An on-board fault injection device, system and method
By designing an on-board fault injection device that integrates multiple fault injection types, the problem that existing technologies can only inject a single fault is solved, achieving flexibility and safety in complex fault injection and improving the effectiveness of real-vehicle functional safety testing.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2023-05-30
- Publication Date
- 2026-03-31
AI Technical Summary
In existing technologies, CANoe devices can only inject a single type of fault, and cannot inject different types of faults, thus failing to meet the complex functional safety testing requirements of real vehicles.
An on-board fault injection device was designed, including a user operation module, a fault configuration module, and a fault execution module. It can integrate multiple fault injection types and perform self-testing through a monitoring module to ensure the safety and reliability of the device.
It enables integrated injection of different types of faults, improving the flexibility and reliability of real-vehicle functional safety testing, and enhancing the safety and operational stability of fault injection.
Smart Images
Figure CN116594375B_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of automotive electronics technology, and more specifically, to an on-board fault injection device, system, and method. Background Technology
[0002] Currently, in real-vehicle functional safety testing, fault injection is used to verify whether the safety mechanisms are implemented. Existing technology typically uses CANoe devices for fault injection, specifically: a CANoe device is connected between the two controllers of the vehicle, and the other end of the CANoe device is connected to a computer containing CANoe software. Fault injection is achieved by writing scripts in the CANoe software.
[0003] However, CANoe devices can only inject a single type of fault, such as communication faults or hardwire faults, and cannot inject different types of faults. Summary of the Invention
[0004] In view of this, the present invention discloses an on-board fault injection device, system and method to realize different types of fault injection.
[0005] An on-board fault injection device is provided, the on-board fault injection device being installed on the line between a first device and a second device, the on-board fault injection device comprising:
[0006] The user operation module is used to obtain fault injection information selected by the user, wherein the fault injection information includes: fault injection type;
[0007] The fault configuration module is used to obtain the fault injection information output by the user operation module and configure the corresponding fault based on the fault injection information.
[0008] The fault execution module is used to obtain the fault configured by the fault configuration module and output the fault to the second device to complete the fault injection.
[0009] Optionally, the fault execution module is further configured to:
[0010] Obtain the fault injection parameters corresponding to the output of the fault to the second device, and return the fault injection parameters to the user operation module to provide feedback to the user. The fault injection parameters include at least: fault injection time, fault injection status, and fault injection type.
[0011] Optionally, it may also include: a monitoring module;
[0012] This module is used to monitor whether the user operation module, the fault configuration module, and the fault execution module have malfunctioned. If any one or more modules are detected to have malfunctioned, the corresponding fault information is sent to the user operation module to remind the user.
[0013] Optionally, the monitoring module is also used for:
[0014] The fault information is sent to the fault configuration module, causing the fault configuration module to immediately stop configuring the fault.
[0015] Optionally, when the fault injection type is a signal modification fault, the process by which the fault configuration module configures the corresponding fault based on the fault injection information specifically includes:
[0016] Obtain the fault injection information;
[0017] The fault injection information is parsed to obtain first fault injection parsing information, wherein the first fault injection parsing information includes at least: the signal modification fault type corresponding to the signal to be modified, the message ID of the signal, the signal modification value, and the first fault injection time;
[0018] Based on the message ID of the signal, select the target message containing the signal to be modified from the communication messages of the first device and the second device;
[0019] During the first fault injection time, the target message is modified based on the signal modification fault type and the signal modification value to complete the fault configuration.
[0020] Optionally, when the fault injection type is a sensor hardwire short circuit fault, the process by which the fault configuration module configures the corresponding fault based on the fault injection information specifically includes:
[0021] Obtain the fault injection information;
[0022] The fault injection information is parsed to obtain second fault injection parsing information, wherein the second fault injection parsing information includes at least: the sensor hard wire short circuit fault, the sensor channel, and the second fault injection time;
[0023] Based on the sensor channel, the corresponding relay is controlled to perform a short-circuit fault during the second fault injection time to complete the fault configuration.
[0024] An on-board fault injection system includes: a power supply module and the on-board fault injection device described above;
[0025] The power supply module is connected to the vehicle-mounted fault injection device and is used to provide power voltage to the vehicle-mounted fault injection device.
[0026] Optionally, the monitoring module in the vehicle-mounted fault injection device is further used for:
[0027] The system monitors whether the power supply module has malfunctioned. If a malfunction is detected, the corresponding malfunction information is sent to the user operation module to remind the user.
[0028] An on-board fault injection method, applied to the on-board fault injection device in the aforementioned on-board fault injection system, the on-board fault injection method comprising:
[0029] Obtain the fault injection information selected by the user, wherein the fault injection information includes: fault injection type;
[0030] Configure the corresponding fault based on the fault injection information;
[0031] The fault is output to the second device to complete the fault injection.
[0032] Optional, also includes:
[0033] Obtain the fault injection parameters corresponding to the output of the fault to the second device, wherein the fault injection parameters include at least: fault injection time, fault injection status and fault injection type;
[0034] The fault injection parameters are output and displayed.
[0035] As can be seen from the above technical solution, this invention discloses an on-board fault injection device, system, and method. The on-board fault injection device is installed on the line between a first device and a second device, and includes: a user operation module, a fault configuration module, and a fault execution module. The user operation module obtains fault injection information selected by the user, the fault configuration module configures the corresponding fault based on the fault injection information, and the fault execution module outputs the fault to the second device, completing the fault injection. The on-board fault injection device disclosed in this invention integrates various fault injection types, and compared with existing vehicle fault injection schemes, it can realize different types of fault injection. Attached Figure Description
[0036] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on the published drawings without creative effort.
[0037] Figure 1 This is a schematic diagram of the structure of an on-board fault injection device disclosed in an embodiment of the present invention;
[0038] Figure 2 This is a schematic diagram of another vehicle-mounted fault injection device disclosed in an embodiment of the present invention;
[0039] Figure 3 This is a schematic diagram of the structure of an on-board fault injection system disclosed in an embodiment of the present invention;
[0040] Figure 4 This is a flowchart of an on-board fault injection method disclosed in an embodiment of the present invention;
[0041] Figure 5 This is a flowchart of another vehicle-mounted fault injection method disclosed in an embodiment of the present invention. Detailed Implementation
[0042] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.
[0043] This invention discloses an on-board fault injection device, system, and method. The on-board fault injection device is installed on the line between a first device and a second device, and includes: a user operation module, a fault configuration module, and a fault execution module. The user operation module acquires fault injection information selected by the user, the fault configuration module configures the corresponding fault based on the fault injection information, and the fault execution module outputs the fault to the second device, completing the fault injection. The on-board fault injection device disclosed in this invention integrates various fault injection types, and compared with existing vehicle fault injection schemes, it can realize different types of fault injection.
[0044] See Figure 1 The present invention discloses a schematic diagram of a vehicle-mounted fault injection device. The vehicle-mounted fault injection device 10 is used to be installed on the line between the first device 20 and the second device 30. In practical applications, the first device 20 and the second device 30 can be two MCU (Microcontroller Unit) terminals.
[0045] The vehicle-mounted fault injection device 10 may include: a user operation module 11, a fault configuration module 12, and a fault execution module 13.
[0046] The user operation module 11 is used to obtain the fault injection information selected by the user.
[0047] In practical applications, users can select fault injection information through the user operation module 11. This fault injection information includes information such as fault injection type and fault injection time. Fault injection types include, but are not limited to, communication fault categories and electrical fault categories. Other fault injection types can be added as needed.
[0048] It should be noted that an operating interface can be set up for the vehicle-mounted fault injection device so that users can select fault injection information.
[0049] The fault configuration module 12 is used to obtain the fault injection information output by the user operation module 11 and configure the corresponding fault based on the fault injection information.
[0050] When configuring a fault, the fault configuration module 12 can configure information such as: message to be modified, signal to be modified, signal modification value, and fault injection time.
[0051] The fault execution module 13 is used to obtain the fault configured by the fault configuration module 12 and output the fault to the second device 30 to complete the fault injection.
[0052] It should be noted that in this embodiment, the vehicle-mounted fault injection device 10 includes a processor and a memory. The user operation module 11, fault configuration module 12 and fault execution module 13 mentioned above are all stored in the memory as program units, and the processor executes the program units stored in the memory to realize the corresponding functions.
[0053] In summary, this invention discloses an on-board fault injection device, which is installed on the line between a first device 20 and a second device 30. The device includes a user operation module 11, a fault configuration module 12, and a fault execution module 13. The user operation module 11 acquires fault injection information selected by the user, the fault configuration module 12 configures the corresponding fault based on the fault injection information, and the fault execution module 13 outputs the fault to the second device, completing the fault injection. This on-board fault injection device integrates various fault injection types and, compared to existing vehicle fault injection schemes, can realize different types of fault injection.
[0054] To further optimize the above embodiments, see [link to relevant documentation]. Figure 2 A schematic diagram of another vehicle-mounted fault injection device disclosed in this embodiment of the invention is shown. Figure 1 Based on the illustrated embodiment, the fault execution module 13 can also be used for:
[0055] Obtain the fault injection parameters corresponding to the output of the fault to the second device, and return the fault injection parameters to the user operation module 11 to provide feedback to the user.
[0056] The fault injection parameters may include at least: fault injection time, fault injection status, and fault injection type.
[0057] It should be noted that when the fault execution module 13 outputs a fault to the second device 30, it can obtain the fault injection status in real time. The fault injection time and fault injection type can be obtained from the faults configured by the fault configuration module 12.
[0058] To further optimize the above embodiments, the vehicle-mounted fault injection device may further include: a monitoring module 14;
[0059] The monitoring module 14 is used to monitor whether the user operation module 11, the fault configuration module 12 and the fault execution module 13 have failed. If any one or more modules fail, the corresponding fault information will be sent to the user operation module 11 to remind the user.
[0060] In practical applications, when the user operation module 11 outputs fault injection information to the fault configuration module 12, a data protection strategy is added to the fault injection information. The monitoring module 14 verifies the fault injection information output by the user operation module 11 using the data protection strategy to determine whether the user operation module 11 has malfunctioned. If the verification fails, it is determined that the user operation module 11 has malfunctioned.
[0061] Data protection strategies include, but are not limited to, CRC (Cyclic Redundancy Check) verification.
[0062] When monitoring module 14 monitors fault configuration module 12, fault configuration module 12 and monitoring module 14 can simultaneously receive instructions from user operation module 11. Fault configuration module 12 and monitoring module 14 each use a set of algorithms for fault configuration. If the fault configuration results of fault configuration module 12 and monitoring module 14 are inconsistent, it is determined that fault configuration module 12 has failed.
[0063] When monitoring the fault execution module 13, the monitoring module 14 simultaneously receives the output signals from the fault configuration module 12 and the fault execution module 13. When the two output signals are found to be inconsistent, it is determined that the fault execution module 13 has malfunctioned.
[0064] To further optimize the above embodiments, the monitoring module 14 can also be used for:
[0065] The fault information is sent to the fault configuration module 12, causing the fault configuration module 12 to immediately stop configuring the fault.
[0066] Specifically, if the monitoring module 14 detects a fault in any one or more of the user operation module 11, the fault configuration module 12, and the fault execution module 13, the monitoring module 14 will send the corresponding fault information to the user operation module 11 to remind the user, and at the same time send the fault information to the fault configuration module 12. If the fault configuration module 12 is configuring a fault at this time, the fault configuration module 12 will immediately stop configuring the fault.
[0067] In summary, the vehicle-mounted fault injection device disclosed in this invention can self-test internal faults through the monitoring module 14, which greatly improves the safety of operation while having a high degree of integration of fault injection types.
[0068] To facilitate understanding of the fault configuration process of the fault configuration module 12, the present invention also provides two specific embodiments, as follows:
[0069] (1) Taking the signal modification subcategory within the major category of communication faults as an example, the configuration faults are explained as follows:
[0070] When the fault injection type is a signal modification fault, the process by which the fault configuration module 12 configures the corresponding fault based on the fault injection information specifically includes:
[0071] Obtain fault injection information;
[0072] The fault injection information is parsed to obtain the first fault injection parsing information, which includes at least: the signal modification fault type corresponding to the signal to be modified, the message ID of the signal, the signal modification value, and the first fault injection time.
[0073] Based on the message ID of the signal, select the target message containing the signal to be modified from the communication messages of the first device 20 and the second device 30;
[0074] During the first fault injection period, the target message is modified based on the signal modification fault type and signal modification value to complete the fault configuration.
[0075] In this embodiment, after the first fault time is reached, the fault configuration module 12 no longer modifies the signal.
[0076] (2) Taking sensor hardwire short circuit as an example in the major category of electrical faults, the configuration fault is explained as follows:
[0077] When the fault injection type is a sensor hard wire short circuit fault, the process by which the fault configuration module 12 configures the corresponding fault based on the fault injection information specifically includes:
[0078] Obtain fault injection information;
[0079] The fault injection information is parsed to obtain the second fault injection parsing information, which includes at least: sensor hard wire short circuit fault, sensor channel, and second fault injection time.
[0080] Based on the sensor channel, the corresponding relay is controlled to execute a short-circuit fault during the second fault injection time to complete the fault configuration.
[0081] In this embodiment, the relay returns to its original state after the second fault injection time is reached.
[0082] It should be noted that if the user operation module 11 obtains the user's selected information as "do not select inject fault information", the vehicle-mounted fault injection device 10 will not make any changes or processing, and the first device 20 and the second device 30 will continue to communicate normally.
[0083] Corresponding to the above embodiments, the present invention also discloses an on-board fault injection system.
[0084] See Figure 3 The present invention discloses a schematic diagram of a vehicle-mounted fault injection system. The vehicle-mounted fault injection system may include a power supply module 40 and the vehicle-mounted fault injection device 10 in the above embodiment.
[0085] The power supply module 40 is connected to the vehicle-mounted fault injection device 10 and is used to provide power voltage to the vehicle-mounted fault injection device 10.
[0086] The power supply module 40 can be an energy storage battery module, depending on the actual needs, and this invention does not limit it.
[0087] In summary, the vehicle-mounted fault injection system disclosed in this invention has a built-in power supply module 40, which can realize a stable power supply for the vehicle-mounted fault injection device 10 and can realize the injection of power supply fault types.
[0088] To further optimize the above embodiments, the monitoring module 14 in the vehicle-mounted fault injection device 10 can also be used for:
[0089] The system monitors whether the power supply module 40 has malfunctioned. If a malfunction is detected in the power supply module 40, the corresponding malfunction information is sent to the user operation module 11 to remind the user.
[0090] Specifically, the monitoring module 14 determines whether the power supply module 40 has malfunctioned by monitoring the output voltage of the power supply module 40. Specifically, when the monitoring module 14 detects that the output voltage of the power supply module 40 exceeds the preset voltage range or that the output voltage response does not match the preset voltage conditions, it determines that the power supply module 40 has malfunctioned and sends the corresponding fault information to the user operation module 11 to remind the user so that the user can take timely and effective measures.
[0091] In summary, the vehicle-mounted fault injection system disclosed in this invention can self-detect internal system faults through the monitoring module 14, which greatly improves the safety of the vehicle-mounted fault injection system while having a high degree of integration of fault injection types.
[0092] Corresponding to the above embodiments, the present invention also discloses an on-board fault injection method.
[0093] See Figure 4 The present invention discloses a flowchart of an on-board fault injection method, which is applied to the on-board fault injection device in the above-mentioned on-board fault injection system. The on-board fault injection method includes:
[0094] Step S101: Obtain the fault injection information selected by the user.
[0095] In practical applications, users can select fault injection information through the user operation module 11. This fault injection information includes information such as fault injection type and fault injection time. Fault injection types include, but are not limited to, communication fault categories and electrical fault categories. Other fault injection types can be added as needed.
[0096] It should be noted that an operating interface can be set up for the vehicle-mounted fault injection device so that users can select fault injection information.
[0097] Step S102: Configure the corresponding fault based on the fault injection information.
[0098] When configuring a fault, the configuration content may include: the message to be modified, the signal to be modified, the signal modification value, the fault injection time, and other information.
[0099] Step S103: Output the fault to the second device to complete the fault injection.
[0100] In summary, this invention discloses an on-board fault injection method that obtains fault injection information selected by the user, configures the corresponding fault based on the fault injection information, and outputs the fault to a second device to complete the fault injection. The on-board fault injection device disclosed in this invention integrates various fault injection types, and compared with existing vehicle fault injection schemes, it can realize different types of fault injection.
[0101] It should be noted that before the vehicle-mounted fault injection device 10 in the vehicle-mounted fault injection system performs the fault injection operation, under the premise that the first device 20 and the second device 30 are communicating normally, the power supply module 40 in the vehicle-mounted fault injection system is first turned on, and the power supply module 40 provides power voltage to the vehicle-mounted fault injection device 10, and then the vehicle-mounted fault injection device 10 performs the fault injection operation.
[0102] To further optimize the above embodiments, see [link to relevant documentation]. Figure 5 The flowchart of another vehicle-mounted fault injection method disclosed in this embodiment of the invention is as follows: Figure 4 Based on the illustrated embodiment, the on-board fault injection method may further include:
[0103] Step S104: Output the fault to the second device and specify the corresponding fault injection parameters.
[0104] The fault injection parameters include at least: fault injection time, fault injection status, and fault injection type.
[0105] Step S105: Output and display the fault injection parameters.
[0106] In practical applications, the vehicle-mounted fault injection device 10 can display the fault injection parameters on the operation interface to the user.
[0107] Finally, it should be noted that in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.
[0108] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. The same or similar parts between the various embodiments can be referred to each other.
[0109] The above description of the disclosed embodiments enables those skilled in the art to make or use the invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the invention. Therefore, the invention is not to be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.
Claims
1. An on-board fault injection device, characterized in that, The vehicle-mounted fault injection device is arranged on a line between the first device and the second device, and comprises: a user operation module configured to obtain fault injection information selected by a user, wherein the fault injection information comprises a fault injection type; a fault configuration module configured to obtain the fault injection information output by the user operation module and configure a corresponding fault based on the fault injection information; a fault execution module configured to obtain the fault configured by the fault configuration module and output the fault to the second device to complete fault injection; a monitoring module configured to monitor whether the user operation module, the fault configuration module, and the fault execution module have faults, and send corresponding fault information to the user operation module to remind the user if any one or more modules are found to have faults; wherein the monitoring module verifies whether the user operation module has a fault by using a data protection strategy on the fault injection information output by the user operation module, and determines that the user operation module has a fault when the verification fails; when monitoring the fault configuration module, the fault configuration module and the monitoring module simultaneously receive an instruction from the user operation module, the fault configuration module and the monitoring module each use a set of algorithms to configure faults, and it is determined that the fault configuration module has a fault if the fault configuration results of the fault configuration module and the monitoring module are inconsistent; when monitoring the fault execution module, the monitoring module simultaneously receives output signals from the fault configuration module and the fault execution module, and it is determined that the fault execution module has a fault when the two output signals are found to be inconsistent.
2. The on-board fault injection device of claim 1, wherein, The fault execution module is further configured to: obtain fault injection parameters corresponding to the output of the fault to the second device, and return the fault injection parameters to the user operation module to feed back to the user, wherein the fault injection parameters at least include fault injection time, fault injection state, and fault injection type.
3. The on-board fault injection device of claim 1, wherein, The monitoring module is further configured to: send the fault information to the fault configuration module to make the fault configuration module immediately stop configuring faults.
4. The on-board fault injection device of claim 1, wherein, When the fault injection type is a signal modification fault, the process of configuring a corresponding fault by the fault configuration module based on the fault injection information specifically comprises: obtaining the fault injection information; parsing the fault injection information to obtain first fault injection analysis information, wherein the first fault injection analysis information at least includes a signal modification fault type corresponding to a signal to be modified, a signal message ID, a signal modification value, and a first fault injection time; selecting a target message in which the signal to be modified is located from communication messages of the first device and the second device according to the signal message ID; modifying the target message based on the signal modification fault type and the signal modification value within the first fault injection time to complete fault configuration.
5. The on-board fault injection device of claim 1, wherein, When the fault injection type is a sensor hard-wire short-circuit fault, the process of configuring a corresponding fault by the fault configuration module based on the fault injection information specifically comprises: Obtaining the fault injection information; The fault injection information is parsed to obtain second fault injection analysis information, wherein the second fault injection analysis information at least includes: the sensor hard line short circuit fault, sensor channel, second fault injection time; Based on the sensor channel, the corresponding relay is controlled to execute short circuit fault in the second fault injection time, and the fault configuration is completed.
6. An on-board fault injection system characterized by, Comprising: The power supply module and the vehicle-mounted fault injection device of any one of claims 1-5; The power supply module is connected with the vehicle-mounted fault injection device, and is used for providing power voltage for the vehicle-mounted fault injection device.
7. The on-board fault injection system of claim 6, wherein, The monitoring module in the vehicle-mounted fault injection device is further used for: Monitoring whether the power supply module fails, and if it is monitored that the power supply module fails, sending corresponding fault information to the user operation module to remind the user.
8. An in-vehicle injection fault method characterized by, The vehicle-mounted fault injection device applied to the vehicle-mounted fault injection system of claim 6 or 7, the vehicle-mounted fault injection method comprises: Obtaining the fault injection information selected by the user, wherein the fault injection information includes: fault injection type; Based on the fault injection information, the corresponding fault is configured; The fault is output to the second device to complete the fault injection.
9. The on-board injection fault method according to claim 8, characterized in that, Further comprising: Obtaining the fault injection parameter corresponding to the fault output to the second device, wherein the fault injection parameter at least includes: fault injection time, fault injection state and fault injection type; The fault injection parameter is output and displayed.
Citation Information
Patent Citations
Bus fault injection system
CN111475357A