A fault processing method, device and electronic equipment

Abstract

The application discloses a fault processing method, device and electronic equipment. The method comprises detecting whether a fault occurs in a vehicle. When detecting that a fault occurs, a vehicle control scheme corresponding to fault information is executed within a first preset time period and a safety scheme corresponding to the fault information is executed within a second preset time period according to the detected fault information, and an alarm is sent for reminding, or when detecting that a fault occurs, a fault diagnosis code DTC corresponding to the fault information is generated within a diagnosis time period according to the detected fault information, and a diagnosis solution corresponding to the fault information is determined according to the DTC. Through the above method, when a fault is detected, not only can the driver be reminded to take over the vehicle within the FTTI to realize safe driving, but also the fault information can be effectively solved in time.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of vehicle fault diagnosis, and in particular to a fault processing method and device and electronic equipment. BACKGROUND

[0002] The current design scheme of a fault diagnosis code (DTC) in an intelligent driving system is still strongly associated with a safety state, a function exit and a fault tolerance time interval (FTTI) in a function safety of an advanced driving assistance system (ADAS), where the FTTI refers to a shortest time interval from an internal fault of a related item to a possible occurrence of a dangerous event under the condition that a safety mechanism is not activated, and the FTTI includes a fault diagnosis time, a fault response time and an entering safety state time. Specifically, when a fault affecting the safety of a vehicle is detected, a DTC corresponding to the fault is generated and reported, at this time, a fault light on an ADAS control panel is lit, thereby notifying a driver to take over the vehicle, and the vehicle is processed with degraded functions and / or a reduced speed within the fault response time, then the ADAS enters a safety state within the entering safety state time, and performs a function exit in the function safety to complete fault processing.

[0003] With the continuous improvement of intelligent driving technology and the increasingly complex application scenarios, the FTTI requirement is also increasingly strict and generally very short, and may only allow 200-300 ms, but the fault reporting time of the DTC may need 500-700 ms, therefore, when the DTC corresponding to the fault is reported, the driver may not take over the vehicle in time within the FTTI due to the long fault reporting time, thereby affecting the safe driving of the vehicle. SUMMARY

[0004] The present application provides a fault processing method and device and electronic equipment, which can solve the problem that in the current intelligent driving field, when the DTC corresponding to the fault is reported, the driver may not take over the vehicle in time within the FTTI due to the long fault reporting time, thereby affecting the safe driving of the vehicle.

[0005] In a first aspect, the present application provides a fault processing method, which comprises:

[0006] detecting whether a fault occurs in a vehicle;

[0007] When a fault is detected, a vehicle control scheme corresponding to the detected fault information is executed within a first preset time period and a safety scheme corresponding to the detected fault information is executed within a second preset time period according to the detected fault information, and an alarm is issued to remind, wherein a sum of the detection time of the fault information, the first preset time period and the second preset time period is equal to a minimum fault tolerance time interval FTTI of the vehicle, the vehicle control scheme at least includes a degraded function processing and / or a speed reduction processing of the vehicle, and the safety scheme at least includes an advanced driver assistance system ADAS entering a safe state and executing a function exit; or

[0008] When a fault is detected, a fault diagnosis code DTC corresponding to the detected fault information is generated within a diagnosis time period, and a diagnosis solution corresponding to the DTC is determined according to the DTC.

[0009] Through the above method, when a fault is detected, not only can the driver be reminded to take over the vehicle within the FTTI to realize safe driving, but also the fault information can be effectively solved in time.

[0010] In a possible design, before the fault of the vehicle is detected, the method further includes:

[0011] The vehicle is tested under each preset condition to obtain a fault tolerance time interval FTTI corresponding to each preset condition of the vehicle, and the minimum FTTI is determined in each FTTI.

[0012] The minimum FTTI is time allocated according to a first preset allocation scheme to obtain the detection time of the fault information, the first preset time period and the second preset time period.

[0013] Through the above method, the minimum FTTI corresponding to the vehicle is determined, and the minimum FTTI is time allocated, so that when a fault occurs, not only can the vehicle be controlled to enter a safe state in time, but also the driver can be reminded in time to take over the vehicle within a limited time.

[0014] In a possible design, before the fault of the vehicle is detected, the method further includes:

[0015] According to the signal stability and fault reporting condition of the vehicle under different preset conditions, the stable maximum non-misreporting DTC time of the vehicle is analyzed and obtained;

[0016] The stable maximum non-misreporting DTC time is time allocated according to a second preset allocation scheme to obtain the detection time of the fault information and the diagnosis time period.

[0017] By the above method, the stable maximum false-free DTC time of the vehicle is determined, and the stable maximum false-free DTC time is time-allocated, so that not only the false fault reporting can be avoided, but also the driver can know the fault cause and fault component in time.

[0018] In a possible design, the generating the DTC corresponding to the fault information comprises:

[0019] The fault information is de-bounced to determine whether the fault information is false reporting;

[0020] When it is determined that the fault information is not false reporting, the DTC corresponding to the fault information is generated.

[0021] By the above method, the DTC corresponding to the fault information is generated, so that the driver can know the fault cause and fault component through the DTC, and the vehicle can be maintained in time.

[0022] In a second aspect, the present application provides a fault processing device, which comprises:

[0023] A detection module is configured to detect whether a fault occurs in the vehicle;

[0024] A first execution module is configured to, when it is detected that a fault occurs, execute a vehicle control scheme corresponding to the detected fault information within a first preset time period and execute a safety scheme corresponding to the fault information within a second preset time period according to the detected fault information, and issue an alarm reminder, wherein a sum of the detection time of the fault information, the first preset time period and the second preset time period is equal to a minimum fault tolerance time interval FTTI of the vehicle, the vehicle control scheme at least comprises a degraded function processing and / or a speed reduction processing on the vehicle, and the safety scheme at least comprises an advanced driver assistance system ADAS entering a safety state and executing a function exit; or

[0025] A second execution module is configured to, when it is detected that a fault occurs, generate a fault diagnosis code DTC corresponding to the detected fault information within a diagnosis time period according to the detected fault information, and determine a diagnosis solution corresponding to the fault information according to the DTC.

[0026] In a possible design, the device further comprises:

[0027] A test module is configured to test the vehicle under each preset condition to obtain a fault tolerance time interval FTTI corresponding to the vehicle under each preset condition respectively, and determine a minimum FTTI in each FTTI;

[0028] The first distribution module is configured to distribute the minimum FTTI according to a first preset distribution scheme to obtain a detection time of the fault information, the first preset time period and the second preset time period.

[0029] In a possible design, the apparatus further includes:

[0030] The analysis module is configured to analyze a stable maximum misreporting-free DTC time of the vehicle according to signal stability and fault reporting conditions of the vehicle under different preset conditions.

[0031] The second distribution module is configured to distribute the stable maximum misreporting-free DTC time according to a second preset distribution scheme to obtain the detection time of the fault information and the diagnosis time period.

[0032] In a possible design, the second execution module is specifically configured to:

[0033] perform debouncing processing on the fault information to determine whether the fault information is misreported;

[0034] generate a DTC corresponding to the fault information when it is determined that the fault information is not misreported.

[0035] In a third aspect, the present application provides an electronic device, including:

[0036] a memory configured to store a computer program;

[0037] a processor configured to execute the computer program stored in the memory to implement the fault processing method steps.

[0038] In a fourth aspect, the present application provides a computer readable storage medium, which stores a computer program, and the computer program is executed by a processor to implement the fault processing method steps.

[0039] Based on the fault processing method provided in the present application, when a fault is detected, a vehicle control scheme and a safety scheme corresponding to the fault information are executed according to the detected fault information, and an alarm is issued to remind the driver to take over the vehicle in time, so as to realize safe driving. At the same time, a fault diagnosis code (DTC) corresponding to the fault information is generated, and a diagnosis solution corresponding to the fault information is determined according to the DTC, so that the fault information can be processed in time and effectively.

[0040] The above-mentioned various aspects of the second aspect to the fourth aspect and the technical effects that can be achieved by the various aspects can refer to the technical effects that can be achieved by the first aspect or the various possible schemes in the first aspect, which will not be repeated here. BRIEF DESCRIPTION OF DRAWINGS

[0041] Figure 1 A flow chart of a fault processing method provided in the present application;

[0042] Figure 2 An application scenario flow chart of a fault processing method provided in the present application;

[0043] Figure 3 A structural schematic diagram of a fault processing device provided in the present application;

[0044] Figure 4 A structural schematic diagram of an electronic device provided in the present application. DETAILED DESCRIPTION

[0045] In order to make the objects, technical solutions and advantages of the present application clearer, the present application will be further described in detail below with reference to the drawings. The specific operation method in the method embodiment can also be applied to the device embodiment or the system embodiment. It should be noted that, in the description of the present application, “multiple” is understood as “at least two”. “And / or” describes the association relationship of the associated objects, which means that there can be three relationships, for example, A and / or B, which means that there are three cases of A alone, A and B, and B alone. A is connected with B, which means that A is directly connected with B and A is connected with B through C. In addition, in the description of the present application, “first”, “second”, etc. are used only for the purpose of distinguishing the description, and cannot be understood as indicating or implying relative importance, nor can it be understood as indicating or implying order.

[0046] The embodiments of the present application will be described in detail below with reference to the drawings.

[0047] When the current intelligent driving system detects a fault that affects the safety of the vehicle, it will generate a DTC corresponding to the fault and report it. At this time, the fault light on the ADAS control panel is lit, thereby notifying the driver to take over the vehicle, and performing degradation function and / or speed reduction processing on the vehicle within the fault response time. Then, the vehicle is controlled to enter a safe state within the safe state time, and finally, the function exit in functional safety is executed to complete the fault processing.

[0048] With the continuous improvement of intelligent driving technology and the increasing complexity of application scenarios, the FTTI requirement is also becoming more and more strict and generally very short, which may only allow 200-300ms, but the fault reporting time of DTC may need 500-700ms. Therefore, when reporting the DTC corresponding to the fault, the driver may not take over the vehicle in time within the FTTI due to the long fault reporting time, which affects the safe driving of the vehicle.

[0049] To solve the above problems, the embodiment of the application provides a fault processing method, when detecting that a fault occurs, a vehicle control scheme and a safety scheme corresponding to the detected fault information are executed according to the fault information, and an alarm is sent to remind, the driver can be reminded to take over the vehicle in the FTTI, and safe driving is realized. Meanwhile, a fault diagnosis code DTC corresponding to the fault information is generated, and a diagnosis solution corresponding to the fault information is determined according to the DTC, so that the fault information can be processed in time and effectively. The method and the device provided by the embodiment of the application are based on the same technical concept, and the embodiments of the device and the method can be mutually referred to because the principles of the problems solved by the device and the method are similar, and the repeated parts will not be described here.

[0050] In order to make the purpose, technical scheme and advantages of the application more clear, the application will be described in further detail below with reference to the drawings.

[0051] As shown in the flowchart of the fault processing method provided by the application, the method comprises the following steps: Figure 1

[0052] When detecting that a fault occurs, the following operations are performed according to the detected fault information:

[0053] S11, detecting whether a fault occurs in the vehicle;

[0054] S111, when detecting that a fault occurs, a vehicle control scheme corresponding to the detected fault information is executed within a first preset time period, a safety scheme corresponding to the fault information is executed within a second preset time period, and an alarm is sent to remind;

[0055] S112, when detecting that a fault occurs, a fault diagnosis code DTC corresponding to the detected fault information is generated within a diagnosis time period, and a diagnosis solution corresponding to the fault information is determined according to the DTC.

[0056] In the embodiment of the application, when detecting that a fault occurs in the vehicle, in order to remind the driver to take over the vehicle in the minimum fault tolerance time interval FTTI, and to effectively solve the detected fault information without false alarm, the DTC in the current DTC design scheme and the advanced driving assistance system ADAS function safety need to be decoupled, that is, whether a fault occurs in the vehicle is detected, and when detecting that a fault occurs in the vehicle, operation one and operation two are performed according to the detected fault information, wherein,

[0057] ​Operation 1: executing a vehicle control scheme corresponding to the fault information within a first preset time period and executing a safety scheme corresponding to the fault information within a second preset time period, and issuing an alarm reminder, wherein the sum of the detection time of the fault information, the first preset time period and the second preset time period is equal to the minimum fault tolerance time interval FTTI of the vehicle, the vehicle control scheme at least includes a degraded function processing and / or a speed reduction processing of the vehicle, and the safety scheme at least includes an ADAS entering a safe state and a function exit.

[0058] Specifically,

[0059] Since the FTTI corresponding to the vehicle under different preset conditions is different, in order to ensure the safety of the vehicle, the minimum FTTI in each FTTI needs to be time allocated to obtain the detection time of the fault information, the first preset time period of executing the vehicle control scheme and the second preset time period of executing the safety scheme. Specifically, first, the vehicle is tested under each preset condition to obtain the FTTI corresponding to the vehicle under each preset condition, for example, when the vehicle is driving on a curve, a steering loss fault is injected into the vehicle, and the time from the occurrence of the fault to the collision of the vehicle is recorded, that is, the FTTI.

[0060] Then, in each FTTI, the minimum FTTI is determined, and the first preset allocation scheme of the minimum FTTI is determined according to the preset condition corresponding to the minimum FTTI and the DTC design scheme in the current intelligent driving system.

[0061] For example, the minimum FTTI is 200 milliseconds, the preset condition corresponding to the minimum FTTI is that the vehicle drives on a curve at a speed of 50 kilometers per hour, and a steering loss fault is injected into the vehicle. When the vehicle is simulated and tested according to the above preset condition, first, the ADAS lights up the fault lamp on the instrument after detecting the fault, at this time, the driver takes over the steering wheel, then the driver produces torque to the wheels while holding the steering wheel, the vehicle starts to correct to avoid collision, wherein the fault detection time is 100 milliseconds, the fault lamp lighting time is 300 milliseconds, the vehicle takeover time is 500 milliseconds, the torque production time is 300 milliseconds and the vehicle correction time is 200 milliseconds.

[0062] In the above process, since the driver does not take over the vehicle in time within the minimum FTTI, the vehicle has collided, which indicates that there is an error between the vehicle model data of the simulation test and the real vehicle data, and each data of the simulation test model needs to be reduced, for example, each data is reduced by 2 times, then the simulation test is performed again until the vehicle does not collide, and the time allocation scheme of the current minimum FTTI is taken as the first preset allocation scheme.

[0063] Through the above method, when the fault occurs, not only can the vehicle be controlled into a safe state in time, but also the driver can be reminded in time, so that the driver can take over the vehicle in a limited time.

[0064] Further, since the vehicle control scheme and the safety scheme are to ensure that the vehicle can safely drive in the FTTI when hardware failure and / or systematic failure occurs, and the vehicle control scheme and the safety scheme corresponding to the fault information are related to the vehicle function safety level (Automotive Safety Integrity Level, ASIL) corresponding to the fault information, therefore, it is necessary to determine the vehicle ASIL corresponding to each fault information, wherein the specific determination method of the vehicle ASIL can be:

[0065] First, the controllability of the vehicle under different fault information is verified, and the severity (Severity, S), exposure (Exposure, E) and controllability (Controllability, C) corresponding to each fault information are obtained, wherein S represents the level of harm that personnel may suffer; E represents the probability of occurrence of a fault in actual application; C represents the possibility that the driver or other personnel involved in the risk can avoid accidents or harm, as shown in Table 1:

[0066] Severity S S0 S1 S2 S3 Description No injury Minor or moderate injury Major or fatal injury Fatal injury Incidence E E0 E1 E2 E3 Description Very low probability Low probability Moderate probability High probability Controllability C C0 C1 C2 C3 Description Essentially controllable Controllable with simple operations Controllable under normal conditions Uncontrollable

[0067] Table 1: A vehicle function safety level evaluation table

[0068] Then, according to the S, E and C corresponding to each fault information, the function safety level (Automotive Safety Integrity Level, ASIL) corresponding to each fault information is obtained, wherein the combination containing C0 and the combination containing S0 are not considered, as shown in Table 2:

[0069]

[0070]

[0071] Table 2: A vehicle function safety level division table

[0072] In Table 2, A, B, C and D respectively represent four levels of ASIL, A represents the lowest risk level, D represents the highest risk level, and Quality Management (QM) is not a function safety level, which means that there is no special safety requirement, and it can meet the quality management process.

[0073] Further, the safety target corresponding to each fault information is determined according to the hazard event and the ASIL corresponding to each fault information, and the vehicle control scheme and the safety scheme corresponding to each fault information are determined according to the safety target corresponding to each fault information.

[0074] For example, the fault information detected by the ADAS is that the high-precision map is suddenly lost, and the navigation function cannot know the navigation route in front, but the camera device of the vehicle itself can still effectively identify the lane line. The hazard event corresponding to the fault information is that a collision with an obstacle on the road in front may occur, the ASIL is QM, and the safety target is to downgrade the navigation function to the vehicle driving function. Therefore, the vehicle control scheme is that the ADAS performs a downgrade function processing on the vehicle to downgrade the navigation function to the vehicle driving function, and the safety scheme is that the ADAS enters a safety state and performs a function exit in the functional safety.

[0075] Operation two: generating a fault diagnosis code DTC corresponding to the fault information in the diagnosis time period, and determining a diagnosis solution corresponding to the fault information according to the DTC.

[0076] The above operation one only reminds the driver to take over the vehicle when the fault occurs, and does not solve the detected fault information. Therefore, in the embodiment of the present application, when a fault is detected, a DTC corresponding to the fault information is generated in a diagnosis time period according to the detected fault information, and a diagnosis solution corresponding to the fault information is determined according to the DTC. Specifically:

[0077] In order to avoid false alarm, it is necessary to determine the stable maximum no false alarm DTC time of the vehicle, and the stable maximum no false alarm DTC time is distributed according to the second preset distribution scheme. Specifically, first, the whole vehicle big data processes the signal stability and fault reporting condition of the vehicle under different preset conditions, such as the signal stability and fault reporting condition of the vehicle with a speed of 30kph, 40kph and 50kph and a driving time of 5h. The data obtained by the summary is classified according to the preset rule, and the target result is output, such as the preset rule: the longest signal loss time needs to be determined, the signal loss time of each signal loss time is determined in the data obtained by the summary, and the longest signal loss time is determined in the signal loss time. Then, according to the output target result, the current stable maximum no false alarm DTC time of the vehicle can be obtained, and the current stable maximum no false alarm DTC time is verified by road test. In the process of road test verification, if the fault false alarm condition still exists within the current stable maximum no false alarm DTC time, the current stable maximum no false alarm DTC time will be reduced until there is no fault false alarm condition, and the stable maximum no false alarm DTC time of the vehicle is obtained. Finally, the vehicle controller distributes the stable maximum no false alarm DTC time according to the second preset distribution scheme to obtain the detection time of fault information, the debouncing processing time of fault information and the diagnosis time period of DTC corresponding to the generated fault information, wherein the second preset distribution scheme is determined by the vehicle controller according to the current vehicle driving condition.

[0078] Through the above method, not only the false alarm can be avoided, but also the driver can know the fault reason and fault component in time.

[0079] Further, the detected fault information is debounced in the debouncing processing time to confirm whether the fault information is false reporting, wherein the Debounce strategy mainly includes two kinds:

[0080] One is a counter-based Debounce strategy: under this strategy, the diagnostic event manager (DEM) provides a fault detection counter to record the result of the judgment. Specifically, when the diagnostic monitor detects a fault, and the state corresponding to the fault information reported to the DEM is prefailed, the counter is increased by a first preset step, and when the counter value reaches a first preset threshold, the state corresponding to the fault information becomes failed, indicating that the fault information is not a false report; when the state corresponding to the fault information reported to the DEM is prepassed, the counter is decreased by a second preset step, and when the counter value reaches a second preset threshold, the state corresponding to the fault information becomes passed, indicating that the fault information is a false report, wherein the counting range is -128-127, and the first preset step, the first preset threshold, the second preset step and the second preset threshold are all configured.

[0081] Another is a time-based Debounce strategy: the DEM module also provides a fault detection counter to record the result of the judgment. Specifically, the initial value of the counter is 0, when the diagnostic monitor detects a fault, and the state corresponding to the fault information reported to the DEM is prefailed, the counter value starts to increase, if the counter value reaches a first preset threshold within a first preset detection period, and the state corresponding to the fault information becomes failed, indicating that the fault information is not a false report; when the state corresponding to the fault information reported to the DEM is prepassed, the counter value starts to decrease, if the counter value reaches a second preset threshold within a second preset detection period, and the state corresponding to the fault information becomes passed, indicating that the fault information is a false report, wherein the counting range is -128-127, and the first preset detection period and the second preset detection period are both configured.

[0082] The DEM autonomously selects one of the two de-bouncing methods to process the detected fault information, and when the fault information is a false report, the engine is restarted, and the DTC button of the vehicle is pressed to restart the DTC, at which time the fault light is extinguished; when the fault information is not a false report, the DTC corresponding to the fault information is generated within the diagnosis time period. Specifically, the DTC starts with an English letter followed by four digits, such as B2333 and P1000, and different fault information corresponds to different DTCs. Among them, the letter B at the beginning represents a vehicle body system fault, the letter C at the beginning represents a chassis system fault, the letter P at the beginning represents a power system fault, and the letter U at the beginning represents a network or data communication system fault; the first digit is 0, 1, 2, or 3, 0 represents a general fault code defined by the Society of Automotive Engineers (SAE), 1 represents a manufacturer-specific code, and 2 or 3 represents a reserved fault code; the second digit indicates the type of system that has failed, with digit 1 representing the fuel and air metering system, digit 2 specifically indicating a malfunctioning injection system circuit, digit 3 representing the ignition system or cylinder monitoring system, digit 4 representing the auxiliary emission controls system, digit 5 representing the vehicle speed control and idle speed control system, digit 6 representing the computer output circuit system, digit 7 representing the transmission; and the last two digits indicate the component or part that has failed.

[0083] Finally, the diagnosis solution corresponding to the fault information is determined according to the DTC corresponding to the detected fault information, such as reading the DTC with a decoder, repairing the part of the vehicle that has failed according to the reading result, and eliminating the DTC with the decoder, thereby solving the fault information corresponding to the DTC.

[0084] In a possible design, when a fault is detected, the current driving data and driving environment of the vehicle can also be determined, and the current driving data and driving environment of the vehicle and the detected fault information can be uploaded to a cloud server to facilitate problem analysis and accident inquiry of the fault information.

[0085] Based on the above fault processing method, when a fault is detected, not only can the driver be reminded to take over the vehicle in the FTTI to achieve safe driving, but also the fault information can be effectively solved in a timely manner.

[0086] In order to more specifically describe the fault processing method provided in the present application, the following will be described through a specific application scenario, as shown in FIG. 1, which is an application scenario flowchart of a fault processing method, including: Figure 2

[0087] When a fault is detected, the detection time is T1, and operations one, two, and three are respectively performed according to the detected fault information, wherein, ​

[0088] Operation I: According to the detected fault information, it is determined that the vehicle needs to be functionally degraded, then step 1: ADAS performs function degradation, execution time is T2; Step 2: ADAS enters a safe state, entering time is T3; Step 3: ADAS executes function exit and alarm reminding occurs, wherein T1+T2+T3=FTTI=300 milliseconds.

[0089] Operation II: Step 1: The detected fault information is de-bounced, and the processing time is T4; Step 2: The DTC corresponding to the detected fault information is generated and reported, and the generation time is T5, wherein T1+T4+T5=stable maximum error-free DTC time=600 milliseconds.

[0090] Operation III: Step 1: Determine the current driving data and driving environment of the vehicle; Step 2: Upload the current driving data and driving environment of the vehicle and the detected fault information to the cloud server, so as to analyze the fault information and query the accident.

[0091] Based on the same inventive concept, the embodiments of the present application also provide a fault processing device, as shown in Figure 3 The device includes:

[0092] The detection module 31 is configured to detect whether a fault occurs in the vehicle.

[0093] The first execution module 311 is configured to, when detecting that a fault occurs, execute a vehicle control scheme corresponding to the detected fault information within a first preset time period and execute a safety scheme corresponding to the fault information within a second preset time period according to the detected fault information, and issue an alarm reminder, wherein the sum of the detection time of the fault information, the first preset time period and the second preset time period is equal to the minimum fault tolerance time interval FTTI of the vehicle, the vehicle control scheme at least includes degradation function processing and / or speed reduction processing on the vehicle, and the safety scheme at least includes that the ADAS enters a safe state and executes function exit.

[0094] The second execution module 312 is configured to, when detecting that a fault occurs, generate a fault diagnosis code DTC corresponding to the detected fault information within a diagnosis time period according to the detected fault information, and determine a diagnosis solution corresponding to the fault information according to the DTC.

[0095] In a possible design, the device further includes:

[0096] The test module is used to test the vehicle under various preset conditions, obtain the fault tolerance time interval (FTTI) corresponding to the vehicle under each preset condition, and determine the minimum FTTI among each FTTI.

[0097] The first allocation module is used to allocate the minimum FTTI according to a first preset allocation scheme to obtain the detection time of the fault information, the first preset time period and the second preset time period.

[0098] In one possible design, the device further includes:

[0099] The analysis module is used to analyze and obtain the stable maximum error-free DTC time of the vehicle based on the signal stability and fault reporting status of the vehicle under different preset conditions.

[0100] The second allocation module is used to allocate the stable maximum false alarm DTC time according to the second preset allocation scheme to obtain the detection time of the fault information and the diagnosis time period.

[0101] In one possible design, the second execution module 312 is specifically used for:

[0102] The fault information is de-jittered to confirm whether the fault information is a false report;

[0103] When it is confirmed that the fault information is not a false report, a DTC corresponding to the fault information is generated.

[0104] Based on the above-mentioned fault handling device, when a fault is detected, it can not only promptly remind the driver to take over the vehicle within the FTTI to achieve safe driving, but also resolve the fault information in a timely and effective manner.

[0105] Based on the same inventive concept, this application also provides an electronic device that can realize the functions of the aforementioned fault handling device. (Refer to...) Figure 4 The electronic device includes:

[0106] At least one processor 41 and a memory 42 connected to at least one processor 41. In this embodiment, the specific connection medium between the processor 41 and the memory 42 is not limited. Figure 4 The example shown is the connection between processor 41 and memory 42 via bus 40. Bus 40 is... Figure 4 The connections between other components are shown in thick lines only and are not intended to be limiting. Bus 40 can be divided into address bus, data bus, control bus, etc., for ease of representation. Figure 4Only one bus is shown for simplicity, but there can be more than one bus, and various buses could be used, such as PCI, VME, AHB, etc. Additionally, the processor 41 can be implemented with one or more physical processors, such as a single-core processor or multiple-core processor, which can be implemented with one or more cores. The processor 41 can also be implemented with one or more central processing units (CPUs), graphics processing units (GPUs), digital signal processors (DSPs), application-specific integrated circuits (ASICs), field programmable gate arrays (FPGAs), or other processing components.

[0107] In the embodiments of the present application, the memory 42 stores instructions executable by the at least one processor 41, and the at least one processor 41 can execute the fault processing method discussed above by executing the instructions stored in the memory 42. The processor 41 can implement the functions of the modules of the apparatus shown in the embodiments of the present application. Figure 3

[0108] The processor 41 is the control center of the apparatus, and can connect all parts of the apparatus through various interfaces and lines, and monitor the whole apparatus by running or executing the instructions stored in the memory 42 and calling the data stored in the memory 42, so as to process data and implement various functions of the apparatus.

[0109] In a possible design, the processor 41 can include one or more processing units, and the processor 41 can integrate an application processor and a modem processor, where the application processor mainly processes operating systems, user interfaces, and application programs, and the modem processor mainly processes wireless communication. It can be understood that the modem processor can also not be integrated into the processor 41. In some embodiments, the processor 41 and the memory 42 can be implemented on the same chip, and in some embodiments, they can also be implemented on separate chips respectively.

[0110] The processor 41 can be a general processor, such as a central processing unit (CPU), a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic device, a discrete gate or transistor logic device, a discrete hardware component, and can implement or execute the methods, steps, and logic block diagrams disclosed in the embodiments of the present application. The general processor can be a microprocessor or any conventional processor. The steps of the fault processing method disclosed in the embodiments of the present application can be directly embodied as execution completed by a hardware processor, or executed by a combination of hardware and software modules in the processor.

[0111] ​The memory 42, as a non-volatile computer readable storage medium, can be used to store non-volatile software programs, non-volatile computer executable programs and modules. The memory 42 can include at least one type of storage medium, for example, can include flash memory, hard disk, multimedia card, card type memory, random access memory (RAM), static random access memory (SRAM), programmable read-only memory (PROM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), magnetic memory, magnetic disk, optical disk, etc. The memory 42 is any other medium capable of carrying or storing desired program code in the form of instructions or data structures and capable of being accessed by a computer, but is not limited thereto. The memory 42 in the embodiments of the present application can also be a circuit or any other device capable of realizing a storage function, used to store program instructions and / or data.

[0112] By programming the processor 41, the code corresponding to the fault processing method introduced in the foregoing embodiments can be fixed in the chip, so that the chip can execute the steps of the fault processing method of the embodiments shown in the running time. Figure 1 How to program the processor 41 is a technology known to those skilled in the art, and will not be described here.

[0113] Based on the same inventive concept, the embodiments of the present application also provide a storage medium storing computer instructions, when the computer instructions run on a computer, the computer instructions make the computer execute the fault processing method discussed above.

[0114] In some possible implementations, various aspects of the fault processing method provided by the present application can also be implemented in the form of a program product, which includes program code for causing the control device to execute the steps of the fault processing method according to various exemplary embodiments of the present application described above in the specification when the program product runs on the device.

[0115] Those skilled in the art will appreciate that embodiments of the present application can be readily used as software, hardware, or a combination of software and hardware. In one

[0116] The present application is described in reference to the flowchart illustrations and / or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart Figure 1 one or more functions specified in the flowchart block or blocks. Figure 1 one or more functions specified in the flowchart block or blocks.

[0117] These computer program instructions can also be stored in a computer- readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instructions which implement the function specified in the flowchart block or blocks. Figure 1 one or more functions specified in the flowchart block or blocks. Figure 1 one or more functions specified in the flowchart block or blocks.

[0118] The computer program instructions can also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart block or blocks. Figure 1 one or more functions specified in the flowchart block or blocks. ​ one or more functions specified in the flowchart block or blocks.

[0119] Obviously, numerous modifications and variations of the present application are possible in light of the above teachings. It is therefore to be understood that within the scope of the apparatus and methods disclosed herein, equivalents and substitutions thereof could be made by one of ordinary skill in the art without departing from the spirit and scope of the disclosure. Any and all such modifications and variations are intended to be included herein within the scope of the present application and expressed as a part thereof.

Claims

1. A fault handling method, characterized in that, The method includes: To detect if there is a malfunction in the vehicle; When a fault is detected, based on the detected fault information, the vehicle control scheme corresponding to the fault information is executed within a first preset time period and the safety scheme corresponding to the fault information is executed within a second preset time period, and an alarm reminder is issued. The sum of the fault information detection time, the first preset time period, and the second preset time period is equal to the vehicle's minimum fault tolerance time interval (FTTI). The vehicle control scheme includes at least degrading the vehicle's functions and / or reducing its speed, and the safety scheme includes at least the Advanced Driver Assistance System (ADAS) entering a safe state and exiting its functions. When a fault is detected, a fault diagnosis code (DTC) corresponding to the fault information is generated within the diagnostic time period based on the detected fault information, and a diagnostic solution corresponding to the fault information is determined based on the DTC.

2. The method as described in claim 1, characterized in that, Before detecting whether a malfunction has occurred in the vehicle, the method also includes: The vehicle is tested under various preset conditions to obtain the fault tolerance time interval (FTTI) corresponding to the vehicle under each preset condition, and the minimum FTTI is determined among each FTTI. The minimum FTTI is allocated according to the first preset allocation scheme to obtain the detection time of the fault information, the first preset time period and the second preset time period.

3. The method as described in claim 1, characterized in that, Before detecting whether a malfunction has occurred in the vehicle, the method also includes: Based on the signal stability and fault reporting status of the vehicle under different preset conditions, the maximum stable DTC time without false alarms of the vehicle is obtained. The stable maximum false alarm DTC time is allocated according to the second preset allocation scheme to obtain the detection time of the fault information and the diagnosis time period.

4. The method as described in claim 1, characterized in that, The generation of the fault diagnosis code (DTC) corresponding to the fault information includes: The fault information is de-jittered to confirm whether the fault information is a false report; When it is confirmed that the fault information is not a false report, a DTC corresponding to the fault information is generated.

5. A fault handling device, characterized in that, The device includes: The detection module is used to detect whether a vehicle has a malfunction. The first execution module is used to, when a fault is detected, execute the vehicle control scheme corresponding to the fault information within a first preset time period and the safety scheme corresponding to the fault information within a second preset time period, and issue an alarm reminder, based on the detected fault information. The sum of the fault information detection time, the first preset time period, and the second preset time period is equal to the vehicle's minimum fault tolerance time interval (FTTI). The vehicle control scheme includes at least degrading the vehicle's functions and / or reducing its speed. The safety scheme includes at least the Advanced Driver Assistance System (ADAS) entering a safe state and exiting its execution function. The second execution module is used to generate a fault diagnosis code (DTC) corresponding to the fault information within a diagnostic time period based on the detected fault information when a fault is detected, and to determine the diagnostic solution corresponding to the fault information based on the DTC.

6. The apparatus as claimed in claim 5, characterized in that, The device further includes: The test module is used to test the vehicle under various preset conditions, obtain the fault tolerance time interval (FTTI) corresponding to the vehicle under each preset condition, and determine the minimum FTTI among each FTTI. The first allocation module is used to allocate the minimum FTTI according to a first preset allocation scheme to obtain the detection time of the fault information, the first preset time period and the second preset time period.

7. The apparatus as claimed in claim 5, characterized in that, The device further includes: The analysis module is used to analyze and obtain the stable maximum error-free DTC time of the vehicle based on the signal stability and fault reporting status of the vehicle under different preset conditions. The second allocation module is used to allocate the stable maximum false alarm DTC time according to the second preset allocation scheme to obtain the detection time of the fault information and the diagnosis time period.

8. The apparatus as claimed in claim 5, characterized in that, The second execution module is specifically used for: The fault information is de-jittered to confirm whether the fault information is a false report; When it is confirmed that the fault information is not a false report, a DTC corresponding to the fault information is generated.

9. An electronic device, characterized in that, include: Memory, used to store computer programs; A processor, when executing a computer program stored in the memory, implements the method steps of any one of claims 1-4.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, implements the method steps of any one of claims 1-4.

Images