Shutdown path detection method, system, electronic device and medium

Abstract

The present invention provides a shutdown path detection method, system, electronic device, and medium. For use with an on-board electronic control unit (ECU), the detection method includes: during the ECU's power-off phase, performing the following steps: triggering any one of N types of faults and disconnecting the switch corresponding to that type of fault protection; for each disconnected switch, obtaining a first detection result of the shutdown path according to a first preset rule; triggering each of the remaining N-1 types of faults according to a second preset rule, obtaining a second detection result of the shutdown path; updating the shutdown path detection result information based on the first detection result and / or the second detection result; and storing the detection result information in a memory module. This method not only significantly shortens the time required for the ECU's power-on initialization phase, but also enables the detection result information to be used in the next driving cycle, thereby improving the robustness of the product.

Description

Technical Field

[0001] The present invention belongs to the technical field of circuit control, and in particular relates to a detection method, system, electronic equipment and medium for a shutdown path. Background Art

[0002] With increasingly stringent national regulations on vehicle fuel consumption and emissions, and drivers and passengers increasingly demanding vehicle economy and a comfortable driving experience, new energy vehicles are gaining increasing favor among automakers and consumers, becoming a growing trend in automotive technology. The reliability and stability of onboard electronic control units (ECUs), key functional components of new energy vehicles, including but not limited to DC / DC converters, battery management systems (BMSs), motor controllers, and onboard chargers, play a crucial role in ensuring safe operation.

[0003] Take DC / DC and its shutdown path as an example, see Figure 1 , Figure 1 This is a schematic diagram of the circuit structure of the DC / DC and its shutdown path in the prior art. The DC / DC can convert the high-voltage side DC power into the low-voltage side DC power to power the low-voltage side battery 102 and the first load 103 (including traditional 12V loads and safety loads, etc.), and can also convert the low-voltage side DC power into the high-voltage side DC power to power the high-voltage side battery 101. Figure 1 In the figure, the first capacitor 111a, the second capacitor 111b, the filter inductor 112a, 112b, the power inductor 113 and the conversion action unit 114 together constitute the voltage conversion unit 110. The switches 114a and 114b constitute the conversion action unit 114. The first switch 281 and the second switch 282 are used to cut off the energy transmission from the high-voltage side to the low-voltage side of the DC / DC when an abnormality occurs. The second switch 282 is also used to prevent reverse connection protection of the low-voltage end of the DC / DC. The third switch 283 is used to cut off the energy transmission from the low-voltage side to the high-voltage side. When the DC / DC is working normally, the first switch 281, the second switch 282 and the third switch 283 are in the on state, and the first control unit 240 controls the conversion action unit 114 to perform high and low voltage energy conversion by controlling the first drive unit 210. As shown in FIG. Figure 1 As shown, the first protection unit 230, the first coordination unit 220, the first drive unit 210, the first switch 281, the second switch 282, and the third switch 283 together constitute a shutdown path of the DC / DC. When an abnormality occurs in the DC / DC, the first protection unit 230 can turn off all switches through the first drive unit 210 to cut off the energy transmission of the DC / DC.

[0004] However, if any of the first protection unit 230, first coordination unit 220, first drive unit 210, first switch, second switch 282, or third switch 283 on the shutdown path experiences an abnormality, the DC / DC will fail to shut down due to the abnormal shutdown path, causing the DC / DC to be in an uncontrollable state such as overvoltage on the high-voltage side or overcurrent on the low-voltage side. This may not only damage the DC / DC but also endanger the safe driving of the vehicle. In order to ensure that the shutdown path functions properly, the prior art usually implements a shutdown path detection during the initialization phase to determine whether there is an abnormality in the shutdown path. However, this detection method has the following defects:

[0005] 1. The shutdown path detection is performed during the power-on initialization phase, which usually takes a long time. As OEMs have increasingly stringent requirements on product initialization time, the DC / DC power-on initialization time no longer meets the OEM's requirements.

[0006] 2. In existing technologies, if a shutdown path detection scheme detects a single abnormality, it will disable the DC / DC from transmitting energy. However, this may result in the DC / DC operating normally, but only the shutdown path is abnormal. The shutdown path is designed to protect the DC / DC in the event of an abnormality, resulting in poor product robustness.

[0007] 3. In the prior art, the detection scheme for the shut-off path cannot cover the failure of the second switch 282 .

[0008] For another example, the onboard BMS and its shutdown path in the onboard electronic control unit, see Figure 2 , Figure 2 The figure is a schematic diagram of the circuit structure of the BMS (battery management system) and its shutdown path in the existing technology for new energy vehicles. Figure 2As can be seen, the BMS includes a power battery 310, a motor controller 320, an electric motor 330, a third capacitor 340, and a second load 350. The second control unit 410, second drive unit 420, second protection unit 430, second coordination unit 440, fourth switch 451, and fifth switch 452 form the BMS's shutdown path. The BMS is responsible for monitoring the status of the onboard power battery 310 and managing its charge and discharge. The second control unit 410 in the shutdown path determines the status of the onboard power battery 310 by acquiring information such as its current, voltage, and temperature. This information then controls the status of the fourth and fifth switches 451 and 452 via the second drive unit 420. The fourth switch 451 is used to cut off the current in the power battery 310's discharge direction, while the fifth switch 452 is used to cut off the current in the battery's charge direction. When the shutdown path detects an abnormality in the power battery 310 (such as overcharge, over-discharge, or overtemperature), the second protection unit 430 quickly pulls down the second drive unit 420 to cut off the fourth and fifth switches 451 and 452. When a functional unit in the shutdown path fails, the BMS will fail to shut down due to the abnormal shutdown path. Therefore, it is particularly necessary to implement shutdown path detection to determine whether there is an abnormality in the shutdown path to ensure stable and reliable operation of the BMS.

[0009] However, similar to the shutdown path detection of DC / DC, the shutdown path detection of the on-board BMS also has defects such as long time, not suitable for inspection during the power-on phase, and poor robustness.

[0010] Therefore, how to provide a detection method and device for a shutdown path to overcome the above-mentioned defects in the prior art has become one of the technical problems that those skilled in the art need to solve urgently.

[0011] It should be noted that the information disclosed in the background technology section of the invention is only intended to deepen the understanding of the general background technology of the invention, and should not be regarded as an admission or any form of implication that the information constitutes prior art already known to those skilled in the art. Summary of the Invention

[0012] The purpose of the present invention is to address the deficiencies in the prior art and provide a method, system, electronic device and medium for detecting a shutdown path, so as to shorten the power-on initialization time of an on-board electronic control unit and improve the robustness of shutdown path detection.

[0013] To achieve the above objectives, the present invention is implemented through the following technical solutions: a method for detecting a shutdown path, wherein the shutdown path includes a protection control subcircuit and a plurality of switches, and the shutdown path is configured to protect against N types of faults of an on-board electronic control unit, where N ≥ 1 and N is an integer;

[0014] The detection method includes performing the following steps during the power-off phase of the vehicle-mounted electronic control unit:

[0015] S1: Trigger any one of the N types of faults, disconnect the switch corresponding to the fault protection implemented in that type; and for each of the disconnected switches, obtain a first detection result of the shutdown path according to a first preset rule;

[0016] S2: According to a second preset rule, for the protection control subcircuit, trigger each of the remaining N-1 types of faults respectively, and obtain a second detection result of the shutdown path;

[0017] S3: updating the detection result information of the shutdown path according to the first detection result and / or the second detection result; and storing the detection result information in a memory module.

[0018] Optionally, before step S1, the method further includes performing the following steps during the initialization phase of the vehicle-mounted electronic control unit:

[0019] Obtaining the detection result information from the memory module, wherein the detection result information includes a value of a first counter and a value of a second counter; the first counter is configured to record the number of times the shutdown path detection fails, and the second counter is configured to record the number of times the detection method is not completed;

[0020] According to a third preset rule, updating the value of the second counter;

[0021] Determine whether the value of the first counter and the updated value of the second counter meet a fourth preset rule; if so, prohibit the on-board electronic control unit from entering the running state in this driving cycle; if not, enable the on-board electronic control unit to enter the running state.

[0022] Optionally, the method for updating the value of the second counter according to a third preset rule includes:

[0023] Incrementing / decrementing the value of the second counter according to a second preset step length, and starting a timer for this driving cycle until the onboard electronic control unit enters a power-off phase;

[0024] If the time of the timer exceeds a preset time threshold, the value of the second counter is stored in the memory module.

[0025] Optionally, determining whether the values ​​of the first counter and the updated second counter satisfy a fourth preset rule, and if so, prohibiting the onboard electronic control unit from entering an operating state in this driving cycle; and if not, enabling the onboard electronic control unit to enter an operating state, includes:

[0026] If the value of the first counter meets a first counting threshold or the value of the second counter meets a second counting threshold, the on-board electronic control unit is prohibited from entering the operating state in this driving cycle;

[0027] If the value of the first counter does not meet the first counting threshold and the value of the second counter does not meet the second counting threshold, the on-board electronic control unit is enabled to enter an operating state.

[0028] Optionally, in step S1, for each of the disconnected switches, a first detection result of the shut-off path is obtained according to the first preset rule, wherein the first preset rule includes: if any switch among the plurality of switches fails, the first detection result is set as an abnormality in the shut-off path.

[0029] Optionally, in step S3, the method for updating the detection result information of the shutdown path according to the first detection result and / or the second detection result includes:

[0030] If both the first detection result and the second detection result indicate that the protection circuit is normal, restoring the value of the first counter and the value of the second counter to initial values;

[0031] If the first detection result indicates that the protection circuit is abnormal or the second detection result indicates that the protection circuit is abnormal, the value of the first counter is incremented / decremented by a first preset step size, and the value of the first counter after incrementing / decrementing is used as the value of the second counter;

[0032] The value of the first counter and the value of the second counter are stored in the memory module.

[0033] Optionally, the on-board electronic control unit includes a DC / DC, the protection control subcircuit includes a first sampling unit, a first control unit, a first protection unit, a first coordination unit, and a first driving unit that are electrically connected; the plurality of switches include a first switch, a second switch, and a third switch;

[0034] The first switch connects the high-voltage side battery of the DC / DC and the high-voltage side of the voltage conversion unit of the DC / DC; the second switch connects the low-voltage side of the voltage conversion unit and the third switch; the third switch connects the second switch and the low-voltage side battery of the DC / DC and the load;

[0035] The first sampling unit is configured to obtain operating status information of the DC / DC and send the operating status information to the first control unit;

[0036] The first control unit is configured to determine or monitor the DC / DC operating state and control the operating state of the first protection unit according to the operating state information and fault protection preset conditions obtained by the first sampling unit;

[0037] The first protection unit is configured to drive the first driving unit to control the opening / closing of the first switch, the second switch and / or the third switch through the first coordination unit.

[0038] Optionally, the DC / DC voltage conversion unit includes a conversion action unit, a first capacitor, and a second capacitor that are electrically connected. In step S1, for each of the disconnected switches, obtaining a first detection result of the shutdown path according to the first preset rule includes:

[0039] S111: Obtain a second voltage difference across the second switch, and determine whether the second voltage difference is greater than a second preset voltage threshold. If so, proceed to step S112; if not, set the first detection result as indicating that the shutdown path is abnormal, and proceed to step S3.

[0040] S112: Obtain a third voltage difference across the third switch, and determine whether the third voltage difference is greater than a third preset voltage threshold. If so, execute step S113; if not, set the first detection result as an abnormality in the shutdown path, and execute step S3;

[0041] S113: Clearing the protection latch of the first coordination unit;

[0042] S114: driving the first control unit to set the drive signal to low, controlling the conversion action unit to discharge the first capacitor and the second capacitor for a preset discharge time through the first drive unit, then obtaining a first voltage difference across the first switch, and determining whether the first voltage difference is greater than a first preset voltage threshold; if so, executing step S115; if not, setting the first detection result as an abnormality in the shutdown path, and executing step S3;

[0043] S115: Obtain the protection status of the first coordination unit and determine whether the protection status is the initial state. If so, execute step S2; if not, set the first detection result as an abnormality in the shutdown path and execute step S3.

[0044] Optionally, in step S2, according to the second preset rule, for the protection control subcircuit, triggering each of the remaining N-1 types of faults respectively, and obtaining the second detection result of the shutdown path includes:

[0045] S211: Set count n=1;

[0046] S212: Determine whether the count n is greater than N-1. If so, set the second detection result as the shutdown path being normal; and execute step S3; if not, execute step S213;

[0047] S213: Triggering the nth type fault, obtaining the protection status of the first coordination unit, and determining whether the protection status is protection latched: if so, executing step S214; if not, setting the second detection result as an abnormality in the shutdown path, and executing step S3;

[0048] S214: Clear the protection latch of the first coordination unit, obtain the protection status of the first coordination unit, and determine whether the protection status is the initial state. If so, add 1 to the count n and execute step S212; if not, set the second detection result to the abnormality of the shutdown path and execute step S3.

[0049] Optionally, the on-board electronic control unit includes a BMS, the protection control subcircuit includes a second sampling unit, a second control unit, a second protection unit, a second coordination unit, and a second driving unit that are electrically connected; the plurality of switches include a fourth switch and a fifth switch;

[0050] The fourth switch connects the power battery of the BMS and the fifth switch, and the fifth switch connects the fourth switch and the load end of the BMS;

[0051] The second sampling unit is configured to obtain operating status information of the BMS and send the operating status information to the second control unit;

[0052] The second control unit is configured to determine or monitor the BMS operating state and control the operating state of the second protection unit according to the operating state information and fault protection preset conditions obtained by the second sampling unit;

[0053] The second protection unit is configured to drive the second driving unit to control the opening / closing of the fourth switch and the fifth switch through the second coordination unit.

[0054] Optionally, in step S1, for each of the disconnected switches, obtaining a first detection result of the shut-off path according to a first pre-rule includes:

[0055] S121: Obtain a fourth voltage difference across the fifth switch, and determine whether the fourth voltage difference is greater than a fourth preset threshold. If so, execute step S122; if not, set the first detection result as an abnormality in the shutdown path, and execute step S3;

[0056] S122: Obtain a fifth voltage difference across the fourth switch, and determine whether the fifth voltage difference is greater than a fifth preset threshold; if so, execute step S123; if not, set the first detection result as an abnormality in the shutdown path, and execute step S3;

[0057] S123: Clear the protection latch of the second coordination unit;

[0058] S124: Obtain the protection status of the second coordination unit and determine whether the protection status is the initial state. If so, execute step S2; if not, set the first detection result as an abnormality in the shutdown path and execute step S3.

[0059] Optionally, in step S2, according to the second preset rule, for the protection control subcircuit, triggering each of the remaining N-1 types of faults respectively, and obtaining the second detection result of the shutdown path includes:

[0060] S221: Set count n=1;

[0061] S222: Determine whether the count n is greater than N-1. If so, set the second detection result as the shutdown path being normal; and execute step S3; if not, execute step S223;

[0062] S223: Triggering the nth type fault, obtaining the protection status of the second coordination unit, and determining whether the protection status is protection latched: if so, executing step S224; if not, setting the second detection result as an abnormality in the shutdown path, and executing step S3;

[0063] S224: Clear the protection latch of the second coordination unit, obtain the protection status of the second coordination unit, and determine whether the protection status is the initial state. If so, add 1 to the count n and execute step S222; if not, set the second detection result to the abnormality of the shutdown path and execute step S3.

[0064] To achieve the above objectives, the present invention further provides a shutdown path detection system, wherein the shutdown path includes a protection control subcircuit and a plurality of switches, and the shutdown path is configured to: protect against N types of faults of an on-board electronic control unit, wherein N ≥ 1 and N is an integer; the detection system is configured to detect the shutdown path during the power-off phase of the shutdown path, including:

[0065] a switch detection control device configured to trigger any one of the N types of faults and disconnect the switch corresponding to the fault protection implemented in that type; and for each disconnected switch, obtain a first detection result of the shutdown path according to a first preset rule;

[0066] a subcircuit detection and control device configured to trigger each of the remaining N-1 types of faults for the protection control subcircuit according to a second preset rule, and obtain a second detection result of the shutdown path;

[0067] The detection result processing device is configured to update the detection result information of the shutdown path according to the first detection result and / or the second detection result; and store the detection result information in a memory module.

[0068] Optionally, the detection system further includes a detection result application device, wherein the detection result application device is configured to: obtain the detection result information from the memory module during the initialization phase of the on-board electronic control unit, wherein the detection result information includes the value of a first counter and the value of a second counter; the first counter is configured to record the number of times the shutdown path detection fails, and the second counter is configured to record the number of times the detection method is not completed;

[0069] The detection result application device is further configured to update the value of the second counter according to a third preset rule;

[0070] The detection result application device is further configured to determine whether the value of the first counter and the updated value of the second counter meet a fourth preset rule; if so, the on-board electronic control unit is prohibited from entering the running state in this driving cycle; if not, the on-board electronic control unit is enabled to enter the running state.

[0071] Optionally, the on-board electronic control unit includes a DC / DC; the protection control subcircuit includes a first sampling unit, a first control unit, a first protection unit, a first coordination unit, and a first driving unit that are electrically connected; and the plurality of switches include a first switch, a second switch, and a third switch;

[0072] The detection system further includes a first voltage sensor, a second voltage sensor, a third voltage sensor, a fourth voltage sensor, and a fifth voltage sensor connected to the first sampling unit;

[0073] One end of the first switch is connected to the high-voltage side battery of the DC / DC, and the other end is connected to the high-voltage side of the voltage conversion unit of the DC / DC; one end of the second switch is connected to the low-voltage side of the voltage conversion unit, and the other end is connected to one end of the third switch; the other end of the third switch is connected to the low-voltage side battery of the DC / DC and the load;

[0074] The first voltage sensor is provided at one end of the first switch, and the second voltage sensor is provided at the other end of the first switch; the third voltage sensor is provided at one end of the second switch, the fourth voltage sensor is provided at the other end of the second switch, and the fifth voltage sensor is provided at the other end of the third switch;

[0075] The first sampling unit is configured to obtain operating status information of the DC / DC and send the operating status information to the first control unit;

[0076] The first control unit is configured to control the operating state of the first protection unit according to the operating state information obtained by the first sampling unit and the fault protection preset condition or the driving of the detection system;

[0077] The first protection unit is configured to drive the first driving unit to control the opening / closing of the first switch, the second switch and / or the third switch through the first coordination unit;

[0078] The first control unit includes a first memory module and a first timer module, wherein the first memory module is configured to store the detection result information; the first timer module is configured to obtain the duration of this driving cycle from DC / DC power-up to entering the power-off phase.

[0079] Optionally, N=4, the fault includes overvoltage fault, overcurrent fault, overtemperature fault and DC / DC control unit fault; the first protection unit includes an overvoltage protection module, an overcurrent protection module, a first overtemperature protection module and a first external watchdog protection module.

[0080] Optionally, the on-board electronic control unit includes a BMS, the protection control subcircuit includes a second sampling unit, a second control unit, a second protection unit, a second coordination unit, and a second driving unit that are electrically connected; the plurality of switches include a fourth switch and a fifth switch;

[0081] The detection system further includes a sixth voltage sensor, a seventh voltage sensor, and an eighth voltage sensor connected to the second sampling unit;

[0082] The fourth switch connects the power battery of the BMS and the fifth switch, and the fifth switch connects the fourth switch and the load end of the BMS;

[0083] The sixth voltage sensor is provided at one end of the fourth switch, the seventh voltage sensor is provided between the fourth switch and the fifth switch; the eighth voltage sensor is provided at the other end of the fifth switch;

[0084] The second sampling unit is configured to obtain operating status information of the BMS and send the operating status information to the second control unit;

[0085] The second control unit is configured to determine or monitor the BMS operating state and control the operating state of the second protection unit according to the operating state information and fault protection preset conditions obtained by the second sampling unit;

[0086] The second protection unit is configured to drive the second driving unit to control the opening / closing of the fourth switch and the fifth switch through the second coordination unit;

[0087] The second control unit includes the memory module and a second timer module, wherein the memory module is configured to store the detection result information; the second timer module is configured to obtain the duration from BMS power-on to entering the power-off stage of this driving cycle.

[0088] Optionally, N=4, the faults include overcharge fault, overdischarge fault, overtemperature fault and BMS control unit fault; the second protection unit includes an overcharge protection module, an overdischarge protection module, a second overtemperature protection module and a second external watchdog protection module.

[0089] In order to achieve the above-mentioned purpose, the present invention also provides an electronic device, which includes a processor and a memory, wherein the processor is suitable for implementing various instructions, and the memory is suitable for storing multiple instructions, and the instructions are suitable for being loaded by the processor and executing the steps of any one of the above-mentioned detection methods.

[0090] In order to achieve the above objectives, the present invention further provides a computer-readable storage medium, on which computer-executable instructions are stored. When the computer-executable instructions are executed, the steps of any of the above detection methods are implemented.

[0091] Compared with the prior art, the shutdown path detection method, system, electronic device, and medium provided by the present invention have the following beneficial effects:

[0092] The present invention provides a shutdown path detection method, comprising the following steps: triggering any one of the N fault types to disconnect the switch corresponding to the fault protection implemented in the vehicle electronic control unit during power-down; obtaining a first detection result of the shutdown path for each disconnected switch according to a first preset rule; triggering each of the remaining N-1 fault types for the protection control subcircuit according to a second preset rule to obtain a second detection result of the shutdown path; updating the shutdown path detection result information based on the first detection result and / or the second detection result; and storing the detection result information in a memory module. The detection method detects the shutdown path during power-down of the vehicle electronic control unit. This configuration can significantly shorten the initialization phase of the vehicle electronic control unit during power-up, thereby improving product initialization time. Furthermore, by disconnecting the switches in the shutdown path, failure of all safety switches can be detected. Furthermore, by saving the detection result information, it can be used for the next driving cycle (in the case of vehicles, but other products can also be used for the next operating cycle), thereby improving product robustness.

[0093] Furthermore, when an abnormality is detected in the shutdown path, during the power-on phase of the next driving cycle, it is possible to flexibly choose whether to allow the on-board electronic control unit to enter normal working state based on the actual working conditions and the specific content of the test result information, further improving the robustness of the product.

[0094] Furthermore, the detection method provided by the present invention increments / decrements the second counter by a second preset step size during the initialization phase of the vehicle's electronic control unit, and then starts a timer for the current driving cycle until the vehicle's electronic control unit enters the power-off phase. If the timer exceeds a preset time threshold, the value of the second counter is stored in the memory module. This configuration avoids frequent updates of the second counter value caused by frequent vehicle starts, further improving the robustness of the product.

[0095] Since the shutdown path detection system, electronic device, and medium provided by the present invention belong to the same inventive concept as the shutdown path detection method provided by the present invention, they have at least the same beneficial effects and are not described in detail here. BRIEF DESCRIPTION OF THE DRAWINGS

[0096] Figure 1 Schematic diagram of the circuit structure of a DC / DC and its shutdown path in the prior art;

[0097] Figure 2 Schematic diagram of the circuit structure of an on-board BMS and its shutdown path in the prior art;

[0098] Figure 3A schematic diagram of the working state of a vehicle-mounted electronic control unit provided by one embodiment of the present invention;

[0099] Figure 4 A schematic diagram of the overall flow of a shutdown path detection method provided in one embodiment of the present invention;

[0100] Figure 5 for Figure 4 A schematic diagram of a process flow of one implementation method of the vehicle electronic control unit initialization phase;

[0101] Figure 6 for Figure 4 A flowchart of one embodiment of the test result processing stage;

[0102] Figure 7 A schematic diagram of the circuit structure of a DC / DC and its shutdown path provided in one embodiment of the present invention;

[0103] Figure 8 for Figure 7 A flow chart of one embodiment of a switch detection phase of a DC / DC turn-off path detection;

[0104] Figure 9 for Figure 7 A flow chart of one embodiment of the protection control subcircuit detection phase of the DC / DC shutdown path detection;

[0105] Figure 10 A schematic diagram of the circuit structure of a BMS and its shutdown path provided in one embodiment of the present invention;

[0106] Figure 11 for Figure 10 A flow chart of one embodiment of the switch detection phase of the shutdown path detection of the BMS;

[0107] Figure 12 for Figure 10 A flowchart of one implementation method of the protection control subcircuit detection phase of the BMS shutdown path detection;

[0108] Figure 13 A schematic structural diagram of a shutdown path detection system provided by an embodiment of the present invention;

[0109] Figure 14 A schematic structural diagram of a first control unit of the DC / DC shutdown path provided in one embodiment of the present invention;

[0110] The description of the accompanying drawings is as follows:

[0111] 101 - high-voltage side battery, 102 - low-voltage side battery, 103 - first load, 110 - voltage conversion unit, 111a - first capacitor, 111b - second capacitor, 112a, 112b - filter inductor, 113 - power inductor, 114 - conversion action unit, 114a, 114b - switches;

[0112] 210 - first drive unit, 220 - first coordination unit, 230 - first protection unit, 231 - overvoltage protection module, 232 - overcurrent protection module, 233 - first overtemperature protection module, 234 - first external watchdog protection module, 240 - first control unit, 250 - first memory module, 260 - first timer module, 270 - first sampling unit; 281 - first switch, 282 - second switch, 283 - third switch; V1 - first voltage sensor, V2 - second voltage sensor, V3 - third voltage sensor, V4 - fourth voltage sensor, V5 - fifth voltage sensor;

[0113] 310 - power battery, 320 - motor controller, 330 - motor, 340 - third capacitor, 350 - second load;

[0114] 410 - second control unit, 420 - second driving unit, 430 - second protection unit, 431 - overcharge protection module, 432 - over-discharge protection module, 433 - second over-temperature protection module, 434 - second external watchdog protection module, 440 - second coordination unit, 450 - second sampling unit;

[0115] 451 - fourth switch, 452 - fifth switch;

[0116] V6-sixth voltage sensor, V7-seventh voltage sensor, V8-eighth voltage sensor;

[0117] 100 - switch detection control device, 200 - sub-circuit detection control device, 300 - detection result processing device, 400 - detection result application device. DETAILED DESCRIPTION

[0118] In order to make the objects, advantages and features of the present invention clearer, the detection method, system, electronic device and medium for the shutdown path proposed in the present invention are further described in detail below with reference to the accompanying drawings. It should be noted that the drawings are all in a very simplified form and are not in exact proportions, and are only used to conveniently and clearly assist in explaining the purpose of the embodiments of the present invention. It should be understood that the drawings in the specification do not necessarily show the specific structure of the present invention to scale, and the illustrative features used to illustrate certain principles of the present invention in the drawings in the specification may also be slightly simplified. The specific design features of the present invention disclosed herein, including, for example, specific dimensions, directions, positions and shapes, will be determined in part by the specific application and use environment. In addition, in the embodiments described below, the same figure mark is sometimes used in common between different drawings to represent the same part or part with the same function, and its repeated description is omitted. In this specification, similar numbers and letters are used to represent similar items. Therefore, once an item is defined in one drawing, it does not need to be further discussed in subsequent drawings.

[0119] Where appropriate, these terms used in this manner are interchangeable. Similarly, if a method described herein comprises a series of steps, the order in which the steps are presented herein is not necessarily the only order in which the steps may be performed, and some of the steps described may be omitted and / or other steps not described herein may be added to the method.

[0120] Before specifically describing the shutdown path detection method provided by the present invention, the working state of the on-board electronic control unit is briefly described. For the sake of ease of description and understanding, the present invention is described by taking the on-board electronic control unit for new energy vehicles as an example. Those skilled in the art will understand that this is not a limitation of the present invention. The shutdown path detection method provided by the present invention does not limit the application field of the shutdown path, including but not limited to automobiles, aviation, aerospace, etc.; the on-board electronic control unit includes but is not limited to DC / DC, BMS, motor controller, on-board charger and vehicle controller. See Figure 3 , Figure 3 A schematic diagram of the working state of a vehicle-mounted electronic control unit is provided for one embodiment of the present invention. Figure 3 It can be seen that the vehicle electronic control unit is in any of the following working states: stop phase, initialization phase, operation phase and power-off phase. In the stop phase, the vehicle electronic control unit is not powered on and does not work; from the stop phase, it undergoes power-on initialization (such as starting the car), then enters the operation phase; after the power-off phase (such as shutting down the car), the vehicle electronic control unit re-enters the stop phase.

[0121] This embodiment provides a method for detecting a shutdown path, wherein the shutdown path includes a protection control subcircuit and several switches. The shutdown path is configured to protect against N types of faults in a vehicle's electronic control unit, where N ≥ 1 and is an integer. To facilitate understanding and description, the following describes the overall process of the detection method provided by the present invention, followed by a detailed explanation of each step.

[0122] See also Figure 4 , Figure 4 The overall flow chart of the shutdown path detection method provided in this embodiment is as follows. Figure 4 It can be seen that the detection method includes performing the following steps when the vehicle electronic control unit is powered off:

[0123] S1: switch detection stage: triggering any one of the N types of faults, disconnecting the switch corresponding to the fault protection implemented in that type; for each of the disconnected switches, obtaining a first detection result of the shutdown path according to a first preset rule.

[0124] S2: According to the second preset rule, protection control subcircuit detection stage: for the protection control subcircuit, each type of fault in the remaining N-1 types of faults is triggered respectively to obtain a second detection result of the shutdown path.

[0125] S3: Detection result processing stage: updating the detection result information of the shutdown path according to the first detection result and / or the second detection result; and storing the detection result information in a memory module.

[0126] It can be understood that the present invention does not limit the order of step S1 and step S2. In one embodiment, step S1 can be executed first and then step S2; in another embodiment, step S2 can be executed first and then step S1; preferably, when N=1, the second detection result can be preset as normal detection.

[0127] With such configuration, the detection method provided by the present invention detects the shutdown path during the power-off phase of the on-board electronic control unit, which can significantly shorten the time of the power-on initialization phase of the on-board electronic control unit, thereby improving the initialization time of the product. Furthermore, the switches in the on-off path can be disconnected, and the failure of all safety switches can be detected. Furthermore, the detection result information can be saved and can be used for the next driving cycle (taking the on-board electronic control unit for vehicles as an example, it can also be used for the next working cycle of the corresponding product for other products), thereby improving the robustness of the product. Further, when an abnormality is detected in the shutdown path, during the power-on phase of the next driving cycle, it can be flexibly selected whether to allow the on-board electronic control unit to enter the operating state (normal working mode) based on the actual working conditions and the specific content of the detection result information, thereby further improving the robustness of the product.

[0128] As a preferred embodiment, see Figure 5 , Figure 5 for Figure 4 A specific flow chart of one of the implementation methods in the initialization phase. Figure 5 It can be seen that before step S1, the following steps are also performed during the initialization phase of the vehicle electronic control unit:

[0129] S01: Acquire the detection result information from the memory module, wherein the detection result information includes the value of a first counter and the value of a second counter; the first counter is configured to record the number of times the shutdown path detection fails, and the second counter is configured to record the number of times the detection method is not executed.

[0130] S02: Updating the value of the second counter according to a third preset rule. Preferably, in one embodiment, the method for updating the value of the second counter according to the third preset rule includes: incrementing / decrementing the second counter according to a second preset step size, starting a timer for the current driving cycle until the onboard electronic control unit enters the power-off phase; and storing the value of the second counter in the memory module if the timer exceeds a preset time threshold. For example, if the preset time threshold is X minutes, if the timer exceeds X minutes, meaning the onboard electronic control unit has been operating for more than X minutes, the driving cycle can be considered normal. The specific value of X can be set according to actual needs, such as 5 minutes, 10 minutes, etc. This configuration can prevent the driver from frequently starting the vehicle, which would cause the value of the second counter to decrease rapidly due to frequent updates, thereby improving the robustness of the product.

[0131] It is understood that the present invention does not limit the values ​​of the first preset step size and the second preset step size, nor does it limit whether the first counter and the second counter adopt an incrementing or decrementing method. That is, in one embodiment, one counter adopts an incrementing method and the other counter adopts a decrementing method; in another embodiment, both counters adopt a decrementing method; and in yet another embodiment, both counters adopt an incrementing method.

[0132] S03: Determine whether the values ​​of the first counter and the updated second counter meet a fourth preset rule. If so, prohibit the on-board electronic control unit from entering the running state in this driving cycle; if not, enable the on-board electronic control unit to enter the running state.

[0133] Preferably, in one embodiment, step S03 specifically includes: if the value of the first counter meets a first counting threshold or the value of the second counter meets a second counting threshold, prohibiting the onboard electronic control unit from entering the operating state for the current driving cycle; if the value of the first counter does not meet the first counting threshold and the value of the second counter does not meet the second counting threshold, enabling the onboard electronic control unit to enter the operating state. Specifically, for example, the first preset step value is 1, the second preset step value is also 1, the first counter and the second counter both use a decrementing method, the initial value of the first counter is the maximum number of detection failures allowed for the operating shutdown path, and the initial value of the second counter is the maximum number of times the detection method is not allowed to be executed. In this case, the first counting threshold is 0, and the second counting threshold is also 0. That is, when either the first counter or the second counter reaches 0, indicating that the maximum number of failed operation tests (e.g., a value greater than 1) or the maximum number of times the detection method is allowed to be unexecuted (completed) has been reached (e.g., a value greater than 1), the onboard electronic control unit is prohibited from entering the operating state during the current driving cycle. For example, if the onboard electronic control unit is a DC / DC, the DC / DC is prohibited from performing high-low voltage energy conversion during the current driving cycle. Similarly, for a BMS, the battery charge and discharge paths are disconnected during the current driving cycle. Furthermore, as one preferred embodiment, the onboard electronic control unit can also be controlled to enter the power-off phase during the current driving cycle to further save energy. If neither of the upper limits is reached, the onboard electronic control unit is enabled to enter the operating state, and the timer for the current driving cycle continues counting until the onboard electronic control unit enters the power-off phase.

[0134] With such a configuration, a certain number of abnormal detections of the shutdown path can allow the on-board electronic control unit to operate normally, thereby avoiding mistaking the failure (abnormality) of the shutdown path for an abnormality of the on-board electronic control unit. When the number of abnormalities detected in the shutdown path is less than a certain value, the on-board electronic control unit can be allowed to operate normally, and the robustness of the product can be improved.

[0135] Preferably, in step S1, for each of the disconnected switches, a first detection result of the shutdown path is obtained according to a first preset rule, wherein the first preset rule includes: if the detection result indicates that any switch is faulty, then the first detection result is set as an abnormality in the protection circuit. That is, when an abnormality is detected in one switch, the protection circuit is deemed to be abnormal, and the remaining untested switches are no longer tested.

[0136] As a preferred embodiment, see Figure 6 , Figure 6 for Figure 4 Flowchart of the test result processing stage. Figure 6 It can be seen that in step S3, the method of updating the detection result information of the shutdown path according to the first detection result and / or the second detection result, and storing the detection result information in the memory module includes:

[0137] S31: If both the first detection result and the second detection result indicate that the shutdown path is normal, restoring the values ​​of the first counter and the second counter to initial values.

[0138] S32: If the first detection result is that there is an abnormality in the shutdown path or the second detection result is that there is an abnormality in the shutdown path, the value of the first counter is increased / decreased according to a first preset step size, and the value of the first counter after increasing / decreased is used as the value of the second counter.

[0139] In other words, only if the test results of all switches in the shutdown path and the protection control subcircuit of the shutdown path pass all fault tests, is the shutdown path considered normal and the values ​​of the first and second counters restored to their initial values. Otherwise, the test result is considered to indicate that there is an abnormality in the shutdown path.

[0140] S33: The values ​​of the first counter and the second counter are stored in the memory module. This detection is completed and the vehicle electronic control unit is powered off. Preferably, the storage unit of the present invention is a non-volatile memory. Such a configuration can store the detection result information (the values ​​of the first counter and the second counter) of the shutdown path of the vehicle electronic control unit in the current driving cycle for judgment in the next driving cycle.

[0141] In one embodiment, the DC / DC in the vehicle electronic control unit is used as an example for description. Figure 7 , Figure 7 A schematic diagram of the circuit structure of a DC / DC and its shutdown path provided by an embodiment of the present invention. Figure 7 As can be seen, as a preferred embodiment, the protection control subcircuit includes an electrically connected first sampling unit 270, a first control unit 240, a first protection unit 230, a first coordination unit 220, and a first drive unit 210. The plurality of switches include a first switch 281, a second switch 282, and a third switch 283. The first switch 281 connects the high-voltage side battery 101 of the DC / DC converter to the high-voltage side of the DC / DC converter's voltage conversion unit 110; the second switch 282 connects the low-voltage side of the voltage conversion unit 110 to the third switch 283; and the third switch 283 connects the second switch 282 to the low-voltage side battery 102 of the DC / DC converter and the first load 103.

[0142] Specifically, the first sampling unit 270 is configured to obtain operating status information of the DC / DC and send the operating status information to the first control unit 240. The first control unit 240 is configured to determine or monitor the operating status of the DC / DC and control the operating status of the first protection unit 230 based on the operating status information obtained by the first sampling unit 270 and the preset fault protection conditions. The first protection unit 230 drives the first driving unit 1210 to control the opening / closing of the first switch 281, the second switch 282, and the third switch 283 through the first coordination unit 220.

[0143] Preferably, the DC / DC voltage conversion unit includes a conversion action unit 114, a first capacitor 111a and a second capacitor 111b that are electrically connected. Figure 8 , Figure 8 for Figure 4 Flowchart of the switch detection phase. Figure 8 It can be seen that in step S1, for each of the disconnected switches, obtaining the first detection result of the shut-off path according to the first preset rule includes:

[0144] S111: Obtain a second voltage difference across the second switch 282 and determine whether the second voltage difference is greater than a second preset voltage threshold. If so, proceed to step S112. If not, set the first detection result as indicating an abnormality in the shutdown path and proceed to step S3. With this configuration, since the second switch 282 is indirectly connected to the second capacitor 111b, it is possible to determine whether the second switch 282 is in the on state based on the voltage difference across the second switch 282.

[0145] S112: Obtain a third voltage difference across the third switch 283 and determine whether the third voltage difference is greater than a third preset voltage threshold. If so, execute step S113; if not, set the first detection result as indicating an abnormality in the shutdown path and execute step S3. With this configuration, since the third switch 283 is connected to the low-voltage side battery 102, it is possible to determine whether the third switch 283 is in the on state based on the voltage difference across the third switch 283.

[0146] S113 : Clear the protection latch of the first coordination unit 220 .

[0147] S114: Drive the first control unit 240 to set the drive signal to low, drive the first drive unit 210 to control the conversion action unit 114 to discharge the first capacitor 111a and the second capacitor 111b for a preset discharge time, and then obtain the first voltage difference across the first switch 281 to determine whether the first voltage difference is greater than the first preset voltage threshold. If so, execute step S115; if not, set the first detection result to the abnormality of the shutdown path, and execute step S3. With this configuration, the switch 114a and the switch 114b of the conversion action unit 114 can be used to discharge the voltage of the first capacitor 111a and the second capacitor 111b to a low potential. Since the first switch 281 is connected to the high-voltage side battery 101, it is possible to determine whether the first switch 281 is in the on state by the voltage difference across the first switch 281.

[0148] S115: Obtain the protection status of the first coordination unit 220, and determine whether the protection status is the initial state. If so, execute step S2; if not, set the first detection result as an abnormality in the shutdown path, and execute step S3.

[0149] In particular, the above method of obtaining the first voltage difference, the second voltage difference and the third voltage difference can be obtained by the control unit reading the voltages across the first switch 281, the second switch 282 and the third switch 283 of the sampling unit 270.

[0150] Those skilled in the art will appreciate that the above steps are merely descriptions of preferred implementations and do not explicitly or implicitly limit the order of detection. In one implementation, the detection order may be the first switch 281, the second switch 282, and the third switch 283. In another implementation, the detection order may be the second switch 282, the first switch 281, and the third switch 283. Similarly, in other implementations, the detection order may be the third switch 283, the first switch 281, and the second switch 282. These details will not be repeated here.

[0151] As a preferred embodiment, see Figure 9 , Figure 9 for Figure 4 Flowchart of the detection phase of the DC / DC protection control subcircuit. Figure 9 It can be seen that in step S2, according to the second preset rule, for the protection control subcircuit, each of the remaining N-1 types of faults is triggered respectively to obtain the second detection result of the shutdown path, including:

[0152] S211: Set count n=1;

[0153] S212: Determine whether the count n is greater than N-1. If so, set the second detection result as the protection circuit being normal; and execute step S3; if not, execute step S23;

[0154] S213: Triggering the nth type fault, obtaining the protection status of the first coordination unit 220, and determining whether the protection status is protection latched: if so, executing step S214; if not, setting the second detection result as an abnormality in the shutdown path, and executing step S3;

[0155] S214: Clear the protection latch of the first coordination unit 220; and obtain the protection status of the first coordination unit 220, and determine whether the protection status is the initial state. If so, add 1 to the count n and execute step S212; if not, set the second detection result to the abnormality of the shutdown path and execute step S3.

[0156] As a preferred embodiment, for a DC / DC converter, the faults include overvoltage, overcurrent, overtemperature, and DC / DC control unit faults, i.e., N=4. In step S1, the method of triggering any of the N fault types and disconnecting the corresponding switch for protection against that fault type includes the following steps: controlling the first control unit 240 to drive the first protection unit 230 to trigger overvoltage protection; the first protection unit 230 to set the protection state of the first coordination unit 220 to protection latch; the first coordination unit 220 to drive the first drive unit 210 to disconnect the first switch 281, the second switch 282, and the third switch 283. Those skilled in the art will appreciate that the present invention is not limited to the type and number of faults, nor to the order in which they are triggered. For example, in one embodiment, overvoltage protection, overcurrent protection, overtemperature protection, and external watchdog protection are triggered in this order; in another embodiment, overcurrent protection, overvoltage protection, overtemperature protection, and external watchdog protection are triggered in this order; and in other embodiments, other orders are used, which are not listed or detailed here. Preferably, as long as one type of fault detection finds that the protection control sub-circuit is abnormal, it is considered that the shutdown path is abnormal, and other faults will not be triggered to continue detection.

[0157] In another embodiment, the BMS in the vehicle electronic control unit is used as an example for description. Figure 10 The on-board electronic control unit includes a BMS, the protection control subcircuit includes an electrically connected second sampling unit 450, a second control unit 410, a second protection unit 430, a second coordination unit 440 and a second drive unit 420; the multiple switches include a fourth switch 451 and a fifth switch 452.

[0158] Specifically, the fourth switch 451 connects the power battery 310 of the BMS and the fifth switch 452, and the fifth switch 452 connects the fourth switch 451 and the load end of the BMS; the second sampling unit 450 is configured to obtain the operating status information of the BMS and send the operating status information to the second control unit 410, wherein the operating status information includes but is not limited to the battery pack voltage, cell voltage, charging current, discharging current and temperature; the second control unit 410 is configured to judge or monitor the BMS operating status and control the operating status of the second protection unit 430 according to the operating status information and fault protection preset conditions obtained by the second sampling unit 450; the second protection unit 430 is configured to drive the second drive unit 420 to control the opening / closing of the fourth switch 451 and the fifth switch 452 through the second coordination unit 440.

[0159] Specifically, in one preferred embodiment, see Figure 11 , Figure 11 for Figure 10 A flow chart of one embodiment of the switch detection phase of the BMS shutdown path detection. Figure 11 It can be seen that in step S1, for each of the disconnected switches, obtaining the first detection result of the shutdown path according to the first pre-rule includes:

[0160] S121: Obtain a fourth voltage difference across the fifth switch 452, and determine whether the fourth voltage difference is greater than a fourth preset threshold. If so, execute step S122; if not, set the first detection result as an abnormality in the shutdown path, and execute step S3.

[0161] S122: Obtain a fifth voltage difference across the fourth switch 451 and determine whether the fifth voltage difference is greater than a fifth preset threshold. If so, execute step S123; if not, set the first detection result as an abnormality in the shutdown path and execute step S3.

[0162] S123: Clear the protection latch of the second coordination unit 440;

[0163] S124: Obtain the protection status of the second coordination unit 440, and determine whether the protection status is the initial state. If so, execute step S2; if not, set the first detection result as an abnormality in the shutdown path, and execute step S3.

[0164] The principle of such configuration is that the third capacitor 340 is provided on the right side of the fifth switch 452 (refer to the diagram, which is actually related to the specific layout of the BMS), and the voltage on the right side of the fifth switch 452 can maintain a high potential for a certain period of time, so the state of the fifth switch 452 can be judged by the voltage difference between its two ends; similarly, since the power battery 310 is provided on the left side of the fourth switch 451 (refer to the diagram, which is actually related to the specific layout of the BMS), the state of the fourth switch 451 can be judged by the voltage difference between its two ends.

[0165] Preferably, in one embodiment, in step S2, according to the second preset rule, for the protection control subcircuit, each of the remaining N-1 types of faults is triggered respectively to obtain the second detection result of the shutdown path, including:

[0166] S221: Set count n=1;

[0167] S222: Determine whether the count n is greater than N-1. If so, set the second detection result as the shutdown path being normal; and execute step S3; if not, execute step S223;

[0168] S223: Triggering the nth type fault, obtaining the protection status of the second coordination unit 440, and determining whether the protection status is protection latched: if so, executing step S224; if not, setting the second detection result as an abnormality in the shutdown path, executing step S3;

[0169] S224: Clear the protection latch of the second coordination unit 440, and obtain the protection status of the second coordination unit 440, and determine whether the protection status is the initial state. If so, add 1 to the count n and execute step S222; if not, set the second detection result to the abnormality of the shutdown path and execute step S3.

[0170] Based on the same inventive concept, another embodiment of the present invention provides a detection system for shutting down a path, see Figure 7 、 Figure 10 and Figure 13 ,in, Figure 13 A schematic diagram of the structure of a detection system for shutting down a path provided by an embodiment of the present invention. Figure 7 and Figure 10 As can be seen, the shutdown path includes a protection control subcircuit and several switches. The shutdown path is configured to protect against N types of faults in the vehicle's electronic control unit, where N ≥ 1 and is an integer. The detection system is configured to detect the shutdown path during the shutdown phase. The detection system includes a switch detection control device 100, a subcircuit detection control device 200, and a detection result processing device 300.

[0171] Specifically, the switch detection device 100 is configured to trigger any one of the N types of faults and disconnect the switch corresponding to the fault protection implemented for that type of fault; for each disconnected switch, a first detection result of the shutdown path is obtained according to a first preset rule. The subcircuit detection device 200 is configured to trigger each of the remaining N-1 types of faults for the protection control subcircuit according to a second preset rule, and obtain a second detection result of the shutdown path. The detection result processing device 300 is configured to update the detection result information of the shutdown path based on the first detection result and / or the second detection result, and store the detection result information in a memory module.

[0172] As a preferred embodiment, the detection system further includes a detection result application device 400, which is configured to: obtain the detection result information from the memory module 191 during the initialization phase of the vehicle electronic control unit, wherein the detection result information includes the value of a first counter and the value of a second counter; the first counter is configured to record the number of times the shutdown path detection fails, and the second counter is configured to record the number of times the detection method is not completed. Furthermore, the detection result application device 400 is also used to update the value of the second counter according to a third preset rule; the detection result application device 400 is also configured to determine whether the value of the first counter and the updated value of the second counter meet a fourth preset rule. If so, the vehicle electronic control unit is prohibited from entering the operating state in this driving cycle; if not, the vehicle electronic control unit is enabled to enter the operating state.

[0173] For ease of understanding, the shutdown path of the DC / DC in the vehicle electronic control unit is still used as an example for explanation. As one of the preferred implementations, please continue to refer to Figure 7 The protection control subcircuit includes a first sampling unit 270, a first control unit 240, a first protection unit 230, a first coordination unit 220, and a first driving unit 210, which are electrically connected to each other. The plurality of switches include a first switch 281, a second switch 282, and a third switch 283. The detection system also includes a first voltage sensor V1, a second voltage sensor V2, a third voltage sensor V3, a fourth voltage sensor V4, and a fifth voltage sensor V5, which are connected to the first sampling unit 270. One end of the first switch 281 is connected to the high-voltage side battery 101 of the DC / DC, and the other end is connected to the high-voltage side of the DC / DC voltage conversion unit 110; one end of the second switch 282 is connected to the low-voltage side of the voltage conversion unit 110, and the other end is connected to one end of the third switch 283; the other end of the third switch 283 is connected to the low-voltage side battery 102 of the DC / DC and the first load 103; the first voltage sensor V1 is set at one end of the first switch 281, and the second voltage sensor V2 is set at the other end of the first switch 281; the third voltage sensor V3 is set at one end of the second switch 282, the fourth voltage sensor V4 is set at the other end of the second switch 282, and the fifth voltage sensor V5 is set at the other end of the third switch 283.

[0174] Preferably, the first sampling unit 270 is configured to obtain operating status information of the DC / DC and send the operating status information (e.g., the voltages of the voltage sensors V1 to V5) to the first control unit 240. The first control unit 240 is configured to control the operating status of the first protection unit 230 based on the operating status information obtained by the first sampling unit 270 and the fault protection preset conditions or the driving of the detection system. The first protection unit 230 drives the first driving unit 210 to control the opening / closing of the first switch 281, the second switch 282, and / or the third switch 283 through the first coordination unit 220. Figure 14 , Figure 14 This is a schematic diagram of the structure of the first control unit of the DC / DC shutdown path provided by an embodiment of the present invention. Figure 14 It can be seen that the first control unit 240 includes a first memory module 250 and a first timer module 260. The first timer module 260 is configured to obtain the duration of the current driving cycle from DC / DC power-up to DC / DC entering the power-down stage.

[0175] As an exemplary embodiment, the faults include but are not limited to overvoltage faults, overcurrent faults, overtemperature faults, and DC / DC control unit faults; that is, N = 4. The first protection unit includes but is not limited to an overvoltage protection module 231, an overcurrent protection module 232, a first overtemperature protection module 233, and a first external watchdog protection module 234 corresponding to the faults. The overvoltage protection module 231 is used to handle overvoltage faults in the DC / DC, the overcurrent protection module 232 is used to handle overcurrent faults in the DC / DC, the first overtemperature protection module 233 is used to handle overtemperature faults in the DC / DC, and the first external watchdog protection module 234 is used to handle faults in the DC / DC control unit.

[0176] Those skilled in the art will appreciate that, in other embodiments, the first memory module 250 and the first timer module 260 may not be provided in the first control unit 240, and only need to be able to interact with the first control unit 240. Furthermore, the switch detection control device 100, the sub-circuit detection control device 200, the detection result processing device 300, and the detection result application device 400 of the detection system may be in the form of external hardware, software, or a combination of hardware and software that can interact with the first control unit 240. Alternatively, they may be fully or partially integrated into the first control unit 240 in the form of software, hardware, or a combination of software and hardware, and the present invention does not impose any restrictions on this.

[0177] Similarly, the shutdown path of the BMS in the vehicle electronic control unit is taken as an example for explanation. As one of the preferred implementations, please continue to refer to Figure 10 In this embodiment, the protection control subcircuit includes a second sampling unit 450, a second control unit 410, a second protection unit 430, a second coordination unit 440, and a second drive unit 420, which are electrically connected. The plurality of switches include a fourth switch 451 and a fifth switch 452. Furthermore, the detection system also includes a sixth voltage sensor V6, a seventh voltage sensor V7, and an eighth voltage sensor V8 connected to the second sampling unit 450. The fourth switch 451 connects the power battery 310 of the BMS and the fifth switch 452, and the fifth switch 452 connects the fourth switch 451 and the load end of the BMS. The sixth voltage sensor V6 is disposed at one end of the fourth switch 451, the seventh voltage sensor V7 is disposed between the fourth switch 451 and the fifth switch 452, and the eighth voltage sensor V8 is disposed at the other end of the fifth switch 452.

[0178] Specifically, the second sampling unit 450 is configured to obtain the operating status information of the BMS and send the operating status information to the second control unit 410;

[0179] The second control unit 410 is configured to determine or monitor the BMS operating state and control the operating state of the second protection unit 430 according to the operating state information and fault protection preset conditions obtained by the second sampling unit 450;

[0180] The second protection unit 430 is configured to drive the second driving unit 440 to control the opening / closing of the fourth switch 451 and / or the fifth switch 452 through the second coordination unit 440;

[0181] The second control unit 410 includes a second memory module (not shown in the figure) and a second timer module (not shown in the figure), wherein the second memory module is configured to store the detection result information; the second timer module is configured to obtain the duration from the BMS power-on to the power-off stage of this driving cycle.

[0182] Preferably, in one preferred embodiment, N=4, and the faults include overcharge fault, over-discharge fault, overtemperature fault and BMS control unit fault; correspondingly, the second protection unit 430 includes an overcharge protection module 431, an over-discharge protection module 432, a second overtemperature protection module 433 and a second external watchdog protection module 434.

[0183] Those skilled in the art will appreciate that the above description is based solely on vehicle-mounted electronic control units (DC / DC) and BMS as examples. The shutdown path detection method and detection system provided by the present invention are also applicable to other vehicle-mounted electronic control units, including but not limited to motor controllers, vehicle-mounted chargers, normal controllers, etc., and will not be described in detail here. Furthermore, in some embodiments, the same detection system may include multiple shutdown paths for different vehicle-mounted electronic control units: that is, the shutdown paths of each of the vehicle-mounted electronic control units are independent of each other; in other embodiments, the shutdown paths of each of the vehicle-mounted electronic control units may share certain functional modules, for example, the first memory module 250 of the DC / DC shutdown path and the second memory module of the BMS shutdown path may be the same memory module. The present invention is not limited to this.

[0184] Since the shutdown path detection system provided by the present invention and the shutdown path detection method provided by the present invention belong to the same inventive concept, and therefore have at least the same beneficial effects, they will not be described in detail here.

[0185] Yet another embodiment of the present invention provides an electronic device comprising a processor and a memory. The processor is adapted to execute various instructions, and the memory is adapted to store multiple instructions, wherein the instructions are adapted to be loaded by the processor and executed by the steps of a shutdown path detection method as described in any of the aforementioned embodiments. The method includes triggering fault protection during the power-off phase of an onboard electronic control unit (ECU), thereby detecting switches and protection control subcircuits in the shutdown path, obtaining detection result information, and storing the detection result information in a memory module. The detection method detects the shutdown path during the power-off phase of the ECU. This configuration can significantly shorten the power-on initialization phase of the ECU, thereby improving product initialization time. Furthermore, the switches in the shutdown path can be disconnected, enabling detection of failure of all safety switches. Furthermore, the detection result information can be saved and used for the next driving cycle (for example, when the ECU is used in a vehicle, it can also be used for the next operating cycle of other products), thereby improving product robustness. Furthermore, when an abnormality is detected in the shutdown path, during the power-on phase of the next driving cycle, it is possible to flexibly choose whether to allow the on-board electronic control unit to enter the working mode based on the actual working conditions and the specific content of the detection result information, thereby further improving the robustness of the product.

[0186] Yet another embodiment of the present invention provides a computer-readable storage medium storing computer-executable instructions. When executed, the computer-executable instructions implement the steps of the shutdown path detection method described in any of the aforementioned embodiments. Because the computer-readable storage medium provided by the present invention and the shutdown path detection method provided by the present invention share the same inventive concept and therefore have at least the same beneficial effects, they are not further detailed herein.

[0187] It can be seen that compared with the prior art, the shutdown path detection method, system, electronic device and medium provided by the present invention detect the shutdown path during the power-off phase of the DC / DC, which can significantly shorten the time of the DC / DC power-on initialization phase, thereby improving the initialization time of the product. Furthermore, the switches in the shutdown path can be disconnected, and the failure of all safety switches can be detected. Furthermore, the detection result information can be saved and can be used for the next driving cycle (taking DC / DC for vehicles as an example, it can also be used for the next working cycle of the product for other products), thereby improving the robustness of the product. Furthermore, when an abnormality is detected in the shutdown path, it can be flexibly selected whether to allow the DC / DC to perform high-low voltage energy conversion according to the actual working conditions and the specific content of the detection result information during the power-on phase of the next driving cycle, thereby further improving the robustness of the product.

[0188] It should be noted that the devices, systems, and methods disclosed in the embodiments of this document may also be implemented in other ways. The device and system embodiments described above are merely illustrative. For example, the flowcharts and block diagrams in the accompanying drawings illustrate possible architectures, functions, and operations of the devices, methods, and computer program products according to various embodiments of this document. In this regard, each box in the flowchart or block diagram may represent a module, program, or portion of code, wherein the module, program segment, or portion of code contains one or more executable instructions for implementing a specified logical function, and the module, program segment, or portion of code contains one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions marked in the boxes may also occur in an order different from that marked in the accompanying drawings. For example, two consecutive boxes may actually be executed substantially in parallel, or they may sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flowchart, as well as combinations of boxes in the block diagram and / or flowchart, may be implemented using a dedicated hardware-based system for performing the specified functions or actions, or may be implemented using a combination of dedicated hardware and computer instructions.

[0189] In addition, the functional modules in the various embodiments of this document may be integrated together to form an independent part, or each module may exist independently, or two or more modules may be integrated to form an independent part.

[0190] Furthermore, the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of the technical features being referred to. Thus, a feature defined as "first" or "second" may explicitly or implicitly include at least one such feature. In the description of the present invention, "plurality" means at least two, such as two, three, etc., unless otherwise specifically defined.

[0191] In the description of this specification, the reference terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" mean that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art can combine and combine different embodiments or examples described in this specification and features of different embodiments or examples without contradiction.

[0192] In summary, the above embodiments provide a detailed description of the different configurations of the shutdown path detection method, system, electronic device and medium proposed in the present invention. Of course, the above description is only a description of the preferred embodiments of the present invention and does not limit the scope of the present invention. The present invention includes but is not limited to the configurations listed in the above implementation. Those skilled in the art can draw inferences based on the contents of the above embodiments. Any changes and modifications made by ordinary technicians in the field of the present invention based on the above disclosure are within the scope of protection of the claims.

Claims

1. A method for detecting a shutdown path, characterized in that: The shutdown path includes a protection control subcircuit and a plurality of switches, and the shutdown path is configured to protect the vehicle electronic control unit from N types of faults, where N≥1 and N is an integer; The detection method includes performing the following steps during the power-off phase of the vehicle-mounted electronic control unit: S1: Trigger any one of the N types of faults, disconnect the switch corresponding to the fault protection implemented in that type; and for each of the disconnected switches, obtain a first detection result of the shutdown path according to a first preset rule; S2: According to a second preset rule, for the protection control subcircuit, trigger each of the remaining N-1 types of faults respectively, and obtain a second detection result of the shutdown path; S3: Based on the first detection result and / or the second detection result, update the detection result information of the shutdown path; and store the detection result information in a memory module; the detection result information includes the value of a first counter and the value of a second counter; the first counter is configured to record the number of times the shutdown path detection fails, and the second counter is configured to record the number of times the detection method is not completed.

2. The detection method according to claim 1, wherein Before step S1, the following steps are performed during the initialization phase of the vehicle-mounted electronic control unit: Acquiring the detection result information from the memory module; According to a third preset rule, updating the value of the second counter; Determine whether the value of the first counter and the updated value of the second counter meet a fourth preset rule; if so, prohibit the on-board electronic control unit from entering the running state in this driving cycle; if not, enable the on-board electronic control unit to enter the running state.

3. The detection method according to claim 2, characterized in that The method for updating the value of the second counter according to the third preset rule includes: Incrementing / decrementing the value of the second counter according to a second preset step length, and starting a timer for this driving cycle until the onboard electronic control unit enters a power-off phase; If the time of the timer exceeds a preset time threshold, the value of the second counter is stored in the memory module.

4. The detection method according to claim 2, characterized in that determining whether the values ​​of the first counter and the updated second counter satisfy a fourth preset rule, and if so, prohibiting the on-board electronic control unit from entering an operating state in this driving cycle; If not, enabling the vehicle electronic control unit to enter the running state includes: If the value of the first counter meets a first counting threshold or the value of the second counter meets a second counting threshold, the on-board electronic control unit is prohibited from entering the operating state in this driving cycle; If the value of the first counter does not meet the first counting threshold and the value of the second counter does not meet the second counting threshold, the on-board electronic control unit is enabled to enter an operating state.

5. The detection method according to claim 2, characterized in that In step S1, for each of the disconnected switches, a first detection result of the shut-off path is obtained according to the first preset rule, wherein the first preset rule includes: if any switch among the plurality of switches fails, the first detection result is set as an abnormality in the shut-off path.

6. The detection method according to claim 2, characterized in that In step S3, the method for updating the detection result information of the shutdown path according to the first detection result and / or the second detection result includes: If both the first detection result and the second detection result indicate that the protection circuit is normal, restoring the value of the first counter and the value of the second counter to initial values; If the first detection result indicates that the protection circuit is abnormal or the second detection result indicates that the protection circuit is abnormal, the value of the first counter is incremented / decremented by a first preset step size, and the value of the first counter after incrementing / decrementing is used as the value of the second counter; The value of the first counter and the value of the second counter are stored in the memory module.

7. The detection method according to claim 1, characterized in that The on-board electronic control unit includes a DC / DC, the protection control subcircuit includes a first sampling unit, a first control unit, a first protection unit, a first coordination unit and a first driving unit that are electrically connected; the plurality of switches include a first switch, a second switch and a third switch; The first switch connects the high-voltage side battery of the DC / DC and the high-voltage side of the voltage conversion unit of the DC / DC; the second switch connects the low-voltage side of the voltage conversion unit and the third switch; the third switch connects the second switch and the low-voltage side battery of the DC / DC and the load; The first sampling unit is configured to obtain operating status information of the DC / DC and send the operating status information to the first control unit; The first control unit is configured to determine or monitor the DC / DC operating state and control the operating state of the first protection unit according to the operating state information and fault protection preset conditions obtained by the first sampling unit; The first protection unit is configured to drive the first driving unit to control the opening / closing of the first switch, the second switch and / or the third switch through the first coordination unit.

8. The detection method according to claim 7, characterized in that The DC / DC voltage conversion unit includes a conversion action unit, a first capacitor, and a second capacitor that are electrically connected. In step S1, for each of the disconnected switches, obtaining a first detection result of the shutdown path according to the first preset rule includes: S111: Obtain a second voltage difference across the second switch, and determine whether the second voltage difference is greater than a second preset voltage threshold. If so, proceed to step S112; if not, set the first detection result as indicating that the shutdown path is abnormal, and proceed to step S3. S112: Obtain a third voltage difference across the third switch, and determine whether the third voltage difference is greater than a third preset voltage threshold. If so, execute step S113; if not, set the first detection result as an abnormality in the shutdown path, and execute step S3; S113: Clearing the protection latch of the first coordination unit; S114: driving the first control unit to set the drive signal to low, controlling the conversion action unit to discharge the first capacitor and the second capacitor for a preset discharge time through the first drive unit, then obtaining a first voltage difference across the first switch, and determining whether the first voltage difference is greater than a first preset voltage threshold; if so, executing step S115; if not, setting the first detection result as an abnormality in the shutdown path, and executing step S3; S115: Obtain the protection status of the first coordination unit and determine whether the protection status is the initial state. If so, execute step S2; if not, set the first detection result as an abnormality in the shutdown path and execute step S3.

9. The detection method according to claim 7, characterized in that In step S2, according to the second preset rule, for the protection control subcircuit, each of the remaining N-1 types of faults is triggered respectively to obtain a second detection result of the shutdown path, including: S211: Set count n=1; S212: Determine whether the count n is greater than N-1. If so, set the second detection result as the shutdown path being normal; and execute step S3; if not, execute step S213; S213: Triggering the nth type fault, obtaining the protection status of the first coordination unit, and determining whether the protection status is protection latched: if so, executing step S214; if not, setting the second detection result as an abnormality in the shutdown path, and executing step S3; S214: Clear the protection latch of the first coordination unit; and obtain the protection status of the first coordination unit, and determine whether the protection status is the initial state. If so, add 1 to the count n and execute step S212; if not, set the second detection result to the abnormality of the shutdown path and execute step S3.

10. The detection method according to claim 1, characterized in that The on-board electronic control unit includes a BMS, the protection control subcircuit includes a second sampling unit, a second control unit, a second protection unit, a second coordination unit, and a second drive unit that are electrically connected; the plurality of switches include a fourth switch and a fifth switch; The fourth switch connects the power battery of the BMS and the fifth switch, and the fifth switch connects the fourth switch and the load end of the BMS; The second sampling unit is configured to obtain operating status information of the BMS and send the operating status information to the second control unit; The second control unit is configured to determine or monitor the BMS operating state and control the operating state of the second protection unit according to the operating state information and fault protection preset conditions obtained by the second sampling unit; The second protection unit is configured to drive the second driving unit to control the opening / closing of the fourth switch and the fifth switch through the second coordination unit.

11. The detection method according to claim 10, characterized in that: In step S1, for each of the disconnected switches, obtaining a first detection result of the shut-off path according to a first pre-rule includes: S121: Obtain a fourth voltage difference across the fifth switch, and determine whether the fourth voltage difference is greater than a fourth preset threshold. If so, execute step S122; if not, set the first detection result as an abnormality in the shutdown path, and execute step S3; S122: Obtain a fifth voltage difference across the fourth switch, and determine whether the fifth voltage difference is greater than a fifth preset threshold; if so, execute step S123; if not, set the first detection result as an abnormality in the shutdown path, and execute step S3; S123: Clear the protection latch of the second coordination unit; S124: Obtain the protection status of the second coordination unit and determine whether the protection status is the initial state. If so, execute step S2; if not, set the first detection result as an abnormality in the shutdown path and execute step S3.

12. The detection method according to claim 10, characterized in that In step S2, according to a second preset rule, for the protection control subcircuit, each of the remaining N-1 types of faults is triggered respectively to obtain a second detection result of the shutdown path, including: S221: Set count n=1; S222: Determine whether the count n is greater than N-1. If so, set the second detection result as the shutdown path being normal; and execute step S3; if not, execute step S223; S223: Triggering the nth type fault, obtaining the protection status of the second coordination unit, and determining whether the protection status is protection latched: if so, executing step S224; if not, setting the second detection result as an abnormality in the shutdown path, and executing step S3; S224: Clear the protection latch of the second coordination unit; and obtain the protection status of the second coordination unit, and determine whether the protection status is the initial state. If so, add 1 to the count n and execute step S222; if not, set the second detection result to the abnormality of the shutdown path and execute step S3.

13. A detection system for shutting down a path, characterized in that: The shutdown path includes a protection control subcircuit and a plurality of switches. The shutdown path is configured to protect against N types of faults of the vehicle electronic control unit, where N ≥ 1 and N is an integer. The detection system is configured to detect the shutdown path during the power-off phase of the shutdown path, including: a switch detection control device configured to trigger any one of the N types of faults and disconnect the switch corresponding to the fault protection implemented in that type; and for each disconnected switch, obtain a first detection result of the shutdown path according to a first preset rule; a subcircuit detection and control device configured to trigger each of the remaining N-1 types of faults for the protection control subcircuit according to a second preset rule, and obtain a second detection result of the shutdown path; A detection result processing device is configured to update the detection result information of the shutdown path based on the first detection result and / or the second detection result; and store the detection result information in a memory module; the detection result information includes the value of a first counter and the value of a second counter; the first counter is configured to record the number of times the shutdown path detection fails, and the second counter is configured to record the number of times the detection method is not completed.

14. The detection system according to claim 13, characterized in that: The detection system further includes a detection result application device, wherein the detection result application device is configured to: obtain the detection result information from the memory module during the initialization phase of the on-board electronic control unit; The detection result application device is further configured to update the value of the second counter according to a third preset rule; The detection result application device is further configured to determine whether the value of the first counter and the updated value of the second counter meet a fourth preset rule, and if so, prohibit the on-board electronic control unit from entering the operating state in this driving cycle; if not, enable the on-board electronic control unit to enter the operating state.

15. The detection system according to claim 13, characterized in that: The on-board electronic control unit includes a DC / DC; the protection control subcircuit includes a first sampling unit, a first control unit, a first protection unit, a first coordination unit and a first driving unit that are electrically connected; the plurality of switches include a first switch, a second switch and a third switch; The detection system further includes a first voltage sensor, a second voltage sensor, a third voltage sensor, a fourth voltage sensor, and a fifth voltage sensor connected to the first sampling unit; One end of the first switch is connected to the high-voltage side battery of the DC / DC, and the other end is connected to the high-voltage side of the voltage conversion unit of the DC / DC; one end of the second switch is connected to the low-voltage side of the voltage conversion unit, and the other end is connected to one end of the third switch; the other end of the third switch is connected to the low-voltage side battery of the DC / DC and the load; The first voltage sensor is provided at one end of the first switch, and the second voltage sensor is provided at the other end of the first switch; the third voltage sensor is provided at one end of the second switch, the fourth voltage sensor is provided at the other end of the second switch, and the fifth voltage sensor is provided at the other end of the third switch; The first sampling unit is configured to obtain operating status information of the DC / DC and send the operating status information to the first control unit; The first control unit is configured to control the operating state of the first protection unit according to the operating state information obtained by the first sampling unit and the fault protection preset condition or the driving of the detection system; The first protection unit is configured to drive the first driving unit to control the opening / closing of the first switch, the second switch and / or the third switch through the first coordination unit; The first control unit includes a first memory module and a first timer module, wherein the first memory module is configured to store the detection result information; The first timer module is configured to obtain the duration from the DC / DC power-up phase to the power-down phase of the current driving cycle.

16. The detection system according to claim 15, characterized in that: N=4, the faults include overvoltage fault, overcurrent fault, overtemperature fault and DC / DC control unit fault; the first protection unit includes an overvoltage protection module, an overcurrent protection module, a first overtemperature protection module and a first external watchdog protection module.

17. The detection system according to claim 13, characterized in that The on-board electronic control unit includes a BMS, the protection control subcircuit includes a second sampling unit, a second control unit, a second protection unit, a second coordination unit, and a second drive unit that are electrically connected; the plurality of switches include a fourth switch and a fifth switch; The detection system further includes a sixth voltage sensor, a seventh voltage sensor, and an eighth voltage sensor connected to the second sampling unit; The fourth switch connects the power battery of the BMS and the fifth switch, and the fifth switch connects the fourth switch and the load end of the BMS; The sixth voltage sensor is provided at one end of the fourth switch, the seventh voltage sensor is provided between the fourth switch and the fifth switch; the eighth voltage sensor is provided at the other end of the fifth switch; The second sampling unit is configured to obtain operating status information of the BMS and send the operating status information to the second control unit; The second control unit is configured to determine or monitor the BMS operating state and control the operating state of the second protection unit according to the operating state information and fault protection preset conditions obtained by the second sampling unit; The second protection unit is configured to drive the second driving unit to control the opening / closing of the fourth switch and the fifth switch through the second coordination unit; The second control unit includes the memory module and a second timer module, wherein the memory module is configured to store the detection result information; The second timer module is configured to obtain the duration from the BMS power-on phase to the BMS power-off phase in this driving cycle.

18. The detection system according to claim 17, characterized in that: N=4, the faults include overcharge fault, over-discharge fault, overtemperature fault and BMS control unit fault; the second protection unit includes an overcharge protection module, an over-discharge protection module, a second overtemperature protection module and a second external watchdog protection module.

19. An electronic device, characterized in that: The electronic device includes a processor and a memory, the processor is suitable for implementing various instructions, and the memory is suitable for storing multiple instructions, and the instructions are suitable for being loaded by the processor and executing the steps of the detection method according to any one of claims 1 to 12.

20. A computer-readable storage medium, characterized in that The computer-readable storage medium stores computer-executable instructions, and when the computer-executable instructions are executed, the steps of the detection method according to any one of claims 1 to 12 are implemented.

Images