Multi-level hardware monitoring system for a vehicle, vehicle

Abstract

The application provides a multi-level hardware monitoring system for a vehicle and the vehicle. The multi-level hardware monitoring system comprises a control module, the control module comprising a first local monitoring module configured to monitor an operating state of the control module; an intelligent driving control module, the control module being configured to exchange information with the intelligent driving control module; and a cabin control module, the cabin control module being configured to exchange information with the control module and the intelligent driving control module. In a case where the operating state of the control module is determined to be abnormal, the control module generates a control instruction, wherein the control instruction at least comprises a shutdown instruction, and the control instruction is configured to control the intelligent driving control module and the cabin control module to perform a shutdown operation, thereby improving the safety and reliability of the central computing platform hardware system of the vehicle.

Description

Technical Field

[0001] This invention relates to the field of vehicle technology, and more specifically, to a multi-level hardware monitoring system for vehicles and a vehicle. Background Technology

[0002] With the development of intelligent and connected new energy vehicles, central computing has become a key function and a core selling point of automobiles. Central computing includes functions such as intelligent driving and intelligent cockpit, providing automobiles with comprehensive and powerful computing processing capabilities, saving controller space and development and upgrade costs. However, central computing platforms are characterized by processing large amounts of data of various types and interacting with many objects, which presents the following problems:

[0003] 1. The central computing main control chip has high hardware security requirements. The failure of any main control chip will lead to functional failure, affecting driving safety and experience. Therefore, a highly reliable main control chip security monitoring solution is required.

[0004] 2. Central computing power system safety: Failure of any main control chip or power monitoring chip will cause the central computing safety function to fail, affecting driving safety and experience. A highly reliable power safety monitoring solution is required. Summary of the Invention

[0005] The main objective of this invention is to provide a multi-level hardware monitoring system for vehicles and vehicles, in order to solve the problem of lack of security monitoring for the central computing main control chip in the prior art.

[0006] To achieve the above objectives, according to one aspect of the present invention, a multi-level hardware monitoring system for a vehicle is provided. The multi-level hardware monitoring system includes: a control module, which includes a first local monitoring module for monitoring the operating status of the control module; an intelligent driving control module, with which the control module interacts with the intelligent driving control module; and a cockpit control module, with which the cockpit control module interacts with both the control module and the intelligent driving control module. Wherein, when the operating status of the control module is determined to be abnormal, the control module generates a control command, wherein the control command includes at least a shutdown command, which controls the intelligent driving control module and the cockpit control module to perform a shutdown operation.

[0007] Optionally, the intelligent driving control module includes: a second local monitoring module, which monitors the operating status of the intelligent driving control module. If the operating status of the intelligent driving control module is determined to be abnormal, the intelligent driving control module generates a first stop command, which is used to control the control module to stop sending control commands.

[0008] Optionally, the cockpit control module includes: a third local monitoring module, which monitors the operating status of the cockpit control module. If the operating status of the cockpit control module is determined to be abnormal, the cockpit control module generates a second stop command, which is used to control the control module to stop sending control commands.

[0009] Optionally, if the operating status of the intelligent driving control module is determined to be abnormal, the intelligent driving control module generates a first alarm command, which is used to control the cockpit control module to perform alarm operations. If the operating status of the cockpit control module is determined to be abnormal, the cockpit control module generates a second alarm command, which is used to control the intelligent driving control module to perform alarm operations.

[0010] Optionally, the multi-level hardware monitoring system for vehicles further includes a first monitoring power module, which is used to supply power to the control module. The first monitoring power module includes a first watchdog module, which is used to monitor the operating status of the control module. If the operating status of the control module is determined to be abnormal, the first watchdog module generates a first reset command, which is used to control the control module to perform a reset operation.

[0011] Optionally, the first monitoring power module further includes: a first power diagnostic module, which is used to monitor the power status of the first monitoring power module. If it is determined that the power status of the first monitoring power module is subject to at least one of overcurrent, overvoltage, and overtemperature, the first power diagnostic module generates a first self-reset command, which is used to control the first power diagnostic module to perform a self-reset operation.

[0012] Optionally, the multi-level hardware monitoring system for vehicles also includes a second monitoring power module, which supplies power to the intelligent driving control module. The second monitoring power module includes a second watchdog module, which monitors the operating status of the intelligent driving control module. If the operating status of the intelligent driving control module is determined to be abnormal, the second watchdog module generates a second reset command, which controls the intelligent driving control module to perform a reset operation.

[0013] Optionally, the second monitoring power module further includes: a second power diagnostic module, which is used to monitor the power status of the second monitoring power module. If it is determined that the power status of the second monitoring power module has at least one of overcurrent, overvoltage, and overtemperature, the second power diagnostic module generates a second self-reset command, which is used to control the second power diagnostic module to perform a self-reset operation.

[0014] Optionally, the multi-level hardware monitoring system for the vehicle also includes a third monitoring power module, which supplies power to the cockpit control module. The third monitoring power module includes a third watchdog module, which monitors the operating status of the cockpit control module. If the operating status of the cockpit control module is determined to be abnormal, the third watchdog module generates a third reset command, which controls the cockpit control module to perform a reset operation.

[0015] Optionally, the third monitoring power module further includes: a third power diagnostic module, which is used to monitor the power status of the third monitoring power module. If it is determined that the power status of the third monitoring power module has at least one of overcurrent, overvoltage, and overtemperature, the third power diagnostic module generates a third self-reset command, which is used to control the third power diagnostic module to perform a self-reset operation.

[0016] Optionally, the multi-level hardware monitoring system for vehicles also includes an intelligent driving peripheral module. When it is determined that the operating status of the intelligent driving control module is abnormal, the intelligent driving control module generates a first shutdown command, which is used to control the intelligent driving peripheral module to perform a shutdown operation.

[0017] Optionally, the multi-level hardware monitoring system for the vehicle also includes a cockpit peripheral module. If the cockpit control module is found to be in an abnormal operating state, the cockpit control module generates a second shutdown command, which is used to control the cockpit peripheral module to perform a shutdown operation.

[0018] According to another aspect of the present invention, a vehicle is provided, including a multi-level hardware monitoring system for the vehicle, wherein the multi-level hardware monitoring system for the vehicle is the same as the multi-level hardware monitoring system for the vehicle described in the above embodiments.

[0019] By applying the technical solution of this invention, information interaction is achieved between the control module, the intelligent driving control module, and the cockpit control module. A first local monitoring module is set up to monitor the operating status of the control module in real time, which can promptly detect abnormal situations and take swift measures through control commands, such as shutdown commands, to avoid potential safety risks and improve the safety and reliability of the vehicle's central computing platform hardware system. Attached Figure Description

[0020] The accompanying drawings, which form part of this application, are used to provide a further understanding of the invention. The illustrative embodiments of the invention and their descriptions are used to explain the invention and do not constitute an undue limitation of the invention. In the drawings:

[0021] Figure 1 A schematic diagram of the structure of a multi-level hardware monitoring system for vehicles according to the present invention is shown;

[0022] Figure 2 A flowchart illustrating a multi-level hardware monitoring method for vehicles according to the present invention is shown.

[0023] The above figures include the following reference numerals:

[0024] 10. Control module;

[0025] 11. First local monitoring module;

[0026] 20. Intelligent driving control module;

[0027] 21. Second local monitoring module;

[0028] 30. Cockpit control module;

[0029] 31. Third local monitoring module;

[0030] 40. First monitoring power supply module;

[0031] 41. First watchdog module; 42. First power supply diagnostic module;

[0032] 50. Second monitoring power supply module;

[0033] 51. Second watchdog module; 52. Second power supply diagnostic module;

[0034] 60. Third monitoring power supply module;

[0035] 61. Third watchdog module; 62. Third power supply diagnostic module;

[0036] 70. Intelligent driving peripheral modules;

[0037] 80. Cockpit peripheral modules. Detailed Implementation

[0038] It should be noted that, unless otherwise specified, the embodiments and features described in this application can be combined with each other. The present invention will now be described in detail with reference to the accompanying drawings and embodiments.

[0039] It should be noted that the terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit the exemplary embodiments according to this application. As used herein, the singular form is intended to include the plural form as well, unless the context clearly indicates otherwise. Furthermore, it should be understood that when the terms "comprising" and / or "including" are used in this specification, they indicate the presence of features, steps, operations, devices, components, and / or combinations thereof.

[0040] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such terms can be used interchangeably where appropriate so that the embodiments of this application described herein can be implemented, for example, in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0041] Exemplary embodiments according to this application will now be described in more detail with reference to the accompanying drawings. However, these exemplary embodiments may be implemented in many different forms and should not be construed as being limited to the embodiments set forth herein. It should be understood that these embodiments are provided so that the disclosure of this application is thorough and complete, and that the concept of these exemplary embodiments is fully conveyed to those skilled in the art. In the drawings, for clarity, the thickness of layers and regions may be exaggerated, and the same reference numerals are used to denote the same devices, and therefore their description will be omitted.

[0042] It should be noted that the main control chip includes a control chip, an intelligent driving main control chip, and a cockpit main control chip. The control chip is the control module 10 of this application, the intelligent driving main control chip is the intelligent driving control module 20 of this application, and the cockpit main control chip is the cockpit control module 30 of this application.

[0043] Example 1

[0044] Combination Figures 1 to 2 As shown, according to a specific embodiment of the present invention, a multi-level hardware monitoring system for vehicles is provided.

[0045] Specifically, such as Figure 1 As shown, a multi-level hardware monitoring system for vehicles includes: a control module 10, which includes a first local monitoring module 11 for monitoring the operating status of the control module 10; an intelligent driving control module 20, with which the control module 10 interacts; and a cockpit control module 30, with which the cockpit control module 30 interacts with both the control module 10 and the intelligent driving control module 20. When the operating status of the control module 10 is determined to be abnormal, the control module 10 generates a control command, which includes at least a shutdown command to control the intelligent driving control module 20 and the cockpit control module 30 to perform a shutdown operation.

[0046] In this embodiment, information is exchanged between the control module 10, the intelligent driving control module 20, and the cockpit control module 30. The first local monitoring module 11 is set to monitor the operating status of the control module 10 in real time, which can promptly detect abnormal situations and take measures quickly through control commands, such as shutdown commands, to avoid potential safety risks and improve the safety and reliability of the vehicle's central computing platform hardware system.

[0047] Optionally, the intelligent driving control module 20 includes: a second local monitoring module 21, which monitors the operating status of the intelligent driving control module 20. If the operating status of the intelligent driving control module 20 is determined to be abnormal, the intelligent driving control module 20 generates a first stop command, which is used to control the control module 10 to stop sending control commands.

[0048] Specifically, if the second local monitoring module 21 detects an abnormal operating status of the intelligent driving control module 20, it reports the abnormality signal to the control module 10. The control module 10 then stops sending control commands to the intelligent driving control module 20, reports the abnormal information to the vehicle controller, and attempts to restart the intelligent driving control module 20 until it functions normally. If the request fails after a period of time, the control module 10 prompts the user to take safety measures such as pulling over, and finally restarts all main control chips. This multi-level hardware monitoring system ensures that the intelligent driving control module 20 and the cockpit control module 30 receive timely intervention in abnormal situations, thereby reducing the possibility of malfunctions.

[0049] Optionally, the cockpit control module 30 includes a third local monitoring module 31, which monitors the operating status of the cockpit control module 30. If the operating status of the cockpit control module 30 is determined to be abnormal, the cockpit control module 30 generates a second stop command, which is used to control the control module 10 to stop sending control commands.

[0050] Specifically, when the third local monitoring module 31 detects an abnormal operating status of the cockpit control module 30, it reports the abnormality signal to the control module 10. The control module 10 then stops sending control commands to the cockpit control module 30, reports the abnormal information to the vehicle controller, and attempts to restart the cockpit control module 30 until it functions normally. If the request fails after a period of time, the control module 10 prompts the user to take safety measures such as pulling over, and finally restarts all main control chips. This multi-level hardware monitoring system ensures that the intelligent driving control module 20 and the cockpit control module 30 receive timely intervention in abnormal situations, thereby reducing the possibility of malfunctions.

[0051] Optionally, if the operating state of the intelligent driving control module 20 is determined to be abnormal, the intelligent driving control module 20 generates a first alarm command, which is used to control the cockpit control module 30 to perform an alarm operation. If the operating state of the cockpit control module 30 is determined to be abnormal, the cockpit control module 30 generates a second alarm command, which is used to control the intelligent driving control module 20 to perform an alarm operation.

[0052] Specifically, the intelligent driving control module 20 and the cockpit control module 30 exchange information, and the alarm operation includes audible and visual alarms, voice alarms, etc. Through this alarm mechanism, it can be ensured that when the intelligent driving control module 20 or the cockpit control module 30 is abnormal, the system can promptly notify the driver or relevant personnel, thereby avoiding potential safety hazards.

[0053] Optionally, the multi-level hardware monitoring system for the vehicle further includes a first monitoring power module 40, which supplies power to the control module 10. The first monitoring power module 40 includes a first watchdog module 41, which monitors the operating status of the control module 10. If the operating status of the control module 10 is determined to be abnormal, the first watchdog module 41 generates a first reset command, which controls the control module 10 to perform a reset operation.

[0054] Specifically, the first monitoring power module 40 is responsible for providing safe power to the control module 10. The first monitoring power module 40 monitors the operating status of the control module 10 through the first watchdog module 41. If the control module 10 malfunctions, the first monitoring power module 40 resets the control module 10, causing it to restart and restore a safe and reliable operating state. This automatic monitoring and reset mechanism can reduce downtime and maintenance costs caused by system failures, thereby improving vehicle utilization efficiency.

[0055] Optionally, the first monitoring power module 40 further includes a first power diagnostic module 42, which is used to monitor the power status of the first monitoring power module 40. If it is determined that the power status of the first monitoring power module 40 is subject to at least one of overcurrent, overvoltage, and overtemperature, the first power diagnostic module 42 generates a first self-reset command, which is used to control the first power diagnostic module 42 to perform a self-reset operation.

[0056] The first power supply diagnostic module 42 monitors power chip for faults such as over-temperature, over-current, and exceeding voltage output accuracy range, and has a self-reset function. The design of the first monitoring power supply module 40 effectively improves the stability, safety, and reliability of the system, while also reducing maintenance costs and improving system availability.

[0057] Optionally, the multi-level hardware monitoring system for the vehicle also includes a second monitoring power module 50, which supplies power to the intelligent driving control module 20. The second monitoring power module 50 includes a second watchdog module 51, which monitors the operating status of the intelligent driving control module 20. If the operating status of the intelligent driving control module 20 is determined to be abnormal, the second watchdog module 51 generates a second reset command, which controls the intelligent driving control module 20 to perform a reset operation.

[0058] Specifically, the second monitoring power module 50 is responsible for providing safe power to the intelligent driving control module 20. The second monitoring power module 50 monitors the operating status of the intelligent driving control module 20 through the second watchdog module 51. If the intelligent driving control module 20 malfunctions, the second monitoring power module 50 resets the intelligent driving control module 20, causing it to restart and restore a safe and reliable operating state. This automatic monitoring and reset mechanism can reduce downtime and maintenance costs caused by system failures, improving vehicle utilization efficiency.

[0059] Optionally, the second monitoring power module 50 further includes a second power diagnostic module 52, which is used to monitor the power status of the second monitoring power module 50. If it is determined that the power status of the second monitoring power module 50 is subject to at least one of overcurrent, overvoltage, and overtemperature, the second power diagnostic module 52 generates a second self-reset command, which is used to control the second power diagnostic module 52 to perform a self-reset operation.

[0060] Specifically, the second power supply diagnostic module 52 monitors for faults in the second monitoring power supply module 50, such as over-temperature, over-current, and exceeding the voltage output accuracy range, and has a self-reset function. The design of the second power supply diagnostic module 52 effectively improves the stability, safety, and reliability of the system, while also reducing maintenance costs and improving system availability.

[0061] Optionally, the multi-level hardware monitoring system for the vehicle also includes a third monitoring power module 60, which supplies power to the cockpit control module 30. The third monitoring power module 60 includes a third watchdog module 61, which monitors the operating status of the cockpit control module 30. If the operating status of the cockpit control module 30 is determined to be abnormal, the third watchdog module 61 generates a third reset command, which controls the cockpit control module 30 to perform a reset operation.

[0062] Specifically, the third monitoring power module 60 is responsible for providing safe power to the cockpit control module 30. The third monitoring power module 60 monitors the operating status of the cockpit control module 30 through the third watchdog module 61. If the cockpit control module 30 malfunctions, the third monitoring power module 60 resets the cockpit control module 30, causing it to restart and restore a safe and reliable operating state. This automatic monitoring and reset mechanism can reduce downtime and maintenance costs caused by system failures, improving vehicle utilization efficiency.

[0063] Optionally, the third monitoring power module 60 further includes a third power diagnostic module 62, which is used to monitor the power status of the third monitoring power module 60. If it is determined that the power status of the third monitoring power module 60 is subject to at least one of overcurrent, overvoltage, and overtemperature, the third power diagnostic module 62 generates a third self-reset command, which is used to control the third power diagnostic module 62 to perform a self-reset operation.

[0064] Specifically, the third power supply diagnostic module 62 monitors for faults in the third monitoring power supply module 60, such as over-temperature, over-current, and exceeding the voltage output accuracy range, and has a self-reset function. The design of the third power supply diagnostic module 62 effectively improves the stability, safety, and reliability of the system, while also reducing maintenance costs and improving system availability.

[0065] The first monitoring power module 40 controls the second monitoring power module 50 and the third monitoring power module 60. If the first monitoring power module 40 malfunctions, the second monitoring power module 50 and the third monitoring power module 60 are shut down to ensure that the intelligent driving control module and the minimum system are in a safe and reliable state, as well as to ensure that the cockpit control module and the minimum system are in a safe and reliable state.

[0066] Optionally, the multi-level hardware monitoring system for the vehicle also includes an intelligent driving peripheral module 70. When the intelligent driving control module 20 is determined to be in an abnormal operating state, the intelligent driving control module 20 generates a first shutdown command, which controls the intelligent driving peripheral module 70 to perform a shutdown operation. Through real-time monitoring and fault diagnosis, the failure rate of the intelligent driving control module 20 and the intelligent driving peripheral module 70 can be reduced.

[0067] Optionally, the multi-level hardware monitoring system for the vehicle also includes a cockpit peripheral module 80. If the cockpit control module 30 is found to be in an abnormal operating state, the cockpit control module 30 generates a second shutdown command, which controls the cockpit peripheral module 80 to perform a shutdown operation. Through real-time monitoring and fault diagnosis, the failure rate of the cockpit control module 30 and the cockpit peripheral module 80 can be reduced.

[0068] Example 2

[0069] According to another aspect of the present invention, a vehicle is provided, including a multi-level hardware monitoring system for the vehicle, which is the multi-level hardware monitoring system for the vehicle described in the above embodiment. The multi-level hardware monitoring system for the vehicle includes: a control module 10, which includes a first local monitoring module 11 for monitoring the operating status of the control module 10; an intelligent driving control module 20, with which the control module 10 interacts; and a cockpit control module 30, with which it interacts with both the control module 10 and the intelligent driving control module 20. When the operating status of the control module 10 is determined to be abnormal, the control module 10 generates a control command, which includes at least a shutdown command for controlling the intelligent driving control module 20 and the cockpit control module 30 to perform a shutdown operation. Information is exchanged between the control module 10, the intelligent driving control module 20, and the cockpit control module 30. The first local monitoring module 11 monitors the operating status of the control module 10 in real time, which can promptly detect abnormalities and take swift measures through control commands, such as shutdown commands, to avoid potential safety risks and improve the safety and reliability of the vehicle's central computing platform hardware system.

[0070] Example 3

[0071] In another embodiment of this application, a multi-level hardware monitoring method for vehicles is provided, such as... Figure 2 As shown, the specific steps are as follows:

[0072] S1: The first monitoring power module 40 is powered on and begins monitoring the control module 10.

[0073] S2: Control module 10 completes initialization and begins operation, monitoring the intelligent driving system and cockpit system.

[0074] S31: The second monitoring power module 50 is powered on and begins monitoring the intelligent driving control module 20.

[0075] S32: The third monitoring power module 60 is powered on and begins monitoring the cockpit control module 30.

[0076] S311: The intelligent driving control module 20 has completed initialization and started working. It begins monitoring the safety status of the minimum intelligent driving system and the safety status of the cockpit system.

[0077] S321: The cockpit control module 30 has completed initialization and started working, starting to monitor the minimum safety status of the cockpit system and the safety status of the intelligent driving system.

[0078] As can be seen from the above description, the embodiments of the present invention achieve the following technical effects:

[0079] 1. This invention proposes a multi-level hardware security monitoring scheme for central computing, which improves the security and reliability of the central computing platform hardware system.

[0080] 2. This invention provides a monitoring scheme strategy between main control chips (control chip, intelligent driving control chip, and cockpit control chip). In the event of a failure of any chip, there is a corresponding system-level processing mechanism that will not output incorrect instructions to the intelligent driving function and cockpit function, thereby improving the fault information exchange between main control chips and the safety and reliability of system hardware.

[0081] 3. This invention provides a security monitoring mechanism between the main control chip (control chip, intelligent driving control chip, cockpit control chip) and the power monitoring chip, so that each main control chip has internal security monitoring and external power supply security monitoring, thereby improving the operational security of the main control chip system.

[0082] 4. The security monitoring strategy between power monitoring chips provided by the present invention ensures that the first monitoring power module 40 can perform security monitoring on the intelligent driving system monitoring power and the cockpit system monitoring power, and restart the power system in case of abnormality.

[0083] 5. The monitoring power supply used in this invention can achieve self-reset via Watchdog and power supply fault diagnosis status, ensuring that the power chip itself is reset and restored when a fault occurs, thus ensuring that the central computing platform operates in a safe state.

[0084] For ease of description, spatial relative terms such as "above," "on top of," "on the upper surface of," "above," etc., are used herein to describe the spatial positional relationship of a device or feature as shown in the figures to other devices or features. It should be understood that spatial relative terms are intended to encompass different orientations in use or operation beyond the orientation of the device as described in the figures. For example, if the device in the figures were inverted, a device described as "above" or "on top of" other devices or structures would subsequently be positioned as "below" or "under" other devices or structures. Thus, the exemplary term "above" can include both "above" and "below." The device may also be positioned in other different ways (rotated 90 degrees or in other orientations), and the spatial relative descriptions used herein will be interpreted accordingly.

[0085] In addition to the above, it should be noted that the terms "one embodiment," "another embodiment," and "embodiment" used in this specification refer to specific features, structures, or characteristics described in connection with that embodiment, which are included in at least one embodiment described in the general description of this application. The appearance of the same expression in multiple places in the specification does not necessarily refer to the same embodiment. Furthermore, when a specific feature, structure, or characteristic is described in connection with any embodiment, the intention is to suggest that implementing such a feature, structure, or characteristic in conjunction with other embodiments also falls within the scope of this invention.

[0086] In the above embodiments, the descriptions of each embodiment have different focuses. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions in other embodiments.

[0087] The above description is merely a preferred embodiment of the present invention and is not intended to limit the invention. Various modifications and variations can be made to the present invention by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

Claims

1. A multi-level hardware monitoring system for vehicles, characterized in that, include: The control module (10) includes a first local monitoring module (11), which is used to monitor the operating status of the control module (10). Intelligent driving control module (20), the control module (10) interacts with the intelligent driving control module (20); The cockpit control module (30) interacts with the control module (10) and the intelligent driving control module (20). In the event that the operating state of the control module (10) is determined to be abnormal, the control module (10) generates a control command, wherein the control command includes at least a shutdown command, which is used to control the intelligent driving control module (20) and the cockpit control module (30) to perform a shutdown operation; The intelligent driving control module (20) includes: The second local monitoring module (21) is used to monitor the operating status of the intelligent driving control module (20). When it is determined that the operating status of the intelligent driving control module (20) is abnormal, the intelligent driving control module (20) generates a first stop command. The first stop command is used to control the control module (10) to stop sending the control command. When the second local monitoring module (21) monitors the intelligent driving control module (20) and finds that the operating status is abnormal, it will report the abnormal signal to the control module (10). The control module (10) will stop sending control commands to the intelligent driving control module (20), report the abnormal information to the vehicle controller, and attempt to restart the intelligent driving control module (20) until the intelligent driving control module (20) functions normally. If the request fails after a period of time, the control module (10) will prompt the user to take safety measures to pull over and finally restart all the main control chips. The cockpit control module (30) includes: The third local monitoring module (31) is used to monitor the operating status of the cockpit control module (30). When it is determined that the operating status of the cockpit control module (30) is abnormal, the cockpit control module (30) generates a second stop command. The second stop command is used to control the control module (10) to stop sending the control command. The first monitoring power module (40) is used to supply power to the control module (10); The second monitoring power module (50) is used to supply power to the intelligent driving control module (20); The third monitoring power module (60) is used to supply power to the cockpit control module (30); The first monitoring power module (40) controls the second monitoring power module (50) and the third monitoring power module (60). When it is determined that the first monitoring power module (40) is in an abnormal operating state, the second monitoring power module (50) and the third monitoring power module (60) are shut down. The first monitoring power module (40) includes: The first watchdog module (41) is used to monitor the operating status of the control module (10). When it is determined that the operating status of the control module (10) is abnormal, the first watchdog module (41) generates a first reset instruction. The first reset instruction is used to control the control module (10) to perform a reset operation. Also includes: The first power diagnostic module (42) is used to monitor the power status of the first monitoring power module (40). When it is determined that the power status of the first monitoring power module (40) is at least one of overcurrent, overvoltage, and overtemperature, the first power diagnostic module (42) generates a first self-reset instruction. The first self-reset instruction is used to control the first power diagnostic module (42) to perform a self-reset operation.

2. The multi-level hardware monitoring system for vehicles according to claim 1, characterized in that, If the operating state of the intelligent driving control module (20) is determined to be abnormal, the intelligent driving control module (20) generates a first alarm command, which is used to control the cockpit control module (30) to perform an alarm operation. If the operating state of the cockpit control module (30) is determined to be abnormal, the cockpit control module (30) generates a second alarm command, which is used to control the intelligent driving control module (20) to perform an alarm operation.

3. The multi-level hardware monitoring system for vehicles according to claim 1, characterized in that, The second monitoring power module (50) includes: The second watchdog module (51) is used to monitor the operating status of the intelligent driving control module (20). When it is determined that the operating status of the intelligent driving control module (20) is abnormal, the second watchdog module (51) generates a second reset instruction. The second reset instruction is used to control the intelligent driving control module (20) to perform a reset operation.

4. The multi-level hardware monitoring system for vehicles according to claim 3, characterized in that, The second monitoring power module (50) also includes: The second power diagnostic module (52) is used to monitor the power status of the second monitoring power module (50). When it is determined that the power status of the second monitoring power module (50) is at least one of overcurrent, overvoltage, and overtemperature, the second power diagnostic module (52) generates a second self-reset command. The second self-reset command is used to control the second power diagnostic module (52) to perform a self-reset operation.

5. The multi-level hardware monitoring system for vehicles according to claim 1, characterized in that, The third monitoring power module (60) includes: The third watchdog module (61) is used to monitor the operating status of the cockpit control module (30). When it is determined that the operating status of the cockpit control module (30) is abnormal, the third watchdog module (61) generates a third reset command, which is used to control the cockpit control module (30) to perform a reset operation.

6. The multi-level hardware monitoring system for vehicles according to claim 5, characterized in that, The third monitoring power module (60) also includes: The third power supply diagnostic module (62) is used to monitor the power status of the third monitoring power supply module (60). When it is determined that the power status of the third monitoring power supply module (60) has at least one of overcurrent, overvoltage, and overtemperature, the third power supply diagnostic module (62) generates a third self-reset command. The third self-reset command is used to control the third power supply diagnostic module (62) to perform a self-reset operation.

7. The multi-level hardware monitoring system for vehicles according to claim 1, characterized in that, The multi-level hardware monitoring system for vehicles also includes a smart driving peripheral module (70). When it is determined that the operating state of the smart driving control module (20) is abnormal, the smart driving control module (20) generates a first shutdown command, which is used to control the smart driving peripheral module (70) to perform a shutdown operation.

8. The multi-level hardware monitoring system for vehicles according to claim 1, characterized in that, The multi-level hardware monitoring system for vehicles also includes a cockpit peripheral module (80). When the cockpit control module (30) is determined to be in an abnormal operating state, the cockpit control module (30) generates a second shutdown command, which is used to control the cockpit peripheral module (80) to perform a shutdown operation.

9. A vehicle, comprising a multi-level hardware monitoring system for the vehicle, characterized in that, The multi-level hardware monitoring system for vehicles is the multi-level hardware monitoring system for vehicles as described in any one of claims 1 to 8.

Images