An on-vehicle external lighting control system and method

Abstract

The present invention relates to an in-vehicle external lighting control system and method. The control system includes a headlight module, a lighting control module, and a functional safety module. The functional safety module includes a signal conversion unit and a comparison unit. The lighting control module is used to receive an externally input lighting control signal, convert it into a control logic signal, and then transmit it to the functional safety module. The signal conversion unit is used to convert the control signal. The comparison unit makes a consistency judgment on the lighting control signal converted by the conversion unit and the control logic signal. The functional safety module sends the processed lighting control signal or control logic signal to the headlight module according to the judgment result of the comparison unit. In the case of the vehicle applying bus technology, the functional safety module can also judge whether the lighting control module is abnormal by comparing the consistency of the control logic signal and the lighting control signal of the lighting control module, and realize the lighting control of the headlight module, so as to reliably control the in-vehicle external lighting.

Description

Technical Field

[0001] The present invention relates to the technical field of vehicle functional safety, and particularly relates to an on-vehicle external lighting control system and method. Background Art

[0002] With the proposal and revision of the international standard ISO-26262 "Functional Safety of Road Vehicles" and the release of the national standard GB / T 34590 "Functional Safety of Road Vehicles", the country and enterprises have gradually paid attention to the functional safety of vehicles and implemented relevant functional safety strategies throughout the vehicle life cycle. Among them, on-vehicle external lighting is an important part of vehicle functional safety.

[0003] In order to ensure reliable control of on-vehicle external lighting, for the functional safety strategy of traditional on-vehicle external lighting, it is usually to detect the input of the combination switch and the output of the logic module through a monitoring module, so as to confirm whether the logic is correct and ensure its functional safety level requirements. However, as the vehicle internal electrical system becomes more and more complex and the functions of on-vehicle external lighting are also increasing, automobiles will adopt bus technology to reduce the wires and nodes inside the vehicle. In the case of the vehicle adopting bus technology, the traditional functional safety strategy of on-vehicle external lighting, which uses a one-to-one and uses high and low levels as control signals, cannot achieve the control of lighting. Summary of the Invention

[0004] One of the purposes of the present invention is to provide an on-vehicle external lighting control system to solve the problem that the on-vehicle external lighting cannot be reliably controlled under the vehicle bus technology in the prior art; the second purpose is to provide an on-vehicle external lighting control method; the third purpose is to provide an automobile.

[0005] In order to achieve the above purposes, the technical solutions adopted by the present invention are as follows:

[0006] An on-vehicle external lighting control system includes a headlight module, a lighting control module, and a functional safety module; the functional safety module is electrically connected to the lighting control module and the headlight module respectively; the functional safety module includes a signal conversion unit and a comparison unit; the lighting control module is used to receive an externally input lighting control signal, convert it into a control logic signal, and then transmit it to the functional safety module; the signal conversion unit is used to convert the externally input lighting control signal into a signal of the same type as the control logic signal or convert the control logic signal of the lighting control module into a signal of the same type as the externally input lighting control signal, and the comparison unit makes a consistency judgment on the lighting control signal and the control logic signal converted by the signal conversion unit; the functional safety module sends the processed lighting control signal or control logic signal to the headlight module according to the judgment result of the comparison unit.

[0007] According to the above technical means, various switch signals from the outside, such as combination switches, physical small switches, and touch switches, are used as the source of the lighting control signal. The lighting control signal is sent to both the functional safety module and the lighting control module simultaneously and both can receive it. The lighting control module converts the received lighting control signal into a control logic signal and then sends it to the functional safety module. The functional safety module converts the control logic signal and the lighting control signal into the same type of signal through a signal conversion unit, and it can convert the control logic signal or the lighting control signal. After the two signals are converted into the same type of signal, a consistency judgment is made. If the judgment is consistent, the functional safety module sends the control logic signal of the lighting control module to the headlight module, and the headlight module emits the corresponding lighting signal. If the judgment is inconsistent, it indicates that the lighting control module is abnormal. The functional safety module directly sends the processed lighting control signal to the headlight module, and the headlight module emits the corresponding lighting signal. Among them, the processing of the lighting control signal by the functional safety module is to convert the lighting control signal into a control logic signal, and the processing method can be the same as that of the lighting control module.

[0008] Since the functional safety module can temporarily replace the work of the lighting control module after the lighting control module fails, the on-vehicle external lighting of vehicles using bus technology can be reliably controlled.

[0009] Furthermore, the functional safety module further includes a timing unit, and a time threshold is preset in the timing unit; after the comparison unit outputs a result of inconsistent judgment, the timing unit starts timing and after reaching the time threshold, the functional safety module outputs a restart signal to the lighting control module and makes the lighting control module restart.

[0010] According to the above technical means, since the abnormality of the lighting control module may be occasional, it would be too one-sided to determine the abnormal failure of the lighting control module based on just one consistency judgment and the abnormal rate would be too high. It is necessary for the functional safety module to often replace the lighting control module, which is not conducive to the reliable control of on-vehicle lighting. Therefore, by performing multiple consistency judgments within a preset time threshold, if the judgment cannot be passed all the time, then it is confirmed that the lighting control module is abnormal. And to further reduce the frequency of the functional safety module replacing the lighting control module, first restart the lighting control module to eliminate the abnormality. After restarting, perform the consistency judgment again. If there is still an abnormality, the functional safety module can replace the lighting control module to work or repeat the restart process again.

[0011] Furthermore, the functional safety module includes a counting unit. Whenever the timing of the timing unit reaches the time threshold, the count value of the counting unit is incremented by one. When the count value reaches the preset counting threshold, the functional safety module resets the count value and sends the externally input lighting control signal to the headlight module.

[0012] According to the above technical means, the counting unit records the anomalies and the count values of the anomalies. The initial value of the count value is zero. If the set counting threshold is 1, after the first anomaly occurs, the count value will be incremented by 1 and at the same time the functional safety module causes the lighting control module to restart. After re-determining that there are still anomalies in the lighting control module, since the count value has reached the set counting threshold, the functional safety module takes over the work of the lighting control module and resets the count value. By setting the counting unit, the restart times of the lighting control module after anomalies can be controlled.

[0013] Furthermore, the functional safety module includes an alarm unit. After the count value of the counting unit reaches the counting threshold, a signal is sent to the alarm unit to cause it to emit an alarm signal.

[0014] According to the above technical means, when the count value reaches the counting threshold, it indicates that the lighting control module has an anomaly and the functional safety module takes over the work. The alarm unit sends an alarm signal to the user to remind them that the lighting control module has an anomaly and they need to pay attention to timely maintenance to avoid only the functional safety module running for a long time.

[0015] Furthermore, the headlight module includes a fault detection unit, and the functional safety module includes a fault signal receiving unit; the fault detection unit collects the working information of the headlight module and sends it to the fault signal receiving unit; the fault signal receiving unit also receives the communication signal of the lighting control module; the fault signal receiving unit sends the fault signal to the alarm unit to cause it to emit an alarm signal.

[0016] According to the above technical means, the detection unit can detect the current information, fault information, and headlight status information of the headlight module. The functional safety module determines whether the headlight module is working properly or has a fault by receiving the working information of the headlight module through the fault signal receiving unit. If there is a fault, it causes the alarm unit to emit an alarm signal to remind the user. In addition, the fault signal receiving unit also continuously receives the communication signal of the lighting control module and, when the communication signal is interrupted, also reminds the user through the alarm unit. When performing the consistency judgment above, if the lighting control module does not communicate with the functional safety module, it is also impossible to pass the consistency judgment, and the anomaly is restored by restarting the lighting control module.

[0017] A vehicle-mounted external lighting control method includes the following steps: Step 1: The functional safety module and the lighting control module receive the externally input lighting control signal, and the lighting control module converts the externally input lighting control signal into a control logic signal; Step 2: The functional safety module converts the control logic signal into a signal type consistent with the lighting control signal category and then makes a consistency judgment, or the functional safety module converts the lighting control signal into a signal type consistent with the control logic signal category and then makes a consistency judgment; Step 3: If the judgment is consistent, execute Step 4, if the judgment is inconsistent, execute Step 5; Step 4: The functional safety module transfers the control logic signal of the lighting control module to the headlight module; Step 5: The functional safety module converts the lighting control signal into a control logic signal and then transmits it to the headlight module.

[0018] According to the above technical means, after the lighting control module fails, the functional safety module can replace the function of the lighting control module and continue to effectively control the vehicle-mounted external lighting. Both the functional safety module and the lighting control module can convert the lighting control signal into a control logic signal, enabling the signal to be transmitted under the condition of the vehicle using bus technology.

[0019] Among them, in Step 3, the functional safety module converts the external lighting control signal into a control logic signal, and the method can be the same as that of the lighting control module. In fact, it is a consistency comparison between two control logic signals. The advantage is that the control logic signal converted by the functional safety module can be directly used to send to the headlight module after the lighting control module fails; Another method is that the functional safety module converts the control logic signal of the lighting control module into an electrical signal consistent with the external lighting control signal type, such as a digital signal. The conversion of the digital signal can be achieved by establishing a mapping table. The advantage is faster comparison, but if the comparison is inconsistent, the lighting control signal still needs to be converted into a control logic signal.

[0020] Further, before executing Step 5, a restart step is first executed. The restart step is specifically as follows: If the judgment is inconsistent, the functional safety module records the abnormality and starts timing and re-makes a consistency judgment; If it is judged to be inconsistent within the set time threshold, the functional safety module restarts the lighting control module and judges whether the abnormality is restored. If it is restored, execute Step 4, if not, execute Step 5.

[0021] According to the above technical means, multiple consistency judgments are made within the time threshold to avoid the influence of occasional failures on the judgment, and combined with restarting the lighting control module to quickly attempt to restore the abnormality of the lighting control module, reducing the frequency of the functional safety module replacing the lighting control module.

[0022] Further, in step five, the functional safety module continuously determines whether the abnormality of the lighting control module has been restored. If it has been restored, steps one to five are re-executed after receiving the lighting control signal. If it has not been restored, the functional safety module continues to directly process the lighting control signal.

[0023] According to the above technical means, when the functional safety module takes over the work of the lighting control module, it always determines whether the lighting control module has returned to normal, reducing the duration of the functional safety module working alone. The probability of both modules being abnormal at the same time is lower than that of a single module, and a backup plan is necessary to ensure reliable control of the external lighting. Therefore, only when the lighting control module and the functional safety module work simultaneously can the probability of losing control of the external lighting be reduced and the reliability be improved.

[0024] Further, in all steps, the functional safety module continuously receives the working information of the headlight module and determines whether the headlight module has failed. If a failure occurs, an alarm signal is sent and the failure judgment is stopped until the vehicle is re-powered.

[0025] According to the above technical means, regardless of whether the headlight module is operating normally, the functional safety module will send a signal to it. Whether the headlight module fails does not affect the operation of the functional safety module. The failure of the headlight module can occur at any time. Therefore, the functional safety module will continuously receive the working information of the headlight to make a judgment and give a reminder. At the same time, the failure judgment of the headlight module will not be performed multiple times to reduce the operation of the functional safety module.

[0026] A vehicle, including a vehicle body, in which the above-mentioned on-vehicle external lighting control system is installed or a control system capable of executing the above method is provided.

[0027] Advantages of the present invention: Through the signal conversion unit and comparison unit of the functional safety module, even when the vehicle applies bus technology, it is also possible to determine whether the lighting control module is abnormal by comparing the consistency between the control logic signal and the lighting control signal of the lighting control module. At the same time, after an abnormality occurs, the functional safety module can convert and process the lighting control signal and achieve the lighting control of the headlight module, enabling reliable control of the on-vehicle external lighting. Description of the Drawings

[0028] Figure 1 It is a module diagram of an on-vehicle external lighting control system of the present invention;

[0029] Figure 2 It is a flowchart of an on-vehicle external lighting control method of the present invention;

[0030] Figure 3 It is another flowchart of an on-vehicle external lighting control method of the present invention. Detailed Embodiments

[0031] The embodiments of the present invention will be described below with reference to the accompanying drawings and preferred embodiments. Those skilled in the art can easily understand the other advantages and effects of the present invention from the content disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments, and various details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of the present invention. It should be understood that the preferred embodiments are only for explaining the present invention, rather than for limiting the protection scope of the present invention.

[0032] It should be noted that the diagrams provided in the following embodiments only illustrate the basic concept of the present invention in a schematic manner. Therefore, only the components related to the present invention are shown in the diagrams, rather than being drawn according to the number, shape, and size of the components in actual implementation. The type, quantity, and ratio of each component in actual implementation can be arbitrarily changed, and the component layout type may also be more complex.

[0033] This embodiment provides a vehicle-mounted external lighting control system, which includes a headlight module, a lighting control module, and a functional safety module; the functional safety module is electrically connected to the lighting control module and the headlight module respectively; the functional safety module includes a signal conversion unit and a comparison unit; the lighting control module is used to receive an externally input lighting control signal, convert it into a control logic signal, and then transmit it to the functional safety module; the signal conversion unit is used to convert the externally input lighting control signal into a signal of the same type as the control logic signal, and the comparison unit makes a consistency judgment on the lighting control signal converted by the signal conversion unit and the control logic signal; the functional safety module sends the processed lighting control signal or control logic signal to the headlight module according to the judgment result of the comparison unit.

[0034] Various switch signals from the outside, such as a combination switch, a physical small switch, and a touch switch, are used as the source of the lighting control signal. The lighting control signal is sent to both the functional safety module and the lighting control module at the same time and both can receive it. The lighting control module converts the received lighting control signal into a control logic signal and then sends it to the functional safety module. The functional safety module converts the control logic signal and the lighting control signal into signals of the same type through the signal conversion unit, and it can convert the control logic signal or the lighting control signal. After the two signals are converted into signals of the same type, a consistency judgment is made. If the judgment is consistent, the functional control module sends the control logic signal of the lighting control module to the headlight module, and the headlight module emits the corresponding lighting signal. If the judgment is inconsistent, it means that the lighting control module is abnormal, and the functional safety module directly sends the processed lighting control signal to the headlight module, and the headlight module emits the corresponding lighting signal. Among them, the processing of the lighting control signal by the functional safety module is to convert the lighting control signal into a control logic signal, and the processing method can be the same as that of the lighting control module.

[0035] In this embodiment, the functional safety module further includes a timing unit and a counting unit. A time threshold is preset in the timing unit; a counting threshold is preset in the counting unit; after the comparison unit outputs a result indicating inconsistent judgment, the timing unit starts timing, and when the time threshold is reached, the count value of the counting unit is incremented by one. When the count value reaches the preset counting threshold, the functional safety module outputs a restart signal to the lighting control module and causes the lighting control module to restart. Since the occurrence of an abnormality in the lighting control module may be sporadic, it would be too one-sided to conclude that the lighting control module has an abnormal fault based on just one consistency judgment, and it would result in too high an abnormality rate. The functional safety module would often have to replace the lighting control module, which is not conducive to the reliable control of vehicle-mounted lighting. Therefore, by performing multiple consistency judgments within the preset time threshold, if the judgment cannot be passed all the time, then it is confirmed that the lighting control module has an abnormality. To further reduce the frequency of the functional safety module replacing the lighting control module, first, the lighting control module is restarted to eliminate the abnormality. After restarting, a new consistency judgment is performed. If there is still an abnormality, the functional safety module can replace the lighting control module to work or repeat the restart process again. The counting unit records the abnormality and the count value of the abnormality. The initial value of the count value is zero. The counting threshold in this embodiment is 1. After the first abnormality occurs, the count value is incremented by one and at the same time the functional safety module causes the lighting control module to restart. After re-judging that there is still an abnormality in the lighting control module, since the count value has reached the set counting threshold, the functional safety module replaces the lighting control module to work and resets the count value. By setting the counting unit, the number of restarts of the lighting control module after an abnormality can be controlled.

[0036] In this embodiment, the functional safety module includes an alarm unit. After the count value of the counting unit reaches the counting threshold, a signal is sent to the alarm unit to make it emit an alarm signal. The headlight module includes a fault detection unit (which can be a sensor in this embodiment), and the functional safety module includes a fault signal receiving unit. The fault detection unit collects the working information of the headlight module and sends it to the fault signal receiving unit. The fault signal receiving unit also receives the communication signal of the light control module. The fault signal receiving unit sends the fault signal to the alarm unit to make it emit an alarm signal. When the count value reaches the counting threshold, it indicates that the light control module has malfunctioned and the functional safety module takes over the work. The alarm unit emits an alarm signal to remind the user that the light control module has malfunctioned and needs to be maintained in a timely manner to avoid long-term operation of only the functional safety module. The fault detection unit can detect the current information, fault information, and headlight status information of the headlight module. The functional safety module determines whether the headlight module is working properly or has a fault by receiving the working information of the headlight module through the fault signal receiving unit. If there is a fault, the alarm unit is made to emit an alarm signal to remind the user. In addition, the fault signal receiving unit also continuously receives the communication signal of the light control module and reminds the user through the alarm unit when the communication signal is interrupted. When performing the consistency judgment as described above, if the light control module does not communicate with the functional safety module, it is also impossible to pass the consistency judgment, and the abnormality is restored by restarting the light control module.

[0037] This embodiment also proposes a method for controlling vehicle external lights, including the following steps:

[0038] Step 1: The functional safety module and the light control module receive the externally input light control signal, and the light control module converts the externally input light control signal into a control logic signal.

[0039] Step 2: The functional safety module converts the light control signal into a signal type consistent with the control logic signal type and then performs a consistency judgment. In this embodiment, the functional safety module converts the light control signal in the same way as the light control module.

[0040] Step 3: If the judgment is consistent, step 4 is executed; if the judgment is inconsistent, the restart step is executed.

[0041] Step 4: The functional safety module transfers the control logic signal of the light control module to the headlight module.

[0042] Restart steps: If it is determined that they are inconsistent, the functional safety module records the abnormality and starts timing and re-performs the consistency judgment; if it is determined that they are inconsistent within the set time threshold, the functional safety module restarts the lighting control module and determines whether the abnormality has recovered. If it has recovered, step four is executed; if it has not recovered, step five is executed. The way to determine whether it has recovered is to perform a consistency judgment on the external lighting control signal and the control logic signal of the lighting control module. If they are consistent, it means that the lighting control module has recovered.

[0043] Step five: The functional safety module converts the lighting control signal into a control logic signal and then transmits it to the headlight module. At the same time, the functional safety module continuously determines whether the abnormality of the lighting control module has recovered. If it has recovered, steps one to five are re-executed after receiving the lighting control signal. If it has not recovered, the functional safety module continues to directly process the lighting control signal.

[0044] After an abnormality occurs in the lighting control module, the functional safety module can replace the function of the lighting control module and continue to effectively control the vehicle-mounted external lights. Both the functional safety module and the lighting control module can convert the lighting hole control signal into a control logic signal, enabling the signal to be transmitted when the vehicle uses bus technology. The abnormality judgment of the lighting control module is carried out multiple times and restarted before the functional safety module replaces the lighting control module to work, reducing the frequency of the functional safety module replacing the lighting control module.

[0045] In this embodiment, in all steps, the functional safety module continuously receives the working information of the headlight module and determines whether the headlight module has failed. If a failure occurs, an alarm signal is sent and the failure judgment is stopped until the vehicle is re-powered. Whether the headlight module is operating normally or not, the functional safety module will send a signal to it. Whether the headlight module fails does not affect the operation of the functional safety module. The failure of the headlight module may occur at any time. Therefore, the functional safety module will continuously receive the working information of the headlight to make a judgment and give a reminder. At the same time, the failure judgment of the headlight module will not be carried out multiple times to reduce the operation of the functional safety module.

[0046] This embodiment also proposes an automobile, including a vehicle body, in which the above-mentioned vehicle-mounted external lighting control system is installed or a control system capable of executing the above method is provided.

[0047] In this embodiment, the vehicle body is equipped with a switch module, an intelligent driving module, and an in-vehicle entertainment module that are communicatively connected to the functional safety module. The communication signals of the switch module, the intelligent driving module, and the in-vehicle entertainment module are sent to the fault signal receiving unit. When the fault signal receiving unit fails to receive a communication signal or receives an external fault signal, the alarm unit issues a corresponding warning to the user.

[0048] This embodiment provides another form of lighting control method, specifically asFigure 3 As shown, various safety states are achieved to ensure that the vehicle's external lights meet the functional safety requirements. In S101, the functional safety module receives information including but not limited to the processing information of the lighting control module, the information feedback from the headlight module, the external lighting control information, the external fault signal, etc., and then determines the signals with safety requirements. For signals not related to safety, the functional safety module does not process them and directly passes them through.

[0049] In S102, if the determination result is normal, it proceeds to S103. In S103, the functional safety module directly sends the information processed by the lighting control module to the headlight module, and at the same time repeats S101 to perform fault diagnosis again. If the determination result in S102 is abnormal, it proceeds to S104.

[0050] In S104, it is determined whether the occurring abnormality is a type-I fault. Type-I faults include but are not limited to the internal logic failure of the lighting control module resulting in the inability to pass the consistency judgment within the preset time threshold, the communication failure of the lighting control module and exceeding the specified time range, etc. If the determination result in S104 is yes, it proceeds to S105, Safety State 1.

[0051] In S105, the functional safety module resets the lighting control module to attempt to make the lighting control module work properly.

[0052] In S106, the functional safety module determines whether the reset lighting control module has returned to normal. If it has returned to normal, it repeats S101 to perform fault diagnosis again. If it has not yet returned to normal, it proceeds to S107, Safety State 2.

[0053] In S107, the functional safety module gives an alarm to prompt the driver of a vehicle external lighting fault. At the same time, the functional safety module degrades the lighting function and takes over some lighting functions with safety requirements to ensure that some lights can be used normally. These lights refer to turn signals, safety lights, or headlamps, etc. Then it proceeds to S108.

[0054] In S108, the functional safety module continuously determines whether the lighting control module has returned to normal. If it has returned to normal, the functional safety module cancels the alarm, and the external lighting function returns to normal, and it repeats S101 to perform fault diagnosis again. If it is still in the process of recovery, the functional safety module continuously takes over some lighting functions with safety requirements until the lighting control module recovers.

[0055] In S104, if the determination result is negative, then S109 is executed. S109 determines whether the occurring anomaly is a type-II fault. Type-II faults include, but are not limited to, faults such as short circuits and open circuits feedback by the headlight module, headlight module communication faults beyond the specified time range, external light switch, intelligent driving module light control, in-vehicle entertainment module light control faults beyond the specified time range, and so on. If it is a type-II fault, then S110 is entered.

[0056] In S110, the functional safety module will give an alarm to prompt the driver of a vehicle external light fault. At the same time, the functional safety module will deactivate the failed light function and the corresponding fault diagnosis until it is determined again after a power-on reset.

[0057] If it is determined in S109 that it is not a type-II fault, then S111 is executed. In S111, it is determined whether the occurring anomaly is a type-III fault, that is, the internal logic of the light control module fails but recovers within the time threshold, the light control module communication fails but recovers within the specified time range, the headlight module communication fault but recovers within the specified time range, the external light switch, intelligent driving module light control, in-vehicle entertainment module light control fault but recovers within the specified time range, and so on. If it is a type-III fault, then S112, the safe state 3, is entered.

[0058] In S112, the functional safety module will record the above faults and then re-enter S101 for fault diagnosis.

[0059] The above embodiments are only preferred embodiments given to fully illustrate the present invention, and the protection scope of the present invention is not limited thereto. Equivalent substitutions or transformations made by those skilled in the art on the basis of the present invention are all within the protection scope of the present invention.

Claims

1. An on-vehicle external lighting control system, including a headlight module, characterized in that: It further includes a lighting control module and a functional safety module; the functional safety module is electrically connected to the lighting control module and the headlight module respectively; the functional safety module includes a signal conversion unit and a comparison unit; the lighting control module is used to receive an externally input lighting control signal, convert it into a control logic signal, and then transmit it to the functional safety module; the signal conversion unit is used to convert the externally input lighting control signal into a signal of the same type as the control logic signal or convert the control logic signal of the lighting control module into a signal of the same type as the externally input lighting control signal, and the comparison unit judges the consistency between the lighting control signal converted by the signal conversion unit and the control logic signal; the functional safety module sends the processed lighting control signal or control logic signal to the headlight module according to the judgment result of the comparison unit.

2. The vehicle-mounted external lighting control system according to claim 1, wherein: The functional safety module further includes a timing unit, and a time threshold is preset in the timing unit; after the comparison unit outputs a judgment result of inconsistency, the timing unit starts timing, and after reaching the time threshold, the functional safety module outputs a restart signal to the lighting control module and makes the lighting control module restart.

3. The on-vehicle external lighting control system according to claim 2, wherein: The functional safety module includes a counting unit. Whenever the timing of the timing unit reaches the time threshold, the count value of the counting unit is incremented by one. When the count value reaches the preset counting threshold, the functional safety module resets the count value and sends the externally input lighting control signal to the headlight module.

4. The vehicle-mounted external lighting control system according to claim 3, characterized in that: The functional safety module includes an alarm unit. After the count value of the counting unit reaches the counting threshold, it sends a signal to the alarm unit and makes it emit an alarm signal.

5. The on-vehicle external lighting control system according to claim 4, characterized in that: The headlight module includes a fault detection unit, and the functional safety module includes a fault signal receiving unit; the fault detection unit collects the working information of the headlight module and sends it to the fault signal receiving unit; the fault signal receiving unit also receives the communication signal of the lighting control module; the fault signal receiving unit sends the fault signal to the alarm unit to make it emit an alarm signal.

6. An on-vehicle external lighting control method, characterized in that, It includes the following steps: Step 1: The functional safety module and the lighting control module receive the externally input lighting control signal, and the lighting control module converts the externally input lighting control signal into a control logic signal. Step 2: The functional safety module converts the control logic signal into a signal type consistent with the lighting control signal and then makes a consistency judgment, or the functional safety module converts the lighting control signal into a signal type consistent with the control logic signal and then makes a consistency judgment. Step 3: If the judgment is consistent, execute Step 4; if the judgment is inconsistent, execute Step 5. Step 4: The functional safety module sends the control logic signal of the lighting control module to the headlight module. Step 5: The functional safety module converts the lighting control signal into a control logic signal and then sends it to the headlight module.

7. The vehicle-mounted external lighting control method according to claim 6, wherein: Before performing the fifth step, there is a restart step, and the specific content of the restart step is as follows: If it is judged to be inconsistent, the functional safety module records the abnormality and starts timing and re-judges the consistency; if it is judged to be inconsistent within the set time threshold, the functional safety module restarts the lighting control module and judges whether the abnormality is restored. If it is restored, step four is executed; if it is not restored, step five is executed.

8. The vehicle-mounted external lighting control method according to claim 7, characterized in that: In step five, the functional safety module continuously judges whether the abnormality of the lighting control module is restored.

9. The vehicle-mounted external lighting control method according to claim 6, wherein, In all steps, the functional safety module continuously receives the working information of the headlight module and judges whether the headlight module fails. If a failure occurs, an alarm signal is sent and the failure judgment is stopped until the vehicle is powered on again.

10. An automobile, comprising a vehicle body, characterized in that: An in-vehicle external lighting control system according to any one of claims 1-5 or a control system provided with a control method according to any one of claims 6-9 is installed.

Images