Dual-control dual-redundant EPB+P-speed backup ECU control system

Abstract

The present invention discloses an electronic control unit control system with dual control and dual redundancy EPB+P gear backup. It includes a plug-in, which is connected to the interface of the vehicle controller; a power conversion module, which is connected to the plug-in via a power line and a first CAN bus; a first and a second MCU microcontroller, one of which is connected to the plug-in via a signal line and connected to the power conversion module; the other is connected to the plug-in via a power line, a P gear control line, a signal line and a second CAN bus; a slope sensor, which is integrated into the electronic control unit control system and connected to the first and second MCU microcontrollers; and left and right motor drive circuit modules, which are connected to the first and second MCU microcontrollers, and the output ends of the left and right motor drive circuit modules are respectively connected to the left and right motors to control the operation of the left and right motors. The present invention realizes the design of a dual control and dual redundancy parking system, and realizes the dual backup of the EPB function and the backup of the P gear parking function.

Description

Technical Field

[0001] The invention relates to an electronic control unit module used in a parking brake system of an electric vehicle, in particular to an electronic control unit module used for an electric vehicle EPB dual backup and realizing a P-gear parking backup, and an electronic control unit with dual microprocessors and dual redundant circuits designed to improve the functional safety of the EPB and the P-gear parking function of the electric vehicle. Background Art

[0002] As the automotive industry places increasingly higher demands on ISO26262 functional safety, in order to meet product reliability and safety requirements, it has become a trend to develop dual-control and dual-redundant EPBs with safety redundancy. At the same time, electric vehicles do not have a mechanical parking function for the P gear, and vehicles that do not have a P gear parking lock mechanism cannot meet the requirements of GB21670 and ECER13H, so the parking brake needs to be designed with P gear redundancy. Summary of the invention

[0003] In order to solve the problems existing in the background technology and realize the parking function with higher requirements, the present invention designs an EPB+P gear parking dual-control dual-redundancy circuit, which not only meets the ISO26262 functional safety requirements, but also meets the P gear parking function of electric vehicles without P gear locking mechanism, thereby increasing the reliability of the EPB parking system.

[0004] In order to solve the problems in the background technology, the purposes of the present invention are described as follows:

[0005] The system of the present invention comprises a connector (signal input and output interface), two independent CAN bus modules (a first CAN bus communication module and a second CAN bus communication module), two independent high-voltage to low-voltage power conversion modules (one connected to a first MCU microcontroller and the other integrated inside the second MCU microcontroller), a first MCU microcontroller (MCU1), a second MCU microcontroller (MCU2), a left motor drive circuit module (MOTOR Driver L), a right motor drive circuit module (MOTOR Driver R), a slope sensor and EPB left and right actuators.

[0006] Specifically:

[0007] It includes a plug-in, and the plug-in is connected to the interface of the vehicle controller;

[0008] A power conversion module is included, connected to the plug-in via a power line and a first CAN bus;

[0009] It includes a first MCU microcontroller, which is connected to the plug-in via a signal line and is connected to the power conversion module;

[0010] It includes a second MCU microcontroller, which is connected to the plug-in via a power line, a P gear control line, a signal line and a second CAN bus, and is also connected to the first MCU microcontroller;

[0011] It includes a slope sensor, which is integrated into the electronic control unit control system and connected to the first MCU microcontroller and the second MCU microcontroller respectively;

[0012] It includes a left motor driving circuit module and a right motor driving circuit module. The input ends of the left motor driving circuit module and the right motor driving circuit module are respectively connected to a first MCU microcontroller and a second MCU microcontroller. The output ends of the left motor driving circuit module and the right motor driving circuit module are respectively connected to the left and right motors to control the operation of the left and right motors.

[0013] The first CAN bus is used for the first MCU microcontroller to communicate with the vehicle CAN bus, and the second CAN bus is used for the second MCU microcontroller to communicate with the vehicle CAN bus.

[0014] The first CAN bus is used to transmit vehicle speed, four wheel speeds, engine speed, engine running status, engine torque, accelerator pedal position, gear position switch, clutch position status signal, brake pedal, EPB warning light and other related signals.

[0015] The second CAN bus is used to transmit related signals such as speed, four wheel speeds, engine speed, engine running status, engine torque, accelerator pedal position, gear position switch, clutch position status signal, brake pedal, EPB warning light, etc.

[0016] The signal lines between the first MCU microcontroller and the plug-in are respectively signal lines of the EPB switch signal EPB_SWITCH, the ignition signal IGN, the brake signal BRAKE, and the vehicle-related signal Signal.

[0017] The signal lines between the second MCU microcontroller and the plug-in are signal lines of the EPB switch signal EPB_SWITCH, the ignition signal IGN, and the brake signal BRAKE respectively.

[0018] The plug-in is connected to the power conversion module via two power lines (a first power line and a second power line). The power conversion module converts high voltage into low voltage and supplies it to the first MCU microcontroller. The first MCU microcontroller receives the EPB switch signal EPB SWITCH, ignition signal IGN, brake signal BRAKE, vehicle-related signal Signal and signal from the slope sensor input from the plug-in, and outputs a drive signal after processing by the first MCU microcontroller to control the left motor drive circuit module and the right motor drive circuit module, and controls the left and right EPB motors by judging the motor loop current.

[0019] The plug-in is connected to the second MCU microcontroller via two other power lines. The second MCU microcontroller receives the EPB switch signal EPB SWITCH, ignition signal IGN, brake signal BRAKE, P gear signal and signal from the slope sensor input from the plug-in, and outputs the drive signal to control the left motor drive circuit module and the right motor drive circuit module after being processed by the first MCU microcontroller, and controls the left and right EPB motors by judging the motor loop current.

[0020] The vehicle-related signal Signal refers to the clutch travel sensor signal and the gear position signal.

[0021] The first MCU microcontroller and the second MCU microcontroller communicate with each other directly; when the first MCU microcontroller is working normally, the second MCU microcontroller remains dormant, and the first MCU microcontroller first implements the EPB function; when the first MCU microcontroller fails, the second MCU microcontroller implements the EPB function, if the EPB parking-related functions implemented by MCU2 fail, the second MCU microcontroller implements P gear parking; when unilateral failure occurs in the left and right motor drive circuit modules, unilateral parking is first implemented by the first MCU microcontroller; if the first MCU microcontroller fails, unilateral parking of EPB is first implemented by the second MCU microcontroller, if all EPB-related functions of the second MCU microcontroller fail, unilateral parking in P gear is implemented by the second MCU microcontroller.

[0022] The power conversion module is a power module integrating a CAN transceiver, power conversion and wake-up functions.

[0023] The second MCU microcontroller is a chip that integrates power conversion, CAN transceiver and wake-up function.

[0024] The left motor driving circuit and the right motor driving circuit are modular circuits with motor fault detection and motor failure protection.

[0025] The beneficial effects of the present invention are:

[0026] The present invention realizes a dual backup of the parking brake system. On the one hand, it realizes a dual backup of the EPB function on the basis of the traditional EPB. On the other hand, it adds a P gear parking for electric vehicles without a P gear locking mechanism, thereby improving the integrity, reliability and safety of the automobile parking brake system and reducing accidents caused by parking failure. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] Figure 1 This is a system structure diagram of the present invention DETAILED DESCRIPTION

[0028] The present invention will be further described below in conjunction with the accompanying drawings and embodiments.

[0029] like Figure 1 As shown, the electronic controller module of the present invention is mainly composed of a plug-in, two independent CAN bus communication modules CAN1 and CAN2, an EPB switch signal, a P gear button signal, a vehicle external signal, a signal processing circuit, an independent power conversion module, two MCU microcontrollers MCU1 and MCU2, left and right motor drive circuits, and left and right electronic parking actuators.

[0030] Specific implementation as Figure 1 As shown, including:

[0031] It includes a plug-in 1, and the plug-in 1 is connected to the interface of the vehicle controller;

[0032] It includes a power conversion module 2, which is connected to the plug-in 1 via two power lines and a first CAN bus, the power lines are used for power supply, one is high level and the other is low level;

[0033] It includes a first MCU microcontroller 3, which is connected to the plug-in 1 via four signal lines and is connected to the power conversion module 2;

[0034] The second MCU microcontroller 4 is connected to the plug-in 1 via two power lines, a P gear control line, three signal lines and a second CAN bus, and is also connected to the first MCU microcontroller 3. The power lines are used for power supply, one is high level and the other is low level. The P gear control line is used for transmitting a P gear button signal indicating whether the P gear is engaged.

[0035] It includes a slope sensor 5, which is integrated into the electronic control unit control system and connected to the first MCU microcontroller 3 and the second MCU microcontroller 4 respectively;

[0036] It includes a left motor driving circuit module 6 and a right motor driving circuit module 7. The input ends of the left motor driving circuit module 6 and the right motor driving circuit module 7 are respectively connected to the first MCU microcontroller 3 and the second MCU microcontroller 4. The output ends of the left motor driving circuit module 6 and the right motor driving circuit module 7 are respectively connected to the left and right motors to control the operation of the left and right motors.

[0037] Plug-in 1 is actually a socket strip connected to the interface of the vehicle controller.

[0038] The plug-in 1 is connected to the power conversion module 2 via two power lines (the first power line and the second power line). The power conversion module 2 converts the high voltage into a low voltage and supplies it to the first MCU microcontroller 3. The first MCU microcontroller 3 receives the EPB switch signal EPB SWITCH, the ignition signal IGN, the brake signal BRAKE, the vehicle-related signal Signal and the signal from the slope sensor 5 input from the plug-in 1, and the output drive signal is processed by the first MCU microcontroller 1 to control the left motor drive circuit module 6 and the right motor drive circuit module 7, and the left and right EPB motors are controlled by judging the motor loop current. The plug-in 1 is connected to the second MCU microcontroller 4 via the other two power lines (the first power line and the second power line). The second MCU microcontroller 4 receives the EPB switch signal EPB SWITCH, the ignition signal IGN, the brake signal BRAKE, the P gear signal and the signal from the slope sensor 5 input from the plug-in 1, and the output drive signal is processed by the first MCU microcontroller 2 to control the left motor drive circuit module 6 and the right motor drive circuit module 7, and the left and right EPB motors are controlled by judging the motor loop current.

[0039] The first MCU microcontroller 3 and the second MCU microcontroller 4 communicate directly with each other; when the first MCU microcontroller 3 works normally, the second MCU microcontroller 4 remains dormant, and the first MCU microcontroller 3 first implements the EPB function; when the first MCU microcontroller 3 fails, the second MCU microcontroller 4 implements the EPB function, and if the EPB parking-related functions implemented by MCU2 fail (for example: EPB switch failure, EPB-related function network input signal and hard-wire signal failure), the second MCU microcontroller 4 implements P gear parking, that is, parking in the parking gear (Parking Gear), thereby realizing the dual redundant operation of the EPB function and the P gear backup function; when the left and right motor drive circuit modules 6 and 7 fail on one side, the first MCU microcontroller 3 first implements unilateral parking; if the first MCU microcontroller 3 fails, the second MCU microcontroller 4 first implements unilateral parking of EPB, and if the EPB-related functions of the second MCU microcontroller 4 (for example: EPB switch failure, EPB-related function network input signal and hard-wire signal failure) all fail, the second MCU microcontroller 4 implements unilateral parking in P gear.

[0040] When the parking circuit of the whole vehicle is damaged and malfunctions due to the interference of other high-power electrical appliances on the battery, causing the impact of large current and high pulse on the circuit, resulting in failure of the components or periods therein, the parking function cannot work. However, the control system of the present invention can stably realize the parking function, realize the normal use of the car, and avoid accidents.

[0041] The failure conditions include: 1. The internal program fails to run, resulting in a reset of the microcontroller; 2. The temperature is too high, resulting in component failure; 3. The EPB switch is stuck and the vehicle signal input fails; 4. The vehicle EMC environment exceeds the standard; 5. The CAN bus is interfered with by other CAN nodes, resulting in data loss, CAN BUSOFF, etc.

[0042] The structural measures for EPB module failure of the present invention include:

[0043] 1) It has two independent CAN networks, namely the first CAN bus (CAN1) and the second CAN bus (CAN2). When CAN1 fails, CAN2 can still communicate independently, and the vehicle control signal of the vehicle CAN bus can still be input to the second MCU microcontroller 4 (MCU2) through CAN2.

[0044] 2) It has two independent power conversion modules, which convert the high voltage power supply of the whole vehicle into low voltage respectively. MCU1 is powered by the independent power conversion module 2 chip, and MCU2 is powered by its own built-in power conversion module. When the power conversion module 2 fails, the built-in power module of MCU2 receives the voltage power from the plug-in 1 to power MCU2 itself, and the EPB function is realized through MCU2.

[0045] 3) It has two MCU microcontrollers, namely MCU1 and MCU2. Under normal parking conditions, MCU1 can handle all functions of EPB. When MCU1 fails, MCU2 implements all functions of EPB or the P gear parking function.

[0046] The working process achieved by the present invention is as follows:

[0047] 1. Dual redundant operation of EPB function:

[0048] In normal mode, the second MCU microcontroller 4 (MCU2) is in sleep mode. At this time, the first MCU microcontroller 3 transmits signals with the vehicle CAN bus through the first CAN bus (CAN1). The EPB switch, ignition, brake, brake pedal, vehicle-related signals are reserved as auxiliary, and other vehicle-related signals are input to the first MCU microcontroller 3 (MCU1) through the plug-in interface. Combined with the built-in slope sensor signal value, the first MCU microcontroller 3 (MCU1) processes and outputs the control signal of the left and right motors to the drive circuit, and drives the EPB left and right motor actuators by judging the motor loop current.

[0049] In the failure mode of the first MCU microcontroller 3 (MCU1), that is, when a module related to the first MCU microcontroller 3 fails (for example, the first CAN bus (CAN1) communication network fails, the power conversion module 2 fails, or the first MCU microcontroller fails), the backup second MCU microcontroller 4 (MCU2) works to fully realize all the functions of EPB, obtain the EPB backup function, and realize the dual redundant design of EPB function.

[0050] The second MCU microcontroller 4 (MCU2) combines the EPB switch signal EPB SWITCH, the ignition signal IGN, the brake signal BRAKE, the signal from the slope sensor (5) and the input signal of the second CAN bus to process and determine the control signal for the EPB left and right motor actuators to work. The P gear signal is reserved as the control of the P gear backup function.

[0051] 2. EPB drive circuit cross control design

[0052] MCU1 can independently output and control the left and right motor driving circuit modules 6 and 7 , and MCU2 can also independently output and control the left and right motor driving circuit modules 6 and 7 .

[0053] In normal mode, the output of MCU1 controls the left and right motor driving circuits. When MCU1 fails, the output of MCU2 controls the left and right motor driving circuits.

[0054] In the specific implementation, when one of the left and right motor drive circuits fails, MCU1 outputs to control the other motor drive circuit first, so as to meet the parking requirement of 8% slope parking force required by the standard. If MCU1 also fails at the same time, MCU2 outputs to control the other motor drive circuit.

[0055] Therefore, under the technical solution of the present invention, MCU1 and MCU2 can both independently output and control the left and right motors, thereby realizing cross-control of the left and right motor drive circuits by MCU1 and MCU2 and improving the reliability of the EPB function.

[0056] 3. P gear parking backup function

[0057] When the EPB function controlled by MCU1 and the EPB backup function controlled by MCU2 are both invalid (including connectors, external EPB parking switch, CAN network input signal invalid, attached Figure 1In the electronic control unit of the EPB, there is a single point failure of each module except the P gear signal and MCU2). At this time, the EPB has failed, and the second MCU microcontroller 4 (MCU2) retains the P gear with the last backup to achieve parking: when there is still a wheel speed signal, the P gear parking signal is received (input through the P gear switch or the P gear touch screen panel button), and the vehicle is successfully parked through the P gear parking backup function.

Claims

1. A dual-control dual-redundant EPB+P gear backup electronic control unit control system, characterized in that: The invention comprises a plug-in (1), wherein the plug-in (1) is connected to an interface of a vehicle controller; It comprises a power conversion module (2) connected to the plug-in (1) via a power line and a first CAN bus; It comprises a first MCU microcontroller (3), which is connected to the plug-in (1) via a signal line and is connected to a power conversion module (2); It comprises a second MCU microcontroller (4), which is connected to the plug-in (1) via a power line, a P gear control line, a signal line and a second CAN bus, and is also connected to the first MCU microcontroller (3); It comprises a slope sensor (5), which is integrated in the electronic control unit control system and connected to the first MCU microcontroller (3) and the second MCU microcontroller (4) respectively; The invention comprises a left motor driving circuit module (6) and a right motor driving circuit module (7), wherein the input ends of the left motor driving circuit module (6) and the right motor driving circuit module (7) are respectively connected to a first MCU microcontroller (3) and a second MCU microcontroller (4), and the output ends of the left motor driving circuit module (6) and the right motor driving circuit module (7) are respectively connected to left and right motors to control the operation of the left and right motors; The plug-in (1) is connected to the power conversion module (2) via two power lines. The power conversion module (2) converts a high voltage into a low voltage and supplies it to a first MCU microcontroller (3). The first MCU microcontroller (3) receives an EPB switch signal EPB SWITCH, an ignition signal IGN, a brake signal BRAKE, a vehicle-related signal Signal and a signal from a slope sensor (5) input from the plug-in (1). After being processed by the first MCU microcontroller (3), the output drive signal controls a left motor drive circuit module (6) and a right motor drive circuit module (7), and controls the left and right EPB motors by judging the motor loop current. The plug-in (1) is connected to the second MCU microcontroller (4) via two other power lines. The second MCU microcontroller (4) receives the EPB switch signal EPB SWITCH, the ignition signal IGN, the brake signal BRAKE, the P gear signal and the signal from the slope sensor (5) input from the plug-in (1). The first MCU microcontroller (2) processes the output drive signal to control the left motor drive circuit module (6) and the right motor drive circuit module (7), and controls the left and right EPB motors by judging the motor loop current. The first MCU microcontroller (3) and the second MCU microcontroller (4) communicate directly with each other; When the first MCU microcontroller (3) is working normally, the second MCU microcontroller (4) remains dormant, and the first MCU microcontroller (3) implements the function of the EPB; When the first MCU microcontroller (3) fails, the second MCU microcontroller (4) implements the EPB function; if the EPB parking-related functions implemented by the second MCU microcontroller (4) fail, the second MCU microcontroller (4) implements P-block parking; When a unilateral failure occurs in the left and right motor drive circuit modules (6, 7), the first MCU microcontroller (3) first implements unilateral parking; If the first MCU microcontroller (3) fails, the second MCU microcontroller (4) first implements EPB single-sided parking; if all EPB-related functions of the second MCU microcontroller (4) fail, the second MCU microcontroller (4) implements P gear single-sided parking.

2. The dual-control dual-redundancy EPB+P gear backup electronic control unit control system according to claim 1, characterized in that: The signal lines between the first MCU microcontroller (3) and the plug-in (1) are respectively signal lines for the EPB switch signal EPB_SWITCH, the ignition signal IGN, the brake signal BRAKE, and the vehicle-related signal Signal.

3. The electronic control unit control system with dual control and dual redundancy EPB+P gear backup according to claim 1, characterized in that: The signal lines between the second MCU microcontroller (4) and the plug-in (1) are signal lines for the EPB switch signal EPB_SWITCH, the ignition signal IGN, and the brake signal BRAKE.

4. The electronic control unit control system with dual control and dual redundancy EPB+P gear backup according to claim 1, characterized in that: The vehicle-related signal Signal refers to the clutch travel sensor signal and the gear position signal.

Images