Digital output control fault recognition system and method

Abstract

The application discloses a kind of digital quantity output control's fault identification system and method, the first control unit in the digital quantity output control device in the system, output pin reference level and periodic communication data are sent to the second control unit in the digital quantity output control device, the second control unit, the output pin actual level of first control unit is acquired, whether the pin output fault of first control unit exists according to output pin reference level and output pin actual level judges, realize the detection of pin damage, and, whether the running fault of first control unit exists according to the periodic communication data received judges, realizes the fault detection of the control unit in the digital quantity output control device.The system realizes the fault identification of digital quantity output control, improves the security of digital quantity output control, guarantees the normal operation of the controlled external equipment.

Description

Technical Field

[0001] This invention relates to the field of digital control technology, and in particular to a fault identification system and method for digital output control. Background Technology

[0002] Conventional digital control systems are controlled by a microcontroller unit (MCU). The MCU's internal program sets the GPIO (General Purpose Input Output) pins to high or low levels to control external devices connected to those pins. However, this approach typically has the following problems:

[0003] When the MCU chip itself malfunctions or the program it executes fails, causing abnormal digital output, existing digital signal control systems cannot detect this. Similarly, when the GPIO pins of the MCU chip are damaged, causing abnormal digital output, existing digital signal control systems also cannot detect this. Therefore, existing technologies cannot achieve fault identification in digital output control, resulting in low security and an inability to guarantee the normal operation of the controlled external devices. Summary of the Invention

[0004] This invention provides a fault identification system and method for digital output control, which enables fault identification of digital output control, improves the safety of digital output control, and thus ensures the normal operation of the controlled external equipment.

[0005] According to one aspect of the present invention, a fault identification system for digital output control is provided. The system includes a digital output control device, which comprises a first control unit and a second control unit; wherein...

[0006] The first control unit is communicatively connected to the second control unit and is used to send the output pin reference level and periodic communication data to the second control unit;

[0007] The second control unit is used to acquire the actual level of the output pin of the first control unit, determine whether the first control unit has a pin output fault based on the output pin reference level and the actual level of the output pin, and determine whether the first control unit has an operational fault based on the received periodic communication data.

[0008] Optionally, the digital output control device further includes a voltage comparator. The second control unit is also configured to acquire the input voltage from the first control unit to the voltage comparator and the output voltage of the voltage comparator, and determine whether the voltage comparator is faulty based on the input voltage and the output voltage.

[0009] Optionally, the digital output control device further includes a first optocoupler isolation module, a second optocoupler isolation module, and a status detection module; wherein,

[0010] The first optocoupler isolation module is used to convert the input raw signal into an isolated signal;

[0011] The status detection module is connected to the second optocoupler isolation module and the second control unit respectively, and is used to detect the isolation signal output by the first optocoupler isolation module and send the isolation signal to the second optocoupler isolation module.

[0012] The second optocoupler isolation module is communicatively connected to the second control unit and is used to convert the isolation signal into a comparison signal and send the comparison signal to the second control unit.

[0013] The second control unit is further configured to acquire the original signal and determine whether the first optocoupler isolation module has an operational fault based on the original signal and the signal to be compared.

[0014] Optionally, the digital output control device further includes a drive amplification module. The status detection module is also used to detect the signal to be amplified input to the drive amplification module and the amplified signal output by the drive amplification module, and send the signal to be amplified and the amplified signal to the second control unit.

[0015] The second control unit is also used to determine whether the drive amplification module has an operational fault based on the signal to be amplified and the amplified signal.

[0016] Optionally, the digital output control device further includes a power module, and the status detection module is further used to detect the power signal output by the power module and send the power signal to the second control unit;

[0017] The second control unit is also used to determine whether the power module has an operational fault based on the power signal.

[0018] Optionally, the system further includes at least one execution device, and the digital output control device is connected to the execution device;

[0019] The status detection module is further configured to acquire the actual operating signal of the execution device and send the actual operating signal to the second control unit, wherein the actual operating signal includes the operating current value and / or the operating voltage value;

[0020] The second control unit is further configured to determine whether the execution device has an operational fault based on the preset operating signal corresponding to the execution device and the actual operating signal.

[0021] Optionally, the system further includes a first monitor and a second monitor;

[0022] The first monitor is connected to the first control unit and is used to acquire the periodic change level sent by the first control unit and determine whether the first control unit has an operational fault based on the periodic change level sent by the first control unit.

[0023] The second monitor is connected to the second control unit and is used to acquire the periodic change level sent by the second control unit, and to determine whether the second control unit has an operational fault based on the periodic change level sent by the second control unit.

[0024] Optionally, the first monitor is further configured to generate a first fault signal and send it to the second control unit when it is determined that the first control unit has an operational fault;

[0025] The second monitor is also configured to generate a second fault signal and send it to the first control unit when it is determined that the second control unit has an operational fault;

[0026] The first control unit is further configured to receive periodic communication data sent by the second control unit, and determine whether the second monitor has an operational fault based on the second fault signal and the received periodic communication data;

[0027] The second control unit is further configured to determine whether the first monitor has an operational fault based on the first fault signal and the received periodic communication data.

[0028] Optionally, the system further includes a host computer, which is used to receive a fault signal sent by the second control unit, determine the fault type corresponding to the fault signal based on the fault signal, obtain a preset processing rule corresponding to the fault type, and control the digital output control device according to the preset processing rule.

[0029] According to another aspect of the present invention, a fault identification method for digital output control is provided, the method comprising:

[0030] Based on the first control unit in the digital output control device, the output pin reference level and periodic communication data are sent to the second control unit in the digital output control device;

[0031] Based on the second control unit, the actual level of the output pin of the first control unit is obtained. The first control unit is judged to have a pin output fault based on the output pin reference level and the actual level of the output pin, and the first control unit is judged to have an operational fault based on the received periodic communication data.

[0032] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0033] At least one processor; and

[0034] A memory communicatively connected to the at least one processor; wherein,

[0035] The memory stores a computer program that can be executed by the at least one processor, the computer program being executed by the at least one processor to enable the at least one processor to perform the fault identification method for digital output control as described in any embodiment of the present invention.

[0036] According to another aspect of the present invention, a computer-readable storage medium is provided, the computer-readable storage medium storing computer instructions for causing a processor to execute and implement the fault identification method for digital output control as described in any embodiment of the present invention.

[0037] The fault identification system for digital output control provided in this invention sends an output pin reference level and periodic communication data to a second control unit in the same digital output control device via a first control unit. The second control unit then obtains the actual output pin level of the first control unit. Based on the output pin reference level and the actual output pin level, the system determines whether a pin output fault exists in the first control unit, thus detecting pin damage. Furthermore, based on the received periodic communication data, the system determines whether an operational fault exists in the first control unit, thus detecting faults in the control units within the digital output control device. This system achieves fault identification in digital output control, improves the safety of digital output control, and ensures the normal operation of the controlled external devices.

[0038] It should be understood that the description in this section is not intended to identify key or essential features of the embodiments of the present invention, nor is it intended to limit the scope of the invention. Other features of the invention will become readily apparent from the following description. Attached Figure Description

[0039] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0040] Figure 1A This is a schematic diagram of the structure of a fault identification system for digital output control provided in Embodiment 1 of the present invention;

[0041] Figure 1B This is a schematic diagram of another fault identification system for digital output control provided in Embodiment 1 of the present invention;

[0042] Figure 2 This is a schematic diagram of the structure of a fault identification system for digital output control provided in Embodiment 2 of the present invention;

[0043] Figure 3A This is a schematic diagram of the structure of a fault identification system for digital output control provided in Embodiment 3 of the present invention;

[0044] Figure 3B This is a schematic diagram of another fault identification system for digital output control provided in Embodiment 3 of the present invention;

[0045] Figure 4 This is a flowchart illustrating a fault identification method for digital output control provided in Embodiment 4 of the present invention;

[0046] Figure 5 This is a schematic diagram of the structure of an electronic device provided in Embodiment 5 of the present invention. Detailed Implementation

[0047] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0048] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0049] Example 1

[0050] Figure 1A This is a schematic diagram of a fault identification system for digital output control provided in Embodiment 1 of the present invention, as shown below. Figure 1A As shown, the fault identification system for digital output control includes a digital output control device 11, which includes a first control unit 110 and a second control unit 111. The first control unit 110 is communicatively connected to the second control unit 111 and is used to send an output pin reference level and periodic communication data to the second control unit 111. The second control unit 111 is used to acquire the actual level of the output pin of the first control unit 110, determine whether the first control unit 110 has a pin output fault based on the output pin reference level and the actual level of the output pin, and determine whether the first control unit 110 has an operational fault based on the received periodic communication data.

[0051] The digital output control device 11 can be a device for outputting a level to control an external execution device. In this embodiment, the digital output control device 11 includes a first control unit 110 and a second control unit 111; the first control unit 110 can generate the level that needs to be sent to the output pin independently, or the level generated by the first control unit 110 and the level generated by the second control unit 111 can be processed and then sent to the output pin.

[0052] For example, the first control unit 110 can be an MCU in the digital output control device 11 that can independently generate the required level of the output pin, and the second control unit 111 can be an MCU in the digital output control device 11 that performs fault detection. That is, the second control unit 111 can be set in an existing digital output control device to realize fault detection of the digital output control device, reduce structural changes to the existing device, and reduce fault detection costs.

[0053] In this embodiment, the first control unit 110 and the second control unit 111 can establish a communication connection, such as a CAN bus connection, an Ethernet connection, or a Bluetooth connection. The first control unit 110 can send an output pin reference level and periodic communication data to the second control unit 111. The output pin reference level can be the level that the first control unit 110 needs to output to the GPIO pin; the periodic communication data can be data that the first control unit 110 periodically sends to the second control unit 111, for example, the first control unit 110 sends a level signal or a data packet to the second control unit 111 every 50ms. The periodic communication data sent by the first control unit 110 can be used to determine whether a fault has occurred.

[0054] Specifically, the second control unit 111 can detect the actual level of the output pin of the first control unit 110, that is, the actual level output by the first control unit 110 to the GPIO pin. Furthermore, by comparing the actual level of the output pin with the reference level of the output pin, it can determine whether the first control unit 110 has a pin output fault. For example, if the actual level of the output pin is inconsistent with the reference level of the output pin, it can be determined that the first control unit 110 has a pin output fault, and the GPIO output port in the digital output control device is faulty.

[0055] Furthermore, the second control unit 111 can determine whether the first control unit 110 has an operational fault based on the received periodic communication data. For example, if the periodic communication data is a periodically transmitted changing level, the second control unit 111 can determine whether the current periodic communication data is the same as the periodic communication data received at the previous moment; if so, the first control unit 110 has an operational fault. As another example, if the periodic communication data is a periodically transmitted data packet, and the data packet includes the time information of the first control unit 110 sending the data, the second control unit 111 can parse the periodic communication data and determine whether the time information of the data is correct; if so, it is determined that the first control unit 110 does not have an operational fault.

[0056] Of course, considering that some digital output control devices contain circuit modules such as voltage comparators, this embodiment can also perform fault detection on the voltage comparator based on the second control unit.

[0057] like, Figure 1BThis embodiment shows a schematic diagram of another fault identification system for digital output control provided in this embodiment. Optionally, the digital output control device 11 further includes a voltage comparator 112. The second control unit 111 is also used to acquire the input voltage of the first control unit 110 to the voltage comparator 112 and the output voltage of the voltage comparator 112, and to determine whether the voltage comparator 112 is faulty based on the input voltage and the output voltage.

[0058] The first control unit 110 can be electrically connected to the voltage comparator 112. The first control unit 110 inputs the generated voltage to the voltage comparator 112, and the voltage comparator 112 processes the input voltage to generate an output voltage. The second control unit 111 can be connected to the input and output terminals of the voltage comparator 112 respectively to acquire the input voltage and the output voltage.

[0059] For example, the second control unit 111 can determine whether the voltage at the first input terminal is higher than the voltage at the second input terminal. If so, it can continue to determine whether the output voltage is high. If it is high, the voltage comparator 112 is not faulty. If not, it can continue to determine whether the output voltage is low. If it is low, the voltage comparator 112 is not faulty.

[0060] This method enables fault detection of the voltage comparator in the fault identification device for digital output control, further ensuring the normal operation of the fault identification device for digital output control.

[0061] The fault identification system for digital output control provided in this embodiment sends an output pin reference level and periodic communication data to a second control unit in the same digital output control device via a first control unit. The second control unit then obtains the actual output pin level of the first control unit. Based on the output pin reference level and the actual output pin level, the system determines whether a pin output fault exists in the first control unit, thus detecting pin damage. Furthermore, based on the received periodic communication data, the system determines whether an operational fault exists in the first control unit, thus detecting faults in the control units within the digital output control device. This system achieves fault identification in digital output control, improves the safety of digital output control, and ensures the normal operation of the controlled external devices.

[0062] Example 2

[0063] Figure 2 This is a schematic diagram of a fault identification system for digital output control provided in Embodiment 2 of the present invention, as shown below. Figure 2As shown, the fault identification system for digital output control provided in this embodiment includes a digital output control device 21, which includes a first control unit 210, a second control unit 211, a first optocoupler isolation module 212, a second optocoupler isolation module 213, and a status detection module 214.

[0064] The first optocoupler isolation module 212 is used to convert the input raw signal into an isolated signal. The state detection module 214 is connected to the second optocoupler isolation module 213 and the second control unit 211, respectively, and is used to detect the isolated signal output by the first optocoupler isolation module 212 and send the isolated signal to the second optocoupler isolation module 213. The second optocoupler isolation module 213 is communicatively connected to the second control unit 211 and is used to convert the isolated signal into a comparison signal and send the comparison signal to the second control unit 211. The first control unit 210 is communicatively connected to the second control unit 211 and is used to send the output pin reference level and periodic communication data to the second control unit 211. The second control unit is used to obtain the actual level of the output pin of the first control unit 210, determine whether the first control unit 210 has a pin output fault based on the output pin reference level and the actual level of the output pin, and determine whether the first control unit 210 has an operational fault based on the received periodic communication data. It is also used to obtain the raw signal and determine whether the first optocoupler isolation module 212 has an operational fault based on the raw signal and the comparison signal.

[0065] In this embodiment, the first optocoupler isolation module 212 can be used to isolate the weak current of the digital output control device from the strong current of the external device, so as to prevent the strong current of the external device from interfering with the output of the control unit in the digital output control device.

[0066] Specifically, the first control unit 210 can be connected to the first optocoupler isolation module 212. The first control unit 210 transmits the original signal to the first optocoupler isolation module 212, which processes the original signal and converts it into an isolated signal for output to other modules or external devices. The status detection module 214 can be connected to the output of the first optocoupler isolation module 212, acquire the isolated signal output by the first optocoupler isolation module 212, and send the isolated signal to the second optocoupler isolation module 213.

[0067] Furthermore, the second optocoupler isolation module 213 performs the opposite operation to the first optocoupler isolation module 212, converting the isolation signal into a comparison signal and sending it to the second control unit 211. The second control unit can connect to the input terminal of the first optocoupler isolation module 212, acquire the original signal, compare the original signal with the comparison signal sent by the second optocoupler isolation module 213, and determine whether the first optocoupler isolation module 212 has an operational fault based on the comparison result. If the first optocoupler isolation module 212 does not have a fault, the original signal should be consistent with the comparison signal.

[0068] In the aforementioned fault detection process for the first optocoupler isolation module 212, considering that a fault in the status detection module 214 might lead to a false fault detection of the first optocoupler isolation module 212, to ensure the accuracy of fault detection for the first optocoupler isolation module 212, a fault detection of the status detection module 214 can be performed before using the aforementioned method to detect the fault in the first optocoupler isolation module 212. Specifically, in this embodiment, the first optocoupler isolation module 212 can be connected to the second optocoupler isolation module 213, so that the first optocoupler isolation module 212 can send its output isolation signal to the second optocoupler isolation module 213. Furthermore, the second optocoupler isolation module 213 determines whether the status detection module 214 is faulty based on the isolation signal sent by the first optocoupler isolation module 212 and the isolation signal sent by the status detection module 214, thus realizing the fault detection of the status detection module.

[0069] If the status detection module 214 is not faulty, and the second control unit 211 determines that the original signal and the signal to be compared are inconsistent, then the first optocoupler isolation module 212 is faulty. Of course, if the status detection module 214 is faulty, the second optocoupler isolation module 213 can directly generate the signal to be compared based on the isolation signal sent by the first optocoupler isolation module 212; that is, the second optocoupler isolation module 213 no longer receives the erroneous isolation signal sent by the status detection module 214. Furthermore, the second control unit 211 determines whether the first optocoupler isolation module 212 is faulty based on the signal to be compared and the original signal sent by the first optocoupler isolation module 212.

[0070] In another alternative implementation, the status detection module 214 can also detect the voltage signals of other modules in the digital output control device, so that the second control unit 211 can perform fault detection on the other modules.

[0071] For example, the digital output control device 21 further includes a drive amplification module. The status detection module 214 is also used to detect the signal to be amplified input to the drive amplification module and the amplified signal output by the drive amplification module, and send the signal to be amplified and the amplified signal to the second control unit 211. The second control unit 211 is also used to determine whether the drive amplification module has an operational fault based on the signal to be amplified and the amplified signal.

[0072] The drive amplification module amplifies the digital signal output from the first control unit, enabling the GPIO to drive higher-power devices, such as transistors like motors and IGBTs. The status detection module 214 connects to the input and output of the drive amplification module to acquire the signal to be amplified and the amplified signal. The second control unit 211 determines whether the drive amplification module has a malfunction by judging whether the amplified signal is greater than the signal to be amplified, or whether the difference between the amplified signal and the signal to be amplified exceeds a preset threshold. This method enables fault detection of the drive amplification module in the digital output control device.

[0073] For example, the digital output control device 21 also includes a power module, and the status detection module 214 is further used to detect the power signal output by the power module and send the power signal to the second control unit 211; the second control unit 211 is further used to determine whether the power module has an operational fault based on the power signal.

[0074] The status detection module 214 can be connected to the output terminal of the power module to acquire the output power signal. The second control unit 211 can judge the power signal according to the pre-determined processing logic of the power module. If the power signal does not match the preset processing logic, it can be determined that the power module has an operational fault. In this way, fault detection of the power module in the digital output control device can be realized.

[0075] Alternatively, fault detection of external devices can be performed through the status detection module 214 and the second control unit 211. For example, optionally, the system further includes at least one execution device, with the digital output control device 21 connected to the execution device; the status detection module 214 is further configured to acquire the actual operating signal of the execution device and send the actual operating signal to the second control unit 211, wherein the actual operating signal includes an operating current value and / or an operating voltage value; the second control unit 211 is further configured to determine whether the execution device has an operational fault based on the preset operating signal corresponding to the execution device and the actual operating signal.

[0076] The execution device can be an external device that is independent of the digital output control device and controlled by the digital output control device, such as a surgical robot or a relay. The execution device can be electrically or communicatively connected to the digital output control device 21; the status detection module 214 can be connected to the execution device.

[0077] Specifically, the status detection module 214 can acquire the actual operating signal of the actuator, i.e., the current value and / or voltage value of the actuator during operation, and transmit the actual operating signal to the second control unit 211. Furthermore, the second control unit 211 can acquire the preset operating signal corresponding to the actuator, i.e., the pre-set standard operating current value and / or standard voltage value. By comparing the preset operating signal corresponding to the actuator with the actual operating signal, it can determine whether the actuator has an operational fault. In this way, fault detection of the external actuator controlled by the digital output control device is achieved.

[0078] The technical solution of this embodiment obtains the isolation signal converted by the first optocoupler isolation module through the status detection module, and restores the isolation signal through the second optocoupler isolation module to obtain the comparison signal. The second control unit determines whether the first optocoupler isolation module has an operational fault based on the original signal and the comparison signal, thereby realizing the fault detection of the optocoupler isolation module and further ensuring the safety of the digital output control device.

[0079] Example 3

[0080] Figure 3A This is a schematic diagram of a fault identification system for digital output control provided in Embodiment 3 of the present invention, as shown below. Figure 3A As shown, the fault identification system for digital output control provided in this embodiment includes a digital output control device 31, a first monitor 32, and a second monitor 33. The digital output control device 31 includes a first control unit 310 and a second control unit 311.

[0081] The first control unit 310 is communicatively connected to the second control unit 311, and is used to send an output pin reference level and periodic communication data to the second control unit 311, and to send a periodically changing level to the first monitor 32. The second control unit 311 is used to acquire the actual level of the output pin of the first control unit 310, determine whether the first control unit 310 has a pin output fault based on the output pin reference level and the actual level of the output pin, and determine whether the first control unit 310 has an operational fault based on the received periodic communication data. The first monitor 32 is connected to the first control unit 310, and is used to acquire the periodically changing level sent by the first control unit 310, and determine whether the first control unit 310 has an operational fault based on the periodically changing level sent by the first control unit 310. The second monitor 33 is connected to the second control unit 311, and is used to acquire the periodically changing level sent by the second control unit 311, and determine whether the second control unit 311 has an operational fault based on the periodically changing level sent by the second control unit 311.

[0082] In this embodiment, the first monitor 32 and the second monitor 33 can perform fault detection on the first control unit 310 and the second control unit 311, respectively. Specifically, the first monitor 32 can detect faults in the first control unit 310 based on the periodically changing level transmitted by the first control unit 310; the second monitor 33 can detect faults in the second control unit 311 based on the periodically changing level transmitted by the second control unit 311. The periodically changing level can be a periodically transmitted level, that is, the level transmitted at the current moment is opposite to the level transmitted at the previous moment.

[0083] Taking the first monitor 32 as an example, the first monitor 32 can determine whether the currently received periodic change level is opposite to the periodic change level received at the previous moment. If not, it is determined that the first control unit 310 has an operational fault. Of course, if the first monitor 32 does not receive the periodic change level sent by the first control unit 310, it can also be determined that the first control unit 310 has an operational fault.

[0084] Considering the possibility of malfunctions in the first monitor 32 and the second monitor 33, a malfunction in either monitor 32 or the second monitor 33 could lead to incorrect detection of malfunctions in the control unit. Therefore, this embodiment can also perform fault detection on the first monitor 32 and the second monitor 33.

[0085] Optionally, the first monitor 32 is further configured to generate a first fault signal and send it to the second control unit 311 when it is determined that the first control unit 310 has an operational fault; the second monitor 33 is further configured to generate a second fault signal and send it to the first control unit 310 when it is determined that the second control unit 311 has an operational fault; the first control unit 310 is further configured to receive periodic communication data sent by the second control unit 311 and determine whether the second monitor 33 has an operational fault based on the second fault signal and the received periodic communication data; the second control unit 311 is further configured to determine whether the first monitor 32 has an operational fault based on the first fault signal and the received periodic communication data.

[0086] If the first control unit 310 receives a second fault signal sent by the second monitor 33 to characterize the operation fault of the second control unit 311, it can determine whether the second control unit 311 has an operation fault based on the periodic communication data sent by the second control unit 311. If not, it can determine that the second monitor 33 has an operation fault.

[0087] Similarly, if the second control unit 311 receives a first fault signal sent by the first monitor 32 to characterize the malfunction of the first control unit 310, it can determine whether the first control unit 310 has an malfunction based on the periodic communication data sent by the first control unit 310. If not, it can determine that the first monitor 32 has an malfunction.

[0088] This method enables fault detection of the first and second monitors, avoiding false fault detection of the first and second control units due to faults in the first and second monitors.

[0089] Of course, if the first control unit 310 determines, based on the periodic communication data sent by the second control unit 311, that the second control unit 311 has an operational fault and has not received a second fault signal sent by the second monitor 33, then it can also determine that the second monitor 33 has an operational fault. Similarly, if the second control unit 311 determines, based on the periodic communication data sent by the first control unit 310, that the first control unit 310 has an operational fault and has not received a first fault signal sent by the first monitor 32, then it can also determine that the first monitor 32 has an operational fault.

[0090] In one optional implementation, the system further includes a host computer, which is used to receive a fault signal sent by the second control unit 311, determine the fault type corresponding to the fault signal based on the fault signal, obtain a preset processing rule corresponding to the fault type, and control the digital output control device 31 according to the preset processing rule.

[0091] The fault signal can be a signal generated by the second control unit 311 when a fault is detected. Specifically, the host computer can identify the fault type based on the fault signal, such as pin output fault, first control unit operation fault, voltage comparator operation fault, drive amplifier module operation fault, etc., and further control the digital output control device 31 according to the preset processing rules corresponding to the fault type.

[0092] For example, if the fault type is a malfunction of the first control unit, the digital output control device 31 can be powered off. If the fault type is a malfunction of the voltage comparator, an error signal can be generated and sent to the display interface without powering off. Through the host computer, faults can be handled quickly, and different handling methods can be applied to different fault types.

[0093] Of course, the host computer can also be used to detect faults in the first control unit 310 and the second control unit 311. For example, the first control unit 310 and the second control unit 311 can send periodically changing levels to the host computer, and the host computer can determine whether the first control unit 310 and the second control unit 311 have operational faults based on the periodically changing levels.

[0094] The technical solution of this embodiment realizes fault detection of the first control unit and the second control unit through the first monitor and the second monitor respectively. Furthermore, the second control unit can also realize fault detection of the first control unit and the output pin. The system provided by this embodiment can identify a variety of faults in the digital output control device, thereby improving the safety of digital output control.

[0095] Optionally, this embodiment may also provide another fault identification system for digital output control, such as... Figure 3B The diagram shows the structural schematic of the fault identification system for digital output control. The system includes a host computer, a first monitor, a second monitor, a digital output control device, and an execution device. The digital output control device includes a first control unit, a second control unit, a voltage comparator, a first optocoupler isolation module, a second optocoupler isolation module, a drive amplifier module, a power module, and a status detection module.

[0096] exist Figure 3BIn the system shown, when the first control unit outputs a high / low level, it communicates with both the host computer and the second control unit, transmitting the correct level information of the pin (i.e., the output pin reference level) to the host computer and the second control unit. The second control unit directly detects the level of the GPIO pin of the first control unit (i.e., the actual level of the output pin), compares this level with the level sent by the first control unit, and if they are inconsistent, sends a fault signal indicating a pin output fault to the host computer, thus solving the problem that the fault of the first control unit's own GPIO output port cannot be detected.

[0097] The GPIO signal from the first control unit, after passing through a voltage comparator, is also fed back to the second control unit. The second control unit uses the detected signals before and after the voltage comparator to determine whether the voltage comparator is damaged. The first optocoupler isolation module isolates high-voltage and low-voltage circuits, preventing high-voltage damage to the digital output control device. The status detection module detects the isolation signal output from the first optocoupler isolation module, which, after isolation by the second optocoupler isolation module, is sent to the second control unit. The second control unit uses the detected input signal to the first optocoupler isolation module and the signal isolated by the second optocoupler isolation module to determine whether the first optocoupler isolation module is damaged. The status detection module can also send the signals before and after the drive amplifier module to the second control unit, enabling the second control unit to determine whether the drive amplifier module is damaged. The status detection module can also feed back the signal output from the power module to the second control unit, enabling the second control unit to determine whether the power module is damaged. This achieves fault detection for any module in the digital output control device.

[0098] Furthermore, the first control unit and the second control unit are two independent microprocessors. The first monitor and the second monitor respectively monitor the operating status of the first control unit and the second control unit; the first control unit and the second control unit need to periodically send changing voltage levels so that the first monitor and the second monitor can determine whether there is a fault, otherwise, the first monitor and the second monitor can reset the first control unit and the second control unit.

[0099] The second control unit can also collect the first fault signal generated by the first monitor, and the first control unit can also collect the second fault signal generated by the second monitor. When either the first control unit or the second control unit experiences a program fault, the other control unit will be notified.

[0100] Simultaneously, the first and second control units can also send periodic communication data and perform cross-verification. That is, when the second controller receives a first fault signal from the first monitor, or does not receive periodic communication data from the first control unit, it can determine that the first control unit's program is abnormal and thus send a fault signal to the host computer. Similarly, when the first control unit receives a second fault signal from the second monitor, or does not receive periodic communication data from the second control unit, it can determine that the second control unit's program is abnormal and send a fault signal to the host computer. In this way, hardware or program abnormalities of both the first and second control units can be detected.

[0101] Understandably, even if the first or second monitor malfunctions, its abnormality can be identified through periodic communication data and the first or second fault signal. Furthermore, even if both the monitor and control unit malfunction simultaneously, the host computer can identify and determine this by whether it receives periodic communication data or periodic level changes from the control unit. Even further, even if both control units and both monitors malfunction, the host computer can still make a judgment through the communication system. Through these methods, the entire digital output control fault identification system can achieve extremely high fault diagnosis coverage.

[0102] It should be noted that the status detection module can also detect the current and voltage of external devices and feed the detected current and voltage back to the second control unit. The status detection module can send the detected current and voltage to the second control unit via I / O signals or communication methods. The second control unit compares the current and voltage with preset standard values ​​to determine whether the operating status of the external device is abnormal.

[0103] After the host computer detects the above faults, it can take corresponding actions according to the pre-set fault categories. Figure 3B The illustrated fault identification system for digital output control solves the technical problem that ordinary digital control systems cannot detect faults caused by control unit damage, GPIO pin damage, control unit program abnormalities, or normal control unit output levels but faults in modules connected to GPIO pins. This system can perform comprehensive diagnostics, detecting various possible faults in the digital output control device, notifying the host computer, and providing different feedback based on different fault types. It can even differentiate between faults in two or more circuit modules simultaneously. Furthermore, with a minimal component design, it can simultaneously identify various possible faults in the system, enabling the host computer system to quickly respond based on the fault type, achieving extremely high fault diagnosis coverage.

[0104] Example 4

[0105] Figure 4 This is a flowchart illustrating a fault identification method for digital output control provided in Embodiment 4 of the present invention. This embodiment is applicable to fault detection of digital output control devices. The method can be executed by a fault identification system for digital output control, which can be implemented in hardware and / or software. This fault identification system can be configured in electronic devices such as mobile phones, computers, and tablets. Figure 4 As shown, the method includes:

[0106] S410. Based on the first control unit in the digital output control device, send the output pin reference level and periodic communication data to the second control unit in the digital output control device.

[0107] S420. Based on the second control unit, obtain the actual level of the output pin of the first control unit, determine whether the first control unit has a pin output fault according to the output pin reference level and the actual level of the output pin, and determine whether the first control unit has an operational fault according to the received periodic communication data.

[0108] Optionally, the method further includes:

[0109] Based on the second control unit, the input voltage from the first control unit to the voltage comparator and the output voltage of the voltage comparator are obtained, and the voltage comparator is used to determine whether there is a fault in the voltage comparator.

[0110] Optionally, the method further includes:

[0111] Based on the second control unit, the original signal input to the first optocoupler isolation module is acquired, and the comparison signal output by the second optocoupler isolation module sent by the status detection module is received. Based on the original signal and the comparison signal, it is determined whether the first optocoupler isolation module has an operational fault; wherein, the comparison signal is obtained by the second optocoupler isolation module converting the isolation signal, and the isolation signal is obtained by the first optocoupler isolation module converting the original signal.

[0112] Optionally, the method further includes:

[0113] Based on the second control unit, the signal to be amplified sent by the status detection module to the drive amplification module and the amplified signal output by the drive amplification module are obtained, and the drive amplification module is judged to have an operational fault based on the signal to be amplified and the amplified signal.

[0114] Optionally, the method further includes:

[0115] Based on the second control unit, the power signal output by the power module sent by the status detection module is obtained, and the power module is judged to have an operational fault based on the power signal.

[0116] Optionally, the method further includes:

[0117] Based on the second control unit, the actual operating signal of the execution device sent by the status detection module is obtained. Based on the preset operating signal corresponding to the execution device and the actual operating signal, it is determined whether the execution device has an operating fault; wherein, the actual operating signal includes the operating current value and / or operating voltage value.

[0118] Optionally, the method further includes:

[0119] Based on the first monitor, the periodic change level sent by the first control unit is obtained, and the periodic change level sent by the first control unit is used to determine whether the first control unit has an operational fault;

[0120] Based on the second monitor, the periodic change level sent by the second control unit is obtained, and the operational fault of the second control unit is determined based on the periodic change level sent by the second control unit.

[0121] Optionally, the method further includes:

[0122] Based on the first monitor, when it is determined that the first control unit has an operational fault, a first fault signal is generated and sent to the second control unit;

[0123] Based on the second monitor, when it is determined that there is an operational fault in the second control unit, a second fault signal is generated and sent to the first control unit;

[0124] Based on the first control unit, the system receives periodic communication data sent by the second control unit, and determines whether the second monitor has an operational fault based on the second fault signal and the received periodic communication data.

[0125] Based on the second control unit, it is determined whether the first monitor has an operational fault according to the first fault signal and the received periodic communication data.

[0126] Optionally, the method further includes:

[0127] Based on the host computer, the fault signal sent by the second control unit is received, the fault type corresponding to the fault signal is determined based on the fault signal, the preset processing rule corresponding to the fault type is obtained, and the digital output control device is controlled according to the preset processing rule.

[0128] The technical solution of this embodiment involves a first control unit in a digital output control device sending an output pin reference level and periodic communication data to a second control unit within the same device. The second control unit then acquires the actual output pin level of the first control unit. Based on the output pin reference level and the actual output pin level, the solution determines whether a pin output fault exists in the first control unit, thus detecting pin damage. Furthermore, the received periodic communication data determines whether an operational fault exists in the first control unit, enabling fault detection of the control unit within the digital output control device. This method achieves fault identification in digital output control, improves the safety of digital output control, and ensures the normal operation of the controlled external devices.

[0129] Example 5

[0130] Figure 5 This is a schematic diagram of the structure of an electronic device provided in Embodiment 5 of the present invention. Figure 5 A schematic diagram of an electronic device 10, which can be used to implement embodiments of the present invention, is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processors, cellular phones, smartphones, wearable devices (e.g., helmets, glasses, watches, etc.), and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely illustrative and are not intended to limit the implementation of the invention described and / or claimed herein.

[0131] like Figure 5 As shown, the electronic device 10 includes at least one processor 20 and a memory, such as a read-only memory (ROM) 12 or a random access memory (RAM) 13, communicatively connected to the at least one processor 20. The memory stores computer programs executable by the at least one processor. The processor 20 can perform various appropriate actions and processes based on the computer program stored in the ROM 12 or loaded from storage unit 18 into the RAM 13. The RAM 13 can also store various programs and data required for the operation of the electronic device 10. The processor 20, ROM 12, and RAM 13 are interconnected via a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0132] Multiple components in electronic device 10 are connected to I / O interface 15, including: input unit 16, such as keyboard, mouse, etc.; output unit 17, such as various types of displays, speakers, etc.; storage unit 18, such as disk, optical disk, etc.; and communication unit 19, such as network card, modem, wireless transceiver, etc. Communication unit 19 allows electronic device 10 to exchange information / data with other devices through computer networks such as the Internet and / or various telecommunications networks.

[0133] Processor 20 can be a variety of general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of processor 20 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. Processor 20 performs the various methods and processes described above, such as fault identification methods for digital output control.

[0134] In some embodiments, the fault identification method for digital output control can be implemented as a computer program tangibly contained in a computer-readable storage medium, such as storage unit 18. In some embodiments, part or all of the computer program can be loaded and / or installed on electronic device 10 via ROM 12 and / or communication unit 19. When the computer program is loaded into RAM 13 and executed by processor 20, one or more steps of the fault identification method for digital output control described above can be performed. Alternatively, in other embodiments, processor 20 can be configured to perform the fault identification method for digital output control by any other suitable means (e.g., by means of firmware).

[0135] Various embodiments of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), systems-on-a-chip (SoCs), payload-programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include implementations in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a dedicated or general-purpose programmable processor, capable of receiving data and instructions from a storage system, at least one input device, and at least one output device, and transmitting data and instructions to the storage system, the at least one input device, and the at least one output device.

[0136] Computer programs used to implement the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when executed by the processor, the computer programs cause the functions / operations specified in the flowcharts and / or block diagrams to be performed. The computer programs may be executed entirely on a machine, partially on a machine, or as a standalone software package, partially on a machine and partially on a remote machine, or entirely on a remote machine or server.

[0137] In the context of this invention, a computer-readable storage medium can be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, apparatus, or device. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination thereof. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof.

[0138] To provide interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user provides input to the electronic device. Other types of devices can also be used to provide interaction with the user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including sound input, voice input, or tactile input).

[0139] The systems and technologies described herein can be implemented in computing systems that include backend components (e.g., as data servers), or computing systems that include middleware components (e.g., application servers), or computing systems that include frontend components (e.g., user computers with graphical user interfaces or web browsers through which users can interact with implementations of the systems and technologies described herein), or any combination of such backend, middleware, or frontend components. The components of the system can be interconnected via digital data communication of any form or medium (e.g., communication networks). Examples of communication networks include local area networks (LANs), wide area networks (WANs), blockchain networks, and the Internet.

[0140] A computing system can include clients and servers. Clients and servers are generally located far apart and typically interact through communication networks. The client-server relationship is created by computer programs running on the respective computers and having a client-server relationship with each other. The server can be a cloud server, also known as a cloud computing server or cloud host, which is a hosting product within the cloud computing service system to address the shortcomings of traditional physical hosts and VPS services, such as high management difficulty and weak business scalability.

[0141] It should be understood that the various forms of processes shown above can be used, with steps reordered, added, or deleted. For example, the steps described in this invention can be executed in parallel, sequentially, or in different orders, as long as the desired result of the technical solution of this invention can be achieved, and no limitation is imposed herein.

[0142] The specific embodiments described above do not constitute a limitation on the scope of protection of this invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this invention should be included within the scope of protection of this invention.

Claims

1. A fault identification system for digital output control, characterized in that, The system includes a digital output control device, which comprises a first control unit and a second control unit; wherein... The first control unit is communicatively connected to the second control unit and is used to send the output pin reference level and periodic communication data to the second control unit; The second control unit is used to acquire the actual level of the output pin of the first control unit, determine whether the first control unit has a pin output fault based on the output pin reference level and the actual level of the output pin, and determine whether the first control unit has an operational fault based on the received periodic communication data. The digital output control device further includes a first optocoupler isolation module, a second optocoupler isolation module, and a status detection module; wherein... The first optocoupler isolation module is used to convert the input raw signal into an isolated signal; The status detection module is connected to the second optocoupler isolation module and the second control unit respectively, and is used to detect the isolation signal output by the first optocoupler isolation module and send the isolation signal to the second optocoupler isolation module. The second optocoupler isolation module is communicatively connected to the second control unit and is used to convert the isolation signal into a comparison signal and send the comparison signal to the second control unit. The second control unit is further configured to acquire the original signal and determine whether the first optocoupler isolation module has an operational fault based on the original signal and the signal to be compared; The system also includes a first monitor and a second monitor; The first monitor is connected to the first control unit and is used to acquire the periodic change level sent by the first control unit and determine whether the first control unit has an operational fault based on the periodic change level sent by the first control unit. The second monitor is connected to the second control unit and is used to acquire the periodic change level sent by the second control unit, and to determine whether the second control unit has an operational fault based on the periodic change level sent by the second control unit. It is also used to generate a first fault signal and send it to the second control unit when it is determined that the first control unit has an operational fault; The second monitor is also configured to generate a second fault signal and send it to the first control unit when it is determined that the second control unit has an operational fault; The first control unit is further configured to receive periodic communication data sent by the second control unit, and determine whether the second monitor has an operational fault based on the second fault signal and the received periodic communication data; The second control unit is further configured to determine whether the first monitor has an operational fault based on the first fault signal and the received periodic communication data.

2. The system according to claim 1, characterized in that, The digital output control device further includes a voltage comparator and a second control unit, and is also used to acquire the input voltage from the first control unit to the voltage comparator and the output voltage of the voltage comparator, and to determine whether the voltage comparator is faulty based on the input voltage and the output voltage.

3. The system according to claim 1, characterized in that, The digital output control device further includes a drive amplification module. The status detection module is also used to detect the signal to be amplified input to the drive amplification module and the amplified signal output by the drive amplification module, and send the signal to be amplified and the amplified signal to the second control unit. The second control unit is also used to determine whether the drive amplification module has an operational fault based on the signal to be amplified and the amplified signal.

4. The system according to claim 1, characterized in that, The digital output control device further includes a power module. The status detection module is also used to detect the power signal output by the power module and send the power signal to the second control unit. The second control unit is also used to determine whether the power module has an operational fault based on the power signal.

5. The system according to claim 1, characterized in that, The system further includes at least one execution device, and the digital output control device is connected to the execution device; The status detection module is further configured to acquire the actual operating signal of the execution device and send the actual operating signal to the second control unit, wherein the actual operating signal includes the operating current value and / or the operating voltage value; The second control unit is further configured to determine whether the execution device has an operational fault based on the preset operating signal corresponding to the execution device and the actual operating signal.

6. The system according to claim 1, characterized in that, The system also includes a host computer, which is used to receive fault signals sent by the second control unit, determine the fault type corresponding to the fault signal based on the fault signal, obtain the preset processing rules corresponding to the fault type, and control the digital output control device according to the preset processing rules.

7. A fault identification method for digital output control, characterized in that, include: Based on the first control unit in the digital output control device, the output pin reference level and periodic communication data are sent to the second control unit in the digital output control device; Based on the second control unit, the actual level of the output pin of the first control unit is obtained. Based on the reference level of the output pin and the actual level of the output pin, it is determined whether the first control unit has a pin output fault. Based on the received periodic communication data, it is determined whether the first control unit has an operational fault. The method further includes: Based on the second control unit, the original signal input to the first optocoupler isolation module is acquired, and the comparison signal output by the second optocoupler isolation module sent by the status detection module is received. Based on the original signal and the comparison signal, it is determined whether the first optocoupler isolation module has an operational fault; wherein, the comparison signal is obtained by the second optocoupler isolation module converting the isolation signal, and the isolation signal is obtained by the first optocoupler isolation module converting the original signal; The method further includes: Based on the first monitor, the periodic change level sent by the first control unit is obtained, and the periodic change level sent by the first control unit is used to determine whether the first control unit has an operational fault; Based on the second monitor, the periodic change level sent by the second control unit is obtained, and the periodic change level sent by the second control unit is used to determine whether the second control unit has an operational fault; The method further includes: Based on the first monitor, when it is determined that the first control unit has an operational fault, a first fault signal is generated and sent to the second control unit; Based on the second monitor, when it is determined that there is an operational fault in the second control unit, a second fault signal is generated and sent to the first control unit; Based on the first control unit, the system receives periodic communication data sent by the second control unit, and determines whether the second monitor has an operational fault based on the second fault signal and the received periodic communication data. Based on the second control unit, it is determined whether the first monitor has an operational fault according to the first fault signal and the received periodic communication data.

Images