Vehicle-mounted Central Gateway Control Device and Vehicle Power Management System
A dual DC converter system with monitoring and reset circuits stabilizes the centralized gateway controller, preventing system-wide failures and ensuring rapid recovery from voltage anomalies, thereby enhancing reliability and safety.
Patent Information
- Application Number
- CN202311070314.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2023-08-23
- Publication Date
- 2025-07-15
- Estimated Expiration
- 2043-08-23
AI Technical Summary
The existing central gateway controller has a single power supply method, which causes the entire system to fail if a single secondary DC converter is abnormal, endangering the user's driving safety.
Two DC converters are used to supply power to the security domain control unit and the application domain control unit respectively, and the voltage is monitored in real time through the sampling circuit and the reset circuit to ensure power supply stability and security.
It improves the power reliability and recovery of the central gateway control device, avoids system failure caused by abnormalities in a single secondary DC converter, and improves power stability and safety.
Smart Images

Figure CN117048519B_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the technical field of vehicles, and in particular, to an in-vehicle central gateway control device and a vehicle power management system. Background Art
[0002] With the continuous progress of vehicle intelligence, in order to improve the safety, comfort of vehicles, and provide a good human-vehicle interaction interface, an integrated system integrating functions such as environmental perception, planning decision-making, and assisted driving has been popularized in vehicles. As the data interaction center of the vehicle network, the central gateway controller has become a core component of the intelligent vehicle's electronic and electrical architecture, realizing routing and communication of in-vehicle heterogeneous network data such as CAN (Controller Area Network), CAN FD (CAN with Flexible Datarate, an upgraded version of traditional CAN), LIN (Local Interconnect Network), and Ethernet between different networks, and connecting the power domain, chassis domain, body domain, cockpit domain, autonomous driving domain, etc. in intelligent vehicles.
[0003] To meet the progress of vehicle intelligence, it is necessary to install more advanced sensing systems, decision-making systems, execution systems, etc. This also leads to a larger amount of data exchanged between various vehicle controllers and higher requirements for transmission speed. As the data interaction center of intelligent vehicles, the central gateway controller plays an indispensable and important role.
[0004] The central gateway controller mainly includes a clock domain unit, a security domain control unit, and an application domain control unit. The security domain control unit and the application domain control unit can work and operate independently when the clock domain unit is working. The existing power supply method of the central gateway controller is mainly to supply power to the central gateway control chip through two-level DC converters. Specifically, a first-level DC converter and a second-level DC converter are used to supply power to the clock domain unit, and the first-level DC converter and a second-level DC converter are used to supply power to the security domain control unit and the application domain control unit.
[0005] When any power supply of the central gateway controller fails, it will cause the entire central gateway controller to stop working, resulting in the interruption and inability to recover the communication between the major domain controllers of the intelligent vehicle, endangering the driving safety of users. Summary of the Invention
[0006] In view of this, the embodiments of the present application provide an in-vehicle central gateway control device and a vehicle power management system to solve the problem that the entire system fails due to the abnormality of a single second-level DC converter in the prior art.
[0007] In the first aspect of the embodiments of the present application, a vehicle-mounted central gateway control device is provided, which includes a control module and a power supply module;
[0008] The control module includes a clock domain unit, a security domain control unit, and an application domain control unit;
[0009] The power supply module includes a first DC converter, a linear voltage regulator, a second DC converter, and a third DC converter;
[0010] The first DC converter is used to convert the first voltage into the second voltage;
[0011] The linear voltage regulator is connected to the first DC converter and the clock domain unit respectively, and is used to convert the second voltage into the third voltage and output the third voltage to the clock domain unit;
[0012] The clock domain unit is used to output a first wake-up signal and a second wake-up signal based on the third voltage;
[0013] The second DC converter is connected to the first DC converter, the security domain control unit, and the clock domain unit respectively, and is used to convert the second voltage into the fourth voltage based on the first wake-up signal and output it to the security domain control unit;
[0014] The third DC converter is connected to the first DC converter, the application domain control unit, and the clock domain unit respectively, and is used to convert the second voltage into the fifth voltage based on the second wake-up signal and output it to the application domain control unit.
[0015] In the second aspect of the embodiments of the present application, a vehicle power management system is provided, which includes a telematics unit, a background system, and the vehicle-mounted central gateway control device as described in the first aspect above;
[0016] The application domain control unit of the vehicle-mounted central gateway control device is used to record the number of resets of the second DC converter, obtain the first number, and send the first number to the background system through the telematics unit;
[0017] The security domain control unit of the vehicle-mounted central gateway control device is used to record the number of resets of the third DC converter, obtain the second number, and send the second number to the background system through the telematics unit.
[0018] The beneficial effects of the embodiments of the present application compared with the prior art are as follows: The vehicle-mounted central gateway control device provided by the embodiments of the present application includes a control module and a power supply module. The control module includes a clock domain unit, a security domain control unit, and an application domain control unit. The power supply module includes a first DC converter, a linear voltage regulator, a second DC converter, and a third DC converter. The clock domain unit is powered by the first DC converter and the linear voltage regulator. The clock domain unit outputs a first wake-up signal and a second wake-up signal to control the second DC converter and the third DC converter to start working respectively. When the second DC converter receives the first wake-up signal, the second DC converter starts to supply power to the security domain control unit; when the third DC converter receives the second wake-up signal, the third DC converter starts to supply power to the application domain control unit. That is, by setting two DC converters to supply power to the security domain control unit and the application domain control unit respectively, the embodiments of the present application can improve the stability and security of the vehicle-mounted central gateway control work, avoid the problem that the entire system fails due to the abnormality of a single secondary DC converter, and greatly improve the power reliability and recoverability of the central gateway control device. BRIEF DESCRIPTION OF THE DRAWINGS
[0019] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following will briefly introduce the drawings required for use in the embodiments or the prior art descriptions. Obviously, the drawings in the following descriptions are only some embodiments of the present application. For those of ordinary skill in the art, without creative efforts, other drawings can also be obtained based on these drawings.
[0020] Figure 1 is a schematic structural diagram of a vehicle-mounted central gateway control device according to an embodiment of the present application;
[0021] Figure 2 is a schematic circuit principle diagram of a second DC converter, a first sampling circuit, and a first reset circuit provided by an embodiment of the present application;
[0022] Figure 3 is a schematic circuit principle diagram of a third DC converter, a second sampling circuit, and a second reset circuit provided by an embodiment of the present application. DETAILED DESCRIPTION OF THE EMBODIMENTS
[0023] In the following description, specific details such as specific system structures and technologies are presented for the purpose of illustration rather than limitation, so as to thoroughly understand the embodiments of the present application. However, those skilled in the art should clearly understand that the present application can also be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to avoid unnecessary details from interfering with the description of the present application.
[0024] Embodiments of the present application will be described below with reference to the accompanying drawings in the present application. It should be understood that the embodiments described below in conjunction with the accompanying drawings are exemplary descriptions for explaining the technical solutions of the embodiments of the present application, and do not constitute a limitation on the technical solutions of the embodiments of the present application.
[0025] Those skilled in the art of the present technology can understand that, unless specifically stated otherwise, the singular forms "a", "an", "the", and "said" used herein may also include the plural forms. It should be further understood that the term "including" used in the specification of the present application means the presence of the described features, integers, steps, operations, elements, and / or components, but does not exclude the presence of other features, information, data, steps, operations, elements, components, and / or combinations thereof supported by the art of the present technology. It should be understood that when we say an element is "connected" or "coupled" to another element, the one element can be directly connected or coupled to the other element, or it can mean that the one element and the other element establish a connection relationship through an intermediate element. In addition, the "connection" or "coupling" used herein may include wireless connection or wireless coupling.
[0026] A vehicle-mounted central gateway control device according to an embodiment of the present application will be described in detail below with reference to the accompanying drawings. Figure 1 is a schematic structural diagram of a vehicle-mounted central gateway control device according to an embodiment of the present application, as Figure 1 shown. The vehicle-mounted central gateway control device includes a control module and a power supply module. The control module includes a clock domain unit, a security domain control unit, and an application domain control unit; the power supply module includes a first DC converter, a linear voltage regulator, a second DC converter, and a third DC converter.
[0027] Specifically, the first DC converter is used to convert a first voltage into a second voltage;
[0028] The linear voltage regulator is connected to the first DC converter and the clock domain unit respectively, and is used to convert the second voltage into a third voltage and output the third voltage to the clock domain unit;
[0029] The clock domain unit is used to output a first wake-up signal WAKE1 and a second wake-up signal WAKE2 based on the third voltage;
[0030] The second DC converter is connected to the first DC converter, the security domain control unit, and the clock domain unit respectively, and is used to convert the second voltage into a fourth voltage based on the first wake-up signal WAKE1 and output it to the security domain control unit;
[0031] The third DC converter is connected to the first DC converter, the application domain control unit, and the clock domain unit respectively, and is used to convert the second voltage into a fifth voltage based on the second wake-up signal WAKE2 and output it to the application domain control unit.
[0032] Optionally, the first DC converter, the second DC converter, and the third DC converter can all be DC-DC (direct current to direct current) converters, and the linear voltage regulator can be an LDO (low dropout linear regulator) converter. The first DC converter is a first-level DC converter, and the linear voltage regulator, the second DC converter, and the third DC converter are all second-level DC converters.
[0033] Exemplarily, the first-level DC converter converts the first voltage of 12V into the second voltage of 5V. The second voltage of 5V passes through the linear voltage regulator to obtain the third voltage for supplying the clock domain unit. The second voltage of 5V passes through the second DC converter to obtain the fourth voltage for supplying the security domain control unit. The second voltage of 5V passes through the third DC converter to obtain the fifth voltage for supplying the application domain control unit.
[0034] Exemplarily, the control module can be a multi-core heterogeneous chip. Of course, it can also be other circuit modules with the same function, which is not limited in this application.
[0035] In the embodiment of this application, by setting two DC converters to supply power to the security domain control unit and the application domain control unit respectively, the stability and security of the in-vehicle central gateway control work can be improved, avoiding the problem that the entire system fails due to an abnormality in a single second-level DC converter, and greatly enhancing the power reliability and recoverability of the central gateway control device.
[0036] In some embodiments, continuing as Figure 1 shown, the in-vehicle central gateway control device further includes a first sampling circuit and a second sampling circuit.
[0037] The first sampling circuit is respectively connected to the second DC converter and the application domain control unit, and is used to sample the fourth voltage output by the second DC converter to obtain a first sampling voltage, and output the first sampling voltage to the application domain control unit.
[0038] The second sampling circuit is respectively connected to the third DC converter and the security domain control unit, and is used to sample the fifth voltage output by the third DC converter to obtain a second sampling voltage, and output the second sampling voltage to the security domain control unit.
[0039] In some embodiments, continuing as Figure 1 shown, the in-vehicle central gateway control device further includes a first reset circuit; the first reset circuit is respectively connected to the second DC converter and the application domain control unit;
[0040] The application domain control unit is used for:
[0041] Based on the first sampling voltage, output a first control signal to the first reset circuit to make the first reset circuit conduct, so as to control the reset of the second DC converter;
[0042] After the second DC converter is reset, output a second control signal to the first reset circuit to turn off the first reset circuit;
[0043] Based on the first sampled voltage, determine whether the second DC converter is operating normally;
[0044] If the second DC converter is not operating normally, re-control the second DC converter to reset.
[0045] The first control signal and the second control signal are two signals with opposite logic level states. For example, the first control signal can be a high-level signal and the second control signal can be a low-level signal. Of course, according to different circuit settings, the first control signal can also be a low-level signal and the second control signal can be a high-level signal, which is not limited in this application.
[0046] In this embodiment, the first sampling circuit is used to monitor the voltage output by the second DC converter. When the first sampled voltage output by the first sampling circuit is abnormal, the application domain control unit determines that the voltage output by the second DC converter to the security domain control unit is abnormal, and faults such as overheating, overvoltage, and overcurrent may occur in the security domain power supply loop. The application domain control unit outputs a first control signal to the first reset circuit to turn on the first reset circuit to control the second DC converter to reset, that is, to control the second DC converter to turn off to stop working, improving the security of the central gateway control device. After resetting the second DC converter, attempt to restart the second DC converter to make the second DC converter resume working and check whether the fault is eliminated. Specifically, the application domain control unit outputs a second control signal to the first reset circuit to turn off the first reset circuit and make the second DC converter resume normal operation. If the second DC converter does not resume normal operation, it means that the fault of the second DC converter has not been eliminated, and the above steps are repeated to re-control the second DC converter to reset until the fault is eliminated.
[0047] The solution of the embodiment of this application uses the first sampling circuit to monitor the voltage output by the second DC converter in real time, realizes real-time monitoring of the power supply of the in-vehicle central gateway control device, and when faults such as overheating, overvoltage, and overcurrent occur, uses the first reset circuit to control the corresponding DC converter to turn off, greatly improving the power supply stability and security of the central gateway control device. In addition, the corresponding DC converter can be controlled by the first reset circuit to repeat and resume normal operation, and it can be checked whether the fault is eliminated, greatly improving the power supply reliability and recoverability of the central gateway control device.
[0048] In some embodiments, the application domain control unit is further configured to record the number of times the second DC converter is reset, obtain a first number, and send the first number to the background system through the telematics processor.
[0049] Exemplarily, the application domain control unit can send the first number (the number of times of failure) to the T-BOX (Telematics Box) through CAN communication, and then send it to the background system through the T-BOX.
[0050] In some embodiments, continuing as Figure 1 shown, the vehicle-mounted central gateway control device further includes a second reset circuit; the second reset circuit is respectively connected to the third DC converter and the security domain control unit;
[0051] The security domain control unit is configured to:
[0052] Based on the second sampled voltage, output a third control signal to the second reset circuit to make the second reset circuit conduct, so as to control the reset of the second DC converter;
[0053] After the third DC converter is reset, output a fourth control signal to the second reset circuit to turn off the second reset circuit;
[0054] Based on the second sampled voltage, determine whether the third DC converter is working properly;
[0055] If the third DC converter is not working properly, re-control the reset of the third DC converter.
[0056] The third control signal and the fourth control signal are two signals with opposite logic level states. For example, the third control signal can be a high-level signal, and the fourth control signal can be a low-level signal. Of course, according to different circuit settings, the third control signal can also be a low-level signal, and the fourth control signal can be a high-level signal. This application does not make a limitation.
[0057] In this embodiment, the second sampling circuit is used to monitor the voltage output by the third DC converter. When the second sampling voltage output by the second sampling circuit is abnormal, the safety domain control unit determines that the voltage output by the third DC converter to the application domain control unit is abnormal, and faults such as overheating, overvoltage, and overcurrent may occur in the safety domain power supply circuit. The safety domain control unit outputs a third control signal to the second reset circuit, causing the second reset circuit to conduct, so as to control the reset of the third DC converter, that is, to control the third DC converter to turn off and stop working, improving the safety of the central gateway control device. After resetting the third DC converter, attempt to restart the third DC converter to make it resume working and check whether the fault is eliminated. Specifically, the safety domain control unit outputs a fourth control signal to the second reset circuit to cause the second reset circuit to turn off, enabling the third DC converter to resume normal operation. If the third DC converter does not resume normal operation, it means that the fault of the third DC converter has not been eliminated, and the above steps are repeated to control the reset of the third DC converter again until the fault is eliminated.
[0058] The solution of the embodiment of the present application uses the second sampling circuit to monitor the voltage output by the third DC converter in real time, realizes the real-time monitoring of the power supply of the vehicle-mounted central gateway control device, and when faults such as overheating, overvoltage, and overcurrent occur, uses the second reset circuit to control the corresponding DC converter to turn off, greatly improving the power supply stability and safety of the central gateway control device. In addition, the corresponding DC converter can be controlled by the second reset circuit to repeat and resume normal operation, and it can be checked whether the fault is eliminated, greatly improving the power supply reliability and recoverability of the central gateway control device.
[0059] In some embodiments, the safety domain control unit is further configured to record the number of times the third DC converter is reset, obtain a second number, and send the second number to the background system through the telematics processor.
[0060] Exemplarily, the application domain control unit can send the second number (the number of times a fault occurs) to the T-BOX (telematics processor) through CAN communication, and send it to the background system through the T-BOX.
[0061] In some embodiments, such as Figure 2 and Figure 3 shown, the first sampling circuit includes a first voltage-dividing resistor R13, a second voltage-dividing resistor R14, and a first filter capacitor C6, and the second sampling circuit includes a third voltage-dividing resistor R13', a fourth voltage-dividing resistor R14', and a second filter capacitor C6';
[0062] One end of the first resistor R13 is connected to the output terminal of the second DC converter. The other end of the first voltage-dividing resistor R13 is respectively connected to one end of the second voltage-dividing resistor R14 and the application domain control unit. The other end of the second voltage-dividing resistor R14 is connected to the ground terminal; the first filter capacitor C6 is connected in parallel with the second voltage-dividing resistor R14.
[0063] One end of the third resistor R13' is connected to the output terminal of the third DC converter. The other end of the third voltage-dividing resistor R13' is respectively connected to one end of the fourth voltage-dividing resistor R14' and the security domain control unit. The other end of the fourth voltage-dividing resistor R14' is connected to the ground terminal; the second filter capacitor C6' is connected in parallel with the fourth voltage-dividing resistor R14'.
[0064] In some embodiments, the first reset circuit includes a first switching transistor, and the second reset circuit includes a second switching transistor;
[0065] The control electrode of the first switching transistor is connected to the application domain control unit. The first electrode of the first switching transistor is connected to the enable terminal of the second DC converter. The second electrode of the first switching transistor is connected to the ground terminal;
[0066] The control electrode of the second switching transistor is connected to the security domain control unit. The first electrode of the second switching transistor is connected to the enable terminal of the third DC converter. The second electrode of the second switching transistor is connected to the ground terminal.
[0067] Exemplarily, as Figure 2 shown, the first switching transistor includes a first triode Q1. The base of the first triode Q1 serves as the control electrode of the first switching transistor. The collector of the first triode Q1 serves as the first electrode of the first switching transistor. The emitter of the first triode Q1 serves as the second electrode of the first switching transistor;
[0068] Exemplarily, as Figure 3 shown, the second switching transistor includes a second triode Q1'. The base of the second triode Q1' serves as the control electrode of the second switching transistor. The collector of the second switching transistor Q1' serves as the first electrode of the second switching transistor. The emitter of the second switching transistor Q1' serves as the second electrode of the second switching transistor.
[0069] Exemplarily, the first reset circuit further includes a first current-limiting resistor R12. The collector of the first triode Q1 is connected to the enable terminal of the second DC converter through the first current-limiting resistor R12.
[0070] Exemplarily, the second reset circuit further includes a second current-limiting resistor R12'. The collector of the second triode Q1' is connected to the enable terminal of the third DC converter through the second current-limiting resistor R12'.
[0071] Exemplarily, it further includes a third current-limiting resistor R11. The clock domain unit outputs a first wake-up signal WAKE1 to the enable terminal of the second DC converter through the third current-limiting resistor R11.
[0072] Exemplarily, it further includes a fourth current-limiting resistor R11'. The clock domain unit outputs a second wake-up signal WAKE2 to the enable terminal of the third DC converter through the fourth current-limiting resistor R11'.
[0073] Figure 2 and Figure 3 In [text not provided in Chinese and thus not translated], RS1 represents the control signal output by the application domain control unit to the first reset circuit, RS2 represents the control signal output by the security domain control unit to the second reset circuit, AD1 represents the first sampling voltage, AD2 represents the second sampling voltage, VCC_5V represents the second voltage of 5V output by the first DC converter, Security Domain_3V3 represents the fourth voltage of 3.3V output by the second DC converter, and Application Domain_3V3 represents the fifth voltage of 3.3V output by the third DC converter. WAKE1 represents the first wake-up signal output by the clock domain unit, and WAKE2 represents the second wake-up signal output by the clock domain unit.
[0074] Continuing as in Figure 2 and Figure 3 shown, exemplarily, both the second DC converter and the third DC converter are buck converters. The model of the first chip U1 of the second DC converter can be MPQ2167, and the model of the second chip U2 of the third DC converter can also be MPQ2167. Of course, the models of the first chip and the second chip can also be other models, which are not limited in this application.
[0075] Exemplarily, as in Figure 2 shown, the second DC converter includes a first chip U1, a first inductor L1, a first capacitor C1, a second capacitor C2, a third capacitor C3, a fourth capacitor C4, a fifth capacitor C5, a first resistor R1, a first resistor R1, a second resistor R2, a third resistor R3, a fourth resistor R4, a fifth resistor R5, a sixth resistor R6, a seventh resistor R7, an eighth resistor R8, a ninth resistor R9, and a tenth resistor R10.
[0076] Specifically, the first pin of the first chip U1 receives the second voltage VCC_5V and is connected to the ground terminal through the first capacitor C1, and the second capacitor C2 is connected in parallel with the first capacitor C1; the first pin (enable pin EN) of the first chip U1 is connected to the ground terminal through the first resistor R1, the first pin (enable pin EN) of the first chip U1 receives the first wake-up signal WAKE1 through the third current-limiting resistor R11, the first pin (enable pin EN) of the first chip U1 is connected to the collector of the first triode Q1 through the first current-limiting resistor R12, the emitter of the first triode Q1 is connected to the ground terminal, and the base of the first triode Q1 is connected to the application domain control unit. The tenth pin of the first chip U1 is connected to the ground terminal through the second resistor R2 and receives the second voltage VCC_5V through the third resistor R3. The second pin and the fourth pin of the first chip U1 are connected and connected to the ground terminal, and the sixth pin of the first chip U1 is connected to the ground terminal through the third capacitor C3.
[0077] The third pin of the first chip U1 is connected to the ground terminal through the fourth resistor R4 and the fifth resistor R5, the seventh pin of the first chip U1 is connected to one end of the first inductor L1, and the other end of the first inductor L1 is connected to the ground terminal through the sixth resistor R6, the seventh resistor R7, the eighth resistor R8 and the ninth resistor R9; the other end of the first inductor L1 is connected to the ground terminal through the fourth capacitor C4, and the fifth capacitor C5 is connected in parallel with the fourth capacitor C4. The other end of the first inductor L1 outputs the fourth voltage Safety Domain_3V3 through the tenth resistor R10. The fifth pin of the first chip U1 is connected to the common point where the sixth resistor R6 and the seventh resistor R7 are connected.
[0078] Combined with Figure 1 and Figure 2, the working principle of monitoring and controlling the second DC converter is as follows: the first DC converter converts the first voltage of 12V into the second voltage of 5V and supplies it to the linear voltage regulator. The linear voltage regulator converts the second voltage of 5V into the third voltage and supplies it to the clock domain unit. Based on the third voltage, the clock domain unit outputs the first wake-up signal WAKE1 to the second DC converter to wake up the second DC converter to work. At the same time, the first sampling circuit is used to monitor the voltage output by the second DC converter. When the first sampling voltage output by the first sampling circuit is abnormal, the application domain control unit determines that the voltage output by the second DC converter to the safety domain control unit is abnormal, and faults such as overheating, overvoltage, and overcurrent may occur in the safety domain power supply loop. The application domain control unit outputs a high-level signal to the base of the first triode Q1, causing the first triode Q1 to conduct, pulling down the enable pin EN of the first chip U1, so as to control the reset of the second DC converter, that is, to control the second DC converter to turn off and stop working, improving the safety of the central gateway control device. After resetting the second DC converter, attempt to restart the second DC converter to make the second DC converter resume working and check whether the fault is eliminated. Specifically, the application domain control unit outputs a low-level signal to the base of the first triode Q1 to make the first triode Q1 cut off, pull up the enable pin EN of the first chip U1, and make the second DC converter resume normal operation. If the second DC converter does not resume normal operation, it means that the fault of the second DC converter has not been eliminated, and the above steps are repeated to re-control the second DC converter to reset until the fault is eliminated.
[0079] Exemplarily, as Figure 3 shown, the third DC converter adopts the same technical solution as the second DC converter. The third DC converter includes a second chip U2, a first inductor L1', a first capacitor C1', a second capacitor C2', a third capacitor C3', a fourth capacitor C4', a fifth capacitor C5', a first resistor R1', a first resistor R1', a second resistor R2', a third resistor R3', a fourth resistor R4', a fifth resistor R5', a sixth resistor R6', a seventh resistor R7', an eighth resistor R8', a ninth resistor R9', and a tenth resistor R10'.
[0080] Specifically, the first pin of the second chip U2 receives the second voltage VCC_5V and is connected to the ground terminal through the first capacitor C1', and the second capacitor C2' is connected in parallel with the first capacitor C1'; the first pin (enable pin EN) of the second chip U2 is connected to the ground terminal through the first resistor R1', the first pin (enable pin EN) of the second chip U2 receives the second wake-up signal WAKE2 through the fourth current-limiting resistor R11', the first pin (enable pin EN) of the second chip U2 is connected to the collector of the second triode Q1' through the second current-limiting resistor R12', the emitter of the second triode Q1' is connected to the ground terminal, and the base of the second triode Q1' is connected to the security domain control unit. The tenth pin of the second chip U2 is connected to the ground terminal through the second resistor R2' and receives the second voltage VCC_5V through the third resistor R3'. The second pin and the fourth pin of the second chip U2 are connected and connected to the ground terminal, and the sixth pin of the second chip U2 is connected to the ground terminal through the third capacitor C3'.
[0081] The third pin of the second chip U2 is connected to the ground terminal through the fourth resistor R4 and the fifth resistor R5, the seventh pin of the second chip U2 is connected to one end of the first inductor L1', and the other end of the first inductor L1' is connected to the ground terminal through the sixth resistor R6', the seventh resistor R7', the eighth resistor R8' and the ninth resistor R9'; the other end of the first inductor L1' is connected to the ground terminal through the fourth capacitor C4', and the fifth capacitor C5' is connected in parallel with the fourth capacitor C4'. The other end of the first inductor L1' outputs the fifth voltage application domain_3V3 through the tenth resistor R10'. The fifth pin of the second chip U2 is connected to the common point where the sixth resistor R6' and the seventh resistor R7' are connected.
[0082] Combined Figure 1 and Figure 3, the working principle of monitoring and controlling the third DC converter is as follows: The first DC converter converts the first voltage of 12V into the second voltage of 5V and supplies it to the linear voltage regulator. The linear voltage regulator converts the second voltage of 5V into the third voltage and supplies it to the clock domain unit. Based on the third voltage, the clock domain unit outputs the second wake-up signal WAKE2 to the third DC converter to wake up the third DC converter to work. At the same time, the second sampling circuit is used to monitor the voltage output by the third DC converter. When the second sampling voltage output by the second sampling circuit is abnormal, the safety domain control unit determines that the voltage output by the third DC converter to the application domain control unit is abnormal, and faults such as overheating, overvoltage, and overcurrent may occur in the safety domain power supply loop. The safety domain control unit outputs a high-level signal to the base of the second triode Q1', causing the second triode Q1' to conduct, pulling down the enable pin EN of the second chip U1 to control the reset of the third DC converter, that is, controlling the third DC converter to turn off and stop working, improving the safety of the central gateway control device. After resetting the third DC converter, attempt to restart the third DC converter to make the third DC converter resume working and check whether the fault is eliminated. Specifically, the safety domain control unit outputs a low-level signal to the base of the second triode Q1' to make the second triode Q1' cut off, pulling up the enable pin EN of the second chip U2 to make the third DC converter resume normal operation. If the third DC converter does not resume normal operation, it means that the fault of the third DC converter has not been eliminated, and the above steps are repeated to control the third DC converter to reset again until the fault is eliminated.
[0083] Based on the same inventive concept, an embodiment of the present application provides a vehicle power management system, including a telematics processor, a background system, and the in-vehicle central gateway control device provided in any of the above embodiments;
[0084] The application domain control unit of the in-vehicle central gateway control device is used to record the number of times the second DC converter is reset, obtain the first number, and send the first number to the background system through the telematics processor;
[0085] The safety domain control unit of the in-vehicle central gateway control device is used to record the number of times the third DC converter is reset, obtain the second number, and send the second number to the background system through the telematics processor.
[0086] Adopting the above embodiments, the following beneficial effects can be achieved:
[0087] (1) By setting two DC converters to supply power to the safety domain control unit and the application domain control unit respectively, the embodiment of the present application can improve the stability and safety of the in-vehicle central gateway control work, avoid the problem that the entire system fails due to the abnormality of a single secondary DC converter, and greatly improve the power reliability and recoverability of the central gateway control device.
[0088] (2) The first sampling circuit is used to monitor the voltage output by the second DC converter in real time, so as to achieve real-time monitoring of the power supply of the in-vehicle central gateway control device. When faults such as overheating, overvoltage, and overcurrent occur, the first reset circuit is used to control the corresponding DC converter to turn off, greatly improving the power supply stability and safety of the central gateway control device. In addition, the corresponding DC converter can be controlled by the first reset circuit to repeat and work normally again, so as to check whether the fault is eliminated, greatly improving the power supply reliability and recoverability of the central gateway control device.
[0089] (3) The second sampling circuit is used to monitor the voltage output by the third DC converter in real time, so as to achieve real-time monitoring of the power supply of the in-vehicle central gateway control device. When faults such as overheating, overvoltage, and overcurrent occur, the second reset circuit is used to control the corresponding DC converter to turn off, greatly improving the power supply stability and safety of the central gateway control device. In addition, the corresponding DC converter can be controlled by the second reset circuit to repeat and work normally again, so as to check whether the fault is eliminated, greatly improving the power supply reliability and recoverability of the central gateway control device.
[0090] All of the above optional technical solutions can be combined arbitrarily to form optional embodiments of the present application, which will not be elaborated herein one by one.
[0091] The terms "first" and "second" are only used for descriptive purposes, and cannot be understood as indicating or implying relative importance or implicitly specifying the quantity of the indicated technical features. Thus, the features defined with "first" and "second" may explicitly or implicitly include one or more of such features. In the description of the present application, unless otherwise specified, the meaning of "a plurality" is two or more.
[0092] The above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit it; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: they can still modify the technical solutions recorded in the foregoing embodiments, or perform equivalent replacements on some of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application, and shall all be included in the protection scope of the present application.
Claims
1. A vehicle-mounted central gateway control device, characterized in that, It includes a control module and a power module; The control module includes a clock domain unit, a security domain control unit, and an application domain control unit; The power module includes a first DC converter, a linear voltage regulator, a second DC converter, and a third DC converter; The first DC converter is used to convert a first voltage into a second voltage; The linear voltage regulator is connected to the first DC converter and the clock domain unit respectively, and is used to convert the second voltage into a third voltage and output the third voltage to the clock domain unit; The clock domain unit is used to output a first wake-up signal and a second wake-up signal based on the third voltage; The second DC converter is connected to the first DC converter, the security domain control unit, and the clock domain unit respectively, and is used to convert the second voltage into a fourth voltage based on the first wake-up signal and output it to the security domain control unit; The third DC converter is connected to the first DC converter, the application domain control unit, and the clock domain unit respectively, and is used to convert the second voltage into a fifth voltage based on the second wake-up signal and output it to the application domain control unit.
2. The in-vehicle central gateway control device according to claim 1, characterized in that, It further includes a first sampling circuit and a second sampling circuit; The first sampling circuit is connected to the second DC converter and the application domain control unit respectively, and is used to sample the fourth voltage output by the second DC converter to obtain a first sampling voltage and output the first sampling voltage to the application domain control unit; The second sampling circuit is connected to the third DC converter and the security domain control unit respectively, and is used to sample the fifth voltage output by the third DC converter to obtain a second sampling voltage and output the second sampling voltage to the security domain control unit.
3. The in-vehicle central gateway control device according to claim 2, characterized in that, It further includes a first reset circuit; The first reset circuit is connected to the second DC converter and the application domain control unit respectively; The application domain control unit is used for: Based on the first sampling voltage, output a first control signal to the first reset circuit to make the first reset circuit conduct, so as to control the reset of the second DC converter; After the second DC converter is reset, output a second control signal to the first reset circuit to turn off the first reset circuit; Based on the first sampling voltage, judge whether the second DC converter is working properly; If the second DC converter is not working properly, re-control the second DC converter to reset.
4. The in-vehicle central gateway control device according to claim 3, characterized in that The application domain control unit is further used to record the number of times the second DC converter is reset, obtain a first number, and send the first number to the background system through the telematics processor.
5. The in-vehicle central gateway control device according to claim 3, characterized in that, The first reset circuit includes a first switching tube; The control electrode of the first switching tube is connected to the application domain control unit, the first electrode of the first switching tube is connected to the enable terminal of the second DC converter, and the second electrode of the first switching tube is connected to the ground terminal.
6. The in-vehicle central gateway control device according to claim 2, wherein It further includes a second reset circuit; The second reset circuit is respectively connected to the third DC converter and the security domain control unit; The security domain control unit is configured to: Based on the second sampling voltage, output a third control signal to the second reset circuit to turn on the second reset circuit, so as to control the reset of the second DC converter; After the third DC converter is reset, output a fourth control signal to the second reset circuit to turn off the second reset circuit; Based on the second sampling voltage, determine whether the third DC converter is operating normally; If the third DC converter is not operating normally, re-control the reset of the third DC converter.
7. The vehicle-mounted central gateway control device according to claim 6, wherein The security domain control unit is further configured to record the number of times the third DC converter is reset, obtain a second number, and send the second number to the background system through the telematics processor.
8. The vehicle-mounted central gateway control device according to claim 6, wherein, The second reset circuit includes a second switching transistor; The control electrode of the second switching transistor is connected to the security domain control unit, the first electrode of the second switching transistor is connected to the enable terminal of the third DC converter, and the second electrode of the second switching transistor is connected to the ground terminal.
9. The in-vehicle central gateway control device according to any one of claims 2 to 8, characterized in that The first sampling circuit includes a first voltage-dividing resistor and a second voltage-dividing resistor, and the second sampling circuit includes a third voltage-dividing resistor and a fourth voltage-dividing resistor; One end of the first voltage-dividing resistor is connected to the output terminal of the second DC converter, the other end of the first voltage-dividing resistor is respectively connected to one end of the second voltage-dividing resistor and the application domain control unit, and the other end of the second voltage-dividing resistor is connected to the ground terminal; One end of the third voltage-dividing resistor is connected to the output terminal of the third DC converter, the other end of the third voltage-dividing resistor is respectively connected to one end of the fourth voltage-dividing resistor and the security domain control unit, and the other end of the fourth voltage-dividing resistor is connected to the ground terminal.
10. A vehicle power management system, characterized in that, It includes a telematics processor, a background system, and the vehicle-mounted central gateway control device according to any one of claims 1 to 9; The application domain control unit of the vehicle-mounted central gateway control device is configured to record the number of times the second DC converter of the vehicle-mounted central gateway control device is reset, obtain a first number, and send the first number to the background system through the telematics processor; The security domain control unit of the vehicle-mounted central gateway control device is configured to record the number of times the third DC converter of the vehicle-mounted central gateway control device is reset, obtain a second number, and send the second number to the background system through the telematics processor.
Citation Information
Patent Citations
Power circuit of electric automobile central control system and achievement method thereof
CN105717841A
Vehicle domain controller
CN109995628A