Fault-masking based electric vehicle remote emergency rescue control system and method

Abstract

The application relates to the technical field of emergency rescue of new energy vehicles, and discloses an electric vehicle remote emergency rescue control system and method based on fault shielding, which comprises a control unit, a monitoring cloud platform, a vehicle-mounted terminal and an operation display unit. The control unit comprises a vehicle controller and a power-related controller; the power-related controller is used for collecting, calculating and reporting basic operation information of a vehicle power system and controlling operation of the vehicle power system; the vehicle controller is internally provided with a rescue control module used for controlling the vehicle to enter a remote emergency rescue mode when the vehicle is in a serious fault state; the vehicle-mounted terminal is used for uploading current state information of the vehicle to the monitoring cloud platform and receiving control instructions sent by the monitoring cloud platform; and the monitoring cloud platform is used for receiving the state information and sending remote control instructions to the vehicle-mounted terminal. The application can temporarily shield vehicle faults, realize vehicle driving under faults, complete effective emergency rescue and help improve the emergency safety of electric vehicles.

Description

Technical Field

[0001] This invention relates to the field of emergency rescue technology for new energy vehicles, specifically to a remote emergency rescue control system and method for electric vehicles based on fault shielding. Background Technology

[0002] Electric vehicles are currently a hot research area in automobile manufacturing. For electric vehicles, fault handling is a crucial function, affecting their stable and safe operation throughout their entire lifecycle. Therefore, an excellent fault handling strategy and an effective emergency response strategy are essential for electric vehicles.

[0003] For conventional electric vehicles, the vehicle controller, as its core controller, primarily implements fault handling strategies and issues processing commands to achieve the function of vehicle fault handling. Different faults need to be classified into different levels, and different levels require different responses. In addition, in some cases, faults of the same level also require different detailed fault handling strategies, requiring targeted fault handling. Currently, vehicle faults are roughly divided into four levels: no fault, Level 1 fault, Level 2 fault, and Level 3 fault, with Level 3 fault being the most serious. The vehicle controller has fixed response strategies for each fault level. For example, Level 1 vehicle faults are warning faults, indicating minor vehicle faults, and only a fault indication is given; Level 2 vehicle faults are handled by power-limited operation, torque-limited operation, and slow operation; Level 3 vehicle faults are the most serious faults, and the handling strategy for this fault is to prohibit driving or disconnect high-voltage power.

[0004] Under level one and two fault conditions, a vehicle still retains some driving capability. However, under level three fault conditions, the vehicle is forcibly powered down and cannot move. This means that when a level three fault occurs, the vehicle immediately loses its mobility and can only remain at the fault site. If the fault site is a major traffic artery or there are secondary risk factors in the vicinity, the vehicle is difficult to move to avoid danger, and waiting for rescue vehicles takes a long time. During this period, secondary accidents are highly likely to occur, posing a significant threat to the safety of both the driver and the vehicle. Furthermore, in electric vehicles, the battery is the power source. Under the influence of complex driving scenarios, existing electric vehicle batteries often experience a drop in charge to a critical value halfway through the journey. Given the current shortage of charging stations, drivers often find it difficult to find a charging station before the battery runs out, causing the vehicle to be parked in a dangerous area, posing a significant safety hazard.

[0005] In summary, the issue of how to quickly rescue and promptly transfer vehicles when their power is depleted or they experience sudden malfunctions is becoming increasingly prominent, necessitating a system capable of providing efficient emergency rescue for electric vehicles. Summary of the Invention

[0006] The present invention aims to provide a remote emergency rescue control system and method for electric vehicles based on fault shielding, which can enable vehicles to proceed without faults by temporarily shielding vehicle faults, and complete effective emergency rescue, thereby helping to improve the emergency safety of electric vehicles.

[0007] To achieve the above objectives, the present invention provides the following basic solution:

[0008] Option 1

[0009] A fault-masking-based remote emergency rescue control system for electric vehicles includes a control unit; the control unit includes a vehicle controller and a power-related controller; the power-related controller is used to collect, calculate, and report basic operating information of the vehicle's power system and control the operation of the vehicle's power system; the vehicle controller has a judgment module and a rescue control module; the judgment module is used to determine whether the vehicle is in a serious fault state based on the basic operating information; the rescue control module is used to control the vehicle to enter a remote emergency rescue mode when the vehicle is in a serious fault state, and to control the vehicle to maintain normal operating mode when the vehicle is not in a serious fault state; furthermore, in the remote emergency rescue mode, the rescue control module transmits emergency control commands to the power-related controller and forcibly activates the vehicle's power system; the emergency control commands are also used to temporarily mask fault information.

[0010] Furthermore, the vehicle power system includes a battery system, a drive system, and a high-voltage power distribution system; the basic operating information includes operating status, output power, and fault information.

[0011] Furthermore, in remote emergency rescue mode, the vehicle's power system is forcibly activated, entering limp mode.

[0012] Furthermore, it also includes a monitoring cloud platform and an in-vehicle terminal; the in-vehicle terminal is used to automatically upload the current status information of the vehicle to the monitoring cloud platform and receive control commands issued by the monitoring cloud platform; the monitoring cloud platform is used to receive the status information and send remote control commands to the in-vehicle terminal; the status information includes operating status information and fault status information; the remote control commands include vehicle locking commands, high-voltage reduction commands, and emergency rescue commands; the rescue control module also controls the vehicle to enter remote emergency rescue mode according to the emergency rescue commands.

[0013] Furthermore, when the vehicle is in a serious malfunction state, the rescue control module sends a remote emergency rescue request to the monitoring cloud platform through the vehicle terminal; the monitoring cloud platform is also used to analyze the feasibility of remote emergency rescue by combining the status information; and when the feasibility of remote emergency rescue reaches a preset standard, it sends rescue permission information to the rescue control module; after receiving the rescue permission information, the rescue control module controls the vehicle to enter the remote emergency rescue mode.

[0014] Furthermore, the emergency rescue command includes emergency rescue location information; the rescue control module also guides and controls the vehicle to limp to the emergency rescue location according to the emergency rescue command, and controls the vehicle to exit the limp and automatically power down after arriving at the emergency rescue location.

[0015] Furthermore, it also includes an emergency rescue module; the emergency rescue module is located in the vehicle and is used to manually trigger the remote emergency rescue mode; the emergency rescue module is also used to send a remote emergency rescue request to the monitoring cloud platform.

[0016] Furthermore, the severe fault state includes: a level three fault state.

[0017] Furthermore, it also includes a running display unit; the running display unit is used to visually display the current status information of the vehicle; the status information includes running status information, fault status information and emergency rescue status information.

[0018] Option 2

[0019] The method for remote emergency rescue control of electric vehicles based on fault shielding applies the remote emergency rescue control system for electric vehicles based on fault shielding as described in Scheme 1.

[0020] The working principle and advantages of this invention are as follows: The judgment module determines the vehicle's operating status in real time, and when a vehicle malfunction occurs, the rescue control module issues a remote emergency rescue request, which is uploaded to the monitoring cloud platform via the vehicle terminal. Upon receiving the emergency rescue request, the monitoring cloud platform analyzes the feasibility of remote emergency rescue based on the vehicle's status information and actual needs. If the vehicle meets the emergency rescue conditions, it issues a rescue permit and transmits it to the rescue control module in the vehicle controller via the vehicle terminal. The rescue control module then controls the vehicle to enter remote emergency rescue mode. In this mode, the vehicle's power system is forcibly activated by an emergency control command, allowing the vehicle, which is unable to move under fault conditions, to temporarily regain power. This enables the vehicle to be moved promptly when a malfunction occurs, helping to reduce the incidence of secondary accidents and further ensuring the safety of the owner, the vehicle, and the surrounding traffic safety.

[0021] In real-world applications, when an electric vehicle encounters a malfunction, it triggers emergency procedures in the vehicle's built-in conventional control system. For example, many controllers have built-in programs that shut down the corresponding system and enter a power-down state when a certain parameter value reaches a threshold. Even after stopping, the vehicle still possesses some operating power, but this power is often not effectively utilized. This solution addresses this issue and effectively applies this operating power to emergency rescue. The emergency control commands transmitted by the rescue control module in this solution can temporarily detach the power-related controllers from the influence of fault information by shielding them. The power-related controllers then control the vehicle's power system to continue operating, utilizing the vehicle's low battery or low power state for some movement. This allows the owner to control the vehicle to take timely evasive action or actively seek assistance when a serious malfunction occurs, fully utilizing previously overlooked stored power to improve emergency efficiency and safety.

[0022] Furthermore, the rescue control of this solution is quite detailed. The monitoring cloud platform will determine the feasibility and safety of activating the remote emergency rescue mode for vehicles under the third-level fault state. Only when safety and feasibility are ensured will the remote emergency rescue mode be activated; the safety of emergency rescue operations is relatively high. Attached Figure Description

[0023] Figure 1 This is a schematic diagram of the system structure of the electric vehicle remote emergency rescue control system and method based on fault shielding according to the present invention. Detailed Implementation

[0024] The following detailed explanation illustrates the specific implementation methods:

[0025] Example 1

[0026] The basic implementation examples are as follows: Figure 1 As shown: A fault-masking-based remote emergency rescue control system for electric vehicles includes a control unit, a monitoring cloud platform, an on-board terminal, an emergency rescue module, and an operation display unit.

[0027] The control unit includes a vehicle controller and a power-related controller. The power-related controller is used to collect, calculate, and report basic operating information of the vehicle's powertrain system and control its operation. The vehicle's powertrain system includes a battery system, a drive system, and a high-voltage power distribution system; the basic operating information includes operating status, output power, and fault information. The vehicles include pure electric vehicles, plug-in hybrid electric vehicles, range-extended hybrid electric vehicles, and fuel cell electric vehicles. This solution has a wide range of applications and can be adapted to various new energy vehicles.

[0028] The vehicle controller includes a judgment module, a rescue control module, and a vehicle control module. The vehicle control module contains the functional programs of a conventional electric vehicle controller, used to perform routine vehicle control. The judgment module determines whether the vehicle is in a serious fault state based on basic operating information. Serious fault states include: Level 3 fault states; under Level 3 fault states, the corresponding operating states of the vehicle are high-voltage power failure and vehicle inoperability. Under this fault level, the electric vehicle is constrained by conventional fault response strategies and will inevitably lose its mobility. Triggering the rescue control module under this fault condition allows for more targeted emergency handling.

[0029] The rescue control module is used to control the vehicle to enter the remote emergency rescue mode when the vehicle is in a serious fault state, and to control the vehicle to maintain the normal working mode when the vehicle is not in a serious fault state. In this embodiment, the normal working mode means that the rescue control module does not interfere with the fault response strategy of the vehicle control module in dealing with no fault, first-level fault and second-level fault situations, and the vehicle control module performs fault handling normally.

[0030] Furthermore, in remote emergency rescue mode, the rescue control module transmits emergency control commands to the power-related controller and forcibly activates the vehicle's power system; these emergency control commands also temporarily mask fault information. Specifically, the emergency control commands temporarily mask the vehicle's power-related controller's perception of fault information and directly invoke the power-related controller to control the vehicle, waking up the vehicle's power system. For example, the power-related controller may have thresholds for different operating parameters. When a threshold is reached, the power-related controller will control the corresponding vehicle component to stop operating. The rescue control module masks this situation, which is equivalent to temporarily masking the built-in, fixed fault response strategy of the power-related controller, allowing the emergency control commands to forcibly drive the power-related controller's own control functions to continue controlling the vehicle's power system. In this embodiment, the effect of the emergency control commands masking fault information ends at the next time the vehicle is powered down. In remote emergency rescue mode, the vehicle's power system enters limp mode after being forcibly activated.

[0031] The vehicle-mounted terminal is used to collect, record, and statistically analyze status information such as battery status, vehicle location, and operating status during vehicle operation. It automatically uploads the current vehicle status information to the monitoring cloud platform and receives control commands from the monitoring cloud platform, enabling real-time monitoring and data collection of electric vehicle operation. The monitoring cloud platform receives status information and sends remote control commands to the vehicle-mounted terminal. The status information includes operating status information and fault status information; the fault status information includes the required fault level and related data. The remote control commands include vehicle locking commands, high-voltage reduction commands, and emergency rescue commands.

[0032] When the vehicle is in a serious malfunction state, the rescue control module sends a remote emergency rescue request to the monitoring cloud platform via the onboard terminal. The monitoring cloud platform is also used to analyze the feasibility of remote emergency rescue based on the status information. When the feasibility of remote emergency rescue reaches a preset standard, it sends rescue permission information to the rescue control module. After receiving the rescue permission information, the rescue control module controls the vehicle to enter the remote emergency rescue mode. Specifically, in this embodiment, the preset standard for the feasibility of remote emergency rescue can be set to 80%. When the analysis based on the vehicle status information indicates that the vehicle has a risk of thermal runaway, or when the analysis indicates that the vehicle has been involved in a collision, 50% of the feasibility of remote emergency rescue is deducted (here, 100% is used as the deduction benchmark). With this setting, in some special cases of Level 3 malfunction state (such as when the vehicle experiences thermal runaway or a major collision, making it unsuitable to control the vehicle to enter limp mode), the remote emergency rescue mode is not executed, resulting in more granular rescue control and effectively reducing the risk of emergency rescue.

[0033] The emergency rescue command includes emergency rescue location information; the rescue control module also controls the vehicle to enter remote emergency rescue mode according to the emergency rescue command, guides the vehicle to limp to the emergency rescue location, and controls the vehicle to exit limp mode and automatically power down after arriving at the emergency rescue location.

[0034] The emergency rescue module is located in the vehicle and is used to manually trigger the remote emergency rescue mode. It also sends remote emergency rescue requests to the monitoring cloud platform. Specifically, after receiving a remote emergency rescue request, the monitoring cloud platform reassesses the vehicle's operating status, analyzes the feasibility of remote emergency rescue based on vehicle status information, and sends rescue permission information to the rescue control module when the feasibility reaches a preset standard, thus activating the remote emergency rescue mode. In practical applications, if a fault scenario occurs where the rescue control module fails to respond automatically (i.e., it fails to automatically determine a serious fault state and cannot activate the rescue control module), the emergency rescue module can be used to manually trigger an emergency rescue request, thereby controlling the vehicle to enter the remote emergency rescue mode. This configuration provides more flexible rescue triggering and a better user experience.

[0035] The operation display unit is used to visually display the vehicle's current status information, including operational status information, fault status information, and emergency rescue status information. The fault status information includes the required fault level and related data. The emergency rescue status information includes the vehicle's current emergency rescue status, whether remote emergency rescue mode has been triggered, the distance to the emergency rescue location, and the dispatch status of rescue vehicles. The operation display unit provides a comprehensive and intuitive view of the vehicle's information, facilitating the owner's understanding of the emergency rescue situation.

[0036] The method for remote emergency rescue control of electric vehicles based on fault shielding applies the aforementioned remote emergency rescue control system for electric vehicles based on fault shielding to perform remote emergency rescue control.

[0037] This embodiment provides a fault-masking-based remote emergency rescue control system and method for electric vehicles, proposing a new, more mobile, and timely rescue solution for electric vehicles under Level 3 faults. Compared to conventional rescue solutions, which rely on passive methods like sending vehicle location information to guide rescue vehicles, the timeliness of rescue is significantly lacking. While waiting for rescue, for vehicles in a forced-down state under Level 3 faults, secondary risk factors around the fault site can easily cause secondary accidents. To address this, this solution adopts a more proactive rescue approach. It is not limited by the fixed emergency strategies in the vehicle controller, but innovatively chooses to temporarily mask the fault and the original fixed emergency strategies in the vehicle controller to control the vehicle. It forcibly utilizes the energy reserves of the vehicle itself after power-down, controlling the vehicle to enter a more stable and easily controllable limp mode. With a certain degree of mobility, the vehicle can quickly move away from secondary risk locations, significantly reducing the probability of secondary accidents and completing effective emergency rescue, thus improving the emergency safety of electric vehicles.

[0038] Furthermore, this solution also carefully considers the safety of the vehicle entering the remote emergency rescue mode under the three-level fault conditions; the triggering of the remote emergency rescue mode will be assisted by the monitoring cloud platform to conduct a feasibility analysis, and the remote emergency rescue mode will not be entered for some situations that are not suitable for forced activation; the mode triggering control is detailed, and the overall rescue safety is higher.

[0039] Example 2

[0040] The fault-masking-based remote emergency rescue control system for electric vehicles, in addition to the risk monitoring module in Implementation Example 1, also includes a fault-masking module.

[0041] The risk monitoring module is used to assess the activation and operational risks of the remote emergency rescue mode. When the activation risk exceeds a first threshold, it prohibits triggering the remote emergency rescue mode; when the operational risk exceeds a second threshold, it stops the remote emergency rescue mode and safely powers down the vehicle. Specifically, the risk thresholds are set based on actual application conditions. In this embodiment, the activation risk can be determined based on the estimated probability value of thermal runaway risk, with the first threshold corresponding to 50%. When the estimated probability value of thermal runaway risk exceeds 50%, the activation risk exceeds the first threshold. The operational risk is determined based on the control response speed of the vehicle control module, with the second threshold corresponding to 0.3s. When the control response speed exceeds 0.3s, the operational risk exceeds the second threshold. This setting ensures that the triggering and operation of the remote emergency rescue mode are under real-time monitoring, effectively guaranteeing the safety of vehicle operation under rescue mode. Furthermore, using response speed to monitor operational risk provides a more intuitive and timely reflection of the vehicle's control status compared to other vehicle operating data (such as voltage and current), making risk monitoring more effective.

[0042] This embodiment provides a fault-masking-based remote emergency rescue control system and method for electric vehicles, which can specifically consider the execution safety of remote emergency rescue actions and the vehicle operation safety during the remote emergency rescue process, providing more comprehensive safety assurance. Furthermore, by first determining whether the vehicle can start safely based on the risk of thermal runaway, it can effectively ensure the triggering safety of the remote emergency rescue mode; secondly, by constantly monitoring the vehicle based on the control response speed of the vehicle controller, it can effectively ensure the operational safety in the remote emergency rescue mode, making rescue control more comprehensive and reliable.

[0043] Example 3

[0044] Based on Embodiment 1, the fault-masking-based remote emergency rescue control system for electric vehicles, when issuing emergency rescue commands and responding to emergency rescue requests from the emergency rescue module, also estimates the vehicle's stored energy and the limp-riding distance that the stored energy can support based on the vehicle's status information. Furthermore, based on the emergency rescue location information, it determines whether the vehicle can limp to the emergency rescue location. If so, it guides and controls the vehicle to limp to the emergency rescue location; if not, it selects a temporary stopping point based on a road map of the vehicle's current location from the emergency rescue location, and simultaneously sends a distress message to the emergency rescue location, dispatching rescue vehicles to the selected temporary stopping point for pickup.

[0045] This embodiment provides a remote emergency rescue control system and method for electric vehicles based on fault shielding. It can make detailed plans for emergency response based on the actual energy status of the vehicle, ensuring that the emergency transfer process is arranged reasonably and further improving the emergency rescue effect.

[0046] The above descriptions are merely embodiments of the present invention. Commonly known structures and characteristics of the solutions are not described in detail here. Those skilled in the art are aware of all common technical knowledge in the field prior to the application date or priority date, are aware of all existing technologies in that field, and have the ability to apply conventional experimental methods prior to that date. Those skilled in the art can, under the guidance of this application, improve and implement this solution in combination with their own capabilities. Some typical known structures or methods should not be obstacles for those skilled in the art to implement this application. It should be noted that those skilled in the art can make several modifications and improvements without departing from the structure of the present invention. These should also be considered within the scope of protection of the present invention, and will not affect the effectiveness of the implementation of the present invention or the practicality of the patent.

Claims

1. A remote emergency rescue control system for electric vehicles based on fault shielding, characterized in that, It includes a control unit; the control unit includes a vehicle controller and a power-related controller; the power-related controller is used to collect, calculate and report basic operating information of the vehicle power system and control the operation of the vehicle power system; The vehicle controller includes a judgment module and a rescue control module. The judgment module determines whether the vehicle is in a serious fault state based on basic operating information. Serious fault states include a level three fault state, where the corresponding operating states are high-voltage power failure and vehicle restricted operation. The rescue control module initiates a remote emergency rescue mode when the vehicle is in a serious fault state, and maintains normal operation when the vehicle is not in a serious fault state. In remote emergency rescue mode, the rescue control module sends emergency control commands to the power-related controllers and forcibly activates the vehicle's power system. These emergency control commands also temporarily suppress fault information, including both temporary suppression of faults and the control of the vehicle by the originally fixed emergency strategies in the vehicle controller. It also includes a monitoring cloud platform and an in-vehicle terminal; the in-vehicle terminal is used to automatically upload the current status information of the vehicle to the monitoring cloud platform and receive control commands issued by the monitoring cloud platform; the monitoring cloud platform is used to receive the status information and send remote control commands to the in-vehicle terminal; the status information includes operating status information and fault status information; the remote control commands include vehicle locking commands, high-voltage reduction commands, and emergency rescue commands; When the vehicle is in a serious malfunction, the rescue control module sends a remote emergency rescue request to the monitoring cloud platform via the vehicle terminal. The monitoring cloud platform is also used to analyze the feasibility of remote emergency rescue by combining the status information. When the feasibility of remote emergency rescue reaches a preset standard, it sends rescue permission information to the rescue control module. After receiving the rescue permission information, the rescue control module controls the vehicle to enter the remote emergency rescue mode. The emergency rescue command includes emergency rescue location information; the rescue control module also controls the vehicle to enter remote emergency rescue mode according to the emergency rescue command, guides the vehicle to limp to the emergency rescue location, and controls the vehicle to exit limp mode and automatically power down after arriving at the emergency rescue location. When issuing emergency rescue instructions and responding to emergency rescue requests from the emergency rescue module, the monitoring cloud platform also estimates the vehicle's stored energy and the limp-riding distance that the stored energy can support based on the vehicle's status information. Based on the emergency rescue location information, it determines whether the vehicle can limp to the emergency rescue location. If it is determined to be able to, it guides and controls the vehicle to limp to the emergency rescue location. If it is determined to be unable to, it selects a temporary stopping point based on the road map from the vehicle's current location to the emergency rescue location, and simultaneously sends a request for help to the emergency rescue location, dispatching rescue vehicles to the selected temporary stopping point for pickup.

2. The electric vehicle remote emergency rescue control system based on fault shielding according to claim 1, characterized in that, The vehicle power system includes a battery system, a drive system, and a high-voltage power distribution system; the basic operating information includes operating status, output power, and fault information.

3. The electric vehicle remote emergency rescue control system based on fault shielding according to claim 1, characterized in that, In remote emergency rescue mode, the vehicle's power system is forcibly activated, and it enters limp mode.

4. The electric vehicle remote emergency rescue control system based on fault shielding according to claim 1, characterized in that, It also includes an emergency rescue module; the emergency rescue module is located in the vehicle and is used to manually trigger the remote emergency rescue mode; the emergency rescue module is also used to send a remote emergency rescue request to the monitoring cloud platform.

5. The electric vehicle remote emergency rescue control system based on fault shielding according to claim 1, characterized in that, It also includes a running display unit; the running display unit is used to visually display the current status information of the vehicle; the status information includes running status information, fault status information and emergency rescue status information.

6. A remote emergency rescue control method for electric vehicles based on fault shielding, characterized in that, The electric vehicle remote emergency rescue control system based on fault shielding as described in any one of claims 1-5 is used for remote emergency rescue control.

Images