Vehicle body controller and control method, device
By introducing level signal judgment from a microprocessor, power management module, and monitoring and control module into the body controller, the problem of incorrect mode differentiation after system power-on is solved, achieving accurate mode control and meeting functional safety requirements.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- BEIJING JINGWEI HIRAIN TECH CO INC
- Filing Date
- 2023-09-07
- Publication Date
- 2026-06-02
AI Technical Summary
Existing automotive body controllers cannot distinguish between normal operating mode and sleep mode after the system is powered on, causing the system to erroneously enter limp mode, which fails to meet functional safety requirements.
Design a vehicle body controller comprising a microprocessor, a power management module, and a monitoring and control module. The monitoring and control module determines the vehicle body controller to enter limp mode based on the level signals from the power management module and the monitoring and control module, thereby preventing erroneous entry into limp mode.
This enables the vehicle body controller to accurately distinguish modes after the system is powered on, avoiding incorrect entry into limp mode and meeting functional safety requirements.
Smart Images

Figure CN117162943B_ABST
Abstract
Description
Technical Field
[0001] This application belongs to the field of automotive body control technology, and in particular relates to a body controller and control method and device. Background Technology
[0002] In automotive body controller hardware design, the system typically enters normal mode after power-on initialization, and then the microcontroller unit (MCU) enters sleep mode via software instructions. However, during the period after system power-on but before the integrated power management IC (PMIC) is initialized by the MCU, the PMIC may fail to monitor the safety commands for communication with the MCU and forcibly output a fail-safe signal, causing the system to enter limp mode. Only after the PMIC is initialized and releases the fail-safe signal does the system return to normal mode. Furthermore, during the process of the MCU entering sleep mode via software instructions in normal mode, the PMIC, due to detecting the loss of safety commands for communication with the MCU, may forcibly output a fail-safe signal, causing the system to incorrectly enter LimpHome mode, preventing the system from entering sleep mode normally.
[0003] Therefore, in systems that must support Limp Home mode, in order to avoid the system accidentally entering Limp Home mode or being unable to distinguish Limp Home mode, the operating mode of the vehicle body controller needs to be controlled entirely through software logic, which cannot meet the functional safety requirements. Summary of the Invention
[0004] This application provides a vehicle body controller and control method and device that can prevent the vehicle body controller system from erroneously entering limp mode.
[0005] In a first aspect, embodiments of this application provide a vehicle body controller, characterized in that it includes:
[0006] microprocessor,
[0007] A power management module, which is electrically connected to the microprocessor,
[0008] The monitoring and control module is electrically connected to the microprocessor and the power management module.
[0009] The monitoring and control module is configured to: determine the vehicle body controller to enter limp mode based on the first level signal of the power management module and the second level signal of the monitoring and control module. The first level signal is used to indicate the level signal issued by the power management module when it cannot communicate with the microprocessor, and the second level signal is used to indicate the level signal in the monitoring and control module associated with the limp mode.
[0010] In one embodiment, the monitoring and control module mentioned above includes:
[0011] A limp-mode controllable source, which is electrically connected to the microprocessor,
[0012] The limp mode controllable source is configured to determine the second level signal in response to a control signal sent by the microprocessor.
[0013] In one embodiment, the monitoring and control module mentioned above further includes:
[0014] A signal generation circuit, which is electrically connected to the limp-mode controllable source,
[0015] The signal generation circuit is configured to determine a third level signal based on the first level signal of the power management module and the second level signal of the limp mode controllable source. The third level signal is used to control the body controller to enter the limp mode.
[0016] In one embodiment, the monitoring and control module mentioned above further includes:
[0017] The judgment circuit is electrically connected to the microprocessor, the power management module, and the limp-mode controllable source.
[0018] The judgment circuit is configured to make a judgment based on the first level signal of the power management module and the second level signal of the monitoring and control module, and obtain a judgment result, which is used to determine the third level signal.
[0019] In one embodiment, the aforementioned judgment circuit is a logic gate circuit.
[0020] In one embodiment, the monitoring and control module mentioned above further includes:
[0021] A switching circuit is provided, which is disposed between the judgment circuit and the limp mode controllable source, and is electrically connected to the signal generation circuit.
[0022] In one embodiment, the switching circuit mentioned above is a P-type MOS transistor switching circuit.
[0023] In one embodiment, the monitoring and control module mentioned above further includes:
[0024] A charging and discharging circuit, which is electrically connected to the limp-mode controllable source.
[0025] Secondly, embodiments of this application provide a control method for a vehicle body controller, characterized in that the method includes:
[0026] The system acquires a first-level signal from the power management module and a second-level signal from the monitoring and control module. The first-level signal indicates the level signal emitted by the power management module when it is unable to communicate with the microprocessor, and the second-level signal indicates the level signal associated with limp mode in the monitoring and control module.
[0027] The judgment result is obtained based on the first level signal from the power management module and the second level signal from the monitoring and control module.
[0028] Based on the judgment result, the vehicle body controller is controlled to enter limp mode.
[0029] Thirdly, embodiments of this application provide a control device for a vehicle body controller, characterized in that the device comprises:
[0030] The acquisition module is used to acquire a first level signal from the power management module and a second level signal from the monitoring and control module. The first level signal indicates the level signal emitted by the power management module when it is unable to communicate with the microprocessor, and the second level signal indicates the level signal associated with limp mode in the monitoring and control module.
[0031] The judgment module is used to make a judgment based on the first level signal of the power management module and the second level signal of the monitoring and control module, and obtain a judgment result.
[0032] The control module is used to control the vehicle body controller to enter limp mode based on the judgment result.
[0033] This application provides a vehicle body controller and control method / device, which, compared to the prior art, have the following advantages:
[0034] This application provides a vehicle body controller and control method / appliance. The vehicle body controller includes a microprocessor, a power management module, and a monitoring and control module. The power management module is electrically connected to the microprocessor, and the monitoring and control module is electrically connected to both the microprocessor and the power management module. The monitoring and control module is configured to: determine, based on a first level signal from the power management module and a second level signal from the monitoring and control module, control the vehicle body controller to enter a limp mode. The first level signal indicates the level signal emitted by the power management module when it cannot communicate with the microprocessor, and the second level signal indicates the level signal in the monitoring and control module associated with the limp mode.
[0035] In this way, the body controller can make a judgment based on the first level signal of the power management module and the second level signal of the monitoring and control module, and control the body controller to enter the limp mode, so as to avoid the body controller being unable to distinguish between the limp mode and other modes when receiving the first level signal, and thus avoid entering the limp mode incorrectly. Attached Figure Description
[0036] To more clearly illustrate the technical solutions of the embodiments of this application, the accompanying drawings used in the embodiments of this application will be briefly introduced below. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.
[0037] Figure 1 This is a schematic diagram of the structure of a vehicle body controller provided in an embodiment of this application;
[0038] Figure 2 This is a schematic diagram of another vehicle body controller provided in an embodiment of this application;
[0039] Figure 3 This is a schematic diagram of another vehicle body controller provided in the embodiments of this application;
[0040] Figure 4 This is a schematic diagram of another vehicle body controller provided in the embodiments of this application;
[0041] Figure 5 This is a schematic diagram of another vehicle body controller provided in the embodiments of this application;
[0042] Figure 6 This is a schematic diagram of another vehicle body controller provided in the embodiments of this application;
[0043] Figure 7 This is a schematic flowchart of a control method for a vehicle body controller provided in an embodiment of this application;
[0044] Figure 8 This is a schematic flowchart of another control method for a vehicle body controller provided in an embodiment of this application;
[0045] Figure 9 This is a schematic diagram of the structure of a control device for a vehicle body controller provided in an embodiment of this application. Detailed Implementation
[0046] The features and exemplary embodiments of various aspects of this application will be described in detail below. To make the objectives, technical solutions, and advantages of this application clearer, the application will be further described in detail below with reference to the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only intended to explain this application and not to limit it. For those skilled in the art, this application can be implemented without some of these specific details. The following description of the embodiments is merely to provide a better understanding of this application by illustrating examples.
[0047] It should be noted that, in this document, relational terms such as "first" and "second" are used merely to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising..." does not exclude the presence of additional identical elements in the process, method, article, or apparatus that includes said element.
[0048] As discussed in the background section, existing automotive body controllers typically operate in two modes: Normal mode and Sleep mode. To address the failure of the microcontroller unit (MCU) within the controller, a limp-home mode is used. In this mode, the body control module can still perform basic functions, such as turning on the headlights, allowing the vehicle to operate at a minimum required performance level, enabling the driver to maneuver the vehicle to a safe area or repair shop.
[0049] Firstly, in the hardware design of automotive body controllers, the system typically enters Normal mode after power-on initialization, and then the MCU enters Sleep mode via software instructions. However, during the process before the integrated power management IC (PMIC) is initialized by the MCU after system power-on, the PMIC cannot monitor the safety commands for communication with the MCU. Therefore, it forcibly outputs a Fail Safe signal, causing the system to enter Limp Home mode. Only after the PMIC is initialized and releases the Fail Safe signal does it return to Normal mode, which does not meet system functional requirements. Conversely, in Normal mode, during the process of the MCU entering Sleep mode via software instructions, the PMIC, detecting the loss of safety commands for communication with the MCU, forcibly outputs a Fail Safe signal, causing the system to incorrectly enter Limp Home mode, preventing the system from properly hibernating. Therefore, in systems that must support Limp Home mode, controlling the operating mode of the body controller entirely through software logic cannot meet functional safety requirements, and compared to hardware circuitry, it imposes certain limitations on the selection of PMIC chips.
[0050] To address the problems existing in the prior art, this application provides a vehicle body controller and control method / appliance. The vehicle body controller includes a microprocessor, a power management module, and a monitoring and control module. The power management module is electrically connected to the microprocessor, and the monitoring and control module is electrically connected to both the microprocessor and the power management module. The monitoring and control module is configured to: determine, based on a first level signal from the power management module and a second level signal from the monitoring and control module, control the vehicle body controller to enter a limp mode. The first level signal indicates the level signal emitted by the power management module when it cannot communicate with the microprocessor, and the second level signal indicates the level signal in the monitoring and control module associated with the limp mode.
[0051] In this way, the body controller can make a judgment based on the first level signal of the power management module and the second level signal of the monitoring and control module, and control the body controller to enter the limp mode, so as to avoid the body controller being unable to distinguish between the limp mode and other modes when receiving the first level signal, and thus avoid entering the limp mode incorrectly.
[0052] This application provides a vehicle body controller, control method, and device. The vehicle body controller provided in this application embodiment will be described first. Figure 1 As shown, the vehicle body controller 100 provided in this embodiment includes:
[0053] Microprocessor 10,
[0054] Power management module 20, which is electrically connected to microprocessor 10.
[0055] Monitoring and control module 30, which is electrically connected to microprocessor 10 and power management module 20.
[0056] The monitoring and control module 30 is configured to: make a judgment based on the first level signal of the power management module and the second level signal of the monitoring and control module, and control the body controller to enter the limp mode. The first level signal is used to indicate the level signal issued by the power management module when it cannot communicate with the microprocessor, and the second level signal is used to indicate the level signal in the monitoring and control module associated with the limp mode.
[0057] In this embodiment, the microprocessor can be a microcontroller unit (MCU), also known as a single-chip microcomputer or a microcontroller. In a specific embodiment, the power management module can be a power management integrated circuit (PMIC) used to manage the power devices in the host system, commonly used in mobile phones and various mobile terminal devices. Both interact via an SPI bus and have an FCCU monitoring interface. The PMIC chip provides specific fail-safe signal indication functionality to the MCU chip.
[0058] It should be noted that the level signals in the embodiments of this application include low level and high level signals. It can be understood that low level can be represented by "0" and high level can be represented by "1".
[0059] In one example, such as Figure 2 As shown, the monitoring and control module includes a mode monitoring submodule and a control circuit module, which are used to monitor the Sleep signal issued by the microprocessor and the Fail Safe signal (i.e., the first level signal) issued by the power management module, and to control the body controller to enter Normal mode, Sleep mode or Limp Home mode.
[0060] In this embodiment, it should be noted that the second level signal is in a low level state by default. The monitoring and control module can perform AND logic operation on the first level signal of the power management module and the second level signal of the monitoring and control module to determine whether to enter the Limp Home mode.
[0061] like Figure 3As shown, in one embodiment, the monitoring and control module 30 includes:
[0062] A limp-mode controllable source 31 is electrically connected to the microprocessor 10.
[0063] The limp mode controllable source is configured to determine the second level signal in response to a control signal sent by the microprocessor.
[0064] In this embodiment, the limp-mode controllable source is electrically connected to the microprocessor. The limp-mode controllable source can switch its level state according to the microprocessor's control signal; for example, in response to the microprocessor's control signal, it can switch the level state from low to high. It should be noted that the second level signal is used to indicate the level signal state of the limp-mode controllable source.
[0065] like Figure 4 As shown, in one embodiment, the monitoring and control module 30 further includes:
[0066] Signal generation circuit 32, which is electrically connected to the limp-mode controllable source 31,
[0067] The signal generation circuit 32 is configured to determine a third level signal based on the first level signal of the power management module and the second level signal of the limp mode controllable source. The third level signal is used to control the body controller to enter the limp mode.
[0068] In this embodiment, the monitoring and control module makes a judgment based on the first-level signal from the power management module and the second-level signal from the monitoring and control module. After obtaining the judgment result, it generates a third-level signal through the signal generation circuit. The third-level signal is used to control the body controller to enter the Limp Home mode. For example, the Fail Safe signal level (first-level signal) emitted by the PMIC chip is ANDed with the low level of the Limp Home controllable source (second-level signal) and outputs the Limp Home EN signal (third-level signal). If the signal is low, it is determined that the system has not completed initialization and the system has not entered any mode.
[0069] like Figure 5 As shown, in one embodiment, the monitoring and control module 30 further includes:
[0070] The judgment circuit 33 is electrically connected to the microprocessor 10, the power management module 20, and the limp-mode controllable source 31.
[0071] The judgment circuit 33 is configured to make a judgment based on the first level signal of the power management module and the second level signal of the monitoring and control module, and obtain a judgment result, which is used to determine the third level signal.
[0072] In this embodiment, the judgment circuit can be a hardware circuit composed of logic gates, or it can be other integrated chips with logic operation functions, which are not limited here.
[0073] In one example, as shown in Table 1, a judgment result is obtained by performing logical operations on the first level signal and the second level signal, and then the third level signal is determined based on the judgment result. Finally, the mode of the body controller is determined.
[0074] Table 1: Hardware Logic Truth Table
[0075]
[0076] For example, when both the Limp Home controllable source (second level signal) and the Fail Safe signal (first level signal) are high level signals, the third level signal is determined to be low level signal. If the microprocessor does not issue a Sleep signal at this time, the body controller is determined to be in Normal mode.
[0077] like Figure 6 As shown, in one embodiment, the monitoring and control module 30 further includes:
[0078] A switching circuit 34 is disposed between the judgment circuit 33 and the limp mode controllable source 31, and the switching circuit 34 is electrically connected to the signal generation circuit 32.
[0079] In this embodiment, the switching circuit 34 can be a P-type MOS transistor switching circuit, the judgment circuit 33 can be a logic gate circuit, and the signal generation circuit can be a Limp Home EN signal generation circuit.
[0080] In one embodiment, the monitoring and control module 30 further includes:
[0081] The charging and discharging circuit 35 is electrically connected to the limp-mode controllable source 31.
[0082] In this embodiment, the charging and discharging circuit 35 can be an RC charging and discharging circuit.
[0083] Based on the vehicle body controller provided in the above embodiments, this application also provides a control method for the vehicle body controller, such as... Figure 7 As shown, it includes the following steps:
[0084] S701: Acquire a first level signal from the power management module and a second level signal from the monitoring and control module. The first level signal indicates the level signal emitted by the power management module when it is unable to communicate with the microprocessor, and the second level signal indicates the level signal associated with limp mode in the monitoring and control module.
[0085] S702: Based on the first level signal of the power management module and the second level signal of the monitoring and control module, a judgment result is obtained.
[0086] S703: Based on the judgment result, control the body controller to enter limp mode.
[0087] This application provides a control method for a vehicle body controller. The method involves acquiring a first-level signal from a power management module and a second-level signal from a monitoring control module, then performing a judgment based on these signals to obtain a result. Finally, based on the judgment result, the vehicle body controller is controlled to enter a limp mode.
[0088] In this way, the body controller can make a judgment based on the first level signal of the power management module and the second level signal of the monitoring and control module, and control the body controller to enter the limp mode, so as to avoid the body controller being unable to distinguish between the limp mode and other modes when receiving the first level signal, and thus avoid entering the limp mode incorrectly.
[0089] In S701, in one specific embodiment, the Fail Safe signal level emitted by the PMIC chip and the signal level of the Limp Home controllable source are acquired.
[0090] In S702, in a specific embodiment, the Fail Safe signal level emitted by the PMIC chip and the signal level of the LimpHome controllable source are ANDed to obtain a judgment result, which is used to determine the third level signal. For example, when the LimpHome controllable source (second level signal) is a high level signal and the Fail Safe signal (first level signal) is a low level signal, the third level signal is determined to be a high level signal.
[0091] In S703, in a specific embodiment, after determining that the third level signal is a high level signal, if the microprocessor does not issue a Sleep signal at this time, the body controller is controlled to enter the Limp Home mode.
[0092] To better illustrate the control method of the vehicle body controller provided in the embodiments of this application, a specific embodiment is given below as an example.
[0093] like Figure 8 As shown, step S1 is the power-on system initialization. The Limp Home controllable source is off and at a low level by default. The Fail Safe signal level issued by the PMIC chip is ANDed with the low level of the Limp Home controllable source, and the Limp Home EN signal is output. If the signal is low, it is determined that the system has not completed initialization and has not entered any mode. After the PMIC completes initialization, the MCU's Reset signal is pulled high, and the system enters Normal mode.
[0094] Step S2 involves the MCU controlling the Limp Home controllable source to a high level after the system has entered Normal mode. The Fail Safe signal level from the PMIC chip is then ANDed with the high level of the Limp Home controllable source, and a Limp Home EN signal is output. If the Limp Home EN signal is high, the system enters Limp Home mode. If the Limp Home EN signal is low, and the MCU sends a high-level Sleep command signal, the MCU disables the Limp Home controllable source to a low level and enters Sleep mode after a 50ms delay.
[0095] Based on the control method for a vehicle body controller provided in the above embodiments, correspondingly, as follows: Figure 9 As shown, this application embodiment provides a control device 900 for a vehicle body controller, which may include:
[0096] The acquisition module 901 is used to acquire a first level signal from the power management module and a second level signal from the monitoring and control module. The first level signal is used to indicate the level signal emitted by the power management module when it is unable to communicate with the microprocessor, and the second level signal is used to indicate the level signal associated with the limp mode in the monitoring and control module.
[0097] The judgment module 902 is used to make a judgment based on the first level signal of the power management module and the second level signal of the monitoring and control module, and obtain a judgment result.
[0098] The control module 903 is used to control the vehicle body controller to enter limp mode based on the judgment result.
[0099] It should also be noted that the exemplary embodiments mentioned in this application describe methods or systems based on a series of steps or apparatus. However, this application is not limited to the order of the above steps; that is, the steps can be performed in the order mentioned in the embodiments, or in a different order, or several steps can be performed simultaneously.
[0100] The above are merely specific embodiments of this application. Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems, modules, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here. It should be understood that the protection scope of this application is not limited thereto. Any person skilled in the art can easily conceive of various equivalent modifications or substitutions within the technical scope disclosed in this application, and these modifications or substitutions should all be covered within the protection scope of this application.
Claims
1. A vehicle body controller, characterized in that, include: microprocessor, A power management module, which is electrically connected to the microprocessor, The monitoring and control module is electrically connected to the microprocessor and the power management module. The monitoring and control module is configured to: make a judgment based on the first level signal of the power management module and the second level signal of the monitoring and control module, and control the body controller to enter the limp mode. The first level signal is used to indicate the level signal issued by the power management module when it cannot communicate with the microprocessor, and the second level signal is used to indicate the level signal in the monitoring and control module associated with the limp mode. The monitoring and control module includes: A limp-mode controllable source, which is electrically connected to the microprocessor, The limp mode controllable source is configured to determine the second level signal in response to a control signal sent by the microprocessor.
2. The vehicle body controller according to claim 1, characterized in that, The monitoring and control module also includes: A signal generation circuit, which is electrically connected to the limp-mode controllable source, The signal generation circuit is configured to determine a third level signal based on the first level signal of the power management module and the second level signal of the limp mode controllable source. The third level signal is used to control the body controller to enter the limp mode.
3. The vehicle body controller according to claim 2, characterized in that, The monitoring and control module also includes: The judgment circuit is electrically connected to the microprocessor, the power management module, and the limp-mode controllable source. The judgment circuit is configured to make a judgment based on the first level signal of the power management module and the second level signal of the monitoring and control module, and obtain a judgment result, which is used to determine the third level signal.
4. The vehicle body controller according to claim 3, characterized in that, The judgment circuit is a logic gate circuit.
5. The vehicle body controller according to claim 3, characterized in that, The monitoring and control module also includes: A switching circuit is provided, which is disposed between the judgment circuit and the limp mode controllable source, and is electrically connected to the signal generation circuit.
6. The vehicle body controller according to claim 5, characterized in that, The switching circuit is a P-type MOS transistor switching circuit.
7. The vehicle body controller according to claim 5, characterized in that, The monitoring and control module also includes: A charging and discharging circuit, which is electrically connected to the limp-mode controllable source.
8. A control method for a vehicle body controller, characterized in that, Applied to the body controller as described in any one of claims 1-7, the method comprises: The system acquires a first-level signal from the power management module and a second-level signal from the monitoring and control module. The first-level signal indicates the level signal emitted by the power management module when it is unable to communicate with the microprocessor, and the second-level signal indicates the level signal associated with limp mode in the monitoring and control module. The judgment result is obtained based on the first level signal from the power management module and the second level signal from the monitoring and control module. Based on the judgment result, the vehicle body controller is controlled to enter limp mode.
9. A control device for a vehicle body controller, characterized in that, The device is applied to the body controller as described in any one of claims 1-7, the device comprising: The acquisition module is used to acquire a first level signal from the power management module and a second level signal from the monitoring and control module. The first level signal indicates the level signal emitted by the power management module when it is unable to communicate with the microprocessor, and the second level signal indicates the level signal associated with limp mode in the monitoring and control module. The judgment module is used to make a judgment based on the first level signal of the power management module and the second level signal of the monitoring and control module, and obtain a judgment result. The control module is used to control the vehicle body controller to enter limp mode based on the judgment result.