first battery pack 2300 and the first driving unit 1300, for filtering the output voltage of the first battery pack 2300 and functioning as voltage isolation. Specifically, the first protection unit 1550 may be a diode having an anode connected to the first battery pack 2300 and a cathode connected to the vbat_a port of the first driving unit 1300.

In this embodiment, the second driving unit 1320 may further include a vbat_b port, and the second driving unit 1320 is connected to the second battery pack 2320 through the vbat_b port, that is, the second battery pack 2320 is implemented to supply power to the second driving unit 1320 redundantly. Therefore, in the event of a failure of the power management and voltage monitoring module 150 in the electronic controller 100, the second driving unit 1320 may still be powered by the second battery pack 2320, so as to be in a normal operating state. In some possible embodiments, the power management and voltage monitoring module 150 further includes a second protection unit 1560, where the second protection unit 1560 is connected between the second battery pack 2320 and the second driving unit 1320, and is used to filter the output voltage of the second battery pack 2320 and function as voltage isolation. Specifically, the second protection unit 1560 may be a diode having an anode connected to the second battery pack 2320 and a cathode connected to the vbat_b port of the second driving unit 1320.

The embodiment of the application provides an electronic controller 100, where under the condition that the communication module 120, the first fault monitoring module 110 and the power management and voltage monitoring module 150 in the electronic controller 100 respectively fail, the logic circuit module 160 can drive the car lamp 210 to light, so that the fault detection mechanism of each module in the electronic controller 100 is perfected, and when any module in the electronic controller 100 fails, the car lamp 210 can be lightened to remind the following car of paying attention to driving safety.

In this specification, certain terms are used throughout the description and claims to refer to particular components. Those of skill in the art will appreciate that a hardware manufacturer may refer to the same component by different names. The description and claims do not take the difference in name as a way of distinguishing between components, but rather take the difference in functionality of the components as a criterion for distinguishing. As used throughout the specification and claims, the word "comprise" and "comprises" are to be construed as "including, but not limited to"; by "substantially" is meant that a person skilled in the art can solve the technical problem within a certain error range, essentially achieving the technical effect.

In the description of the present specification, a description referring to terms "one embodiment," "some embodiments," "examples," "specific examples," or "some examples," etc., means that a particular feature, structure, material, or characteristic described in connection with the embodiment or example is included in at least one embodiment or example of the present application. In this specification, schematic representations of the above terms are not necessarily directed to the same embodiment or example. Furthermore, the particular features, structures, materials, or characteristics described may be combined in any suitable manner in any one or more embodiments or examples. Furthermore, the different embodiments or examples described in this specification and the features of the different embodiments or examples may be combined and combined by those skilled in the art without contradiction.

Furthermore, the terms "first," "second," and the like, are used for descriptive purposes only and are not to be construed as indicating or implying a relative importance or implicitly indicating the number of technical features indicated. Thus, a feature defining "a first" or "a second" may explicitly or implicitly include at least one such feature. In the description of the present application, the meaning of "plurality" is at least two, such as two, three, etc., unless explicitly defined otherwise.

Finally, it should be noted that: the above embodiments are only for illustrating the technical solution of the present application, and are not limiting thereof; although the present application has been described in detail with reference to the foregoing embodiments, one of ordinary skill in the art will appreciate that: the technical scheme described in the foregoing embodiments can be modified or some technical features thereof can be replaced by equivalents; such modifications and substitutions do not drive the essence of the corresponding technical solutions to depart from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. An electronic controller is characterized by being applied to a vehicle, wherein the vehicle comprises a vehicle lamp, and the electronic controller comprises a communication module, a first fault monitoring module aiming at the communication module, a second fault monitoring module aiming at the first fault monitoring module, a vehicle lamp driving module, a power management and voltage monitoring module and a logic circuit module;

The communication module is connected with the first fault monitoring module;

the second fault monitoring module is connected with the first fault monitoring module;

the power management and voltage monitoring module is respectively connected with the first fault monitoring module, the communication module, the car lamp driving module and the second fault monitoring module;

the input end of the logic circuit module is respectively connected with the first fault monitoring module, the second fault monitoring module and the power management and voltage monitoring module, and the module output end of the logic circuit module is connected with the car lamp driving module;

the car light driving module is connected between the first fault monitoring module and the car light.

2. The electronic controller of claim 1, wherein the input of the logic circuit module comprises a first input, the first input connected to the first fault-monitoring module.

3. The electronic controller of claim 1, wherein the input of the logic circuit module comprises a second input, the second input connected to the second fault-monitoring module.

4. The electronic controller of claim 1, wherein the power management and voltage monitoring module comprises a voltage output unit and a voltage monitoring unit; the input end of the logic circuit module comprises a third input end; the voltage monitoring unit is connected between the voltage output unit and the third input end.

5. The electronic controller of claim 4, wherein the voltage output unit is connected to the first fault-monitoring module, the second fault-monitoring module, and the communication module, respectively; the voltage output unit outputs a first output voltage to the first fault monitoring module, outputs a second output voltage to the second fault monitoring module, and outputs a third output voltage to the communication module.

6. The electronic controller of claim 4, wherein the power management and voltage monitoring module further comprises a step-down unit and a voltage comparison unit; the voltage reducing unit is connected with the voltage input end of the voltage output unit; the input end of the logic circuit module further comprises a fourth input end; the input end of the voltage comparison unit is connected with the voltage output end of the voltage reduction unit, and the output end of the voltage comparison module is connected with the fourth input end.

7. The electronic controller of any one of claims 1 to 6, wherein the vehicle lamp comprises a first vehicle lamp and a second vehicle lamp, the vehicle lamp driving module comprises a first driving unit and a second driving unit, the first driving unit is connected between a module output of the logic circuit module and the first vehicle lamp, and the second driving unit is connected between a module output of the logic circuit module and the second vehicle lamp.

8. The electronic controller of claim 7, wherein the first drive unit and the second drive unit are further respectively connected to the first fault-monitoring module; the first fault monitoring module is configured to: triggering the second driving unit to drive the second vehicle lamp to light under the condition that the first driving unit is determined to be in fault; or triggering the first driving unit to drive the first vehicle lamp to light under the condition that the second driving unit is determined to be in fault.

9. The electronic controller of claim 7, wherein the vehicle comprises a first battery pack and a second battery pack, the power management and voltage monitoring module further comprising a first protection unit and a second protection unit; the first protection unit is connected between the first battery pack and the first driving unit, and the second protection unit is connected between the second battery pack and the second driving unit.

10. A vehicle, characterized by comprising:

a vehicle lamp; and

an electronic controller as claimed in any one of claims 1 to 9.