A watchdog control system and vehicle

By introducing an arbitration module and impedance adjustment into the watchdog control system, the problem of the MCU failing to feed the watchdog on time was solved, ensuring that the MCU can feed the watchdog on time even in high-temperature environments, thus improving vehicle operation safety.

CN118778592BActive Publication Date: 2026-03-24DONGFENG MOTOR GRP
View PDF 1 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2024-06-13
Publication Date
2026-03-24

AI Technical Summary

Technical Problem

In existing technologies, the watchdog timer fails to function properly because the MCU cannot feed the watchdog on time, making it impossible to accurately detect the MCU's operating status and affecting vehicle safety.

Method used

By introducing a watchdog window configuration arbitration module into the watchdog control system, the current temperature is obtained based on the MCU's environmental flag, the watchdog window configuration cycle is adjusted, and the watchdog feeding time is adjusted using impedance, ensuring that the MCU can feed the watchdog on time even in high-temperature environments.

Benefits of technology

Ensure that the MCU can feed the watchdog on time even in high-temperature environments, avoid watchdog failure, and improve vehicle operation safety.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN118778592B_ABST
    Figure CN118778592B_ABST
Patent Text Reader

Abstract

The application provides a watchdog control system and a vehicle, comprising: a watchdog window configuration arbitration module determines that an MCU is located in a target environment, and sends an environment identifier to a watchdog window configuration module; the watchdog window configuration module is used for acquiring a current temperature under the triggering of the environment identifier, and determining a watchdog window configuration strategy according to the current temperature; the watchdog window configuration strategy is used for generating a watchdog window configuration period corresponding to the target environment, and the target environment comprises a high-temperature environment and a normal environment; and a watchdog window configuration arbitration switch module is used for turning on a corresponding impedance based on the watchdog window configuration strategy. Thus, since the watchdog window configuration module is arranged, even if the MCU is located in the high-temperature environment, the watchdog window configuration module can reconfigure a new watchdog window configuration period for the watchdog according to the actual temperature, so that the MCU will not miss the feeding period, the running condition of the MCU can be accurately detected, and the running safety of the vehicle is improved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This application relates to the field of vehicle safety control technology, and in particular to a watchdog control system and a vehicle. Background Technology

[0002] The Automotive Safety Integration Level (ASIL) B of the functional safety standard ISO 26262 for automotive electronics requires vehicles to be equipped with a window watchdog with an independent clock to monitor the program flow of the microcontroller unit (MCU) inside the controller.

[0003] The watchdog timer needs to be precisely timed, but unexpected factors can occur in practical applications (such as external memory overheating causing the MCU to take too long to erase the external memory, causing the MCU to miss the watchdog timer window, resulting in the watchdog malfunctioning and reporting an error, making it impossible to accurately detect the MCU's operating status, and affecting vehicle operating safety). Summary of the Invention

[0004] To address the problems existing in the prior art, this invention provides a control system and vehicle that implements a watchdog timer, thereby solving or partially solving the technical problem in the prior art where the watchdog timer fails to malfunction and report errors due to the MCU's inability to feed the watchdog on time, which in turn makes it impossible to accurately detect the MCU's operating status and affects the vehicle's operational safety.

[0005] A first aspect of the present invention provides a watchdog control system, the system comprising: a microcontroller (MCU), a system-on-a-chip (SOC), and a watchdog window configuration arbitration switch module; wherein, the MCU includes a watchdog window configuration arbitration module; the SOC includes a watchdog window configuration module; and,

[0006] The watchdog window configuration arbitration module is used to determine that the MCU is located in the target environment and send the environment identifier to the watchdog window configuration module;

[0007] The watchdog window configuration module is used to obtain the current temperature when the environment identifier is triggered, and determine the watchdog window configuration strategy based on the current temperature; the watchdog window configuration strategy is used to generate the watchdog window configuration cycle corresponding to the target environment, the target environment including high temperature environment or normal environment;

[0008] The watchdog window configuration arbitration switch module is used to turn on the corresponding impedance based on the watchdog window configuration strategy.

[0009] In the above scheme, the system further includes: an external memory; the watchdog window configuration arbitration module determines that the MCU is located in the target environment, including:

[0010] If it is determined that there is a remote over-the-air (OTA) upgrade between the MCU and the external memory, or if it is determined that the external memory is located in a high-temperature environment, then it is determined that the MCU is located in the high-temperature environment.

[0011] Accordingly, the environmental identifier includes: an OTA upgrade status identifier or a temperature identifier corresponding to a high-temperature environment; the watchdog window configuration arbitration module is also used for:

[0012] Send the OTA upgrade status identifier or the high temperature environment identifier to the watchdog window configuration module.

[0013] In the above scheme, the watchdog window configuration arbitration module determines that the MCU is located in the high-temperature environment, including:

[0014] Based on the model of the external storage device, the system searches a preset mapping file for the temperature threshold range corresponding to the high-temperature environment. If the current temperature of the external storage device is determined to be within the temperature threshold range, then the external storage device is determined to be located in a high-temperature environment.

[0015] In the above scheme, the watchdog window configuration arbitration module determines that the MCU is located in the target environment, including:

[0016] If it is determined that there is no remote OTA upgrade between the MCU and the external memory, and that the external memory is not in a high-temperature environment, then the MCU is determined to be in a normal environment.

[0017] Accordingly, the environmental identifier includes: an OTA not upgraded status identifier or a temperature identifier corresponding to a normal environment; the watchdog window configuration arbitration module is also used for:

[0018] The OTA not upgraded status indicator or the temperature indicator corresponding to the normal environment is sent to the watchdog window configuration module.

[0019] In the above scheme, the system further includes: an impedance for configuring the watchdog window configuration period; the watchdog window configuration module is specifically used for:

[0020] Obtain the temperature threshold range corresponding to the high-temperature environment and the number of impedances; the resistance value of each impedance and the corresponding different watchdog window configuration period;

[0021] The temperature threshold range is divided into multiple sub-temperature intervals based on the number of impedances; each impedance corresponds to one sub-temperature interval.

[0022] Based on the current temperature, find the corresponding target sub-temperature range among all sub-temperature ranges;

[0023] The target impedance is located based on the target sub-temperature range, and the watchdog window configuration signal is generated based on the target impedance; the watchdog window configuration signal includes the number of the target impedance.

[0024] In the above scheme, the watchdog window configuration module is further used to: send the watchdog window configuration signal to the watchdog configuration arbitration switch module;

[0025] The watchdog arbitration switch module is used to control the connection of the target impedance according to the target impedance number in the watchdog window configuration signal, and send the watchdog window configuration period corresponding to the target impedance to the watchdog.

[0026] In the above scheme, after the watchdog window configuration module determines the watchdog window configuration strategy based on the current temperature, it is further used for:

[0027] The watchdog window configuration period corresponding to the target impedance is sent to the watchdog window configuration arbitration module.

[0028] In the above scheme, the system further includes: a heat-conducting medium connected to one side of the external memory, and the heat-conducting medium connected to an external air-cooled housing.

[0029] In the above scheme, the system further includes a temperature sensor, which is located on the other side of the external memory.

[0030] A second aspect of the invention provides a vehicle comprising the watchdog control system described in any one of the first aspects.

[0031] This invention provides a watchdog control system and a vehicle. The system includes a microcontroller (MCU), a system-on-a-chip (SOC), and a watchdog window configuration arbitration switch module. The MCU includes a watchdog window configuration arbitration module, and the SOC includes a watchdog window configuration module. The watchdog window configuration arbitration module determines that the MCU is located in a target environment and sends an environment identifier to the watchdog window configuration module. The watchdog window configuration module acquires the current temperature upon triggering the environment identifier and determines a watchdog window configuration strategy based on the current temperature. The watchdog window configuration strategy generates a watchdog window configuration cycle corresponding to the target environment, which includes high-temperature and normal environments. The watchdog window configuration arbitration switch module conducts the corresponding impedance based on the watchdog window configuration strategy. Thus, with a watchdog window configuration module in the SOC, even if the MCU is in a high-temperature environment, the watchdog window configuration module can reconfigure a new watchdog window configuration cycle based on the actual temperature, ensuring that the MCU does not miss the watchdog cycle and thus accurately detects the MCU's operating status, improving vehicle operating safety. Attached Figure Description

[0032] Various other advantages and benefits will become apparent to those skilled in the art upon reading the following detailed description of preferred embodiments. The accompanying drawings are for illustrative purposes only and are not intended to limit the invention. Furthermore, the same reference numerals denote the same parts throughout the drawings. In the drawings:

[0033] Figure 1 A schematic diagram showing the overall structure and signal flow of a watchdog control system according to an embodiment of the present invention is shown.

[0034] Figure 2 Another schematic diagram of a watchdog control system according to an embodiment of the present invention is shown. Detailed Implementation

[0035] Exemplary embodiments of the present disclosure will now be described in more detail with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be implemented in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.

[0036] This invention provides a watchdog control system. To better understand the technical solution of this invention, the main purpose of a watchdog is first introduced here. The main function of a watchdog is to monitor the operating status of the MCU and trigger a protection mechanism when the MCU malfunctions or fails, thereby ensuring the stability and reliability of the entire vehicle control system.

[0037] Under normal circumstances, the MCU needs to send a signal within a specified time interval (the watchdog window configuration period). This behavior is simply called "feeding the dog" to prevent the watchdog timer from triggering a system restart.

[0038] The watchdog timer for windows requires precise feeding times, but in practical applications, the MCU may encounter the following issues that prevent it from feeding the watchdog on time:

[0039] In the first scenario, when the external memory (external storage chip) is in a high-temperature environment, the MCU's erase time for the external memory will be prolonged. At this time, the MCU will be interrupted and unable to perform the watchdog timer operation, thus missing the watchdog timer window, causing the watchdog timer to report an error, and the MCU will be reset.

[0040] In the second scenario, when the MCU undergoes a remote upgrade (OTA, Over-the-Air), it exchanges a large amount of data with the external memory, causing the external memory to heat up rapidly. During this time, the MCU is not performing any functions, and therefore cannot perform the watchdog timer operation, thus missing the watchdog timer window, causing a watchdog error, and the MCU is reset.

[0041] Based on this, the present invention provides a watchdog control system to ensure that the MCU can feed the watchdog on time in high-temperature environments. Figure 1 As shown, the system includes: a microcontroller (MCU), an on-chip processing system (SOC), and a watchdog window configuration arbitration switch module 11; the MCU includes: a watchdog window configuration arbitration module 12; the SOC includes a watchdog window configuration module 13; wherein,

[0042] The watchdog window configuration arbitration module 12 is used to determine that the MCU is in the target environment and send the environment identifier to the watchdog window configuration module 13;

[0043] The watchdog window configuration module 13 is used to obtain the current temperature when triggered by an environmental identifier, and determine the watchdog window configuration strategy based on the current temperature. The watchdog window configuration strategy is used to generate the watchdog window configuration cycle corresponding to the target environment, which includes a high-temperature environment or a normal environment.

[0044] The watchdog window configuration arbitration switch module 11 is used to turn on the corresponding impedance based on the watchdog window configuration strategy.

[0045] refer to Figure 1 and Figure 2 The system also includes: an external memory 14, a temperature sensor 15, and a thermally conductive medium 16; wherein,

[0046] Temperature sensor 15 is located on one side of external memory 14 and is used to collect the temperature of external memory 14. Thermal medium 16 is connected to one side of external memory 14 and is connected to external air-cooled housing 17.

[0047] Since the MCU itself is also a heat source, the external memory 14 will be placed in a position far away from the MCU; at the same time, the heat conduction medium 16 will be used to directly contact the external memory 14 to transfer heat to the air-cooled housing 17, thereby reducing the temperature of the external memory 14.

[0048] During normal system operation, the watchdog window configuration arbitration module 12 needs to determine whether the MCU is in a high-temperature environment or a normal environment. In one implementation, the watchdog window configuration arbitration module 12 determines that the MCU is in the target environment by including:

[0049] If it is determined that there is a remote upgrade (OTA) action between the MCU and the external memory 14, or if it is determined that the external memory 14 is in a high-temperature environment, then it is determined that the MCU is in a high-temperature environment.

[0050] Accordingly, environmental identifiers include: OTA upgrade status identifiers or temperature identifiers corresponding to high-temperature environments; the watchdog window configuration arbitration module 12 is also used for:

[0051] Send the OTA upgrade status flag or the temperature flag corresponding to the high temperature environment to the watchdog window configuration module 13.

[0052] In one implementation, the watchdog window configuration arbitration module 12 determines that the MCU is located in the target environment, including:

[0053] If it is determined that there is no remote upgrade (OTA) action between the MCU and the external memory 14, and that the external memory 14 is not in a high-temperature environment, then the MCU is determined to be in a normal environment.

[0054] Accordingly, environmental indicators include: an OTA-not-upgraded status indicator or a temperature indicator corresponding to a normal environment; the watchdog window configuration arbitration module 12 is also used for:

[0055] Send the OTA not upgraded status flag or the temperature flag corresponding to the normal environment to the watchdog window configuration module 13.

[0056] In one implementation, the watchdog window configuration arbitration module 12 determines that the MCU is located in the high-temperature environment, including:

[0057] Based on the model of the external storage device 14, the system searches a preset mapping file for the temperature threshold range corresponding to a high-temperature environment. If the current temperature of the external storage device 14 is determined to be within the temperature threshold range, then the external storage device 14 is determined to be in a high-temperature environment. The mapping file stores the correspondence between temperature identifiers and temperature threshold ranges. The temperature identifiers corresponding to high-temperature environments are different from those corresponding to normal environments.

[0058] Specifically, during vehicle operation, the temperature sensor 15 can collect the current temperature of the external storage 14 in real time, and the watchdog window configuration arbitration module 12 can determine whether it is a high-temperature scenario based on the current temperature.

[0059] Since different models of external memory 14 can withstand different temperatures, their corresponding temperature thresholds in high-temperature environments also differ. Therefore, this invention pre-defines a mapping file based on the model of the external memory 14, storing the correspondence between temperature identifiers and temperature threshold ranges.

[0060] For example, suppose the temperature threshold range for a certain model of external memory 14 in a high-temperature environment is 90℃~110℃, and the temperature label for the high-temperature environment can be 1; the temperature threshold range for a normal environment is 0~90℃ (excluding 90), and the temperature label for the normal environment can be 0.

[0061] If the watchdog window configuration arbitration module 12 determines that the current temperature is within the temperature threshold range corresponding to the high temperature environment, then it is determined that the MCU is in a high temperature environment.

[0062] Similarly, if the watchdog window configuration arbitration module 12 determines that the current temperature is within the temperature threshold range corresponding to the normal environment, then it is determined that the MCU is in the normal environment.

[0063] Additionally, as mentioned above, if there is an OTA action between the MCU and the external memory 14, the OTA module in the MCU will notify the watchdog window configuration arbitration module 12 to perform OTA. The OTA module will send the OTA upgrade status flag to the watchdog window configuration arbitration module 12, and the watchdog window configuration arbitration module 12 will determine that the MCU is in a high-temperature environment at this time.

[0064] Similarly, if there is no OTA action between the MCU and the external memory 14, the OTA module in the MCU will notify the watchdog window configuration arbitration module 12 that no OTA is being performed. The OTA module will send the OTA not upgraded status flag to the watchdog window configuration arbitration module 12, and the watchdog window configuration arbitration module 12 will determine that the MCU is in a normal environment at this time.

[0065] The watchdog timer configuration period required for an MCU operating in a high-temperature environment differs from that required for an MCU operating in a normal environment. Understandably, in a normal environment, the MCU can operate according to its predetermined timing and feed the watchdog timer on time, allowing for a shorter watchdog timer configuration period. However, in a high-temperature environment, the MCU may not be able to feed the watchdog timer in time, necessitating a longer watchdog timer configuration period.

[0066] For example, when the MCU is in a normal environment, the watchdog window configuration period can be 1ms, meaning the MCU will perform a watchdog feed operation every 1ms; when the MCU is in a high-temperature environment, the watchdog window configuration period can be 5min, meaning the MCU will perform a watchdog feed operation every 5min.

[0067] Specifically, this invention configures the watchdog window configuration period by adjusting different impedances. (Continue to refer to...) Figure 1 The system also includes: impedances (R1~Rn) for configuring the watchdog window configuration period, and a watchdog window configuration module 13, specifically used for:

[0068] Obtain the temperature threshold range and the number of impedances corresponding to the high-temperature environment; the resistance value of each impedance and the corresponding watchdog window configuration period;

[0069] The temperature threshold range is divided into multiple sub-temperature intervals based on the number of impedances; each impedance corresponds to one sub-temperature interval.

[0070] Find the corresponding target sub-temperature range among all sub-temperature ranges based on the current temperature;

[0071] Find the corresponding target impedance based on the target sub-temperature range, and generate a watchdog window configuration signal based on the target impedance; the watchdog window configuration signal includes the target impedance number.

[0072] Specifically, the watchdog timer in this invention is a hardware watchdog. When designing the watchdog chip, corresponding datasheets exist, which record the correspondence between the watchdog configuration cycle and the resistance value. Therefore, when configuring impedances in the control system of this invention, the resistance value of each impedance can be determined by referring to the datasheets.

[0073] When the temperature is high, the watchdog timer window configuration period needs to be longer; if the temperature is normal, the watchdog timer window configuration period can be shorter. Therefore, there is a corresponding relationship between temperature and watchdog timer window configuration period. So, if the current temperature is obtained, the required watchdog timer window configuration period can be determined based on the current temperature. And since there is a corresponding relationship between watchdog timer window configuration period and resistance value, the required resistance value can also be determined accordingly.

[0074] For example, the impedance corresponding to a high-temperature environment can be R1, and the impedance corresponding to a normal environment can be R2, with different resistance values ​​for R1 and R2.

[0075] To further improve the configuration accuracy of the watchdog window configuration cycle, for high-temperature environments, this invention divides the temperature threshold range corresponding to the high-temperature environment into multiple sub-temperature intervals, each sub-temperature interval corresponding to an impedance. This can include multiple R1s (e.g., R11 to R1n). Once the target sub-temperature interval to which the current temperature belongs is determined, the impedance corresponding to the target sub-temperature interval can be found, and then a watchdog window configuration signal can be generated based on the target impedance.

[0076] For example, assuming the temperature threshold range corresponding to a high-temperature environment is 90℃ to 100℃, and this temperature threshold range is divided into 10 intervals, the corresponding sub-temperature intervals are (90, 91], (91, 92], (92, 93], (93, 94], (94, 95], (95, 96], (96, 97], (97, 98], (98, 99], and (99, 100). Then R1 can include 10 impedances (R10 to R19), each impedance corresponding to a sub-temperature interval, R10 corresponding to (90, 91], R11 corresponding to (91, 92], ..., R19 corresponding to (99, 100).

[0077] If the current temperature is 92.5℃, which falls within the third sub-temperature range, then a watchdog window configuration signal is generated based on the impedance R12 corresponding to the third sub-temperature range; the watchdog window configuration signal includes the impedance number R12.

[0078] The watchdog window configuration module 13 is also used to send the watchdog window configuration signal and the watchdog window configuration period corresponding to the target impedance to the watchdog configuration arbitration switch module 11;

[0079] The watchdog arbitration switch module 11 is used to control the connection of the target impedance according to the target impedance number in the watchdog window configuration signal, and send the watchdog window configuration period corresponding to the target impedance to the watchdog 18. In this way, the watchdog 18 can know that it needs to receive the watchdog feed signal according to the new watchdog window configuration period.

[0080] Similarly, after determining the watchdog window configuration strategy based on the current temperature, the watchdog window configuration module 13 is also used for:

[0081] The watchdog window configuration period corresponding to the target impedance is sent to the watchdog window configuration arbitration module 12. In this way, the watchdog window configuration arbitration module 12 can know that a watchdog feed signal needs to be sent according to the new watchdog window configuration period.

[0082] Then, the MCU can send a feeding signal through the watchdog output interface (WGO, Watch DogOut) based on the new watchdog window configuration cycle. The watchdog 18 receives the feeding signal through the watchdog receiver interface (WGI, Watch Dog In) to detect the operation of the MCU. If it is determined that the feeding time does not fall within the time specified in the watchdog window configuration cycle, the MCU is reset through the reset module RESET.

[0083] In this way, by setting up a watchdog window configuration module 13 in the system-on-a-chip (SoC), even if the MCU is in a high-temperature environment, the watchdog window configuration module 13 can reconfigure a new watchdog window configuration cycle for the watchdog 18 according to the actual temperature (high temperature), thereby ensuring that the MCU does not miss the watchdog feeding cycle, thus accurately detecting the MCU's operating status and improving vehicle operation safety. Similarly, when the MCU returns to a normal environment, the watchdog window configuration module 13 can also reconfigure a suitable watchdog window configuration cycle for the watchdog 18 according to the actual temperature (normal temperature), ensuring that the MCU does not miss the watchdog feeding cycle.

[0084] Based on the inventive concept provided in the foregoing embodiments, the present invention also provides a vehicle, which includes the watchdog control system mentioned above. The specific structure and implementation logic of the watchdog control system can be referred to above, and therefore will not be repeated here.

[0085] Through one or more embodiments of the present invention, the present invention has the following beneficial effects or advantages:

[0086] This invention provides a watchdog control system and a vehicle. The system includes a microcontroller (MCU), a system-on-a-chip (SOC), and a watchdog window configuration arbitration switch module. The MCU includes a watchdog window configuration arbitration module, and the SOC includes a watchdog window configuration module. The watchdog window configuration arbitration module determines that the MCU is located in a target environment and sends an environment identifier to the watchdog window configuration module. The watchdog window configuration module acquires the current temperature upon triggering the environment identifier and determines a watchdog window configuration strategy based on the current temperature. The watchdog window configuration strategy generates a watchdog window configuration cycle corresponding to the target environment, which includes high-temperature and normal environments. The watchdog window configuration arbitration switch module conducts the corresponding impedance based on the watchdog window configuration strategy. Thus, with a watchdog window configuration module in the SOC, even if the MCU is in a high-temperature environment, the watchdog window configuration module can reconfigure a new watchdog window configuration cycle based on the actual temperature, ensuring that the MCU does not miss the watchdog cycle and thus accurately detects the MCU's operating status, improving vehicle operating safety.

[0087] Although preferred embodiments of this application have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments as well as all changes and modifications falling within the scope of this application.

[0088] The above description is merely a preferred embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

Claims

1. A watchdog control system, characterized in that, The system includes: a microcontroller (MCU), a system-on-a-chip (SOC), and a watchdog window configuration arbitration switch module; the MCU includes a watchdog window configuration arbitration module; the SOC includes a watchdog window configuration module; wherein... The watchdog window configuration arbitration module is used to determine that the MCU is located in the target environment and send the environment identifier to the watchdog window configuration module; The watchdog window configuration module is used to obtain the current temperature when the environment identifier is triggered, and determine the watchdog window configuration strategy based on the current temperature; the watchdog window configuration strategy is used to generate the watchdog window configuration cycle corresponding to the target environment, the target environment including high temperature environment or normal environment; The watchdog window configuration arbitration switch module is used to turn on the corresponding impedance based on the watchdog window configuration strategy. The system further includes: an impedance for configuring the watchdog window configuration period; the watchdog window configuration module is specifically used for: Obtain the temperature threshold range corresponding to the high-temperature environment and the number of impedances; the resistance value of each impedance and the corresponding different watchdog window configuration period; The temperature threshold range is divided into multiple sub-temperature intervals based on the number of impedances; each impedance corresponds to one sub-temperature interval. Based on the current temperature, find the corresponding target sub-temperature range among all sub-temperature ranges; The target impedance is located based on the target sub-temperature range, and the watchdog window configuration signal is generated based on the target impedance; the watchdog window configuration signal includes the number of the target impedance.

2. The system as described in claim 1, characterized in that, The system also includes: an external storage device; the watchdog window configuration arbitration module determines that the MCU is located in the target environment, including: If it is determined that there is a remote over-the-air (OTA) upgrade between the MCU and the external memory, or if it is determined that the external memory is located in a high-temperature environment, then it is determined that the MCU is located in the high-temperature environment. Accordingly, the environmental identifier includes: an OTA upgrade status identifier or a temperature identifier corresponding to a high-temperature environment; the watchdog window configuration arbitration module is also used for: Send the OTA upgrade status identifier or the temperature identifier corresponding to the high-temperature environment to the watchdog window configuration module.

3. The system as described in claim 2, characterized in that, The watchdog window configuration arbitration module determines that the MCU is located in the high-temperature environment, including: Based on the model of the external storage device, the system searches a preset mapping file for the temperature threshold range corresponding to the high-temperature environment. If the current temperature of the external storage device is determined to be within the temperature threshold range, then the external storage device is determined to be located in a high-temperature environment.

4. The system as described in claim 2, characterized in that, The watchdog window configuration arbitration module determines that the MCU is located in the target environment, including: If it is determined that there is no remote OTA upgrade between the MCU and the external memory, and that the external memory is not in a high-temperature environment, then the MCU is determined to be in a normal environment. Accordingly, the environmental identifier includes: an OTA not upgraded status identifier or a temperature identifier corresponding to a normal environment; the watchdog window configuration arbitration module is also used for: The OTA not upgraded status indicator or the temperature indicator corresponding to the normal environment is sent to the watchdog window configuration module.

5. The system as described in claim 1, characterized in that, The watchdog window configuration module is also used to: send the watchdog window configuration signal to the watchdog window configuration arbitration switch module; The watchdog window configuration arbitration switch module is used to control the connection of the target impedance according to the target impedance number in the watchdog window configuration signal, and send the watchdog window configuration period corresponding to the target impedance to the watchdog.

6. The system as described in claim 1, characterized in that, After determining the watchdog window configuration strategy based on the current temperature, the watchdog window configuration module is also used for: The watchdog window configuration period corresponding to the target impedance is sent to the watchdog window configuration arbitration module.

7. The system as described in claim 2, characterized in that, The system also includes a heat-conducting medium connected to one side of the external storage device, and the heat-conducting medium is connected to an external air-cooled housing.

8. The system as described in claim 2, characterized in that, The system also includes a temperature sensor located on the other side of the external storage device.

9. A vehicle, characterized in that, The vehicle includes a watchdog control system as described in any one of claims 1 to 8.

Citation Information

Patent Citations

  • Watchdog circuit providing a temperature-dependant signal for a microcontroller of an ELV

    CN101743523A