Electronic control unit for a vehicle

Abstract

The invention relates to a method for waking up a second microcontroller (3) of an electronic control unit (1) for a vehicle, the electronic control unit (1) comprising a first microcontroller (2) connectable to a plurality of input trigger signals (4), wherein the second microcontroller (3) is communicatively connected with the first microcontroller (2) via a communication channel (5) and the second microcontroller (3) is configured to enter a sleep state and to be woken up, the method comprising the steps of the first microcontroller (2) waking up the second microcontroller (3) in response to at least one of the input trigger signals (4), the first microcontroller (2) monitoring the at least one of the input trigger signals (4) during the wake-up of the second microcontroller (3), and the second microcontroller (3) interrogating the first microcontroller (2) whether the at least one of the input trigger signals (4) is confirmed as a wake-up event.

Description

Technical Field

[0001] This invention relates to a method for waking up a microcontroller (MCU) of an electronic control unit (ECU) for a vehicle and connectable to multiple input trigger signals, wherein the microcontroller is configured to sleep and be woken up. The invention also relates to an electronic control unit for a vehicle including a microcontroller connectable to multiple input trigger signals, wherein the microcontroller is configured to sleep and be woken up. Background Technology

[0002] In existing Electronic Control Unit (ECU) solutions, the ECU design typically consists of two main components: a System Base Chip (SBC) connected via a Serial Peripheral Interface (SPI) and a Microcontroller (MCU), uC, or μC. Input trigger signals are used for wake-up logic such as XOR. The ECU usually includes a Controller Area Network (CAN) transceiver (TRAC).

[0003] The design of the electronic control unit (ECU) is limited by the choice of SBC (System-on-Chips) because the limited number of input trigger signals results in high costs for designs with multiple wake-up cycles. Furthermore, only a few SBCs on the market have registers to store data, especially after the microcontroller wakes up, and the number of registers is limited. Finally, the SBC struggles to keep the ECU's power consumption below 100uA during sleep periods. Additionally, write operations to the MCU's non-volatile memory are restricted to avoid memory problems.

[0004] Furthermore, for example, the design software AUTOSAR (Automotive Open System Architecture) from commercial suppliers has a specific software component SWC in its base software BSW to manage SBCs, such as for SPI, watchdog timers, and CAN TRX, but not the wake-up source. Therefore, due to AUTOSAR timing, a "black hole" of up to 50ms may occur within 100ms after the input trigger signal occurs, during which the input trigger signal may change and subsequently be mishandled. Summary of the Invention

[0005] Therefore, one object of the present invention is to provide an improved ECU that overcomes the aforementioned disadvantages. In particular, one object of the present invention is to provide an ECU that is not characterized by such a "black hole" and / or always allows for efficient processing of input trigger signals.

[0006] The objective of this invention is achieved through the features of the independent claims. Preferred embodiments are detailed in the dependent claims.

[0007] Therefore, this objective is achieved by a method for waking up a second microcontroller MCU2 for an electronic control unit (ECU) of a vehicle, the ECU including a first microcontroller MCU1, which is connectable to multiple input trigger signals, wherein...

[0008] The second microcontroller communicates with the first microcontroller via a communication channel, and the second microcontroller is configured to sleep and be woken up.

[0009] The method includes the following steps:

[0010] The first microcontroller wakes up the second microcontroller in response to at least one of the input trigger signals;

[0011] During the wake-up of the second microcontroller, the first microcontroller monitors at least one of the input trigger signals; and

[0012] The second microcontroller queries the first microcontroller to determine whether at least one of the input trigger signals is preferably identified as a wake-up event during the second microcontroller's wake-up period, and / or has been changed during the second microcontroller's wake-up period to determine which of the at least two input trigger signals constitutes a wake-up event or a false signal event.

[0013] Therefore, a key aspect of this invention is that the first microcontroller preferably responds to a request from the second microcontroller to confirm whether at least one of the input trigger signals is a "real" wake-up event or a spurious signal that does not require processing by the second microcontroller. Furthermore, the SBC is replaced by the first microcontroller, such that the electronic control unit comprises two microcontrollers, instead of a single microcontroller and SBC as known in the prior art. This results in the printed circuit board assembly of the electronic control unit comprising fewer components.

[0014] Furthermore, the proposed design with two MCUs instead of a single MCU and an SBC offers increased flexibility, such as allowing for a flexible number of inputs, thereby reducing the cost of designs with many wake-ups and allowing for real-time storage of data, such as the position of gates actuated by the electronic control unit after the MCU wakes up. Additionally, the reduced number of write operations in the MCU's non-volatile memory allows for a longer memory lifespan. In other words, compared to existing solutions, the proposed electronic control unit design with many inputs is more scalable, more customizable, and more cost-competitive.

[0015] Typically, an electronic control unit (ECU) is an embedded system in automotive electronics that controls one or more electrical systems or subsystems within a vehicle. Types of ECUs can include engine control modules (ECMs), powertrain control modules (PCMs), transmission control modules (TCMs), brake control modules (BCMs or EBCMs), central control modules (CCMs), central timing modules (CTMs), general electronic modules (GEMs), body control modules (BCMs), suspension control modules (SCMs), control units, or control modules. Other types of ECUs can include door control units (DCUs), engine control units (ECUs), electric power steering control units (PSCUs), human-machine interfaces (HMIs), powertrain control modules (PCMs), seat control units (SCUs), speed control units (SCUs), telematics control units (TCUs), transmission control units (TCUs), brake control modules (BCMs); ABS or ESC, or battery management systems (BMSs). A single unit can contain several individual control modules.

[0016] The first and / or second microcontroller can be configured as an 8-bit MCU, a 16-bit MCU, or a 32-bit MCU. Preferably, the electronic control unit, the first microcontroller, and / or the second microcontroller include memory, such as SRAM, EEPROM, flash memory, etc. Multiple input trigger signals may include digital inputs, analog inputs, and / or power supply voltages and ground. Furthermore, the electronic control unit, the first microcontroller, and / or the second microcontroller may include outputs, such as terminals, which are particularly connectable to actuator drivers, such as injectors, relays, valves, etc., H-bridge drivers for servo motors, logic outputs, and / or analog inputs. A wake-up event confirmation refers to, for example, the second microcontroller querying the first microcontroller whether at least one of the input trigger signals has changed during the second microcontroller's wake-up period, to confirm whether the at least one of the input trigger signals constitutes a wake-up event or a false signal event.

[0017] Preferably, the first microcontroller is configured as a low-power device and / or capable of entering a low-power mode with a power consumption of, in particular, less than 100µA. For communication between the two MCUs, each MCU preferably includes a Serial Peripheral Interface (SPI) interface, an Internal Integrated Circuit (I2C) interface, and / or other electronic interfaces for exchanging data between the MCUs. Preferably, during the wake-up period of the second microcontroller, all input trigger signals are monitored by the first microcontroller.

[0018] More preferably, the electronic control unit includes a Controller Area Network (CAN) bus interface device communicatively connected to the first microcontroller and configured to communicate with at least one other electronic control unit of the vehicle. Therefore, the CAN bus interface device is preferably external to the first microcontroller, particularly implemented as a separate device.

[0019] Sleep mode specifically means that the second microcontroller is turned off and / or switched to a state that consumes significantly less energy than during normal operation. Similarly, wake-up specifically means that the second microcontroller is turned on and thus operable to process at least one of the input trigger signals.

[0020] More preferably, the second microcontroller includes base software (BSW), at least one specific software component (SWC) configured to process at least one of the input trigger signals, an application layer, and a runtime environment (RTE) for interacting with the application layer. The second microcontroller may also include an AUTOSAR software architecture, including the BSW and at least one SWC.

[0021] The first microcontroller wakes up the second microcontroller, particularly by sending a wake-up signal via a communication channel, especially when at least one of the input trigger signals changes its state from low to high and / or at least one of the input trigger signals includes a rising edge. The wake-up time—the time it takes for the second microcontroller to wake up or transition from a sleep state to a fully awake, i.e., operational state—can range from a few microseconds to 50 microseconds or up to 100 microseconds, or even longer. During the wake-up time, the first microcontroller monitors whether at least one of the input trigger signals that triggered the wake-up of the second microcontroller has changed. Therefore, the first microcontroller can remember the initial state of at least one of the input trigger signals when the second microcontroller is triggered to wake up, for example, by storing the state in memory.

[0022] Once the second microcontroller is woken up, it queries, specifically via a communication channel, whether at least one of the input trigger signals has changed during the wake-up process. This avoids the previously described "black hole," in which at least one of the input trigger signals might have changed. Specifically, it checks whether at least one of the input trigger signals that triggered the wake-up has remained at the same logic level, particularly a high or low logic level, for at least a configured time period. Therefore, the configured time period can be 50 milliseconds, 100 milliseconds, or even longer.

[0023] In other words, when a wake-up event is received as at least one of the input trigger signals, the second microcontroller is still in a power-off state. The first microcontroller powers on the second microcontroller, and the second microcontroller begins its startup sequence, during which time the second microcontroller has its "black hole." During the startup sequence, the at least one of the input signals can change its state without the second microcontroller being able to monitor its evolution, because the microcontroller is not yet fully functional during startup. By querying or checking and / or comparing whether the at least one of the input trigger signals has changed during the second microcontroller's wake-up period, the first microcontroller can easily determine whether the at least one of the input trigger signals constitutes a wake-up event, i.e., whether the at least one of the input trigger signals has not changed during the wake-up time, or whether a false signal event has occurred, i.e., whether the at least one of the input trigger signals has changed during the wake-up time, and is, for example, an erroneous signal that must be discarded.

[0024] Preferably, the first microcontroller includes firmware configured to communicate with the second microcontroller and / or to process multiple input trigger signals. The second microcontroller may have a dedicated sleep sync controller (SWC) specifically certified to Automotive Safety Integrity Level (ASIL-B), which can be configured via software planning tools, particularly for SPI communication, watchdog timers, CAN TRX, and / or wake-up sources. The firmware can also be configured to disable / enter a sleep state and / or enable / wake up the second microcontroller. Thus, a sleep state is achieved, for example, by sending a specific command from the first microcontroller to the second microcontroller over a communication channel. The firmware can further be configured, particularly by the second microcontroller via the communication channel, to have a separate wake-up configuration for each input trigger signal. Thus, the wake-up confirmation can be a digital filter that allows the second microcontroller to know how the wake-up signal evolves during the second microcontroller's startup time.

[0025] In a particularly preferred embodiment, the method includes the following steps:

[0026] The first microcontroller wakes up the second microcontroller in response to at least two of the input trigger signals;

[0027] During the wake-up of the second microcontroller, the first microcontroller monitors at least two of the input trigger signals; and

[0028] The second microcontroller queries the first microcontroller to determine whether at least one or all of the at least two of the input trigger signals are confirmed as a wake-up event and / or whether they have changed during the second microcontroller's wake-up period to determine which of the at least two of the input trigger signals constitutes a wake-up event or a false signal event.

[0029] In a further preferred embodiment, the step involves not only two input trigger signals, but also three, four or more input trigger signals, which may occur in parallel or in staggered time.

[0030] According to a preferred embodiment, the method includes the following steps:

[0031] The first microcontroller confirms to the second microcontroller that at least one of the input trigger signals is a wake-up event that meets the specified criteria.

[0032] In a further preferred embodiment, each input trigger signal has its own defined criteria and / or each defined criterion can be configured by a second microcontroller via a communication channel. A wake-up event and / or criterion can be that the input trigger signal has not changed during the wake-up time and / or that the input trigger signal changes from low to high or from high to low.

[0033] According to a preferred embodiment, the method includes the following steps:

[0034] The second microcontroller processes at least one of the confirmed input trigger signals.

[0035] In particular, this processing means that, in response to at least one of the input trigger signals, the second microcontroller actuates, for example, the electric sliding door. In this regard, at least one of the input trigger signals can be generated by actuating a handle for opening and / or closing the electric sliding door.

[0036] In a further preferred embodiment, the method includes the following steps:

[0037] If at least one of the input trigger signals does not change during wake-up, the second microcontroller processes only at least one of the input trigger signals.

[0038] If at least one of the input trigger signals changes during the wake-up time, the proposed method determines that at least one of the input trigger signals is actually a false signal and therefore does not process it.

[0039] In another preferred embodiment, the method includes the following steps:

[0040] The second microcontroller enters a sleep state after a predetermined time period, and / or

[0041] The second microcontroller enters a sleep state in response to a sleep signal received from the first microcontroller.

[0042] Entering a hibernation state specifically means that the second microcontroller is turned off and / or switched to a sleep state with reduced power consumption, thereby reducing the power consumption of the electronic control unit in any case.

[0043] In a further preferred embodiment, the method includes the following steps:

[0044] The first microcontroller periodically checks the state changes of the input trigger signal.

[0045] The first microcontroller can check every 10, 20, or 30 microseconds whether any of the multiple input trigger signals has changed, and wake up the second microcontroller in response to such a change, for example, from low to high.

[0046] This objective is also achieved by an electronic control unit (ECU) for a vehicle, which includes...

[0047] The first microcontroller, MCU 1, can be connected to multiple input trigger signals, and

[0048] The second microcontroller MCU 2 is connected to the first microcontroller via a communication channel and is configured to sleep and wake up.

[0049] The first microcontroller is configured to wake up the second microcontroller in response to at least one of the input trigger signals, and during the wake-up period of the second microcontroller, the first microcontroller monitors the at least one of the input trigger signals, and

[0050] The second microcontroller is configured to query whether at least one of the input trigger signals of the first microcontroller is confirmed as a wake-up event and / or whether it has changed during the period when the second microcontroller is already awake, in order to confirm whether at least one of the input trigger signals constitutes a wake-up event or a false signal event.

[0051] In a preferred embodiment, the first microcontroller is configured to acknowledge to the second microcontroller which input trigger signal is acknowledged as a wake-up event.

[0052] According to another preferred embodiment, the second microcontroller is configured to process at least one of the input trigger signals.

[0053] In another preferred embodiment, the second microcontroller is configured to process only the at least one of the input trigger signals if the at least one of the input trigger signals is confirmed as a wake-up event and / or remains unchanged.

[0054] Those skilled in the art can directly and explicitly deduce further implementations and advantages of this unit from the methods described above. Attached Figure Description

[0055] These and other aspects of the invention will be apparent and illustrated with reference to the embodiments described below.

[0056] In the attached diagram:

[0057] Figure 1 The diagram illustrates an electronic control unit (ECU) having a first microcontroller MCU 1 and a second microcontroller MCU 2 according to a preferred embodiment. Detailed Implementation

[0058] Figure 1 An electronic control unit 1 having a first microcontroller 2 and a second microcontroller 3 is illustrated in schematic diagram according to a preferred embodiment.

[0059] The electronic control unit 1 is part of the vehicle and controls the vehicle's electric sliding doors in response to an actuation handle (not shown). Actuation of the handle connects a plurality of input trigger signals 4 to the first microcontroller 2 via corresponding terminals and / or connectors, for example, changing the input trigger signal from low to high.

[0060] During normal operation, the first microcontroller 2 is powered on, while the second microcontroller 3 is powered off or enters sleep mode to reduce the overall power consumption of the electronic control unit 1. The second microcontroller 3 has higher processing power than the first microcontroller 2 and therefore requires more energy for processing.

[0061] The first microcontroller 2 and the second microcontroller 3 are connected via a communication channel 5, which is implemented as a Serial Peripheral Interface (SPI). Therefore, both the first microcontroller 2 and the second microcontroller 3 include an SPI communication device (not shown).

[0062] In response to at least one of the input trigger signals 4, the first microcontroller 2 sends a wake-up request to the second microcontroller 3 via the communication channel 5. The first microcontroller 2 includes firmware 6, which monitors signal changes of the plurality of input trigger signals 4 and is configured to wake up the second microcontroller 3 and communicate with the second microcontroller 3 via the communication channel 5.

[0063] Wake-up of the second microcontroller 3—that is, transitioning from a sleep state to a fully operational state—typically takes approximately 50 to 100 milliseconds, depending on the type of microcontroller. During this time period, the first microcontroller continuously monitors possible changes in the corresponding input trigger signal 4 that triggered the first microcontroller 2 to wake up the second microcontroller 3, for example, whether the corresponding input trigger signal 4 switches from high to low.

[0064] Once the second microcontroller 3 has been fully woken up, it queries via communication channel 5 whether at least one of the input trigger signals 4 that triggered the wake-up of the first microcontroller 2 has changed during the wake-up time. If the corresponding input trigger signal 4 is acknowledged and / or has not changed, the input trigger signal 4 constitutes a wake-up event, causing the second microcontroller 3 to process the input trigger signal 4, for example, to actuate the actuator of an electric sliding door to open or close the electric sliding door.

[0065] If the corresponding input trigger signal 4 is not acknowledged and / or has changed during the wake-up time, the corresponding input trigger signal 4 actually constitutes a false signal and is not processed. Therefore, the false signal is understood as an erroneous signal that is discarded. After the second microcontroller 3 has processed the corresponding input trigger signal 4, the second microcontroller 3 enters a sleep state after a predetermined time period. The second microcontroller 3 enters a sleep state in response to a sleep signal received from the first microcontroller 2, or the second microcontroller 3 enters a sleep state after instructing the first microcontroller 2.

[0066] When the second microcontroller 3 is woken up by one or more input trigger signals 4, the second microcontroller 3 can query the first microcontroller 2 via the communication channel 5 to find out which of the multiple input trigger signals 4 actually triggered the wake-up and whether the specific input trigger signal 4 changed during the wake-up time.

[0067] The electronic control unit 1 also includes a controller area network (CAN) bus interface device 7, which is communicatively connected to the first microcontroller 2 and configured to communicate with at least one other electronic control unit of the vehicle. The CAN bus interface device 7, external to the first microcontroller 2, is implemented as a separate device.

[0068] The second microcontroller 3 includes basic software BSW 8, various specific software components SWC 9 configured to process at least one of the input trigger signals 4, an application layer 10, and a runtime environment RTE 11 that interacts with the application layer 10. The second microcontroller 3 includes an AUTOSAR software architecture that includes BSW 8 and SWC 9.

[0069] Although the invention has been illustrated and described in detail in the accompanying drawings and the foregoing description, such illustrations and descriptions are to be considered illustrative or exemplary rather than restrictive; the invention is not limited to the disclosed embodiments. Other variations of the disclosed embodiments can be understood and implemented by those skilled in the art in practicing the claimed invention by studying the drawings, the disclosure, and the appended claims. In the claims, the word "comprising" does not exclude other elements or steps, and the indefinite articles "a" or "an" do not exclude a plurality. The fact that certain measures are recited in mutually different dependent claims does not mean that a combination of these measures cannot be used advantageously. Any reference signs in the claims should not be construed as limiting the scope.

[0070] List of reference numerals

[0071] 1 Electronic control unit

[0072] 2 First Microcontroller

[0073] 3 Second Microcontroller

[0074] 4. Input trigger signal

[0075] 5 communication channels

[0076] 6 Firmware

[0077] 7. CAN bus interface devices

[0078] 8. Basic Software, BSW

[0079] 9. Specific software components, SWC

[0080] 10 Application Layer

[0081] 11. Runtime Environment, RTE

Claims

1. A method for waking up a second microcontroller (3) of an electronic control unit (1) for a vehicle, the electronic control unit (1) including a first microcontroller (2) capable of being connected to a plurality of input trigger signals (4), wherein The second microcontroller (3) is communicatively connected to the first microcontroller (2) via a communication channel (5), and the second microcontroller (3) is configured to enter a sleep state and be woken up. The method includes the following steps: The first microcontroller (2) wakes up the second microcontroller (3) in response to at least one of the input trigger signals (4); During the wake-up of the second microcontroller (3), the first microcontroller (2) monitors at least one of the input trigger signals (4); and The second microcontroller (3) queries the first microcontroller (2) whether at least one of the input trigger signals (4) is confirmed as a wake-up event, wherein being confirmed as a wake-up event means that the second microcontroller queries the first microcontroller whether at least one of the input trigger signals changes during the wake-up period of the second microcontroller. The method further includes the following steps: The first microcontroller (2) confirms to the second microcontroller (3) that at least one of the input trigger signals (4) is a wake-up event that meets the specified criteria. Each input trigger signal (4) has its own defined standard, and each defined standard can be configured by the second microcontroller (3) via the communication channel (5).

2. The method according to claim 1, comprising the following steps: The second microcontroller (3) processes at least one of the input trigger signals (4).

3. The method according to claim 2, comprising the following steps: If at least one of the input trigger signals (4) is confirmed as a wake-up event, the second microcontroller (3) processes only at least one of the input trigger signals (4).

4. The method according to any one of claims 1 to 3, comprising the following steps: The second microcontroller (3) enters a sleep state in response to a sleep signal received from the first microcontroller (2).

5. The method according to any one of claims 1 to 3, comprising the following steps: The first microcontroller (2) periodically checks the state changes of the input trigger signal (4).

6. An electronic control unit (1) for a vehicle, comprising: The first microcontroller (2) can be connected to multiple input trigger signals (4), and The second microcontroller (3) is communicatively connected to the first microcontroller (2) via a communication channel (5) and is configured to enter a sleep state and be woken up, wherein The first microcontroller (2) is configured to wake up the second microcontroller (3) in response to at least one of the input trigger signals (4), and during the wake-up of the second microcontroller (3), the first microcontroller (2) monitors at least one of the input trigger signals (4), and The second microcontroller (3) is configured to query the first microcontroller (2) whether at least one of the input trigger signals (4) is confirmed as a wake-up event, wherein being confirmed as a wake-up event means that the second microcontroller queries the first microcontroller whether at least one of the input trigger signals changes during the wake-up of the second microcontroller. The first microcontroller (2) is further configured to confirm to the second microcontroller (3) that at least one of the input trigger signals (4) is a wake-up event that meets a specified standard. wherein Each input trigger signal (4) has its own defined standard, and each defined standard can be configured by the second microcontroller (3) via the communication channel (5).

7. The electronic control unit (1) according to claim 6, wherein The second microcontroller (3) is configured to process at least one of the input trigger signals (4).

8. The electronic control unit (1) according to claim 7, wherein The second microcontroller (3) is configured to process only the at least one of the input trigger signals (4) if at least one of the input trigger signals (4) does not change during wake-up.

Images