Method and device for determining vehicle functional safety, vehicle and storage medium

Abstract

The application provides a vehicle functional safety determination method and device, a vehicle and a storage medium. The method comprises the following steps: obtaining a target function scene to be entered by a vehicle; obtaining a safety power supply coefficient threshold of the vehicle in the target function scene, wherein the safety power supply coefficient threshold is obtained based on maximum load demand of the vehicle in the target function scene; obtaining real-time state information of a vehicle storage battery, and calculating a safety discharge coefficient of the vehicle storage battery based on the real-time state information; if the safety discharge coefficient exceeds the safety power supply coefficient threshold, it is determined that the vehicle does not meet the functional safety requirement of the target function scene, the vehicle is prohibited from entering the target function scene, and a warning information is output. The application can improve the safety of vehicle driving.

Description

Technical Field

[0001] This application relates to the field of vehicle battery technology, and in particular to a method, device, vehicle, and storage medium for determining vehicle functional safety. Background Technology

[0002] With the continuous development of intelligent driving vehicles, autonomous driving can handle an increasingly diverse range of scenarios and conditions. For Level 3 autonomous driving, it can achieve fully autonomous driving under certain conditions.

[0003] Correspondingly, Level 3 autonomous driving places higher demands on vehicle power supply. However, because the discharge characteristics of vehicle batteries vary under different environments, road conditions, or traffic scenarios, they may experience depletion in certain extreme situations, such as low and ultra-low temperatures, leading to a decline in battery performance. Similarly, the load requirements for ensuring functional safety differ across various environments, road conditions, and traffic scenarios. If the vehicle battery's power supply cannot meet the load requirements of a particular functional scenario, it may affect the functional safety of that scenario. Summary of the Invention

[0004] This application provides a method, apparatus, vehicle, and storage medium for determining vehicle functional safety, in order to address the issue that the power supply to a vehicle may affect the functional safety of Level 3 autonomous driving.

[0005] In a first aspect, this application provides a method for determining vehicle functional safety, which may include: acquiring the target functional scenario that the vehicle will enter; acquiring a safe power supply coefficient threshold for the vehicle in the target functional scenario, wherein the safe power supply coefficient threshold is obtained based on the maximum load requirement of the vehicle in the target functional scenario; acquiring real-time status information of the vehicle battery, and calculating a safe discharge coefficient of the vehicle battery based on the real-time status information; if the safe discharge coefficient exceeds the safe power supply coefficient threshold, determining that the vehicle does not meet the functional safety requirements of the target functional scenario, prohibiting the vehicle from entering the target functional scenario, and outputting a warning message.

[0006] In one possible implementation, the real-time status information may include usage duration, real-time temperature, real-time voltage, real-time current, and real-time remaining capacity; calculating the safe discharge coefficient of the vehicle battery based on the real-time status information may include: calculating the voltage change rate of the vehicle battery based on the usage duration, real-time temperature, real-time voltage, real-time current, and real-time remaining capacity to obtain the safe discharge coefficient.

[0007] In one possible implementation, before obtaining the safe power supply coefficient threshold of the vehicle under the target functional scenario, the method may further include: determining the maximum load demand under the target functional scenario; and based on the maximum load demand, fitting the discharge data of the vehicle battery under different conditions to obtain the safe power supply coefficient threshold of the vehicle under the target functional scenario.

[0008] In one possible implementation, different conditions could include: different battery usage durations, different temperatures, and different charge levels.

[0009] In one possible implementation, after calculating the safe discharge coefficient of the vehicle battery, the following may be included: if the safe discharge coefficient does not exceed the safe power supply coefficient threshold, then the vehicle is determined to meet the functional safety requirements of the target functional scenario, and is allowed to enter the target functional scenario.

[0010] In one possible implementation, after obtaining the target functional scenario that the vehicle will enter, the method further includes: obtaining the maximum power supply requirement of the vehicle in the target functional scenario;

[0011] Correspondingly, if the safe discharge coefficient exceeds the safe power supply coefficient threshold, the functional safety requirement that the vehicle does not meet the target functional scenario can be determined as follows: if the safe discharge coefficient exceeds the safe power supply coefficient threshold, and / or the remaining capacity of the vehicle battery does not meet the maximum power supply requirement, then the vehicle does not meet the functional safety requirement of the target functional scenario.

[0012] Correspondingly, if the safe discharge coefficient does not exceed the safe power supply coefficient threshold, then determining that the vehicle meets the functional safety requirements of the target functional scenario may include: if the safe discharge coefficient does not exceed the safe power supply coefficient threshold, and the remaining capacity of the vehicle battery meets the maximum power supply requirement, then determining that the vehicle meets the functional safety requirements of the target functional scenario.

[0013] In one possible implementation, after obtaining the target functional scenario that the vehicle will enter, the method may further include: obtaining the maximum number of low-voltage discharges corresponding to the target functional scenario; obtaining the pre-recorded number of low-voltage discharges of the vehicle; if the pre-recorded number of low-voltage discharges of the vehicle reaches the maximum number of low-voltage discharges, then it is determined that the vehicle does not meet the functional safety requirements of the target functional scenario, and the vehicle is prohibited from entering the target functional scenario.

[0014] Secondly, this application provides a vehicle functional safety determination device, which may include a functional scenario acquisition module, a power supply coefficient acquisition module, a discharge coefficient calculation module and a safety requirement judgment module.

[0015] The functional scenario acquisition module is used to acquire the target functional scenario that the vehicle will enter;

[0016] The power supply coefficient acquisition module is used to obtain the safe power supply coefficient threshold of the vehicle under the target functional scenario. The safe power supply coefficient threshold is obtained based on the maximum load requirement of the vehicle under the target functional scenario.

[0017] The discharge coefficient calculation module is used to obtain the real-time status information of the vehicle battery and calculate the safe discharge coefficient of the vehicle battery based on the real-time status information.

[0018] The safety requirement judgment module is used to determine that if the safety discharge coefficient exceeds the safety power supply coefficient threshold, the vehicle does not meet the functional safety requirements of the target functional scenario, the vehicle is prohibited from entering the target functional scenario, and a warning message is output.

[0019] Thirdly, this application provides a vehicle including a control device, which includes a memory and a processor. The memory stores a computer program that can run on the processor. When the processor executes the computer program, it implements the steps of the determination method for achieving vehicle functional safety as described in the first aspect or any of the first aspects.

[0020] Fourthly, this application provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the steps of the method for determining vehicle functional safety as described in the first aspect or any of the methods in the first aspect.

[0021] This application provides a method, apparatus, vehicle, and storage medium for determining vehicle functional safety. When a vehicle is about to enter a target functional scenario, a safe power supply coefficient threshold for that scenario is obtained, and this threshold is compared with the safe discharge coefficient of the vehicle's battery. If the safe discharge coefficient exceeds the safe power supply coefficient threshold, the vehicle is determined not to meet the functional safety requirements of the target scenario, and entry into the functional safety scenario is prohibited. This avoids entering the functional safety scenario when the vehicle's battery power is insufficient, improving the reliability of Level 3 autonomous driving and thus enhancing the reliability of vehicle operation. Attached Figure Description

[0022] To more clearly illustrate the technical solutions in the embodiments of this application, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0023] Figure 1 This is a flowchart illustrating the implementation of the method for determining vehicle functional safety provided in this application embodiment;

[0024] Figure 2This is a schematic diagram of the execution flow of the vehicle functional safety determination method provided in an embodiment of the present invention in an application scenario;

[0025] Figure 3 This is a schematic diagram of the structure of the vehicle functional safety determination device provided in the embodiments of this application;

[0026] Figure 4 This is a schematic diagram of the vehicle control device provided in the embodiments of this application. Detailed Implementation

[0027] In the following description, specific details such as particular system architectures and techniques are set forth for illustrative purposes and not for limitation, in order to provide a thorough understanding of the embodiments of this application. However, those skilled in the art will understand that this application may also be implemented in other embodiments without these specific details. In other instances, detailed descriptions of well-known systems, apparatuses, circuits, and methods have been omitted so as not to obscure the description of this application with unnecessary detail.

[0028] To make the objectives, technical solutions, and advantages of this application clearer, the following description will be provided in conjunction with the accompanying drawings and specific embodiments.

[0029] See Figure 1 The diagram illustrates the implementation flowchart of the vehicle functional safety determination method provided in this application embodiment. Figure 1 As shown, a method for determining vehicle functional safety may include steps S101 to S104.

[0030] S101, Obtain the target functional scenario that the vehicle will enter.

[0031] Optionally, the vehicle functional safety determination method provided in this application embodiment can be executed by the vehicle central control unit, or it can be executed by other controllers. Other controllers can be cloud controllers or vehicle controllers, and can be selected and set according to actual needs. This application embodiment does not impose any restrictions here.

[0032] Optionally, for vehicles capable of Level 3 autonomous driving, the vehicle's central controller can control the vehicle to enter the corresponding functional scenario based on the surrounding driving environment, the driver's driving needs, or the passengers' functional requests. When the central controller is the executing entity, it directly determines the target functional scenario the vehicle will enter. When other controllers are the executing entity, they can indirectly determine the target functional scenario the vehicle will enter through the central controller.

[0033] Optionally, the target functional scenario is used to characterize the vehicle's functional modes, and the power supply requirements of different functional modes may be different. The target functional scenario may include only a single functional mode or a combination of multiple functional modes, which can be divided according to actual needs.

[0034] For example, functional modes can be divided into driving modes or application modes. Driving modes may include: cruise mode, sport mode, comfort mode, auto hold mode, etc. Application modes may include audio-visual mode, voice mode, etc. Different modes have different power requirements; for example, the power requirement of cruise mode is greater than that of audio-visual mode, and the power requirement of sport mode is greater than that of auto hold mode. In addition, the target functional scenario may include one or more functional modes, such as only cruise mode, or cruise mode and voice mode.

[0035] S102, obtain the safe power supply coefficient threshold of the vehicle under the target functional scenario, wherein the safe power supply coefficient threshold is obtained based on the maximum load requirement of the vehicle under the target functional scenario.

[0036] Optionally, a safe power supply coefficient threshold is used to characterize the safe power supply limit of the vehicle in a given functional scenario. Each functional scenario can correspond to a safe power supply coefficient threshold, and the safe power supply coefficient thresholds for different functional scenarios can be the same or different. The safe power supply coefficient threshold for a vehicle in a functional scenario can be pre-calculated based on the vehicle's maximum load in that scenario.

[0037] For example, for a target functional scenario, the safe power supply coefficient threshold of the vehicle in the target functional scenario can be fitted based on the vehicle's historical maximum load demand in the target functional scenario and the vehicle's historical battery discharge data.

[0038] S103: Obtain the real-time status information of the vehicle battery and calculate the safe discharge coefficient of the vehicle battery based on the real-time status information.

[0039] Optionally, the vehicle's central control system can directly obtain real-time status information of the vehicle's battery through battery sensors. This real-time status information may include discharge data. For example, the vehicle battery may be a lead-acid battery, and the real-time status information may include at least one of the following: usage time, real-time temperature, real-time voltage, real-time current, and real-time remaining capacity.

[0040] Optionally, the safe discharge coefficient is used to characterize the safe discharge capability of the vehicle battery under this functional scenario. When real-time status information includes usage duration, real-time temperature, real-time voltage, real-time current, and real-time remaining capacity, the voltage change rate of the vehicle battery can be calculated based on these parameters to obtain the safe discharge coefficient. The calculated voltage change rate is represented by a voltage change rate curve, and the safe discharge coefficient can be determined based on this curve. For example, the maximum or average value on the voltage change rate curve can be selected as the safe discharge coefficient. The specific choice can be made according to the actual situation.

[0041] For example, the real-time state information of the vehicle battery can be fitted using linear or nonlinear fitting, and the resulting coefficients can be used as the safe discharge coefficients of the vehicle battery. These safe discharge coefficients represent the safe discharge coefficients of the vehicle battery under this functional scenario.

[0042] S104 If the safe discharge coefficient exceeds the safe power supply coefficient threshold, it is determined that the vehicle does not meet the functional safety requirements of the target functional scenario, the vehicle is prohibited from entering the target functional scenario, and a warning message is output.

[0043] Optionally, when the safe discharge coefficient under the target functional scenario exceeds the safe power supply coefficient threshold under the target functional scenario, it indicates that the safe discharge capacity of the vehicle battery exceeds the safe power supply limit of the vehicle. In this case, the vehicle battery does not meet the functional safety requirements of the target functional scenario, that is, the discharge capacity of the vehicle battery under the target functional scenario does not meet the power supply requirements of the vehicle, and the vehicle does not meet the functional safety requirements of the target functional scenario. Therefore, the vehicle needs to be prohibited from entering the target functional scenario to ensure the safety of vehicle operation.

[0044] For example, if the safe discharge coefficient exceeds the safe power supply coefficient threshold in the target functional scenario, it means that the vehicle battery discharge rate is lower than the power supply rate required by the vehicle. In this case, the vehicle battery discharge is insufficient to support the functional safety requirements of the vehicle in the target functional scenario, and the vehicle should be prohibited from entering the target functional scenario to reduce the possibility of vehicle accidents.

[0045] Optionally, after prohibiting the vehicle from entering the target functional scenario, the vehicle's central control system can output a warning message to alert the driver or passengers. Furthermore, for Level 3 autonomous driving vehicles, this warning information can also be recorded and uploaded to the cloud. For example, after prohibiting the vehicle from entering the target functional scenario, the vehicle's central control system can issue an alarm sound, a voice warning, or flash red on the central control screen to alert relevant personnel.

[0046] For example, suppose the target functional scenario is cruise mode, and the vehicle is traveling on a highway. When the vehicle is about to enter cruise mode, the safe power supply coefficient threshold for cruise mode is obtained, along with the real-time status information of the vehicle's battery. Based on the real-time status information, the real-time safe discharge coefficient of the vehicle's battery is calculated. If the safe discharge coefficient exceeds the safe power supply coefficient threshold, it is determined that the vehicle's battery discharge capacity cannot meet the power supply requirements of the vehicle in cruise mode, and the vehicle needs to be prohibited from entering cruise mode, with a voice warning issued. Similar scenarios exist for other functional scenarios, and will not be elaborated upon in this embodiment.

[0047] For details, see Figure 2 This diagram illustrates the execution flow of the vehicle functional safety determination method provided by an embodiment of the present invention in an application scenario. When a vehicle is traveling on a highway and the vehicle's central control system receives a command from the driver to enter cruise mode, the central control system needs to determine whether the requirements for entering cruise mode are met. The specific determination is as follows: Figure 2 As shown, the process is as follows:

[0048] M01, the vehicle's central control system obtains the safe power supply coefficient threshold AX for the vehicle in cruise mode. This safe power supply coefficient threshold AX can be obtained by fitting historical discharge data such as the vehicle's historical maximum load demand in cruise mode, combined with historical discharge data such as the vehicle's battery's historical discharge voltage, historical discharge current, and historical discharge temperature in cruise mode.

[0049] M02: The vehicle central control system acquires real-time discharge data such as the current vehicle battery's real-time discharge voltage, real-time discharge current, and real-time discharge temperature, and obtains the vehicle battery's real-time safe discharge coefficient BX based on the above real-time discharge data.

[0050] M03, the vehicle central control determines whether the real-time safe discharge coefficient BX of the vehicle battery exceeds the safe power supply coefficient threshold AX in cruise mode.

[0051] When the real-time safe discharge coefficient BX exceeds the safe power supply coefficient threshold AX, the vehicle central control system determines that the vehicle does not meet the functional safety requirements of the cruise mode, controls the vehicle to prevent it from entering the cruise mode, and outputs a voice warning message to the driver to inform the driver that the cruise mode cannot be entered at this time.

[0052] When the real-time safety discharge coefficient BX does not exceed the safety power supply coefficient threshold AX, the vehicle central control determines that the vehicle meets the functional safety requirements of cruise mode and controls the vehicle to enter cruise mode to complete the driver's request command.

[0053] This application embodiment compares the real-time safe discharge coefficient of the vehicle battery with the safe power supply coefficient threshold of the vehicle in the target functional scenario. When the safe discharge coefficient exceeds the safe power supply coefficient threshold, the vehicle is prohibited from entering the target functional scenario. This can effectively prevent the vehicle from entering the functional safety scenario when the vehicle battery is underpowered, and further improve the safety and reliability of vehicle operation.

[0054] In some embodiments of this application, after calculating the safe discharge coefficient of the vehicle battery, the method may further include: if the safe discharge coefficient does not exceed the safe power supply coefficient threshold, then the vehicle is determined to meet the functional safety requirements of the target functional scenario, and is allowed to enter the target functional scenario.

[0055] Optionally, when the safe discharge coefficient under the target functional scenario does not exceed the safe power supply coefficient threshold under the target functional scenario, it indicates that the safe discharge capacity of the vehicle battery does not exceed the vehicle's safe power supply limit. In this case, the vehicle battery meets the functional safety requirements of the target functional scenario, that is, the discharge capacity of the vehicle battery meets the vehicle's power supply requirements under the target functional scenario, and the vehicle meets the functional safety requirements of the target functional scenario. Therefore, the vehicle can be allowed to enter the target functional scenario to meet the functional safety requirements of Level 3 autonomous driving vehicles.

[0056] In some embodiments of this application, before obtaining the safe power supply coefficient threshold of the vehicle under the target functional scenario, the method further includes: determining the maximum load demand under the target functional scenario; and based on the maximum load demand, fitting the discharge data of the vehicle battery under different conditions to obtain the safe power supply coefficient threshold of the vehicle under the target functional scenario.

[0057] Optionally, the maximum load requirement characterizes the maximum power supply under a specific functional scenario. This maximum load requirement can be determined using relevant historical data of the vehicle under the target functional scenario. Different conditions may include at least one of different battery usage durations, different temperatures, and different charge levels. The vehicle battery discharge data may include at least one of discharge voltage, discharge current, and discharge time.

[0058] Optionally, by fitting the vehicle battery discharge data under different conditions, a safe power supply coefficient curve can be obtained under the target functional scenario. From this safe power supply coefficient curve, the safe power supply coefficient threshold of the vehicle under the target functional scenario can be determined. For example, the maximum, minimum, or average value can be selected from this safe power supply coefficient curve as the safe power supply coefficient threshold of the vehicle under the target functional scenario.

[0059] For example, suppose the target functional scenario is cruise mode. The vehicle's central control system determines the maximum load requirement of the vehicle in cruise mode based on historical vehicle data. Then, based on the maximum load requirement, it fits the discharge voltage and discharge time of the vehicle's battery at different temperatures to obtain a safe power supply coefficient curve. Finally, it determines the safe power supply coefficient threshold in cruise mode from this safe power supply coefficient curve; for example, the maximum or minimum value in the safe power supply coefficient curve can be selected as the safe power supply coefficient threshold in cruise mode.

[0060] In some embodiments of this application, after obtaining the target functional scenario that the vehicle will enter, the method further includes: obtaining the maximum power supply requirement of the vehicle in the target functional scenario.

[0061] Optionally, the vehicle's central control unit can directly obtain the vehicle's maximum power supply requirement under the target functional scenario.

[0062] Correspondingly, if the safe discharge coefficient exceeds the safe power supply coefficient threshold, the determination that the vehicle does not meet the functional safety requirements of the target functional scenario may include: if the safe discharge coefficient exceeds the safe power supply coefficient threshold, and / or, the remaining capacity of the vehicle battery does not meet the maximum power supply requirement, then the vehicle is determined to not meet the functional safety requirements of the target functional scenario.

[0063] Specifically, if the safe discharge coefficient exceeds the safe power supply coefficient threshold and the remaining capacity of the vehicle battery does not meet the maximum power supply requirement, the vehicle is determined to be non-compliant with the functional safety requirements of the target functional scenario, the vehicle is prohibited from entering the target functional scenario, and a warning message is output.

[0064] If the safe discharge coefficient exceeds the safe power supply coefficient threshold or the remaining capacity of the vehicle battery does not meet the maximum power supply requirement, the vehicle is determined to be non-compliant with the functional safety requirements of the target functional scenario, the vehicle is prohibited from entering the target functional scenario, and a warning message is output.

[0065] Correspondingly, if the safe discharge coefficient does not exceed the safe power supply coefficient threshold, then determining that the vehicle meets the functional safety requirements of the target functional scenario may include: if the safe discharge coefficient does not exceed the safe power supply coefficient threshold, and the remaining capacity of the vehicle battery meets the maximum power supply requirement, then the vehicle meets the functional safety requirements of the target functional scenario and is allowed to enter the target functional scenario.

[0066] This application embodiment compares the safe discharge coefficient with the safe power supply coefficient threshold and the remaining capacity of the vehicle battery with the maximum power supply requirement. By making two comparisons, it determines whether the vehicle is allowed to enter the target functional scenario, which can effectively improve the reliability of vehicle functional safety determination and thus improve vehicle driving safety.

[0067] In some embodiments of this application, after obtaining the target functional scenario that the vehicle will enter, the method may further include: obtaining the maximum number of low-voltage discharges corresponding to the target functional scenario; obtaining the pre-recorded number of low-voltage discharges of the vehicle; if the pre-recorded number of low-voltage discharges of the vehicle reaches the maximum number of low-voltage discharges, then it is determined that the vehicle does not meet the functional safety requirements of the target functional scenario, and the vehicle is prohibited from entering the target functional scenario.

[0068] Optionally, if the vehicle battery's discharge voltage falls below a preset low voltage, it indicates that the vehicle is experiencing a low-voltage discharge. Since different functional scenarios have different voltage requirements for the vehicle battery, the maximum number of low-voltage discharge cycles varies depending on the specific functional scenario.

[0069] Optionally, the vehicle's central control system can directly obtain the maximum number of low-voltage discharges corresponding to the target functional scenario, as well as the pre-recorded number of low-voltage discharges of the vehicle. When the pre-recorded number of low-voltage discharges of the vehicle reaches the maximum number of low-voltage discharges, it indicates that the vehicle does not meet the functional safety requirements of the target functional scenario, and the vehicle needs to be prohibited from entering the target functional scenario.

[0070] Optionally, to ensure vehicle driving safety, for the target functional scenario, the vehicle may be permanently prohibited from entering the target functional scenario when the number of low-voltage discharges of the vehicle reaches the maximum number of low-voltage discharges as recorded in advance.

[0071] For example, suppose the target function is cruise control. The vehicle's central control system directly obtains the maximum number of low-voltage discharges corresponding to cruise control, as well as the pre-recorded number of low-voltage discharges. If the pre-recorded number of low-voltage discharges reaches the maximum number of low-voltage discharges, it is determined that the vehicle does not meet the functional safety requirements of cruise control, the vehicle battery is depleted, and cruise control needs to be permanently disabled. After the vehicle battery is repaired or replaced, the setting to permanently disable cruise control is then lifted.

[0072] This application's embodiments can indirectly monitor vehicle batteries by comparing the number of low-voltage discharge cycles. When the vehicle battery is significantly depleted, the system can lock the battery and permanently prohibit it from entering certain functional scenarios. This can effectively improve the reliability and safety of Level 3 autonomous driving, while also enhancing the safety of vehicle battery use, and has broad applicability.

[0073] For example, this application implements a method for determining vehicle functional safety through the vehicle's central control system, and its working logic is as follows:

[0074] SS01, Determine the maximum load requirement under the target functional scenario.

[0075] SS02 determines the safety power supply coefficient threshold corresponding to the vehicle entering the target functional scenario.

[0076] SS03 was used to test and record the real-time status information of the vehicle battery under different usage durations, temperatures, and charge levels. Based on the maximum load demand, the data of this status information was fitted to obtain the safe discharge coefficient of the vehicle battery.

[0077] SS04, adding risk mitigation strategies. For example, if the safe discharge coefficient exceeds the safe power supply coefficient threshold and the remaining capacity of the vehicle battery does not meet the maximum power supply requirement, then the vehicle is determined to be non-compliant with the functional safety requirements of the target functional scenario, and the vehicle is prohibited from entering the target functional safety scenario. As another example, for the target functional scenario, if the pre-recorded number of low-voltage discharges of the vehicle reaches the maximum number of low-voltage discharges, then the vehicle is determined to be non-compliant with the functional safety requirements of the target functional scenario, and the vehicle is permanently prohibited from entering the target functional scenario.

[0078] SS05: Each time the vehicle battery meets the stable discharge requirements, the vehicle's central control unit performs data fitting and stores the safe discharge coefficient, the number of low-voltage discharges, and the remaining capacity of the vehicle battery.

[0079] SS06: Each time a functional scenario is determined, the vehicle's central control system assesses the previously stored safe discharge coefficient, the number of low-voltage discharges, and the remaining capacity of the vehicle's battery. If the relevant conditions are met, the vehicle is allowed to enter the corresponding functional scenario; if the relevant conditions are not met, the vehicle is prohibited from entering the corresponding functional scenario, and an alarm is issued to remind the user.

[0080] This application's embodiments determine whether a vehicle is permitted to enter a functional scenario based on conditions, effectively ensuring the vehicle's functional safety requirements and improving the reliability and safety of Level 3 autonomous driving. Simultaneously, it monitors the vehicle's battery to ensure its safe operation.

[0081] It should be understood that the sequence number of each step in the above embodiments does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application.

[0082] The following are device embodiments of this application. For details not described in detail, please refer to the corresponding method embodiments described above.

[0083] Figure 3 A schematic diagram of the vehicle functional safety determination device provided in an embodiment of this application is shown. For ease of explanation, only the parts related to the embodiment of this application are shown, and are described in detail below:

[0084] like Figure 3As shown, the vehicle functional safety determination device 20 may include a functional scenario acquisition module 201, a power supply coefficient acquisition module 202, a discharge coefficient calculation module 203, and a safety requirement judgment module 204.

[0085] The functional scenario acquisition module 201 is used to acquire the target functional scenario that the vehicle will enter. The power supply coefficient acquisition module 202 is used to acquire the safe power supply coefficient threshold of the vehicle in the target functional scenario, wherein the safe power supply coefficient threshold is obtained based on the maximum load requirement of the vehicle in the target functional scenario. The discharge coefficient calculation module 203 is used to acquire the real-time status information of the vehicle battery and calculate the safe discharge coefficient of the vehicle battery based on the real-time status information. The safety requirement judgment module 204 is used to determine that the vehicle does not meet the functional safety requirements of the target functional scenario if the safe discharge coefficient exceeds the safe power supply coefficient threshold, prohibit the vehicle from entering the target functional scenario, and output a warning message.

[0086] In some embodiments of this application, the real-time status information includes usage duration, real-time temperature, real-time voltage, real-time current, and real-time remaining capacity. The discharge coefficient calculation module 203 is also used to calculate the voltage change rate of the vehicle battery based on the usage duration, real-time temperature, real-time voltage, real-time current, and real-time remaining capacity to obtain a safe discharge coefficient.

[0087] In some embodiments of this application, the vehicle functional safety determination device 20 may further include a data fitting module. The data fitting module is used to determine the maximum load requirement under the target functional scenario before obtaining the safe power supply coefficient threshold of the vehicle under the target functional scenario; based on the maximum load requirement, it fits the discharge data of the vehicle battery under different conditions to obtain the safe power supply coefficient threshold of the vehicle under the target functional scenario.

[0088] In some embodiments of this application, different conditions include: different battery usage time, different temperatures, and different charge levels.

[0089] In some embodiments of this application, the safety requirement judgment module 204 can also be used to determine that the vehicle meets the functional safety requirements of the target functional scenario and allow entry into the target functional scenario if the safe discharge coefficient of the vehicle battery does not exceed the safe power supply coefficient threshold after calculating the safe discharge coefficient of the vehicle battery.

[0090] In some embodiments of this application, the vehicle functional safety determination device 20 may further include a power supply acquisition module. The power supply acquisition module is used to acquire the maximum power supply requirement of the vehicle in the target functional scenario after acquiring the target functional scenario the vehicle will enter.

[0091] Correspondingly, the safety requirement judgment module 204 can also be used to determine that the vehicle does not meet the functional safety requirements of the target functional scenario if the safe discharge coefficient exceeds the safe power supply coefficient threshold and / or the remaining capacity of the vehicle battery does not meet the maximum power supply requirement.

[0092] Correspondingly, the safety requirement judgment module 204 can also be used to determine that the vehicle meets the functional safety requirements of the target functional scenario if the safe discharge coefficient does not exceed the safe power supply coefficient threshold and the remaining capacity of the vehicle battery meets the maximum power supply requirement.

[0093] In some embodiments of this application, the vehicle functional safety determination device 20 may further include a voltage determination module. The voltage determination module can be used, after obtaining the target functional scenario the vehicle will enter, to: obtain the maximum number of low-voltage discharges corresponding to the target functional scenario; obtain the pre-recorded number of low-voltage discharges of the vehicle; if the pre-recorded number of low-voltage discharges of the vehicle reaches the maximum number of low-voltage discharges, then determine that the vehicle does not meet the functional safety requirements of the target functional scenario and prohibit the vehicle from entering the target functional scenario.

[0094] Figure 4 This is a schematic diagram of the vehicle control device provided in an embodiment of this application. Figure 4 As shown, the control device 30 in this embodiment may include a processor 300 and a memory 301, wherein the memory 301 stores a computer program 302 that can run on the processor 300. When the processor 300 executes the computer program 302, it implements the steps in the above-described embodiments of the vehicle functional safety determination method, for example... Figure 1 S101 to S104 are shown. Alternatively, when the processor 300 executes the computer program 302, it implements the functions of each module / unit in the above-described device embodiments, for example... Figure 3 The functions of modules 201 to 204 in the vehicle functional safety determination device 20 shown.

[0095] For example, computer program 302 can be divided into one or more modules / units, one or more of which are stored in memory 301 and executed by processor 300 to complete this application. One or more modules / units can be a series of computer program instruction segments capable of performing a specific function, which describe the execution process of computer program 302 in control device 30. For example, computer program 302 can be divided into... Figure 3 Modules 201 to 204 in the vehicle functional safety determination device 20 shown.

[0096] The control device 30 may include, but is not limited to, a processor 300 and a memory 301. Those skilled in the art will understand that... Figure 4This is merely an example of the control device 30 and does not constitute a limitation on the control device 30. It may include more or fewer components than shown, or combine certain components, or different components. For example, a vehicle may also include input / output devices, network access devices, buses, etc.

[0097] The processor 300 may be a Central Processing Unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor.

[0098] The memory 301 can be an internal storage unit of the control device 30, such as a hard disk or RAM of the control device 30. The memory 301 can also be an external storage device of the control device 30, such as a plug-in hard disk, Smart Media Card (SMC), Secure Digital (SD) card, or Flash Card equipped on the control device 30. Furthermore, the memory 301 can include both internal and external storage units of the control device 30. The memory 301 is used to store computer programs and other programs and data required by the vehicle. The memory 301 can also be used to temporarily store data that has been output or will be output.

[0099] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the above-described division of functional units and modules is merely an example. In practical applications, the above functions can be assigned to different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above. The functional units and modules in the embodiments can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit. Furthermore, the specific names of the functional units and modules are only for easy differentiation and are not intended to limit the scope of protection of this application. The specific working process of the units and modules in the above system can be referred to the corresponding process in the foregoing method embodiments, and will not be repeated here.

[0100] In the above embodiments, the descriptions of each embodiment have different focuses. For parts that are not described in detail or recorded in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0101] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0102] In the embodiments provided in this application, it should be understood that the disclosed devices / vehicles and methods can be implemented in other ways. For example, the device / vehicle embodiments described above are merely illustrative. For instance, the division of modules or units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between devices or units may be electrical, mechanical, or other forms.

[0103] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0104] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0105] If integrated modules / units are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, all or part of the processes in the methods of the above embodiments can also be implemented by a computer program instructing related hardware. The computer program can be stored in a computer-readable storage medium, and when executed by a processor, it can implement the steps of the various vehicle functional safety determination method embodiments described above. The computer program includes computer program code, which can be in the form of source code, object code, executable files, or certain intermediate forms. The computer-readable medium can include: any entity or device capable of carrying computer program code, recording media, USB flash drives, portable hard drives, magnetic disks, optical disks, computer memory, read-only memory (ROM), random access memory (RAM), electrical carrier signals, telecommunication signals, and software distribution media, etc.

[0106] The above embodiments are only used to illustrate the technical solutions of this application, and are not intended to limit them. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this application, and should all be included within the protection scope of this application.

Claims

1. A method for determining the functional safety of a vehicle, characterized in that, include: Obtain the target functional scenario that the vehicle will enter; Obtain the safe power supply coefficient threshold of the vehicle under the target functional scenario, wherein the safe power supply coefficient threshold is obtained based on the maximum load requirement of the vehicle under the target functional scenario; The system acquires real-time status information of the vehicle battery and calculates a safe discharge coefficient based on this information. The real-time status information includes usage duration, real-time temperature, real-time voltage, real-time current, and real-time remaining capacity. Calculating the safe discharge coefficient based on the real-time status information involves calculating the voltage change rate of the vehicle battery based on the usage duration, real-time temperature, real-time voltage, real-time current, and real-time remaining capacity to obtain the safe discharge coefficient. The calculated voltage change rate is a voltage change rate curve, and the maximum or average value on the voltage change rate curve is selected as the safe discharge coefficient. If the safe discharge coefficient exceeds the safe power supply coefficient threshold, it is determined that the vehicle does not meet the functional safety requirements of the target functional scenario, the vehicle is prohibited from entering the target functional scenario, and a warning message is output.

2. The method for determining vehicle functional safety as described in claim 1, characterized in that, Before obtaining the safe power supply coefficient threshold of the vehicle under the target functional scenario, the following steps are also included: Determine the maximum load requirement under the target functional scenario; Based on the maximum load requirement, the discharge data of the vehicle battery under different conditions are fitted to obtain the safe power supply coefficient threshold of the vehicle under the target functional scenario.

3. The method for determining vehicle functional safety as described in claim 2, characterized in that, The different conditions include: different battery usage time, different temperatures, and different charge levels.

4. The method for determining vehicle functional safety as described in any one of claims 1 to 3, characterized in that, Following the calculation of the safe discharge coefficient of the vehicle battery, the following is also included: If the safe discharge coefficient does not exceed the safe power supply coefficient threshold, then the vehicle is determined to meet the functional safety requirements of the target functional scenario and is allowed to enter the target functional scenario.

5. The method for determining vehicle functional safety as described in claim 4, characterized in that, Following the acquisition of the target functional scenario that the vehicle will enter, the following is also included: Obtain the maximum power supply requirement of the vehicle under the target functional scenario; Accordingly, the step of determining that the vehicle does not meet the functional safety requirements of the target functional scenario if the safe discharge coefficient exceeds the safe power supply coefficient threshold includes: If the safe discharge coefficient exceeds the safe power supply coefficient threshold, and / or the remaining capacity of the vehicle battery does not meet the maximum power supply requirement, then the vehicle is determined not to meet the functional safety requirements of the target functional scenario. Accordingly, determining that the vehicle meets the functional safety requirements of the target functional scenario if the safe discharge coefficient does not exceed the safe power supply coefficient threshold includes: If the safe discharge coefficient does not exceed the safe power supply coefficient threshold, and the remaining capacity of the vehicle battery meets the maximum power supply requirement, then the vehicle is determined to meet the functional safety requirements of the target functional scenario.

6. The method for determining vehicle functional safety as described in claim 5, characterized in that, Following the acquisition of the target functional scenario that the vehicle will enter, the following is also included: Obtain the maximum number of low-voltage discharges corresponding to the target functional scenario; Obtain the pre-recorded number of low-voltage discharges of the vehicle; If the number of low-voltage discharges of a vehicle recorded in advance reaches the maximum number of low-voltage discharges, then the vehicle is determined to be non-compliant with the functional safety requirements of the target functional scenario, and the vehicle is prohibited from entering the target functional scenario.

7. A device for determining the functional safety of a vehicle, characterized in that, It includes a functional scenario acquisition module, a power supply coefficient acquisition module, a discharge coefficient calculation module, and a safety requirement judgment module; The functional scenario acquisition module is used to acquire the target functional scenario that the vehicle will enter; The power supply coefficient acquisition module is used to acquire the safe power supply coefficient threshold of the vehicle under the target functional scenario, wherein the safe power supply coefficient threshold is obtained based on the maximum load requirement of the vehicle under the target functional scenario; The discharge coefficient calculation module is used to acquire real-time status information of the vehicle battery and calculate the safe discharge coefficient of the vehicle battery based on the real-time status information; the real-time status information includes usage time, real-time temperature, real-time voltage, real-time current, and real-time remaining capacity; the discharge coefficient calculation module is specifically used to: calculate the voltage change rate of the vehicle battery based on the usage time, real-time temperature, real-time voltage, real-time current, and real-time remaining capacity to obtain the safe discharge coefficient; wherein, the calculated voltage change rate is a voltage change rate curve, and the maximum value or average value on the voltage change rate curve is selected as the safe discharge coefficient; The safety requirement judgment module is used to determine that the vehicle does not meet the functional safety requirements of the target functional scenario if the safety discharge coefficient exceeds the safety power supply coefficient threshold, prohibit the vehicle from entering the target functional scenario, and output a warning message.

8. A vehicle comprising a control device, the control device including a memory and a processor, the memory storing a computer program executable on the processor, characterized in that, When the processor executes the computer program, it implements the steps of the method for determining vehicle functional safety as described in any one of claims 1 to 6.

9. A computer-readable storage medium storing a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the method for determining vehicle functional safety as described in any one of claims 1 to 6.

Images