A method and system for monitoring engine air intake function safety and its vehicle

Abstract

The present invention discloses a functional safety monitoring method, system and vehicle for engine intake volume based on the redundancy principle, specifically comprising: collecting intake volume, boost pressure and post-throttle intake pressure, setting a primary charging model and a secondary charging model and performing calculations, outputting the primary charging volume and the secondary charging volume; comparing the primary charging volume and the secondary charging volume, and deciding and outputting a corresponding safety monitoring strategy. Based on the functional safety redundancy principle, the present invention utilizes three different sensors and calculates intake volume using two independent methods. First, the parameters of the air flow sensor are collected for intake volume calculation, and then the parameters of the throttle position sensor, the boost pressure sensor and the post-throttle intake pressure sensor are collected for intake volume calculation. By comparing these two redundant intake volume values, the purpose of functional safety monitoring of the engine intake volume is achieved.

Description

Technical Field

[0001] The present invention relates to a safety monitoring method, system and vehicle thereof, and in particular to a safety monitoring method, system and vehicle thereof for engine intake volume function. Background Art

[0002] Functional safety requires that the monitoring layer monitor the functional layer independently of the functional layer. However, in actual engineering projects, due to design and cost considerations, the functional layer and the monitoring layer often share the same sensor input signal. If the input signal is faulty, the entire monitoring system will experience a common cause failure. Therefore, all input signals used by the monitoring layer should be monitored or restricted to improve the reliability of functional safety monitoring. If an input signal is found to be unreliable, a safety monitoring fault response should be immediately implemented. As an input directly related to power output, the importance of intake air volume is self-evident.

[0003] Existing engine intake air volume functional safety monitoring strategies estimate the minimum intake air volume using throttle opening and speed inputs, while also factoring in the turbocharger. This requires experienced calibration engineers to determine this value under different operating conditions, a significant workload. Furthermore, strategies must be developed to optimize monitoring at different engine operation stages, increasing the complexity of the functional safety program. The ultimate goal of this effort is to estimate a realistic minimum intake air volume for comparison with the intake air volume measured by the intake air flow sensor. However, this monitoring strategy can only monitor situations where the intake air volume is too low, making it an inaccurate one.

[0004] In summary, in the traditional intake volume functional safety monitoring method, due to the limitations of the intake volume-related sensors (redundancy cannot be formed), it is necessary to estimate or calibrate a minimum intake volume value under different operating conditions to monitor the failure of the intake volume-related sensor collecting values ​​that are too small, so as to avoid the actual torque calculation value being too small due to the small intake volume, resulting in the failure of functional safety torque monitoring. This method requires a high level of engineer experience and has poor monitoring accuracy and environmental adaptability. Summary of the Invention

[0005] The purpose of the present invention is to provide a method, system and vehicle for functional safety monitoring of engine intake volume. The first technical problem to be solved is the redundancy principle based on power safety. Usually, multiple sensors collect sensor signals, and then calculate them through independent calculation methods to achieve the purpose of functional safety monitoring of engine intake volume on the basis of ensuring redundancy.

[0006] Another technical problem to be solved by the present invention is to verify the situation where two of the three sensors fail (open circuit or short circuit at the same time) according to the monitoring model, which fully meets the redundant conditions of functional safety monitoring, improves the monitoring accuracy of the intake volume in various environments, and can also simultaneously monitor the situations where the intake volume is too small and too large, thereby improving the reliability of the intake volume value.

[0007] The present invention provides the following solutions:

[0008] A method for monitoring engine intake air volume functional safety based on redundancy principle, specifically comprising:

[0009] Collect the intake volume, boost pressure and post-throttle intake pressure, set the main charging model and perform calculations to output the main charging intake volume;

[0010] Receive throttle opening parameters, boost pressure parameters and post-throttle intake pressure parameters, set the secondary charge model and perform calculations, and output the secondary charge intake volume;

[0011] Compare the primary and secondary air intake volumes, and output a corresponding safety monitoring strategy.

[0012] Furthermore, an air flow meter, a boost pressure sensor and a post-throttle intake pressure sensor are used to collect intake air volume, boost pressure and post-throttle intake pressure sensing signals respectively.

[0013] Furthermore, the output signal of the air flow meter is a sent signal, and the main charging model calculates the value of the intake air volume by setting the calibration quantity and strategy according to the signal value;

[0014] The output signals of the boost pressure sensor and the intake pressure sensor after the throttle valve are analog signals. The secondary charging model sets the calibration quantity and strategy to calculate the boost pressure and the intake pressure after the throttle valve according to the analog signal values.

[0015] Furthermore, the actual air mass flow through the throttle valve is calculated based on the throttle valve opening and the air flow pressure ratio before and after the throttle valve.

[0016] Furthermore, when the valve opening is above 95%, it is necessary to introduce throttle opening information when setting the threshold, and calibrate different thresholds according to different throttle openings for restriction.

[0017] Furthermore, the safety monitoring strategy corresponding to the decision output specifically includes: when speed exceeding limit is detected in fault response monitoring, stopping limp home mode, shutting down power devices, triggering a reset of the main control system, and the engine entering a safe mode.

[0018] An engine air intake function safety monitoring system based on redundancy principle, specifically comprising:

[0019] The main charge air volume output module collects the air volume, boost pressure and post-throttle intake pressure, sets the main charge model and performs calculations to output the main charge air volume;

[0020] The secondary charge air intake volume output module receives the throttle opening parameter, the boost pressure parameter and the post-throttle intake pressure parameter, sets the secondary charge model and performs calculations to output the secondary charge air intake volume;

[0021] The safety monitoring strategy decision output module compares the primary and secondary air intake volumes and makes a decision to output the corresponding safety monitoring strategy.

[0022] An electronic device, characterized in that it includes: a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other via the communication bus; the memory stores a computer program, and when the computer program is executed by the processor, the processor executes the steps of the method.

[0023] A computer-readable storage medium stores a computer program executable by an electronic device. When the computer program runs on the electronic device, the electronic device executes the steps of the method.

[0024] A vehicle, characterized by comprising:

[0025] Electronic equipment for implementing a functional safety monitoring method for engine air intake based on a redundancy principle;

[0026] a processor, the processor running a program, and when the program is running, executing the steps of the engine intake air volume functional safety monitoring method based on the redundancy principle for data output from the electronic device;

[0027] The storage medium is used to store a program, which, when running, executes the steps of the engine intake air volume functional safety monitoring method based on the redundancy principle for data output from the electronic device.

[0028] Compared with the prior art, the present invention has the following advantages:

[0029] Based on the redundancy principle of functional safety, the present invention uses three different sensors to calculate the intake volume through two independent methods. First, the parameters of the air flow sensor are collected to calculate the intake volume. Then, the parameters of the throttle position sensor (whose credibility has been determined by relevant functional safety monitoring and is not counted in the redundant system), the boost pressure sensor and the post-throttle intake pressure sensor are collected to calculate the intake volume. By comparing these two redundant intake volume values, the purpose of functional safety monitoring of the engine intake volume is achieved.

[0030] This invention fully leverages the redundancy created by sufficient intake air volume-related sensors, ensuring that the data used in the two independent intake air volume calculation methods is collected by three different sensors, with no interaction between the sensors used. Furthermore, based on the monitoring model, it verifies the situation where two of the three sensors fail simultaneously (simultaneously open or short-circuit). (Simultaneous failure of three sensors and two-way distortion without monitoring are extremely rare events within the functional safety concept and can be omitted for verification.) This fully satisfies the redundancy requirements of functional safety monitoring. This invention improves the monitoring accuracy of the important intake air volume input in various environments and can also simultaneously monitor for both under- and over-intake air volume, truly improving the reliability of intake air volume values. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] In order to more clearly illustrate the specific embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the specific embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0032] Figure 1 This is a flow chart of a method for monitoring engine air intake function safety based on redundancy principle according to an embodiment of the present invention.

[0033] Figure 2 This is an architectural diagram of an engine air intake function safety monitoring system based on redundancy principle according to an embodiment of the present invention.

[0034] Figure 3 This is the functional block diagram of the intake air volume monitoring system of the gasoline engine electronic control system.

[0035] Figure 4 This is the functional principle diagram of the secondary air intake calculation model.

[0036] Figure 5 This is a functional principle diagram for comparing the theoretical fuel injection quantity and the relative intake air quantity.

[0037] Figure 6 It is a structural diagram of an electronic device. DETAILED DESCRIPTION

[0038] The technical solution of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the embodiments described are only some embodiments of the present invention, not all embodiments. All other embodiments obtained by ordinary technicians in this field based on the embodiments of the present invention without making any creative efforts shall fall within the scope of protection of the present invention.

[0039] like Figure 1The process of engine intake air volume functional safety monitoring based on redundancy principle shown in the figure specifically includes:

[0040] Step S1: collecting the intake air volume, boost pressure and post-throttle intake pressure, setting the main charging model and performing calculations to output the main charging air volume;

[0041] Specifically, an air flow meter, a boost pressure sensor and a post-throttle intake pressure sensor are used to collect intake air volume, boost pressure and post-throttle intake pressure sensor signals respectively;

[0042] Specifically, the output signal of the air flow meter is the sent signal, and the main charging model sets the calibration amount and strategy according to the signal value to calculate the value of the intake air volume;

[0043] The output signals of the boost pressure sensor and the intake pressure sensor after the throttle valve are analog signals. The secondary charging model sets the calibration quantity and strategy to calculate the boost pressure and the intake pressure after the throttle valve according to the analog signal values;

[0044] Specifically, the actual air mass flow rate passing through the throttle valve is calculated based on the throttle valve opening and the air flow pressure ratio before and after the throttle valve.

[0045] Step S2: receiving the throttle opening parameter, the boost pressure parameter and the post-throttle intake pressure parameter, setting the secondary charge model and performing calculations, and outputting the secondary charge intake volume;

[0046] Specifically, when the valve opening is above 95%, it is necessary to introduce throttle opening information when setting the threshold, and calibrate different thresholds according to different throttle openings for restriction;

[0047] Step S3: Compare the primary air intake volume and the secondary air intake volume, and decide and output a corresponding safety monitoring strategy;

[0048] Specifically, the safety monitoring strategy corresponding to the decision output includes: when speed exceeding the limit is detected in the fault response monitoring, the limp home mode is stopped, the power device is turned off, the main control system is triggered to reset, and the engine enters the safe mode.

[0049] For the method steps disclosed in the above embodiments, for the purpose of simple description, the method steps are expressed as a series of action combinations. However, those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

[0050] like Figure 2The engine air intake function safety monitoring system based on the redundancy principle of the embodiment of the present invention shown in the figure specifically includes:

[0051] The main charge air volume output module collects the air volume, boost pressure and post-throttle intake pressure, sets the main charge model and performs calculations to output the main charge air volume;

[0052] The secondary charge air intake volume output module receives the throttle opening parameter, the boost pressure parameter and the post-throttle intake pressure parameter, sets the secondary charge model and performs calculations to output the secondary charge air intake volume;

[0053] The safety monitoring strategy decision output module compares the primary and secondary air intake volumes and makes a decision to output the corresponding safety monitoring strategy.

[0054] It is worth noting that although only some basic functional modules are disclosed in this embodiment, it does not mean that the composition of this system is limited to the above basic functional modules. On the contrary, what this embodiment wants to express is that on the basis of the above basic functional modules, those skilled in the art can arbitrarily add one or more functional modules in combination with existing technologies to form an infinite number of embodiments or technical solutions. In other words, this system is open rather than closed. Just because this embodiment only discloses individual basic functional modules, it cannot be considered that the scope of protection of the claims of the present invention is limited to the disclosed basic functional modules. At the same time, for the convenience of description, the above devices are described in terms of functions, which are divided into various units and modules. Of course, when implementing the present invention, the functions of each unit and module can be implemented in the same or one or more software and / or hardware.

[0055] The system embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, i.e., they may be located in one location or distributed across multiple network units. Some or all of the modules may be selected based on actual needs to achieve the objectives of this embodiment. Persons of ordinary skill in the art will be able to understand and implement the present invention without inventive effort.

[0056] like Figure 3The gasoline engine electronic control system intake air volume monitoring function block diagram: This embodiment of the present invention consists of three functional parts. The first part uses the parameters collected by three sensors to calculate the corresponding input values ​​(intake volume, boost pressure, and post-throttle intake pressure). The second part uses the inputs such as throttle opening, boost pressure, and post-throttle intake pressure to calculate another redundant intake volume value. The third part is the intake volume value comparison function. We call the model that collects and calculates the intake volume using the air flow meter the primary filling model, and the model that collects and calculates the intake volume using the boost pressure sensor and post-throttle intake pressure sensor and combines the throttle opening information (which is already monitored) to calculate the intake volume the secondary filling model. Finally, the intake volume values ​​calculated by these two paths are compared and monitored.

[0057] 1. Calculation model of relevant input quantities:

[0058] This module calculates relevant input quantities based on the parameters of different types of sensors collected by the electronic control system. The output signals of the sensors can be classified into sent signals, analog signals, and frequency signals. The main charge intake volume is calculated based on the collected parameters of the air flow meter. The output signal of the air flow meter is a sent signal. The model sets the calibration quantity and strategy based on the signal value to calculate the intake volume value. The output signals of the boost pressure sensor and the post-throttle intake pressure sensor are analog signals. Similarly, the model sets the calibration quantity and strategy based on the analog signal value to calculate the boost pressure and post-throttle intake pressure. The function of this module is to correctly calculate the relevant input quantities (boost pressure and post-throttle intake pressure) required for the calculation of the main charge intake volume and the secondary charge intake volume.

[0059] 2. Secondary air intake calculation model:

[0060] The main function of this module is to calculate the actual air mass flow through the throttle based on the throttle opening and the air flow pressure ratio before and after the throttle. Together with the calculation results of the main charging model, it plays an important role in monitoring the intake volume in the present invention.

[0061] The secondary air intake calculation model consists of the following two functional sub-modules: a sub-module for calculating the airflow pressure ratio before and after the throttle and the Saint-Venant influence factor, and a sub-module for calculating the air mass flow through the throttle based on the throttle opening information and the Saint-Venant influence factor plus an offset. The invention here is to reasonably simplify the actual air mass flow calculation model that flows through the throttle. Although the calculation accuracy is slightly affected, it can fully meet the monitoring needs. It is also to comply with the requirements of the functional safety standard on the complexity of model construction, making the model more concise, removing modules that have little impact on the calculation results and are complex to construct, and setting reasonable thresholds to meet the monitoring needs. From this perspective, the embodiment of the present invention takes safety monitoring as the goal, and optimizes the actual air mass flow calculation model that flows through the throttle in terms of functional safety requirements.

[0062] See also Figure 4 The calculation principle of the secondary air intake calculation model is as follows: receiving the throttle opening parameter, the boost pressure parameter and the intake pressure parameter after the throttle valve; performing the pressure correction factor calculation on the boost pressure parameter to output the pressure correction factor; performing the temperature correction factor calculation on the intake temperature to output the temperature correction factor; outputting the pressure ratio and the Saint-Venant influence factor according to the boost pressure parameter, the intake pressure parameter after the throttle valve, the pressure correction factor and the temperature correction factor; calculating the air mass flow through the throttle valve according to the nominal air mass flow offset calibration setting, the pressure ratio and the Saint-Venant influence factor and the throttle opening parameter, and then outputting the secondary air intake volume.

[0063] like Figure 4 As shown, the simplified part of the model is introduced below:

[0064] (1) The submodule for calculating the air mass flow through the throttle valve based on the throttle valve opening information is simplified. The present invention no longer introduces a complex strategy for calculating the intake volume when the throttle valve opening is above 95%. Therefore, when the throttle valve opening is above 95%, the intake volume value calculated by this model has an error. It is necessary to introduce the throttle valve opening information when setting the threshold value, and calibrate different thresholds according to different throttle valve openings to limit the flow. This can meet the requirements of intake volume safety monitoring while avoiding false alarms.

[0065] (2) Simplify the calculation of the nominal air mass flow offset flowing through the throttle. This offset is caused by the fast and slow conversion of the airflow and leakage. During the actual operation of the vehicle, this variable always changes around a calibration value, and the range of change is very small. In most of the time, their values ​​are almost the same. Therefore, the present invention directly uses this calibration value instead of the complicated calculation process of the offset.

[0066] (3) The calculation of the correction factor for the air mass flow density flowing through the throttle valve is modified. This correction factor is used to calculate the Saint-Venant influence factor and is calculated by temperature correction, pressure correction and functional layer primary and secondary charging verification correction. Due to the redundancy principle of functional safety monitoring, the calculation of the primary and secondary charging intake volumes at the monitoring layer must be independent. Therefore, the present invention removes the influence of the primary and secondary charging verification correction factor, so that the intake volumes calculated by the primary and secondary charging can be monitored each other without interference.

[0067] like Figure 5 As shown, the comparison function of the primary and secondary air intake volumes:

[0068] Comparing the intake air volume calculated by the primary and secondary charging models is only necessary when there are no other throttle power failure responses. This is because the safety monitoring mode exits the torque monitoring mode and enters the speed monitoring mode, and the intake air volume is no longer required to be monitored.

[0069] A prerequisite for monitoring the air volume comparison is setting appropriate threshold calibration. A suitable two-dimensional data table is calibrated based on throttle opening information and engine speed. The threshold is appropriately relaxed at low and high speeds, and when the throttle opening is greater than 95%, ensuring both monitoring requirements and avoiding false fault alarms. When the deviation between the calculated air volume values ​​for the primary and secondary charging stations exceeds the maximum allowable value, it indicates a problem with the air volume sensor. Under-measured air volume sensor data can cause the actual torque calculated by the monitoring layer to be under-measured, creating a potentially dangerous situation. When the air volume monitoring detects an error, the fault time is accumulated. When the fault time exceeds the maximum allowable value, a fault response is triggered: the air volume monitoring fault flag is set; the throttle shutoff flag is set; the throttle enable is disabled, limp home mode is entered, and fault response monitoring is initiated. The present invention also verifies the failure of three air volume monitoring sensors in pairs. Two of the three sensors are selected and combined, and short-circuited and open-circuited fault models are applied to verify the effectiveness of the air volume monitoring function and report a safety monitoring fault.

[0070] If the speed limit is exceeded during fault response monitoring, it indicates a limp home mode fault. To ensure safety, limp home mode cannot be continued. The safety monitoring function will shut down the power devices and trigger a reset of the main control system. After the reset, the system will not attempt to regain control of the engine and will enter safe mode.

[0071] like Figure 6 As shown, the embodiment of the present invention also discloses an electronic device and a storage medium corresponding to a method and system for monitoring engine intake air volume functional safety based on the redundancy principle:

[0072] An electronic device includes: a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other via the communication bus; the memory stores a computer program, and when the computer program is executed by the processor, the processor executes the steps of a method for functional safety monitoring of engine intake volume based on the principle of redundancy.

[0073] A computer-readable storage medium stores a computer program executable by an electronic device. When the computer program runs on the electronic device, the electronic device executes the steps of a method for functional safety monitoring of engine intake air volume based on a redundancy principle.

[0074] A vehicle, comprising:

[0075] Electronic equipment for implementing a functional safety monitoring method for engine air intake based on a redundancy principle;

[0076] a processor, the processor running a program, and when the program is running, executing the steps of a method for monitoring functional safety of engine intake air volume based on a redundancy principle for data output from the electronic device;

[0077] The storage medium is used to store a program, which, when running, executes the steps of a method for monitoring the functional safety of engine intake air volume based on a redundancy principle for data output from an electronic device.

[0078] The above-mentioned processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, and discrete hardware components.

[0079] The communication bus mentioned in the electronic device mentioned above may be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus. This communication bus can be divided into an address bus, a data bus, a control bus, etc. For ease of illustration, only one thick line is used in the figure, but this does not mean that there is only one bus or only one type of bus.

[0080] The electronic device includes a hardware layer, an operating system layer running on the hardware layer, and an application layer running on the operating system. The hardware layer includes hardware such as a central processing unit (CPU), a memory management unit (MMU), and memory. The operating system can be any one or more computer operating systems that control electronic devices through processes, such as the Linux operating system, the Unix operating system, the Android operating system, the iOS operating system, or the Windows operating system. In the embodiments of the present invention, the electronic device can be a handheld device such as a smartphone or a tablet computer, or an electronic device such as a desktop computer or a portable computer, which is not particularly limited in the embodiments of the present invention.

[0081] The execution subject of the electronic device control in the embodiment of the present invention can be an electronic device, or a functional module in the electronic device that can call a program and execute the program. The electronic device can obtain the firmware corresponding to the storage medium. The firmware corresponding to the storage medium is provided by the supplier. The firmware corresponding to different storage media can be the same or different, and is not limited here. After the electronic device obtains the firmware corresponding to the storage medium, it can write the firmware corresponding to the storage medium into the storage medium, specifically, burn the firmware corresponding to the storage medium into the storage medium. The process of burning the firmware into the storage medium can be implemented using existing technology and will not be described in detail in the embodiment of the present invention.

[0082] The electronic device can also obtain a reset command corresponding to the storage medium. The reset command corresponding to the storage medium is provided by the supplier. The reset commands corresponding to different storage media can be the same or different, and are not limited here.

[0083] In this case, the storage medium of the electronic device is a storage medium in which the corresponding firmware is written. The electronic device can respond to the reset command corresponding to the storage medium in which the corresponding firmware is written, thereby resetting the storage medium in which the corresponding firmware is written according to the reset command corresponding to the storage medium. The process of resetting the storage medium according to the reset command can be implemented in the existing technology and will not be described in detail in the embodiments of the present invention.

[0084] The embodiment of the present invention also discloses a vehicle corresponding to the engine intake air volume functional safety monitoring method, system, electronic device, and storage medium based on the redundancy principle:

[0085] A vehicle, comprising:

[0086] Electronic equipment for implementing a functional safety monitoring method for engine air intake based on a redundancy principle;

[0087] a processor, the processor running a program, and when the program is running, executing the steps of a method for monitoring functional safety of engine intake air volume based on a redundancy principle for data output from the electronic device;

[0088] The storage medium is used to store a program, which, when running, executes the steps of a method for monitoring the functional safety of engine intake air volume based on a redundancy principle for data output from an electronic device.

[0089] Those skilled in the art will understand that, unless otherwise defined, all terms used herein (including technical and scientific terms) have the same meaning as commonly understood by those skilled in the art in the art to which the present invention pertains. It should also be understood that terms such as those defined in common dictionaries should be understood to have meanings consistent with those in the context of the prior art and, unless specifically defined, will not be interpreted in an idealized or overly formal sense.

[0090] It should be noted that certain terms are used in this specification and claims to refer to specific components. Those skilled in the art will understand that different manufacturers may use different terms to refer to the same component. This specification and claims do not distinguish components based on differences in terms, but rather on differences in their functions.

[0091] Throughout this specification, references to terms such as "one embodiment," "example," or "specific example" indicate that the specific features, structures, materials, or characteristics described in conjunction with that embodiment or example are included in at least one embodiment or example of the present invention. In this specification, schematic representations of these terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in any one or more embodiments or examples.

[0092] In addition, the technical solutions between the various embodiments of the present invention can be combined with each other, but it must be based on the fact that ordinary technicians in this field can implement it. When the combination of technical solutions is mutually contradictory or cannot be implemented, it should be deemed that such a combination of technical solutions does not exist and is not within the scope of protection required by the present invention.

[0093] In addition, the functional modules in the various embodiments of the present invention may be integrated together to form an independent part, or each module may exist independently, or two or more modules may be integrated to form an independent part.

[0094] Those skilled in the art will appreciate that the modules in the devices in the embodiments can be adaptively changed and set in one or more devices different from the embodiments. The modules or units or components in the embodiments can be combined into one module or unit or component, and in addition they can be divided into multiple submodules or subunits or subcomponents. Except that at least some of such features and / or processes or units are mutually exclusive, all features disclosed in this specification (including corresponding claims, abstracts and drawings) and all processes or units of any method or device disclosed in this manner can be combined in any combination. Unless otherwise expressly stated, each feature disclosed in this specification (including corresponding claims, abstracts and drawings) can be replaced by an alternative feature providing the same, equivalent or similar purpose.

[0095] Furthermore, those skilled in the art will appreciate that although some embodiments described herein include certain features included in other embodiments but not other features, combinations of features from different embodiments are intended to be within the scope of the present invention and to form different embodiments. For example, in the claims below, any of the claimed embodiments may be used in any combination.

[0096] The technical features of the above embodiments can be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0097] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the above embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the above embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for monitoring engine air intake function safety based on redundancy principle, characterized in that: Specifically include: Collect the intake volume, boost pressure and post-throttle intake pressure, set the main charging model and perform calculations to output the main charging intake volume; Receive throttle opening parameters, boost pressure parameters and post-throttle intake pressure parameters, set the secondary charge model and perform calculations, and output the secondary charge intake volume; Compare the primary and secondary air intake volumes, and output corresponding safety monitoring strategies; The receiving of the throttle opening parameter, the boost pressure parameter and the post-throttle intake pressure parameter, setting the secondary charge model and performing calculations, and outputting the secondary charge intake volume includes: receiving the throttle opening parameter, the boost pressure parameter, and the post-throttle intake pressure parameter; performing a pressure correction factor calculation on the boost pressure parameter to output a pressure correction factor; performing a temperature correction factor calculation on the intake air temperature to output a temperature correction factor; Outputting a pressure ratio and a Saint-Venant influence factor according to the boost pressure parameter, the intake pressure parameter after the throttle valve, the pressure correction factor, and the temperature correction factor; Calculating the air mass flow through the throttle valve based on a nominal air mass flow offset calibration setting, the pressure ratio, the Saint-Venant influence factor, and the throttle valve opening parameter, and then outputting the secondary charge intake amount; wherein the difference between the primary air intake amount and the secondary air intake amount is calculated to determine whether the difference is greater than a threshold; By receiving the throttle opening parameters, boost pressure parameters and post-throttle intake pressure parameters, setting the secondary filling model and performing calculations, the step of outputting the secondary filling intake volume simplifies the process of calculating the air mass flow flowing through the throttle according to the throttle opening information. When the valve opening is above 95%, it is necessary to introduce the throttle opening information when setting the threshold value, and calibrate different thresholds according to different throttle openings for restriction, so as to meet the requirements of intake volume safety monitoring while avoiding false alarms.

2. The engine intake volume functional safety monitoring method based on the redundancy principle according to claim 1 is characterized in that: The air flow meter, boost pressure sensor and post-throttle intake pressure sensor are used to collect the intake air volume, boost pressure and post-throttle intake pressure sensing signals respectively.

3. The engine intake volume functional safety monitoring method based on the redundancy principle according to claim 2 is characterized in that: The output signal of the air flow meter is the sent signal. The main charging model sets the calibration amount and strategy according to the signal value to calculate the value of the intake air volume. The output signals of the boost pressure sensor and the intake pressure sensor after the throttle valve are analog signals. The secondary charging model sets the calibration quantity and strategy to calculate the boost pressure and the intake pressure after the throttle valve according to the analog signal values.

4. The engine intake volume functional safety monitoring method based on the redundancy principle according to claim 1 is characterized in that: The safety monitoring strategy corresponding to the decision output specifically includes: when speed exceeding limit is detected in fault response monitoring, stopping limp home mode, shutting down power devices, triggering a reset of the main control system, and the engine entering a safe mode.

5. An engine air intake function safety monitoring system based on redundancy principle, characterized in that: Used to implement the engine intake volume functional safety monitoring method based on the redundancy principle as described in any one of claims 1 to 4; The engine air intake function safety monitoring system based on the redundancy principle specifically includes: The main charge air volume output module collects the air volume, boost pressure and post-throttle intake pressure, sets the main charge model and performs calculations to output the main charge air volume; The secondary charge air intake volume output module receives the throttle opening parameter, the boost pressure parameter and the post-throttle intake pressure parameter, sets the secondary charge model and performs calculations to output the secondary charge air intake volume; The safety monitoring strategy decision output module compares the primary and secondary air intake volumes and makes a decision to output the corresponding safety monitoring strategy.

6. An electronic device, characterized in that: include: A processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other via the communication bus; the memory stores a computer program, and when the computer program is executed by the processor, the processor performs the steps of the method according to any one of claims 1 to 4.

7. A computer-readable storage medium, characterized in that It stores a computer program that can be executed by an electronic device. When the computer program runs on the electronic device, the electronic device executes the steps of the method according to any one of claims 1 to 4.

8. A vehicle, characterized in that: Specifically include: An electronic device for implementing the engine intake air volume functional safety monitoring method based on the redundancy principle as claimed in any one of claims 1 to 4; a processor, the processor running a program, wherein when the program is running, the processor performs the steps of the engine intake air volume functional safety monitoring method based on the redundancy principle according to any one of claims 1 to 4 on the data output from the electronic device; A storage medium for storing a program, wherein when the program is run, the program executes the steps of the engine intake volume functional safety monitoring method based on the redundancy principle as described in any one of claims 1 to 4 for data output from the electronic device.

Images