Method for determining the reliability of information and electronic control device

Abstract

This invention discloses a method for determining the reliability of information, comprising: receiving information via a communication module and sending the received information to hardware registers of a first microcontroller and a second microcontroller respectively; using an AUTOSAR program module to read and process information stored in the hardware registers of the first microcontroller; using an application module to read the information processed by the AUTOSAR program module and the information stored in the hardware registers of the second microcontroller and comparing the two; if the key contents of the two are the same, the information processed by the AUTOSAR program module is considered reliable and used for subsequent processing; if the key contents of the two are inconsistent, the information processed by the AUTOSAR program module is considered unreliable and not used for subsequent processing. This method ensures the reliability of the information used by the application module and avoids errors in subsequent processing.

Description

Technical Field

[0001] This invention relates to the field of automotive electronics technology, and more specifically, to a method and electronic control device for determining the reliability of information. Background Technology

[0002] Currently, in the communication process between different ECUs (Electronic Control Units) inside a vehicle, after receiving LIN (Local Interconnect Network) information from other ECUs, the information is generally first processed by the AUTOSAR (Automotive Open System Architecture) program module in the ECU's microcontroller. Then, the application module in the microcontroller reads the information processed by the AUTOSAR program module and uses it for subsequent processing.

[0003] However, because the functional safety level of the AUTOSAR program module is relatively low, generally QM (Quality Management) level, during the information processing process through the AUTOSAR program module, some error handling may modify the key content of the information, causing the application module to be unable to obtain the correct information. This leads to errors in the subsequent processing of the application module, thus failing to meet the higher functional safety level requirements, such as ASIL (Automotive Safety Integration Level) B. Summary of the Invention

[0004] The present invention provides a method and electronic control device for determining the reliability of information, thereby solving the aforementioned problems in the prior art.

[0005] Embodiments of the present invention provide a method for determining the reliability of information. The method is used in an electronic control device including a communication device, a first microcontroller, and a second microcontroller. The first microcontroller includes an AUTOSAR program module and an application program module. The method includes:

[0006] The communication module receives information and sends the received information to the hardware registers of the first microcontroller and the second microcontroller, respectively.

[0007] The AUTOSAR program module reads and processes the information stored in the hardware registers of the first microcontroller.

[0008] The application module reads the information processed by the AUTOSAR program module and the information stored in the hardware register of the second microcontroller and compares the two. If the key contents of the two are the same, the information processed by the AUTOSAR program module is considered reliable and is used for subsequent processing. If the key contents of the two are inconsistent, the information processed by the AUTOSAR program module is considered unreliable and is not used for subsequent processing.

[0009] Optionally, the key content is the content carried in the information that the application module needs to use for subsequent processing.

[0010] Optionally, the electronic control device is the vehicle's ECU.

[0011] Embodiments of the present invention also provide an electronic control device, the electronic control device including a communication device, a first microcontroller, and a second microcontroller, wherein the first microcontroller includes an AUTOSAR program module and an application program module.

[0012] The communication module receives information and sends the received information to the hardware registers of the first microcontroller and the second microcontroller, respectively.

[0013] The AUTOSAR program module reads the information stored in the hardware registers of the first microcontroller and processes the information.

[0014] The application module reads the information processed by the AUTOSAR program module and the information stored in the hardware register of the second microcontroller and compares the two. If the key contents of the two are the same, the information processed by the AUTOSAR program module is considered reliable and used for subsequent processing. If the key contents of the two are inconsistent, the information processed by the AUTOSAR program module is considered unreliable and is not used for subsequent processing.

[0015] Optionally, the key content is the content carried in the information that the application module needs to use for subsequent processing.

[0016] Optionally, the electronic control device is the vehicle's ECU.

[0017] The method and electronic control device for determining the reliability of information according to embodiments of the present invention have at least the following advantages:

[0018] In this invention, before using the information processed by the AUTOSAR program module for subsequent processing, the application module compares the information processed by the AUTOSAR program module with the information stored in the hardware register of the second microcontroller. Only when the key contents of the two are the same is the information processed by the AUTOSAR program module considered reliable and used for subsequent processing, thereby ensuring the reliability of the information used by the application module and avoiding errors in subsequent processing. Attached Figure Description

[0019] Other details and advantages of the invention will become apparent from the detailed description provided below. It should be understood that the following drawings are merely schematic and not drawn to scale, and therefore should not be considered as limiting the scope of this application. The following detailed description will refer to the drawings, in which:

[0020] Figure 1 A flowchart of a method for determining the reliability of information according to a specific embodiment of the present invention is shown.

[0021] Figure 2 An electronic control device according to another specific embodiment of the present invention is shown. Detailed Implementation

[0022] Embodiments of the present invention are described below with reference to the accompanying drawings. In the following description, numerous specific details are set forth to enable those skilled in the art to more fully understand and implement the invention. However, it will be apparent to those skilled in the art that implementation of the invention may not include some of these specific details. Furthermore, it should be understood that the invention is not limited to the specific embodiments described. Rather, the invention can be conceived to be practiced with any combination of the features and elements described below, regardless of whether they relate to different embodiments. Therefore, the following aspects, features, embodiments, and advantages are illustrative only and should not be construed as elements or limitations of the claims unless expressly set forth in the claims.

[0023] Now refer to Figure 1 A flowchart illustrating a method for determining the reliability of information according to a specific embodiment of the present invention is shown. This method is used in an electronic control device including a communication device, a first microcontroller, and a second microcontroller. The first microcontroller includes an AUTOSAR program module and an application program module. Figure 1 As shown, the method includes:

[0024] Step S101: Receive information using the communication module and send the received information to the hardware registers of the first microcontroller and the second microcontroller respectively.

[0025] The communication module can be any suitable device capable of sending and receiving information, such as a transceiver.

[0026] Step S102: Use the AUTOSAR program module to read the information stored in the hardware registers of the first microcontroller and process the information.

[0027] AUTOSAR program modules can be common types, including LIN drivers, LIN protocol stacks, PduR, and COM. AUTOSAR program modules generally have a lower functional safety level, typically QM level.

[0028] Step S103: Use the application module to read the information processed by the AUTOSAR program module and the information stored in the hardware register of the second microcontroller, and compare the two. If the key contents of the two are the same, the information processed by the AUTOSAR program module is considered reliable and used for subsequent processing. If the key contents of the two are inconsistent, the information processed by the AUTOSAR program module is considered unreliable and not used for subsequent processing.

[0029] The application module can be any suitable application, such as an airbag control application.

[0030] The key content of the information can be set according to actual needs. Preferably, the key content is the content required for subsequent processing by the application module carried in the information.

[0031] The electronic control device can be any suitable electronic control device, such as the vehicle's ECU.

[0032] Figure 2 An electronic control device according to another specific embodiment of the present invention is shown.

[0033] like Figure 2 As shown, the electronic control device of the present invention includes a communication device, a first microcontroller, and a second microcontroller.

[0034] The communication module is used to receive information from an external device (e.g., another ECU) and send the received information to the hardware registers of the first microcontroller and the second microcontroller, respectively. The communication module can be any suitable device capable of transmitting and receiving information, such as a transceiver.

[0035] The first microcontroller includes an AUTOSAR program module and an application module.

[0036] The AUTOSAR program module reads and processes information stored in the hardware registers of the first microcontroller. Common AUTOSAR program modules include LIN drivers, LIN protocol stacks, PduR, and COM modules. AUTOSAR program modules have a low functional safety level, typically QM level.

[0037] The application module reads the information processed by the AUTOSAR program module and the information stored in the hardware register of the second microcontroller and compares the two. If the key contents of the two are the same, the information processed by the AUTOSAR program module is considered reliable and used for subsequent processing. If the key contents of the two are inconsistent, the information processed by the AUTOSAR program module is considered unreliable and is not used for subsequent processing.

[0038] The application module can be any suitable application, such as an airbag control application.

[0039] The key content of the information can be set according to actual needs. Preferably, the key content is the content required for subsequent processing by the application module carried in the information.

[0040] The electronic control device can be any suitable electronic control device, such as the vehicle's ECU.

[0041] Compared with the prior art, the method and electronic control device for determining the reliability of information according to embodiments of the present invention have at least the following advantages:

[0042] In this invention, before using the information processed by the AUTOSAR program module for subsequent processing, the application module compares the information processed by the AUTOSAR program module with the information stored in the hardware register of the second microcontroller. Only when the key contents of the two are the same is the information processed by the AUTOSAR program module considered reliable and used for subsequent processing, thereby ensuring the reliability of the information used by the application module and avoiding errors in subsequent processing.

[0043] By employing the method of the present invention, the reliability of the information used by the application module is guaranteed, thereby achieving a higher functional safety level, such as ASIL B, and improving product reliability.

[0044] It should be noted that the above description is merely illustrative and not intended to limit the invention. In other embodiments of the invention, the method may have more, fewer, or different steps, and the order, inclusion, and functional relationships between the steps may differ from those described and illustrated. For example, multiple steps may typically be combined into a single step, or a single step may be split into multiple steps. For those skilled in the art, variations in the order of the steps are also within the scope of protection of this invention without inventive effort.

[0045] The technical solution of the present invention, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) or processor or microcontroller to execute all or part of the steps of the methods described in the various embodiments of the present invention.

[0046] Those skilled in the art will understand that all or part of the steps of the above-described method embodiments can be implemented by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When executed, the program performs the steps of the above-described method embodiments; and the aforementioned storage medium includes various media capable of storing program code, such as ROM, RAM, magnetic disks, or optical disks.

[0047] While the present invention has been disclosed above with reference to preferred embodiments, it is not limited thereto. Any modifications and alterations made by those skilled in the art without departing from the spirit and scope of the invention should be included within the scope of protection of the invention. Therefore, the scope of protection of the invention should be determined by the scope defined in the claims.

Claims

1. A method for determining the reliability of information, characterized in that, The method is used in an electronic control device including a communication device, a first microcontroller, and a second microcontroller, wherein the first microcontroller includes an AUTOSAR program module and an application program module with a functional safety level of QM; the method includes: Information is received using the communication device, and the received information is sent to the hardware registers of the first microcontroller and the second microcontroller, respectively. The AUTOSAR program module reads and processes the information stored in the hardware registers of the first microcontroller. The application module reads the information processed by the AUTOSAR program module and the unprocessed information stored in the hardware registers of the second microcontroller, and compares the two. If the key contents are the same, the information processed by the AUTOSAR program module is considered reliable and used for subsequent processing. If the key contents are inconsistent, the information processed by the AUTOSAR program module is considered unreliable and not used for subsequent processing. The key content refers to the information carried in the information that the application module needs to use for subsequent processing.

2. The method according to claim 1, wherein, The electronic control device is the vehicle's ECU.

3. An electronic control device, characterized in that, The electronic control device includes a communication device, a first microcontroller, and a second microcontroller. The first microcontroller includes an AUTOSAR program module and an application program module with a functional safety level of QM. The communication device receives information and sends the received information to the hardware registers of the first microcontroller and the second microcontroller, respectively. The AUTOSAR program module reads and processes the information stored in the hardware registers of the first microcontroller. The application module reads the information processed by the AUTOSAR program module and the unprocessed information stored in the hardware registers of the second microcontroller, and compares the two. If the key contents are the same, the information processed by the AUTOSAR program module is considered reliable and used for subsequent processing; if the key contents are inconsistent, the information processed by the AUTOSAR program module is considered unreliable and not used for subsequent processing. The key content refers to the information carried in the information that the application module needs to use for subsequent processing.

4. The electronic control device according to claim 3, wherein, The electronic control device is the vehicle's ECU.

Images