Control device, method, electronic device, and storage medium for vehicle-mounted CAN transceiver

CN116872864BActive Publication Date: 2026-10-16APOLLO INTELLIGENT CONNECTIVITY (BEIJING) TECH CO LTD
View PDF 3 Cites 0 Cited by

Patent Information

Application Number
CN202310800358.1
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2023-06-30
Publication Date
2026-10-16
Estimated Expiration
2043-06-30

AI Technical Summary

Technical Problem

一旦控制发生错误,会产生剐蹭、撞车等一系列交通危害,造成人身伤害和财产损失

Benefits of technology

[0020] In this embodiment, there are no requirements for the type of CAN transceiver. In the event of a failure of the driving domain controller, the CAN transceiver can be effectively shut down, providing a high level of security.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN116872864B_ABST
    Figure CN116872864B_ABST
Patent Text Reader

Abstract

The present disclosure provides a control device, method, electronic device and storage medium of a vehicle CAN transceiver. It relates to the technical field of automatic control, especially the technical field of automatic driving, auxiliary driving and the like. The specific implementation scheme is as follows: the control device of the vehicle CAN transceiver comprises a first CAN controller and a power control module, wherein: the first CAN controller is configured to send a first shutdown signal to the power control module in the case that it is determined based on the state of the driving domain controller that the CAN transceiver needs to be shut down; and the power control module is configured to cut off the power supply of the CAN transceiver in response to the first shutdown signal. In the embodiment of the present disclosure, there is no requirement for the type of the CAN transceiver, and the CAN transceiver can be effectively turned off in the case that the driving domain controller fails, thereby providing a higher level of safety guarantee.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This disclosure relates to the field of automatic control technology, and in particular to the fields of autonomous driving and driver assistance. Background Technology

[0002] In autonomous or assisted driving systems, the ECU (Electronic Control Unit) of the driving domain controller is used to control the vehicle. The driving domain controller interacts with other ECUs on the vehicle. For example, the driving domain controller sends lateral and longitudinal control commands to EPS (Electric Power Steering) and ESP (Electronic Stability Program) to complete the lateral and longitudinal control of the vehicle during driving.

[0003] The driving domain controller is the core of vehicle control and is of paramount importance for safety. Errors in control can lead to a series of traffic hazards, such as scrapes and collisions, causing personal injury and property damage. Summary of the Invention

[0004] This disclosure provides control devices, methods, electronic devices, and storage media for vehicle-mounted CAN transceivers.

[0005] According to one aspect of this disclosure, a control device for an on-board CAN transceiver is provided, comprising a first CAN controller and a power control module, wherein:

[0006] The first CAN controller is used to send a first shutdown signal to the power control module when it is determined from the state of the driving domain controller that the CAN transceiver needs to be turned off.

[0007] The power control module is used to cut off the power supply to the CAN transceiver in response to the first shutdown signal.

[0008] According to another aspect of this disclosure, a control method for an on-board CAN transceiver is provided, comprising:

[0009] Obtain the status of the driving domain controller;

[0010] If the state of the driving domain controller determines that the CAN transceiver needs to be turned off, the power supply to the CAN transceiver shall be cut off.

[0011] According to another aspect of this disclosure, a control device for an on-board CAN transceiver is provided, comprising:

[0012] The status acquisition module is used to acquire the status of the driving domain controller;

[0013] The shutdown module is used to cut off the power supply to the CAN transceiver when the state of the driving domain controller determines that the CAN transceiver needs to be shut down.

[0014] According to another aspect of this disclosure, an electronic device is provided, comprising:

[0015] At least one processor; and

[0016] The memory is communicatively connected to the at least one processor; wherein,

[0017] The memory stores instructions that can be executed by the at least one processor to enable the at least one processor to perform the data processing method of any embodiment of the present disclosure.

[0018] According to another aspect of this disclosure, a non-transitory computer-readable storage medium is provided storing computer instructions, wherein the computer instructions are used to cause the computer to perform an on-board CAN transceiver control method according to any embodiment of this disclosure.

[0019] According to another aspect of this disclosure, a computer program product is provided, including a computer program that, when executed by a processor, implements an in-vehicle CAN transceiver control method according to any embodiment of this disclosure.

[0020] In this embodiment, there are no requirements for the type of CAN transceiver. In the event of a failure of the driving domain controller, the CAN transceiver can be effectively shut down, providing a high level of security.

[0021] It should be understood that the description in this section is not intended to identify key or essential features of the embodiments of this disclosure, nor is it intended to limit the scope of this disclosure. Other features of this disclosure will become readily apparent from the following description. Attached Figure Description

[0022] The accompanying drawings are provided to better understand this solution and do not constitute a limitation of this disclosure. Wherein:

[0023] Figure 1 This is a schematic diagram of the structure of a control device for a CAN transceiver provided according to an embodiment of the present disclosure;

[0024] Figure 2 This is a schematic diagram of the structure of the first CAN controller cutting off the power supply module to the CAN transceiver through the power control module in one embodiment of the present disclosure;

[0025] Figure 3 This is a schematic diagram of the control device structure of another vehicle-mounted CAN transceiver according to an embodiment of the present disclosure;

[0026] Figure 4 This is a schematic diagram of the structure of an on-board CAN controller controlling the CAN transceiver to shut down and determining whether the CAN transceiver has been successfully shut down according to an embodiment of the present disclosure.

[0027] Figure 5 This is a schematic flowchart of a control method for an in-vehicle CAN transceiver according to an embodiment of the present disclosure;

[0028] Figure 6 This is a schematic diagram of the structure of a control device for a CAN transceiver provided according to an embodiment of the present disclosure;

[0029] Figure 7 This is a block diagram of an electronic device used to implement the vehicle-mounted CAN transceiver of the embodiments of this disclosure. Detailed Implementation

[0030] The exemplary embodiments of this disclosure are described below with reference to the accompanying drawings, including various details of the embodiments to aid understanding, and should be considered merely exemplary. Therefore, those skilled in the art will recognize that various changes and modifications can be made to the embodiments described herein without departing from the scope of this disclosure. Similarly, for clarity and brevity, descriptions of well-known functions and structures are omitted in the following description.

[0031] Furthermore, the terms "first" and "second" used in the embodiments of this disclosure are for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of indicated technical features. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of that feature. In the description of this disclosure, "multiple" means two or more, unless otherwise explicitly specified.

[0032] In driver domain controllers for autonomous or assisted driving systems, the control interface for the vehicle often uses a CAN bus interface. The driver domain controller interacts with other ECU subsystems on the vehicle through this interface to complete the driving control of the vehicle.

[0033] A malfunction in the driving domain controller can lead to traffic accidents, and even personal injury and property damage. Some possible solutions involve using a specific pin of the CAN transceiver to disable communication. However, not all CAN transceivers support this specific pin. Furthermore, in the event of a driving domain controller failure, it is difficult to prevent vehicle control commands from being sent to other subsystems. Therefore, this disclosure embodiment considers employing a suitable method to disable the CAN transceiver, thereby preventing the interaction between the driving domain controller and other controllers, thus ensuring driving safety by preventing vehicle control commands from being sent to other subsystems.

[0034] like Figure 1 The diagram shown is a structural schematic of a control device 100 for a CAN transceiver provided in an embodiment of this disclosure. The control device 100 includes a first CAN controller 101 and a power control module 102, wherein:

[0035] The first CAN controller 101 is used to send a first shutdown signal to the power control module 102 when it is determined from the state of the driving domain controller that the CAN transceiver 103 needs to be turned off.

[0036] The power control module 102 is used to cut off the power supply to the CAN transceiver 103 in response to the first shutdown signal.

[0037] like Figure 2 As shown, power module 104 supplies power to CAN transceiver 103. A power control module 102 is provided between power module 104 and CAN transceiver 103. The power control module 102 may include an arithmetic module and a switch. The power control module 102 is connected to a first CAN controller 101. The first CAN controller 101 can obtain the status of the driving domain controller and determine whether there will be a problem with the driving domain controller's control of the vehicle. If a problem is determined to occur, the first CAN controller 101 cuts off the power supply from power module 104 to CAN transceiver 103 through power control module 102.

[0038] In this embodiment, the CAN transceiver 103 is shut down based on the state of the driving domain controller to mitigate potential safety risks. Furthermore, there are no restrictions on the CAN transceiver 103. Regardless of the type of CAN transceiver 103, vehicle safety can be ensured by cutting off its power supply. In addition, multiple CAN buses exist between the CAN transceiver 103 and the driving domain controller. Compared to the driving domain controller shutting down the CAN bus via a specific pin, the solution provided in this embodiment can effectively shut down the CAN transceiver 103 even in the event of a driving domain controller failure, providing a higher level of safety assurance.

[0039] In some embodiments, to enhance security, this disclosure further provides a channel for shutting down the CAN transceiver 103. For example... Figure 3 As shown, the control device 100 of the vehicle-mounted CAN transceiver 103 also provides an enable control module 105. Among them:

[0040] The first CAN controller 101 is also used to send a second shutdown signal to the enable control module 105 when it is determined that the CAN transceiver 103 needs to be turned off.

[0041] The enable control module 105, in response to the second shutdown signal, sends a low-level signal to the target pin of the CAN transceiver 103 so that the CAN transceiver 103 enters an unusable state without cutting off the power supply.

[0042] Therefore, the control of CAN transceiver 103 can be understood as follows: under normal circumstances, the driving domain controller sends vehicle control commands to control the vehicle's movement. In cases where a problem occurs and CAN transceiver 103 needs to be shut down, such as... Figure 3 As shown, the first CAN controller 101 sends a first shutdown signal to the power control module 102 to cut off the power to the CAN transceiver 103, and simultaneously sends a second shutdown signal to the enable control module 105 to control the CAN transceiver 103 into an unusable state. As long as either the power control module 102 or the enable control module 105 can successfully shut down the CAN transceiver 103, driving safety can be guaranteed.

[0043] Therefore, in this embodiment of the present disclosure, the first CAN controller 101, through the power control module 102 and the enable control module 105, can effectively ensure the timely shutdown of the CAN transceiver 103 to improve driving safety.

[0044] In some embodiments, in the event of a failure in the first CAN controller 101, there is a risk that the CAN transceiver 103 may not be shut down in a timely manner. Therefore, in this embodiment of the disclosure, as... Figure 4 As shown, an additional second CAN controller 106 is also provided to further provide additional channels to compensate for the shortcomings of the first CAN transceiver 103. Wherein:

[0045] The second CAN controller 106 is used to send a third shutdown signal to the power control module 102 when it is determined that the CAN transceiver 103 needs to be turned off.

[0046] The power control module 102 is also used to cut off the power supply to the CAN transceiver 103 in response to a third shutdown signal.

[0047] like Figure 4 As shown, the control flow can be understood as follows: when it is necessary to shut down the CAN transceiver 103, the first CAN controller 101 sends a first shutdown signal to the power control module 102 and a second shutdown signal to the enable control module 105. Simultaneously, the second CAN controller 106 also sends a third shutdown signal to the power control module 102. The first, second, and third shutdown signals form three control channels for the CAN transceiver 103. Successfully shutting down the CAN transceiver 103 through any one of these control channels ensures vehicle safety.

[0048] Therefore, in this embodiment of the disclosure, the first CAN controller 101 and the second CAN controller 106 provide multiple independent ways to shut down the CAN transceiver 103. This increases the probability of shutting down the CAN transceiver 103, thereby further ensuring driving safety.

[0049] Similarly, such as Figure 4 As shown, the second CAN controller 106 is also used to send a fourth shutdown signal to the enable control module 105 when it is determined that the CAN transceiver 103 needs to be turned off.

[0050] The enable control module 105 is also used to send a low-level signal to the target pin of the CAN transceiver 103 in response to the fourth shutdown signal, so that the CAN transceiver 103 enters an unusable state without cutting off the power supply.

[0051] For the second CAN controller 106, two methods can be provided to shut down the CAN transceiver 103: the power control module 102 and the enable control module 105, which can further ensure driving safety.

[0052] In some embodiments, the first CAN controller 101 can be an MCU within the driving domain controller. Specifically, the first CAN controller 101 is used to determine that the CAN transceiver 103 needs to be shut down when a fault is detected in the driving domain controller. Thus, the first CAN controller 101 can take over control of the CAN transceiver 103 in the event of a driving domain controller failure, avoiding safety hazards caused by the failure of the driving domain controller.

[0053] If the driving domain controller is not faulty, the CAN transceiver 103 can be shut down through other means, such as E2E.

[0054] In some embodiments, the second CAN controller 106 can serve as a remedial mechanism in the event of a failure of the first CAN controller 101, or it can perform the same function as the first CAN controller 101. Therefore, the second CAN controller 106 is specifically used to determine, in the event that a failure has occurred in the driving domain controller and / or the first CAN controller 101, the need to shut down the CAN transceiver 103.

[0055] For example, as a remedial mechanism, if the first CAN controller 101 determines that the driving domain controller has failed, it shuts down the CAN transceiver 103 via the power control module 102 and the enable control module 105. If the first CAN controller 101 fails, the second CAN controller 106 shuts down the CAN transceiver 103 via the power control module 102 and the enable control module 105.

[0056] For example, when the second CAN controller 106 performs the same function as the first CAN controller 101, in the event of a failure in the driving domain controller, both the second CAN controller 106 and the first CAN controller 101 will shut down the CAN transceiver 103 via the power control module 102 and the enable control module 105. Furthermore, if either the first CAN controller 101 or the second CAN controller 106 malfunctions, the remaining functional controller can effectively shut down the CAN transceiver 103.

[0057] Therefore, this embodiment of the disclosure provides a scheme for triggering the second CAN controller 106 to shut down the CAN transceiver 103, which can flexibly control the CAN transceiver 103.

[0058] In some embodiments, the enable control module 105 is specifically used for:

[0059] Upon receiving the second and fourth shutdown signals, perform a bitwise AND operation on the second and fourth shutdown signals to obtain a low-level signal;

[0060] Send a low-level signal to the EN (Enable) pin and / or the standby pin of the CAN transceiver 103.

[0061] like Figure 4 As shown, the input interface of the enable control module 105 includes a first interface for transmitting a second shutdown signal and a second interface for transmitting a fourth shutdown signal. When a signal is received at either the first or second interface, the enable control module 105 performs a bitwise AND operation on the shutdown signals of these two interfaces to generate a low-level signal. The enable control module 105 can also control the CAN transceiver 103 to enter an unavailable state through various means. For example... Figure 4 As shown, the enable control module 105 sends one low-level signal to the EN pin of the CAN transceiver 103 and another low-level signal to the standby pin of the CAN transceiver 103. Successfully turning off the CAN transceiver 103 via either pin ensures driving safety.

[0062] In this embodiment, an AND operation can be used to generate a low-level signal to shut down the CAN transceiver 103 upon receiving at least one of the first and fourth shutdown signals. Furthermore, the enable control module 105 can easily shut down the CAN transceiver 103 by pulling down the level of either the EN or standby pin. Moreover, by simultaneously pulling down the levels of both the EN and standby pins, the likelihood of shutting down the CAN transceiver 103 can be increased through multiple methods, further ensuring driving safety.

[0063] In some embodiments, to understand the shutdown status of the CAN transceiver 103, such as... Figure 4 As shown, the first CAN controller 101 is also used to acquire the voltage signal 1 of the CAN transceiver 103 when a first shutdown signal is sent; and to detect the shutdown status of the CAN transceiver 103 based on the voltage signal 1 of the CAN transceiver 103.

[0064] For example, such as Figure 4 As shown, in the event of a power supply mismatch between the first CAN controller 101 and the CAN transceiver 103, the voltage acquisition module 107 can acquire the voltage signal of the CAN transceiver 103, convert it into a voltage signal compatible with the first CAN controller 101, and transmit it to the first CAN controller 101. Therefore, the first CAN controller 101 can compare the received voltage signal with the expected voltage signal. If they are similar, it determines that the power supply to the CAN transceiver 103 has been successfully cut off; otherwise, it determines that the power supply to the CAN transceiver 103 has not been successfully cut off.

[0065] In this disclosed example, by sampling the voltage signal of the CAN transceiver 103, it is possible to know in a timely manner whether the power supply to the CAN transceiver 103 has been successfully cut off.

[0066] Similarly, the first CAN controller 101 is also used to acquire the received signal received by the target pin of the CAN transceiver 103 when a second shutdown signal is sent; and to detect the shutdown status of the CAN transceiver 103 based on the received signal.

[0067] like Figure 4 As shown, the low-level signal sent by the enable control module 105 to the CAN transceiver 103 will be sampled back as the receive signal of the target pin and transmitted to the first CAN controller 101. Therefore, the first CAN controller 101 can compare the received signal with the expected level signal. If they are similar, it can be determined that the CAN transceiver 103 has been successfully turned off by the enable control module 105; otherwise, it can be determined that the CAN transceiver 103 has not been turned off by the enable control module 105. By sampling the receive signal of the target pin in the CAN transceiver 103, it is possible to promptly determine whether the CAN transceiver 103 has been successfully set to an unusable state.

[0068] Similarly, the second CAN controller 106 is also used to acquire the voltage signal of the CAN transceiver 103 when a third shutdown signal is sent; and to detect the shutdown status of the CAN transceiver 103 based on the voltage signal of the CAN transceiver 103.

[0069] For example, such as Figure 4As shown, in the event of a power supply mismatch between the second CAN controller 106 and the CAN transceiver 103, the voltage acquisition module 108 can acquire the voltage signal 2 of the CAN transceiver 103, convert it into a voltage signal compatible with the second CAN controller 106, and transmit it to the second CAN controller 106. The second CAN controller 106 can then compare the received voltage signal 2 with the expected voltage signal. If they are similar, it determines that the power supply to the CAN transceiver 103 has been successfully cut off; otherwise, it determines that the power supply to the CAN transceiver 103 has not been successfully cut off.

[0070] In this disclosed example, by sampling the voltage signal of the CAN transceiver 103, it is possible to know in a timely manner whether the power supply to the CAN transceiver 103 has been successfully cut off.

[0071] The second CAN controller 106 is also used to acquire the received signal received by the target pin of the CAN transceiver 103 when the fourth shutdown signal is sent; and to detect the shutdown status of the CAN transceiver 103 based on the received signal.

[0072] like Figure 4 As shown, the low-level signal sent by the enable control module 105 to the CAN transceiver 103 will be sampled back as the receive signal of the target pin and transmitted to the second CAN controller 106. Therefore, the second CAN controller 106 can compare the received signal with the expected level signal. If the two are similar, it can be determined that the CAN transceiver 103 has been successfully turned off by the enable control module 105; otherwise, it can be determined that the CAN transceiver 103 has not been turned off by the enable control module 105.

[0073] By sampling the received signal from the target pin of the CAN transceiver 103, it is possible to promptly determine whether the CAN transceiver 103 has been successfully set to an unavailable state.

[0074] When the driving domain controller is functioning normally, it sends vehicle control commands to control the vehicle's movement. In the event of a malfunction in the driving domain controller, the first CAN controller 101 can shut down the CAN transceiver 103 via the power control module 102 and the enable control module 105. Simultaneously, the second CAN controller 106 can also shut down the CAN transceiver 103 via the power control module 102 and the enable control module 105. The power control module 102 performs a bitwise AND operation on the shutdown signals (including the first shutdown signal and the third shutdown signal) received from the first CAN controller 101 and the second CAN controller 106, respectively, to generate a control signal for the switch, thereby controlling the switch to cut off power supply to the CAN transceiver 103. The enable control module 105 receives the second shutdown signal from the first CAN controller 101 and the fourth shutdown signal from the second CAN controller 106, performs a bitwise AND operation on these two signals to generate a low-level signal sent to the CAN transceiver 103, thereby pulling down the level of the EN pin or standby pin of the CAN transceiver 103. When the level is pulled low, the CAN transceiver 103 enters an unavailable state and stops transmitting vehicle control commands.

[0075] In another embodiment, if a fault occurs, the first CAN controller 101 sends an alarm message to the second CAN controller 106. If the second CAN controller 106 determines that the alarm message is valid, it determines that the first CAN controller 101 has failed, and then the second CAN controller 106 shuts down the CAN transceiver 103 through the power control module 102 and / or the enable control module 105.

[0076] The first CAN controller 101 can send a preset signal, such as a low-level signal, to the second CAN controller 106, so that when the second CAN controller 106 receives the alarm information, it confirms the alarm information as valid based on the low level.

[0077] Based on the same technical concept, this disclosure also provides a control method for an on-board CAN transceiver 103, such as... Figure 5 As shown, it includes:

[0078] S501, obtain the status of the driving domain controller.

[0079] S502, if it is determined from the state of the driving domain controller that the CAN transceiver 103 needs to be turned off, the power supply to the CAN transceiver 103 is cut off.

[0080] In the event of a failure in the driving domain controller and / or the processor built into the driving domain controller, it is determined that the CAN transceiver 103 needs to be shut down.

[0081] In this embodiment, the CAN transceiver 103 is shut down based on the state of the driving domain controller to mitigate potential safety risks. There are no limitations on the type of CAN transceiver 103. Regardless of the type, the CAN transceiver 103 can be powered off to ensure driving safety. Furthermore, the solution provided in this embodiment can effectively shut down the CAN transceiver 103 even in the event of a driving domain controller failure, providing a higher level of safety assurance.

[0082] In some embodiments, if the CAN transceiver 103 supports the function of shutting down communication by pulling the level of the pin low, then when it is determined that the CAN transceiver 103 needs to be shut down, a low-level signal is sent to the target pin of the CAN transceiver 103 so that the CAN transceiver 103 enters an unavailable state without cutting off the power supply.

[0083] Therefore, turning off the CAN transceiver 103 by cutting off the power supply and enabling it can improve driving safety.

[0084] Sending a low-level signal to the target pin of the CAN transceiver 103 can be implemented by sending the low-level signal to the EN pin of the CAN transceiver 103 and / or the standby pin of the CAN transceiver 103.

[0085] In this embodiment, the CAN transceiver 103 can be turned off simply by pulling the level of the EN pin or the standby pin. Furthermore, by simultaneously pulling the level of the EN pin or the standby pin, the likelihood of turning off the CAN transceiver 103 can be increased through various means.

[0086] In some embodiments, the voltage signal of the CAN transceiver 103 can also be acquired; the off status of the CAN transceiver 103 can be detected based on the voltage signal of the CAN transceiver 103.

[0087] The specific comparison method has been explained above and will not be repeated here.

[0088] In this embodiment of the disclosure, by sampling the voltage signal of the CAN transceiver 103, it is possible to know in a timely manner whether the power supply to the CAN transceiver 103 has been successfully cut off.

[0089] In some embodiments, the received signal received by the target pin of the CAN transceiver 103 can also be acquired; the off status of the CAN transceiver 103 can be detected based on the received signal.

[0090] The specific comparison method has been explained above and will not be repeated here.

[0091] In this embodiment of the disclosure, by sampling the received signal of the target pin in the CAN transceiver 103, it is possible to know in a timely manner whether the CAN transceiver 103 has been successfully set to an unavailable state.

[0092] Based on the same technical concept, this disclosure also provides a control device 600 for an in-vehicle CAN transceiver, such as... Figure 6 As shown, the device includes:

[0093] Status acquisition module 601 is used to acquire the status of the driving domain controller;

[0094] The shutdown module 602 is used to cut off the power supply to the CAN transceiver when the state of the driving domain controller determines that the CAN transceiver needs to be shut down.

[0095] In some embodiments, the control device 600 for the vehicle-mounted CAN transceiver further includes:

[0096] The transmitting module 603 is used to send a low-level signal to the target pin of the CAN transceiver when it is determined that the CAN transceiver needs to be turned off, so that the CAN transceiver enters an unusable state without cutting off the power supply.

[0097] In some embodiments, the sending module 603 is specifically used for:

[0098] Send the low-level signal to the EN pin of the CAN transceiver and / or the standby pin of the CAN transceiver.

[0099] In some embodiments, the control device 600 for the vehicle-mounted CAN transceiver further includes:

[0100] The first acquisition module 604 is used to acquire the voltage signal of the CAN transceiver;

[0101] The first detection module 605 is used to detect the off status of the CAN transceiver based on the voltage signal of the CAN transceiver.

[0102] In some embodiments, the control device 600 for the vehicle-mounted CAN transceiver further includes:

[0103] The second acquisition module 606 is used to acquire the received signal received by the target pin of the CAN transceiver;

[0104] The second detection module 607 is used to detect the shutdown status of the CAN transceiver based on the received signal.

[0105] For a description of the specific functions and examples of each module of the apparatus in this disclosure embodiment, please refer to the relevant descriptions of the corresponding steps in the above method embodiments, which will not be repeated here.

[0106] According to embodiments of this disclosure, this disclosure also provides an electronic device, a readable storage medium, and a computer program product.

[0107] Figure 7 A schematic block diagram of an example electronic device 700 that can be used to implement embodiments of the present disclosure is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device may also represent various forms of mobile devices, such as personal digital assistants, cellular phones, smartphones, wearable devices, and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely illustrative and are not intended to limit the implementation of the present disclosure described and / or claimed herein.

[0108] like Figure 7 As shown, device 700 includes a computing unit 701, which can perform various appropriate actions and processes based on a computer program stored in read-only memory (ROM) 702 or a computer program loaded from storage unit 708 into random access memory (RAM) 703. RAM 703 may also store various programs and data required for the operation of device 700. The computing unit 701, ROM 702, and RAM 703 are interconnected via bus 704. Input / output (I / O) interface 705 is also connected to bus 704.

[0109] Multiple components in device 700 are connected to I / O interface 705, including: input unit 706, such as keyboard, mouse, etc.; output unit 707, such as various types of monitors, speakers, etc.; storage unit 708, such as disk, optical disk, etc.; and communication unit 709, such as network card, modem, wireless transceiver, etc. Communication unit 709 allows device 700 to exchange information / data with other devices through computer networks such as the Internet and / or various telecommunications networks.

[0110] The computing unit 701 can be various general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of the computing unit 701 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various computing units running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. The computing unit 701 performs the various methods and processes described above, such as the control method for an in-vehicle CAN transceiver. For example, in some embodiments, the control method for an in-vehicle CAN transceiver may be implemented as a computer software program tangibly contained in a machine-readable medium, such as storage unit 708. In some embodiments, part or all of the computer program may be loaded and / or installed on device 700 via ROM 702 and / or communication unit 709. When the computer program is loaded into RAM 703 and executed by the computing unit 701, one or more steps of the control method for an in-vehicle CAN transceiver described above may be performed. Alternatively, in other embodiments, the computing unit 701 may be configured to perform control methods for the vehicle CAN transceiver by any other suitable means (e.g., by means of firmware).

[0111] Various embodiments of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), systems-on-a-chip (SoCs), complex programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include implementations in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a dedicated or general-purpose programmable processor, capable of receiving data and instructions from a storage system, at least one input device, and at least one output device, and transmitting data and instructions to the storage system, the at least one input device, and the at least one output device.

[0112] Program code used to implement the methods of this disclosure may be written in any combination of one or more programming languages. This program code may be provided to a processor or controller of a general-purpose computer, special-purpose computer, or other programmable data processing apparatus, such that when executed by the processor or controller, the program code causes the functions / operations specified in the flowcharts and / or block diagrams to be implemented. The program code may be executed entirely on a machine, partially on a machine, as a standalone software package partially on a machine and partially on a remote machine, or entirely on a remote machine or server.

[0113] In the context of this disclosure, a machine-readable medium can be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, apparatus, or device. A machine-readable medium can be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium can be, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination of the foregoing. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.

[0114] To provide interaction with a user, the systems and techniques described herein can be implemented on a computer having: a display device for displaying information to the user (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor); and a keyboard and pointing device (e.g., a mouse or trackball) through which the user provides input to the computer. Other types of devices can also be used to provide interaction with the user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including sound input, voice input, or tactile input).

[0115] The systems and technologies described herein can be implemented in computing systems that include backend components (e.g., as a data server), or computing systems that include middleware components (e.g., an application server), or computing systems that include frontend components (e.g., a user computer with a graphical user interface or web browser through which a user can interact with embodiments of the systems and technologies described herein), or any combination of such backend, middleware, or frontend components. The components of the system can be interconnected via digital data communication of any form or medium (e.g., a communication network). Examples of communication networks include local area networks (LANs), wide area networks (WANs), and the Internet.

[0116] Computer systems can include clients and servers. Clients and servers are generally located far apart and typically interact via communication networks. Client-server relationships are created by computer programs running on the respective computers and having a client-server relationship with each other. Servers can be cloud servers, servers in distributed systems, or servers incorporating blockchain technology.

[0117] It should be understood that the various forms of processes shown above can be used to rearrange, add, or delete steps. For example, the steps described in this disclosure can be executed in parallel, sequentially, or in different orders, as long as the desired result of the technical solution disclosed in this disclosure can be achieved, and this is not limited herein.

[0118] The specific embodiments described above do not constitute a limitation on the scope of protection of this disclosure. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the principles of this disclosure should be included within the scope of protection of this disclosure.

Claims

1. A control device for an on-board CAN transceiver, comprising a first CAN controller and a power control module, wherein: The first CAN controller is used to send a first shutdown signal to the power control module when it is determined from the state of the driving domain controller that the CAN transceiver needs to be turned off; the first CAN controller is a microcontroller unit (MCU) within the driving domain controller. The power control module is used to cut off the power supply to the CAN transceiver in response to the first shutdown signal; It also includes a second CAN controller and an enable control module, wherein: The first CAN controller is further configured to send a second shutdown signal to the enable control module when it is determined that the CAN transceiver needs to be turned off; The second CAN controller is further configured to send a fourth shutdown signal to the enable control module when it is determined that the CAN transceiver needs to be shut down; The enable control module, in response to the second shutdown signal and / or the fourth shutdown signal, sends a low-level signal to the target pin of the CAN transceiver, so that the CAN transceiver enters an unavailable state without cutting off the power supply. In the event of a fault, the first CAN controller sends an alarm message and a low-level signal to the second CAN controller. When the second CAN controller receives the alarm message, it confirms the validity of the alarm message based on the low-level signal, thereby determining that the CAN transceiver needs to be shut down.

2. The apparatus according to claim 1, further comprising a second CAN controller, wherein: The second CAN controller is used to send a third shutdown signal to the power control module when it is determined that the CAN transceiver needs to be shut down. The power control module is also used to cut off the power supply to the CAN transceiver in response to the third shutdown signal.

3. The apparatus according to claim 1 or 2, wherein the first CAN controller is further configured to acquire the voltage signal of the CAN transceiver when the first shutdown signal is transmitted; and detect the shutdown status of the CAN transceiver based on the voltage signal of the CAN transceiver.

4. The apparatus according to claim 2, wherein the second CAN controller is further configured to acquire the voltage signal of the CAN transceiver when the third shutdown signal is transmitted; and detect the shutdown status of the CAN transceiver based on the voltage signal of the CAN transceiver.

5. The apparatus according to claim 1, wherein the first CAN controller is further configured to, when sending the second shutdown signal, acquire a received signal received by the target pin of the CAN transceiver; and detect the shutdown status of the CAN transceiver based on the received signal.

6. The apparatus according to claim 1, wherein the second CAN controller is further configured to, when sending the fourth shutdown signal, acquire a received signal received by the target pin of the CAN transceiver; and detect the shutdown status of the CAN transceiver based on the received signal.

7. The apparatus according to any one of claims 1-5, wherein, Specifically, the first CAN controller is used to determine that the CAN transceiver needs to be shut down when a fault is found in the driving domain controller.

8. The apparatus according to any one of claims 1, 2, 4, and 6, wherein, The second CAN controller is specifically configured to determine, in the event that the driving domain controller and / or the first CAN controller malfunction, that the CAN transceiver needs to be shut down.

9. The apparatus according to claim 1, wherein the enabling control module is specifically used for: Upon receiving the second shutdown signal and the fourth shutdown signal, perform a bitwise AND operation on the second shutdown signal and the fourth shutdown signal to obtain the low-level signal; The low-level signal is sent to the enable pin of the CAN transceiver and / or the standby control pin of the CAN transceiver.

10. A control method for an on-board CAN transceiver, comprising: Obtain the status of the driving domain controller; If it is determined from the state of the driving domain controller that the CAN transceiver needs to be turned off, the power supply to the CAN transceiver is cut off based on the first CAN controller. The first CAN controller is the microcontroller unit (MCU) within the driver domain controller; Also includes: Based on the first CAN controller, when it is determined that the CAN transceiver needs to be turned off, a second shutdown signal is sent to the enable control module. When the second CAN controller determines that the CAN transceiver needs to be turned off, it sends a fourth shutdown signal to the enable control module. The enable control module, in response to the second shutdown signal and / or the fourth shutdown signal, sends a low-level signal to the target pin of the CAN transceiver, so that the CAN transceiver enters an unusable state without cutting off the power supply. In the event of a fault, the first CAN controller sends an alarm message and a low-level signal to the second CAN controller. When the second CAN controller receives the alarm message, it confirms the validity of the alarm message based on the low-level signal, thereby determining that the CAN transceiver needs to be shut down.

11. The method according to claim 10, wherein, The step of sending a low-level signal to the target pin of the CAN transceiver includes: The low-level signal is sent to the enable pin of the CAN transceiver and / or the standby control pin of the CAN transceiver.

12. The method according to claim 10 or 11, further comprising: Obtain the voltage signal of the CAN transceiver; The off status of the CAN transceiver is detected based on the voltage signal of the CAN transceiver.

13. The method according to claim 10 or 11, further comprising: Obtain the received signal received by the target pin of the CAN transceiver; The off status of the CAN transceiver is detected based on the received signal.

14. A control device for an on-board CAN transceiver, comprising: The status acquisition module is used to acquire the status of the driving domain controller; A shutdown module is used to cut off the power supply to the CAN transceiver based on a first CAN controller when it is determined from the state of the driving domain controller that the CAN transceiver needs to be shut down. The first CAN controller is the microcontroller unit (MCU) within the driver domain controller; Also includes: The transmitting module is configured to send a second shutdown signal to the enable control module based on the first CAN controller when it is determined that the CAN transceiver needs to be shut down. When the second CAN controller determines that the CAN transceiver needs to be turned off, it sends a fourth shutdown signal to the enable control module. The enable control module, in response to the second shutdown signal and / or the fourth shutdown signal, sends a low-level signal to the target pin of the CAN transceiver, so that the CAN transceiver enters an unusable state without cutting off the power supply. In the event of a fault, the first CAN controller sends an alarm message and a low-level signal to the second CAN controller. When the second CAN controller receives the alarm message, it confirms the validity of the alarm message based on the low-level signal, thereby determining that the CAN transceiver needs to be shut down.

15. The apparatus according to claim 14, wherein, The sending module is specifically used for: The low-level signal is sent to the enable pin of the CAN transceiver and / or the standby control pin of the CAN transceiver.

16. The apparatus according to claim 14 or 15, further comprising: The first acquisition module is used to acquire the voltage signal of the CAN transceiver; The first detection module is used to detect the off status of the CAN transceiver based on the voltage signal of the CAN transceiver.

17. The apparatus according to claim 14 or 15, further comprising: The second acquisition module is used to acquire the received signal received by the target pin of the CAN transceiver; The second detection module is used to detect the shutdown status of the CAN transceiver based on the received signal.

18. An electronic device comprising: At least one processor; as well as A memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor to enable the at least one processor to perform the method of any one of claims 10-13.

19. A non-transitory computer-readable storage medium storing computer instructions, wherein, The computer instructions are used to cause the computer to perform the method according to any one of claims 10-13.

20. A computer program product comprising a computer program that, when executed by a processor, implements the method according to any one of claims 10-13.

Citation Information

Patent Citations

  • Vehicle-mounted controller based on functional safety, control system and vehicle

    CN115113567A

  • Vehicle safety control system and method and vehicle

    CN115139940A

  • Domain controller and control method of domain controller

    CN115871692A