Systems, methods, apparatus, and storage media for monitoring on-chip functionality of a vehicle

Abstract

The present disclosure discloses a system, method, device and storage medium for monitoring the function of a vehicle-mounted chip. According to the system of the present disclosure, the diagnostic service unit is registered by the control unit, and according to the type of the function to be tested in the vehicle-mounted chip, the diagnostic service unit with the corresponding diagnostic function is controlled to perform the diagnostic test, so that the dynamic registration of different diagnostic service units according to the user demand or the actual condition can be realized, and the scalability of the diagnostic test service can be improved.

Description

TECHNICAL FIELD

[0001] The present disclosure relates generally to the technical field of vehicle chip. More specifically, the present disclosure relates to a system, method, device and storage medium for monitoring vehicle chip functions. BACKGROUND

[0002] With the development of traditional cars to intelligent, electric and networked, the vehicle chip of the car has also undergone a fundamental change. Traditional cars pay more attention to performance, power, fuel consumption and other dimensions, while intelligent cars pay more attention to the interaction between the car and the people. In order to adapt to the development needs of intelligent cars, more number and more powerful chips are introduced in intelligent cars.

[0003] The traditional vehicle chip monitoring system tests some functions of the vehicle chip through fault injection or static signal detection. However, these detection schemes are usually pre-set, so there are problems such as fixed detection method and low expansibility, making it difficult for car companies to customize according to their own needs or actual application conditions, thus failing to meet the development trend of intelligent cars.

[0004] Therefore, there is an urgent need for a corresponding technical solution to solve the problem of low expansibility of the vehicle chip monitoring system. SUMMARY

[0005] In order to at least solve one or more technical problems mentioned above, the present disclosure proposes a system, method, device and storage medium for monitoring vehicle chip functions in multiple aspects.

[0006] In a first aspect, the present disclosure provides a system for monitoring vehicle chip functions, comprising: a control unit configured to: register a diagnostic service unit; control the diagnostic service unit with corresponding diagnostic functions to perform diagnostic testing according to the type of the function to be tested in the vehicle chip, so as to monitor the function state of the function to be tested; and a diagnostic service unit configured to perform diagnostic testing on the function to be tested in the vehicle chip under the control of the control unit and return a diagnostic result.

[0007] In a second aspect, the present disclosure provides a method for monitoring vehicle chip functions, comprising: registering a diagnostic service unit; and controlling the diagnostic service unit with corresponding diagnostic functions to perform diagnostic testing according to the type of the function to be tested in the vehicle chip, so as to monitor the function state of the function to be tested.

[0008] In a third aspect, the present disclosure provides an apparatus for monitoring the function of an on-board chip, comprising: a processor; and a memory having stored therein program instructions for monitoring the function of the on-board chip, which when executed by the processor, cause the apparatus to implement the method according to any one of the second aspect of the present disclosure.

[0009] In a fourth aspect, the present disclosure provides a computer-readable storage medium having stored therein program instructions for monitoring the function of an on-board chip, which when executed by a processor, cause the implementation of the method according to any one of the second aspect of the present disclosure.

[0010] Through the system and method for monitoring the function of an on-board chip as provided above, the scheme of the present disclosure can achieve the dynamic registration of different diagnostic service units according to user needs or actual conditions by registering the diagnostic service unit, to provide diagnostic test services of corresponding functions after the registration of the diagnostic service unit, so as to not need to pre-set fixed diagnostic detection schemes, and to be beneficial to improving the scalability of the diagnostic test services. In some embodiments, by setting the strategy module to dynamically configure the security level judgment strategy according to the running state of the vehicle, different security level judgment strategies can be set under different running states of the vehicle, so as to be beneficial to improving the applicability and flexibility of the security level judgment strategy. BRIEF DESCRIPTION OF DRAWINGS

[0011] The above and other objects, features and advantages of the exemplary embodiments of the present disclosure will be more apparent from the following detailed description taken in conjunction with the accompanying drawings, in which:

[0012] Figure 1 a schematic block diagram of a system for monitoring the function of an on-board chip according to an embodiment of the present disclosure is shown;

[0013] Figure 2 a schematic block diagram of a system comprising a strategy unit according to an embodiment of the present disclosure is shown;

[0014] Figure 3 a schematic block diagram of a system comprising a configuration unit according to an embodiment of the present disclosure is shown;

[0015] Figure 4 a schematic block diagram of a system comprising a communication unit according to an embodiment of the present disclosure is shown; and

[0016] Figure 5 a flowchart of a method for monitoring the function of an on-board chip according to an embodiment of the present disclosure is shown. DETAILED DESCRIPTION

[0017] The technical solutions in the embodiments of the present disclosure will be described clearly and completely in combination with the drawings in the embodiments of the present disclosure. Obviously, the described embodiments are part of the embodiments of the present disclosure, rather than all the embodiments. Based on the embodiments in the present disclosure, all other embodiments obtained by those skilled in the art without creative work fall within the scope of protection of the present disclosure.

[0018] It should be understood that the terms "comprise" and "include" used in the specification and claims of the present disclosure indicate the presence of the described features, integers, steps, operations, elements, and / or components, but do not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and / or groups thereof.

[0019] It should also be understood that the terms used in the specification of the present disclosure are only for the purpose of describing specific embodiments, and are not intended to limit the present disclosure. As used in the specification and claims of the present disclosure, the singular forms "a", "an" and "the" are intended to include the plural forms, unless the context clearly indicates otherwise. It should be further understood that the term "and / or" used in the specification and claims of the present disclosure means any combination of one or more of the associated listed items and all possible combinations thereof, and includes these combinations.

[0020] As used in the specification and claims of this document, the term "if' can be interpreted as meaning "when" or "once" or "in response to a determination" or "in response to detecting" depending on the context. Similarly, the phrase "if determined" or "if detected [the described condition or event]" can be interpreted as meaning "once determined" or "in response to a determination" or "once detected [the described condition or event]" or "in response to detecting [the described condition or event]" depending on the context.

[0021] The specific embodiments of the present disclosure will be described in detail below in combination with the drawings.

[0022] Figure 1 A schematic block diagram of a system for monitoring functions of an in-vehicle chip according to an embodiment of the present disclosure is shown. As shown in FIG. 1, the system 100 can include a control unit 110 and a diagnostic service unit 120, wherein the control unit 110 can be configured to: register the diagnostic service unit 120; and control the diagnostic service unit 120 with a corresponding diagnostic function to perform a diagnostic test according to a type of a function to be tested in the in-vehicle chip, so as to monitor a functional state of the function to be tested. The diagnostic service unit 120 can be configured to perform the diagnostic test on the function to be tested in the in-vehicle chip under the control of the control unit 110, and return a diagnostic result. Figure 1

[0023] ​A vehicle chip is a chip used in a vehicle, i.e., an automotive-grade chip, which belongs to a kind of automotive components. Automotive-grade is a specification standard applicable to automotive electronic components. In some embodiments, different types of vehicle chips are responsible for different functions. For example, for a vehicle chip responsible for computing power and data processing, it can have control functions for automotive components such as engines, chassis, and / or vehicle bodies. For a sensor chip, it has the function of detecting radar, airbags, or tire pressure; also, for example, for a display chip, it has the function of displaying a reversing image or navigation image. By detecting the functional state of the vehicle chip, the state of the hardware device or software function associated with it can be monitored.

[0024] The function to be tested described herein can include one or more functions (such as the control function, detection function, and display function described above) responsible for the vehicle chip, or can include a function related to the vehicle chip. The function related to the vehicle chip can include one or more of, for example, an I2C interface, a serial peripheral interface (i.e., SPI interface), a transmission control protocol / internet protocol (i.e., TCP / IP protocol), a register, and network communication of the vehicle chip. The system according to the embodiments of the present disclosure can be used to monitor the functions of one or more vehicle chips.

[0025] In other embodiments, for different types of functions of the vehicle chip, or for different types of vehicle chips, a diagnostic service unit 120 capable of providing a corresponding diagnostic function can be provided to provide targeted diagnostic test services. The diagnostic service unit 120 of the corresponding diagnostic function is a diagnostic service unit that has a diagnostic test service for the corresponding type of function to be tested. For example, when the function to be tested is a register function of the vehicle chip, a diagnostic service unit 120 capable of detecting, for example, read / write functions of the register can be provided to perform read / write function test services on the register. In yet other embodiments, one or more diagnostic service units 120 can be dynamically set up so that each diagnostic service unit 120 can perform its corresponding diagnostic test service under the control of the control unit 110 when it is registered in the system 100.

[0026] In some embodiments, in the registration of the diagnostic service unit 120, the control unit 110 can be further configured to: in response to receiving a diagnostic registration request of the diagnostic service unit 120, the registration connection with the diagnostic service unit 120 can be achieved by calling a pre-set registration interface on the control unit 110. In other embodiments, the control module 110 can have an active diagnostic function, i.e., it can control the diagnostic service unit 120 to perform diagnostic tests on the functional state of the vehicle chip by actively triggering the diagnostic service, such as sending a diagnostic test instruction to the diagnostic service unit 120 with the corresponding diagnostic function.

[0027] In yet some embodiments, the diagnosis test performed by the diagnosis service unit 120 can be dynamic detection. For example, for the diagnosis of the function of a register, the diagnosis service unit 120 with the corresponding diagnosis function can dynamically write the relevant diagnosis test case, and then return the read result to the control unit 110. For example, for the diagnosis of the function of a chip pin on the vehicle, the diagnosis service unit 120 with the corresponding diagnosis function can perform a test operation on the pin to obtain the functional state of the pin. For example, if the test operation is performed on a GPIO pin, the pull-up, pull-down, and PWM waveform can be tested. If the pin is tested for the communication function of SPI, the data reception, transmission, and data correctness verification can be tested at different rates. In some embodiments, the diagnosis result returned by the diagnosis service unit 120 to the control unit 110 can include the functional state and functional parameters of the function to be tested. Compared with the fault injection or detection of static signals such as temperature in the traditional vehicle chip monitoring system, dynamic detection helps to truly reflect the functional state of the function to be tested during operation.

[0028] In other embodiments, each diagnosis service unit 120 can include one or more diagnosis test cases, each of which can be used for diagnosis test service of a sub-function of the vehicle chip. For example, assuming that a diagnosis service unit 120 is used to diagnose the function of an I2C interface, one of the diagnosis test cases included therein can be used to diagnose the transmission speed of the I2C interface, and another diagnosis test case can be used to diagnose the connection state of the I2C interface.

[0029] In yet some embodiments, each diagnosis service unit 120 can have a corresponding service identifier, and each diagnosis test case can have a corresponding case identifier. In some application scenarios, the diagnosis of the corresponding function can be performed by calling the diagnosis service unit 120 corresponding to the service identifier, and the diagnosis of the corresponding sub-function can be performed by calling the diagnosis test case corresponding to the case identifier. In other application scenarios, when there is a need to upgrade the diagnosis service unit 120, the corresponding single or multiple diagnosis service units 120 can be independently upgraded by identifying the service identifier.

[0030] In some embodiments, the control unit 110 not only has the function of triggering active diagnosis, but also the function of passively triggering diagnosis. For example, it can receive diagnostic requests from other units within the system or external units outside the system to control the diagnostic service unit 120 to perform corresponding diagnostic functions. In other application scenarios, when a new fault or error occurs during the operation of the vehicle chip, a diagnostic service unit 120 with corresponding detection functions can be designed based on the new fault or error information. By registering the diagnostic service unit 120, the system according to the embodiments of this disclosure has the ability to monitor the new fault or error information. With this setup, the problem that traditional chip monitoring systems cannot detect certain hidden faults in a timely manner through pre-set tests can be solved.

[0031] The above combination Figure 1 The system according to embodiments of this disclosure has been described exemplarily. It is understood that the system according to embodiments of this disclosure can conveniently control and personalize the required diagnostic testing service through registration when any diagnostic testing service needs to be added, thereby improving the flexibility and scalability of the diagnostic testing service. It is also understood that the above description is exemplary and not restrictive. For example, in some embodiments, the control unit 110 can also be configured to deregister with the diagnostic service unit 120, that is, to release the registration connection with the diagnostic service unit 120 when the corresponding diagnostic service is no longer needed, thereby further improving the flexibility of the diagnostic testing service. Furthermore, the system according to embodiments of this disclosure may not be limited to only including the control unit and diagnostic service unit shown in the figures. In other embodiments, the system according to embodiments of this disclosure may also include, for example, a policy unit to provide corresponding security level judgment policies. The following will combine... Figure 2 An exemplary description is provided.

[0032] Figure 2 A schematic block diagram of a system including a strategy unit according to an embodiment of this disclosure is shown. Figure 2 As shown, the system 200 may include a control unit 110, a diagnostic service unit 120, and a strategy unit 210. The strategy unit 210 may be configured to: determine a safety level judgment strategy corresponding to the function under test in the vehicle's operating state; and, based on the safety level judgment strategy, judge the diagnostic results to determine the safety level to which the functional state of the function under test belongs in the diagnostic results. The control unit 110 may also be configured to perform corresponding safety operations based on the safety level.

[0033] In some embodiments, the running states can include a stationary state or a driving state. In other embodiments, the driving state can include a forward driving state or a backward driving state (i.e., a reversing state). In yet other embodiments, different security level judgment strategies can be set for different running states. In each running state, a corresponding security level judgment strategy can be set for each function to be tested. For example, for the reversing image function, different security level judgment strategies can be set for the stationary state and the driving state of the vehicle, respectively.

[0034] The strategy unit 210 can be configured to import security level judgment strategies for different functions to be tested, so as to judge the security level of the functions to be tested. The security level judgment strategies can include the correspondence between the function state of the vehicle chip and the security level. The security level judgment strategies can be pre-set as needed, or can be added in real time according to the actual situation of the vehicle. In some embodiments, the security level can include multiple levels of error levels (or fault levels), such as low-level error, medium-level error, and high-level error, which correspond to a gradually decreasing security level of the chip. In other embodiments, the security level can include a security level and an error level, wherein the security level can be used to represent the normal state of the function to be tested, i.e., the higher security of the chip.

[0035] According to the security level judgment strategy determined in the running state of the vehicle, the diagnostic result obtained by testing the function to be tested in the running state can be judged to determine the security level to which the function state of the function to be tested in the diagnostic result belongs. For example, in some application scenarios, in response to detecting that the current running state of the vehicle is a stationary state, and assuming that the function to be tested is the display function of the reversing image, the diagnostic result can be judged according to the security level judgment strategy corresponding to the reversing image function in the stationary state in the strategy unit 210. In other application scenarios, in response to detecting that the current running state of the vehicle is a driving state, and assuming that the function to be tested is the display function of the reversing image, the diagnostic result can be judged according to the security level judgment strategy corresponding to the reversing image function in the driving state in the strategy unit 210.

[0036] Taking the reversing image as an example, since the importance of the function state of the reversing image is different in the stationary state and the driving state of the vehicle, and the impact of the function error is also different, different security level judgment strategies for the reversing image function can be set according to the running state of the vehicle, for example, in the stationary state of the vehicle, the security level to which the reversing image belongs when a certain fault occurs can be a low-level error; in the driving state of the vehicle, the security level to which the reversing image belongs when the same fault occurs can be a high-level error. According to such a setting, it is beneficial to dynamically import different strategies according to the actual situation of the vehicle, so as to realize the dynamic configuration of the strategies.

[0037] As Figure 2 As further shown in the middle, the policy unit 210 can interact with the control unit 110 for information. Specifically, the control unit 110 can send the diagnosis result of the diagnosis test of the on-board chip by the diagnosis service unit 120 to the policy unit 210, the policy unit 210 can import the corresponding safety level judgment policy according to the user demand (for example, the demand of the car manufacturer) or the current running state of the vehicle, and judge the diagnosis result according to the determined safety level judgment policy to obtain the safety level result. Further, the policy unit 210 can feed back the safety level result obtained by the judgment to the control unit 110, so that the control unit 110 can perform corresponding safety operation according to the safety level result.

[0038] In some embodiments, the control unit 110 can directly send the diagnosis result to the policy unit 210 for judgment, or can only send the diagnosis result to the policy unit 210 when there is an abnormality in the function state in the diagnosis result. In other embodiments, the corresponding safety operation performed by the control unit 110 can include at least one of issuing a warning signal, reporting information, issuing a control signal to restart the chip, and issuing a control signal to control the vehicle to stop driving.

[0039] For ease of understanding, still taking the above-mentioned reversing image function as an example, in the stationary state of the vehicle, the safety level to which the policy unit 210 judges when the reversing image display failure occurs can be a low-level error, at which time the control unit 110 can issue a warning signal; in the running state of the vehicle, the safety level to which the policy unit 210 judges when the reversing image display failure occurs can be a high-level error, at which time the control unit 110 can report information or issue a control signal to control the vehicle to stop driving.

[0040] In other embodiments, the policy unit 210 can also be configured to filter a plurality of same safety levels obtained within a first preset time period for the same to-be-tested function, and / or in response to obtaining a plurality of same level error levels for the same to-be-tested function within a second preset time period, promote the level of the same level error level and report information. The first preset time period can be set as needed. The second preset time period can be set as needed. The first preset time period and the second preset time period can be set as needed to be the same or different. The number threshold of the plurality of same safety levels can be set as needed. The number threshold of the plurality of same level error levels can also be set as needed.

[0041] In some application scenarios, for the same to-be-tested function, there can be multiple same security levels obtained in a short time. The multiple same security levels can be filtered, for example, only one result is fed back to the control unit 110, which can avoid frequent repetitive information interaction and can also be beneficial to reduce the frequent repetitive safety operation of the control unit 110.

[0042] In some application scenarios, for the same to-be-tested function, there can be multiple same security levels obtained in a short time. The multiple same security levels can be filtered, for example, only one result is fed back to the control unit 110, which can avoid frequent repetitive information interaction and can also be beneficial to reduce the frequent repetitive safety operation of the control unit 110.

[0043] The above is described in combination with Figure 2 The system according to the embodiments of the present disclosure is described exemplarily, and it can be understood that, compared with a pre-fixed fault level division strategy, the strategy unit 210 according to the embodiments of the present disclosure can dynamically configure different judgment strategies according to different states of the vehicle, so as to more truly and accurately reflect the real impact of the current fault, and the configurability of the strategy unit also facilitates the user to adjust and modify the strategy according to the demand. It can also be understood that the above description is exemplary and not limiting, for example, the system according to the embodiments of the present disclosure can not be limited to only including the control unit, the diagnostic service unit and the strategy unit in the figure, and other functional units such as a configuration unit and / or an upper monitoring unit can also be set according to the need. The following will be described exemplarily in combination with Figure 3 The system according to the embodiments of the present disclosure is described exemplarily, and it can be understood that, compared with a pre-fixed fault level division strategy, the strategy unit 210 according to the embodiments of the present disclosure can dynamically configure different judgment strategies according to different states of the vehicle, so as to more truly and accurately reflect the real impact of the current fault, and the configurability of the strategy unit also facilitates the user to adjust and modify the strategy according to the demand. It can also be understood that the above description is exemplary and not limiting, for example, the system according to the embodiments of the present disclosure can not be limited to only including the control unit, the diagnostic service unit and the strategy unit in the figure, and other functional units such as a configuration unit and / or an upper monitoring unit can also be set according to the need. The following will be described exemplarily in combination with

[0044] Figure 3 A schematic block diagram of a system according to the embodiments of the present disclosure is shown, which includes a configuration unit. As shown in Figure 3 The system 300 can include a control unit 110, a diagnostic service unit 120, a strategy unit 210 and a configuration unit 310, wherein the configuration unit 310 can be configured to: import configuration information to the control unit 110, wherein the configuration information can include at least one of the following: an active diagnosis period of the diagnostic service unit 120; an upper limit of execution time of a single diagnosis test performed by the diagnostic service unit 120; and a heartbeat signal period.

[0045] In some application scenarios, when the control unit 110 is started, the configuration unit 310 can import (or load) the configuration information under the control of the control unit 110. In some embodiments, different active diagnosis periods can be configured for different diagnosis service units 120. The active diagnosis period can be a time interval for controlling the diagnosis service unit 120 to diagnose periodically.

[0046] The upper limit of the execution time is the worst-case execution time of the diagnosis service unit 120 executing the diagnosis test case. If the execution time exceeds the upper limit, it indicates that the vehicle-mounted chip may have an abnormal state. The upper limit of the execution time can be set as needed. For example, in other application scenarios, when the control unit 110 controls a diagnosis service unit 120 to perform a diagnosis test on a function to be tested, if the diagnosis result is not returned within the upper limit of the execution time, it indicates that there may be a problem in the diagnosis test process of the diagnosis service unit 120; or if the diagnosis result is returned within the upper limit of the execution time, even if the returned diagnosis result is normal, it is difficult to guarantee that the diagnosis test process or the function state of the function to be tested is completely normal. Therefore, by setting the upper limit of the execution time, the diagnosis test time of the diagnosis service unit 120 can be reasonably limited, so that the system 300 can find chip problems that may not be easily found.

[0047] The heartbeat signal period described above can be a time interval for periodically sending a signal indicating that the system 300 is operating normally. In some embodiments, the heartbeat signal period can be imported by the configuration unit 310 and triggered by the control unit 110 to generate a heartbeat signal. In other embodiments, the heartbeat signal triggered by the control unit 110 can be reported to the upper-layer monitoring unit 320, so that the upper-layer monitoring unit 320 can monitor the control unit 110 and the entire system 300. The upper-layer monitoring unit 320 will be described in detail below.

[0048] As Figure 3 As further shown in FIG. 1, the system 300 according to embodiments of the present disclosure can further include an upper-layer monitoring unit 320, which can be configured to receive the reported information and perform corresponding control operations on the vehicle-mounted chip and / or the vehicle according to the security level in the reported information. The upper-layer monitoring unit 320 can communicate directly or indirectly with the control unit 110 to receive the information reported by the control unit 110, or can receive the information reported by other units via the control unit 110.

[0049] In some embodiments, the safety operations performed by the control unit 110 may include information reporting, that is, reporting information including diagnostic results and policy judgment results to the upper-level monitoring unit 320. The upper-level monitoring unit 320 may perform higher-level control operations on the vehicle itself and / or the on-board chip based on the safety level of the function under test determined by the policy judgment in the reported information. This means performing actions at a higher level than the safety operations themselves; for example, when the safety level in the reported information is a high-level error, it may control the on-board chip to restart and / or control the vehicle to enter a safe state (e.g., braking to a stationary state).

[0050] The above combination Figure 3 The system including a configuration unit and / or an upper-level monitoring unit according to the embodiments of this disclosure has been described exemplarily. It is understood that the above description is exemplary and not restrictive. For example, the upper-level monitoring unit 320 may not be limited to being included in the system 300 of this disclosure embodiment, but may also be located outside the system 300 (e.g., the upper-level monitoring unit 320 may be a control device already present on the vehicle or vehicle chip), and communication between the system 300 and the upper-level monitoring unit 320 is realized through a communication connection between the control unit 110 and the upper-level monitoring unit 320. It is also understood that the system of this disclosure embodiment is not limited to only being able to interact with the upper-level monitoring unit 320, but may also interact with other external units. The following will combine... Figure 4 An illustrative example is provided.

[0051] Figure 4 A schematic block diagram of a system including a communication unit according to an embodiment of this disclosure is shown. Figure 4 As shown, the system 400 may include a control unit 110, a diagnostic service unit 120, a strategy unit 210, a configuration unit 310, and a communication unit 420. The diagnostic service unit 120, strategy unit 210, and configuration unit 310 can be configured as needed, and have already been discussed in conjunction with the preceding text. Figures 1-3 The details have been described in detail and will not be repeated here. The communication unit 420 can be connected between the control unit 110 and an external unit, and can be configured to transmit information between the control unit 110 and the external unit, wherein the external unit may include, for example, the application unit 410 (shown in dashed box) and / or the upper-level monitoring unit 320 (shown in dashed box) shown in the figure.

[0052] The communication unit 420 can support communication functions in multiple modes such as serial peripheral interface (SPI), inter-process communication (IPC), hypertext transfer protocol (HTTP), and the like. In some embodiments, for the security and convenience of information, the information can be packaged in a preset data packet format, and the packaged information can be transmitted in the system 400 through the communication unit 420. In other embodiments, the communication unit 420 can include a communication interface to communicate with an external unit. The external unit can be a functional unit disposed outside the system 400, such as the upper monitoring unit 320, the functions of which have been described in the foregoing and will not be repeated here. Figure 3

[0053] The application unit 410 can include a vehicle-mounted application (or vehicle-mounted APP) and / or a smart terminal application (such as a mobile phone APP), and the like. In some embodiments, the application unit 410 can include one or more of, for example, a reversing image APP, a navigation APP, a driving recorder APP, and the like. In other embodiments, the control unit 110 can be further configured to register the application unit 410, and control the diagnostic service unit 120 having a corresponding diagnostic function to perform a diagnostic test according to a diagnostic request of the application unit 410.

[0054] The number of application units 410 can be one or more. In other embodiments, the control unit 110 can be further configured to register the application unit 410 in response to receiving an application registration request of the application unit 410, and deregister the application unit 410 in response to receiving a deregistration request of the registered application unit 410. According to such a configuration, the dynamic registration of each application unit 410 can be achieved. In other embodiments, the control unit 110 can receive the application registration request of the application unit 410 and the like via the communication unit 420.

[0055] In other embodiments, the application unit 410 can actively trigger a diagnostic test service, that is, by sending a diagnostic request to the control unit 110, by controlling the diagnostic service unit 120 corresponding to the to-be-tested function requested to be diagnosed in the diagnostic request to perform a diagnostic test through the control unit 110, and by receiving the diagnostic result returned by the diagnostic service unit 120 in a timely manner via the communication unit 420.

[0056] ​In some application scenarios, the control unit 110 can receive an active diagnosis request, which can be from an active diagnosis period trigger imported by the configuration unit 310, or from a diagnosis request of the application unit 410, or from a diagnosis request of the upper-layer monitoring unit 320. Here, the active diagnosis request from the application unit 410 and / or the upper-layer monitoring unit 320 can be delivered to the control unit 110 through the communication unit 420. When receiving the active diagnosis request, the control unit 110 can parse the active diagnosis request, and then start the diagnosis service unit 120 with corresponding diagnosis function to perform diagnosis test service.

[0057] Then, the diagnosis service unit 120 is responsible for executing the diagnosis test case, and reporting the test obtained diagnosis result to the control unit 110. Further, the control unit 110 can deliver the diagnosis result to the strategy unit 210, and then the strategy unit 210 judges the current diagnosis result according to the current strategy (i.e. the safety level judgment strategy determined according to the current running state of the vehicle), to obtain the current safety level of the to-be-tested function. The control unit 110 will execute the corresponding level of safety operation according to the current safety level, especially when the error level is judged. According to such setting, the system of the embodiment of the disclosure can realize the timely detection and judgment of the to-be-tested function of the vehicle-mounted chip, and obtain the safety level more in line with the actual situation according to the real-time changing vehicle running state, so as to execute more accurate safety operation.

[0058] In still some embodiments, the control unit 110 can also be configured to at least one of: receive the functional safety problem of the application unit 410 generated in the running process; and / or subscribe to the functional state of the to-be-tested function interested by the application unit 410 according to the subscription request of the application unit 410.

[0059] For example, in some application scenarios, assuming that the application unit 410 is a reversing image application, it can report the functional safety problem related to the reversing image function. In some other application scenarios, assuming that the application unit 410 is a navigation application, it can report the functional safety problem related to the navigation function. In still some embodiments, when receiving the functional safety problem reported by any application unit 410, the control unit 110 can send the functional safety problem to the strategy unit 210 for safety level judgment, or can issue a warning signal or perform information reporting and other safety operations, such as reporting the functional safety problem to the upper-layer control unit 320.

[0060] According to such a configuration, problems possibly existing in the software layer of the vehicle-mounted chip can be discovered in a timely manner, and more effective monitoring of the functional safety state of the vehicle-mounted chip can be achieved in combination with the information reporting function of the software layer. Compared with traditional automobile monitoring which focuses more on hardware faults, the importance of software is increasing for intelligent vehicles, and therefore it is of great significance to implement monitoring in the software layer.

[0061] The subscription request described above can be a customized request for periodic active diagnosis of a function of interest of a target vehicle-mounted chip. In some embodiments, one or more of the following subscription information can be included in the subscription request: the target vehicle-mounted chip, the function of interest, and the active diagnosis period. According to the subscription request for active diagnosis triggered by the application unit 410, the control unit 110 can periodically control the diagnosis service unit 120 to perform diagnosis testing, and can feed back the diagnosis results to the application unit 410 in a timely manner, so that the application unit 410 can obtain the current functional safety state of the target vehicle-mounted chip in a timely manner.

[0062] The above description is combined with Figure 4 The application unit and the communication unit according to the embodiments of the present disclosure are described exemplarily, and it can be understood that, through information interaction between the system 400 and the application unit 410, the system 400 can also realize functions such as information display and information processing in cooperation with software. Further, each application unit 410 can be independently designed, developed and extended in the application layer according to actual needs of users, which is beneficial to further extend the detection function of the system 400 and improve the scalability of the system in the application layer. Further, it can be understood that the application unit 410 can not be limited to being arranged outside the system 400, but can also be arranged inside the system 400 as needed.

[0063] Correspondingly, the embodiments of the present disclosure also provide a method for monitoring the function of a vehicle-mounted chip, which will be described below with reference to Figure 5 .

[0064] Figure 5 A flowchart of a method for monitoring the function of a vehicle-mounted chip according to the embodiments of the present disclosure is shown. As Figure 5 shown in the flowchart, the method 500 can include: in step 501, the diagnosis service unit can be registered; and in step 502, the diagnosis service unit with a corresponding diagnosis function can be controlled to perform diagnosis testing according to the type of a function to be tested in the vehicle-mounted chip, so as to monitor the functional state of the function to be tested.

[0065] In some embodiments, the method 500 can further include: determining, according to the running state of the vehicle, a safety level judgment strategy corresponding to the to-be-tested function in the running state; judging, according to the safety level judgment strategy, the diagnosis result of the diagnosis test, to determine a safety level to which the function state of the to-be-tested function in the diagnosis result belongs; and performing a corresponding safety operation according to the safety level.

[0066] In some other embodiments, the safety level can include multiple levels of error levels, and the method 500 can further include: filtering multiple same safety levels obtained within a first preset time length for the same to-be-tested function; and / or in response to obtaining multiple same levels of error levels for the same to-be-tested function within a second preset time length, promoting the level of the same level of error level and reporting information.

[0067] In some other embodiments, the safety operation can include issuing a warning signal and / or reporting information.

[0068] In some embodiments, the method 500 can further include: registering the application unit; and controlling the diagnosis service unit with the corresponding diagnosis function to perform diagnosis testing according to the diagnosis request of the application unit.

[0069] In some other embodiments, the method 500 can further include at least one of: receiving a function safety problem generated by the application unit in the running process; and subscribing to the function state of the to-be-tested function interested by the application unit according to the subscription request of the application unit.

[0070] In some other embodiments, the method 500 can further include configuring at least one of the following information: an active diagnosis cycle of the diagnosis service unit; an upper limit of execution time of a single diagnosis test performed by the diagnosis service unit; and a heartbeat signal cycle.

[0071] It can be understood that the method for monitoring the function of the vehicle-mounted chip according to the embodiments of the present disclosure has been described in detail in the foregoing in combination with the functions of the units in the system, and thus will not be described here. Similarly, some embodiments of the present disclosure also provide a device for monitoring the function of the vehicle-mounted chip, which can include: a processor; and a memory having stored therein program instructions for monitoring the function of the vehicle-mounted chip, which, when executed by the processor, cause the device to implement the method described in the foregoing in combination with the system and the method of the embodiments of the present disclosure. Figure 5 The method described in any one of the embodiments described above, the corresponding features have been described in the foregoing in combination with the system and the method of the embodiments of the present disclosure, and thus will not be repeated here. Further, some embodiments of the present disclosure also provide a computer program product for implementing the method for monitoring the function of the vehicle-mounted chip, which can include the corresponding features described above, and thus will not be repeated here.

[0072] It is noted that, for the sake of simplicity, the disclosure will be described in terms of a number of methods and embodiments thereof which are presented as a series of acts or steps for performing the methods. One skilled in the art will recognize that the acts or steps can be implemented in other sequences, or in parallel, and that the described embodiments are not limited to the disclosed order of the acts or steps. One skilled in the art will also recognize that some of the acts or steps can be eliminated, or further steps can be added, without departing from the scope of the disclosure. Further, one skilled in the art will appreciate that some of the acts or steps can be performed by different entities or entities in different orders, without departing from the scope of the disclosure. Additionally, some of the embodiments described herein can be described in the context of a single implementation, but can be implemented in other contexts, and the disclosure is not limited to the described embodiments.

[0073] Those skilled in the art will recognize that the embodiments of the present disclosure can be implemented in a system, method, or computer program product. Accordingly, the present disclosure can be embodied in hardware and / or in software (including firmware, resident software, micro-code, etc.) that runs on a processor such as a computerized platform. Furthermore, the present disclosure can be embodied as computer-readable or computer-usable data or program code that can be processed by working memory and / or storage, such as disk storage or other storage devices, of the computerized platform.

[0074] Any combination of one or more computer readable medium can be utilized. The computer readable medium can be a computer readable signal medium or a computer readable storage medium. A computer readable storage medium can be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. More specific examples (a non-exhaustive list) of the computer readable storage medium include a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the context of this document, a computer readable storage medium can be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device.

[0075] A computer readable signal medium can include a propagated data signal with computer executable code embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated signal can take any of a variety of forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A computer readable signal medium can be any computer readable medium that can be involved in

[0076] The code can be transmitted in any form, including, but not limited to, radio frequency, electrical, optical, acoustical, or any suitable combination thereof. The code may

[0077] By combining the above-mentioned multiple embodiments, the scheme for monitoring the function of the vehicle-mounted chip of the embodiments of the present disclosure is described in detail. It can be understood that, by means of the registerable operation of the diagnosis service unit, the dynamic configuration (or pluggable configuration) of the diagnosis service unit with different diagnosis functions can be realized, thereby facilitating the expandability of the diagnosis function of the system for monitoring the function of the vehicle-mounted chip and being more in line with the development trend of modern intelligent vehicles.

[0078] In some embodiments, the configurability of the security level judgment strategy and the adaptability to different states provided by the strategy unit make the judgment strategy provided thereby more in line with the actual impact degree of the vehicle-mounted chip failure on the safety of the vehicle, thereby enabling the vehicle to take more efficient and accurate safety operations. Further, in other embodiments, the pluggable configuration of different application units can be realized by means of the registerable operation of the application unit, thereby facilitating the system to realize the functional safety detection at the application level and improve the expandability at the application level.

[0079] While several embodiments of the disclosure have been shown and described herein, it is to be understood that the embodiments are merely exemplary. Numerous changes, substitutions and equivalents can occur to those skilled in the art without departing from the spirit and scope of the disclosure. It should be understood that various alternatives to the embodiments of the disclosure described herein can be employed in practicing the disclosure. It is intended that the following claims define the scope of the disclosure and that methods equivalent to those shown and described herein can be utilized without departing from the spirit and scope of the disclosure.

Claims

1. A system for monitoring the functions of an onboard chip, comprising: Control unit, configured for: Register the diagnostic service unit; Based on the type of function to be tested in the vehicle chip, control the diagnostic service unit with corresponding diagnostic functions to perform diagnostic tests in order to monitor the functional status of the function to be tested. as well as A diagnostic service unit, configured to perform diagnostic tests on the function under test in the on-board chip under the control of the control unit, and return the diagnostic results; The strategy unit, whose configuration is used for: Based on the vehicle's operating status, determine the safety level judgment strategy corresponding to the function under test in the operating status; Based on the security level judgment strategy, the diagnostic results are judged to determine the security level to which the functional status of the function under test in the diagnostic results belongs; as well as The control unit is also configured to perform corresponding security operations based on the security level.

2. The system of claim 1, wherein the security level includes multiple error levels, and the policy unit is further configured to: Filtering for multiple identical security levels obtained for the same function under test within a first preset time period; and / or In response to obtaining multiple error levels of the same level for the same function under test within a second preset time period, the level of the error levels of the same level is increased and the information is reported.

3. The system according to claim 1, wherein the safety operation includes issuing a warning signal and / or reporting information; The system also includes: The upper-level monitoring unit is configured to receive reported information and perform corresponding control operations on the vehicle-mounted chip and / or the vehicle according to the security level in the reported information.

4. The system of claim 1, wherein the control unit is further configured to: Register the application unit; and Based on the diagnostic request from the application unit, control the diagnostic service unit with corresponding diagnostic functions to perform diagnostic tests.

5. The system of claim 4, wherein the control unit is further configured to perform at least one of the following: Receive functional safety issues reported by the application unit during its operation; Based on the subscription request of the application unit, subscribe to the functional status of the function to be tested that the application unit is interested in.

6. The system according to claim 1, further comprising: A configuration unit configured to import configuration information into the control unit, wherein the configuration information includes at least one of the following: The proactive diagnostic cycle of the diagnostic service unit; The maximum execution time for a single diagnostic test by the diagnostic service unit; and Heartbeat signal cycle.

7. The system according to any one of claims 3-5, further comprising: A communication unit is connected between the control unit and an external unit and configured to transmit information between the control unit and the external unit, wherein the external unit includes an application unit and / or an upper-level monitoring unit.

8. A method for monitoring the function of an onboard chip, comprising: Register the diagnostic service unit; as well as Based on the type of function to be tested in the vehicle chip, control the diagnostic service unit with corresponding diagnostic functions to perform diagnostic tests in order to monitor the functional status of the function to be tested. Based on the vehicle's operating status, determine the safety level judgment strategy corresponding to the function under test in the operating status; Based on the security level judgment strategy, the diagnostic results of the diagnostic test are judged to determine the security level to which the functional status of the function under test in the diagnostic results belongs. as well as Perform the corresponding security operations based on the security level.

9. The method according to claim 8, wherein the security level includes multiple error levels, and the method further includes: Filtering is performed on multiple identical security levels obtained for the same function under test within a first preset time period; and / or In response to obtaining multiple error levels of the same level for the same function under test within a second preset time period, the level of the error levels of the same level is increased and the information is reported.

10. The method of claim 8, wherein the safety operation includes issuing a warning signal and / or reporting information.

11. The method of claim 8, further comprising: Register the application unit; as well as Based on the diagnostic request from the application unit, control the diagnostic service unit with corresponding diagnostic functions to perform diagnostic tests.

12. The method of claim 11, further comprising at least one of the following: Receive functional safety issues reported by the application unit during its operation; Based on the subscription request of the application unit, subscribe to the functional status of the function to be tested that the application unit is interested in.

13. The method according to any one of claims 8-12, further comprising configuring at least one of the following information: The proactive diagnostic cycle of the diagnostic service unit; The maximum execution time for a single diagnostic test by the diagnostic service unit; and Heartbeat signal cycle.

14. A device for monitoring the function of an onboard chip, comprising: processor; as well as A memory storing program instructions for monitoring the functions of an onboard chip, wherein when the program instructions are executed by the processor, the device implements the method according to any one of claims 8-13.

15. A computer-readable storage medium storing program instructions for monitoring the function of an in-vehicle chip, wherein when the program instructions are executed by a processor, the method according to any one of claims 8-13 is implemented.

Images