High voltage emergency power off protection control method, system, device and readable storage medium

Abstract

A high-voltage emergency power-off protection control method, system, device and readable storage medium relate to the field of automotive technology, specifically including performing a vehicle speed rationality check based on an acquired vehicle speed signal and a preset first vehicle speed signal threshold; when the vehicle speed rationality check result is a failure, controlling the first vehicle speed signal to drop to a preset second vehicle speed signal threshold until the vehicle speed rationality check result is a success; performing a power-off rationality check based on the consistency of an acquired target signal, wherein the target signal is any one of a collision signal, an emergency power-off switch signal and an emergency power-off instruction signal; when the power-off rationality check result is a failure, controlling the high-voltage emergency power-off protection based on the vehicle speed signal; when the power-off rationality check result is a success, controlling the high voltage to be cut off based on the target signal. The present application realizes the consideration of the rationality of the power-off demand during a high-voltage emergency power-off, thereby avoiding situations that endanger the driver's safety.

Description

Technical Field

[0001] The present application relates to the field of automotive technology, and in particular to a high-voltage emergency power-off protection control method, system, device, and readable storage medium. Background Art

[0002] With the development of new energy vehicle technology, the safety requirements for high-voltage systems are increasing. In related technologies, vehicle high-voltage disconnect systems need to quickly disconnect the high-voltage circuit in an emergency to ensure the safety of the driver and passengers. This is usually achieved by controlling the power battery collision safety switch, an independent high-voltage emergency power-off switch, or a high-voltage interlock switch. In other words, by physically disconnecting the high-voltage relay to achieve the purpose of rapid power outage.

[0003] However, existing technologies present several technical challenges. Current high-voltage disconnect systems for vehicles, which directly disconnect power in emergencies, fail to assess the rationality of the power-off requirement. This can lead to unexpected power outages or steering failures at high speeds, endangering driver safety. Therefore, a high-voltage emergency disconnection protection control method that considers the rationality of the power-off requirement during a high-voltage emergency disconnection and avoids driver safety hazards is an urgent issue. Summary of the Invention

[0004] The present application provides a high-voltage emergency power-off protection control method, system, device and readable storage medium, which can solve the technical problems existing in the prior art caused by the lack of rational judgment of power-off requirements during high-voltage emergency power-off, resulting in power interruption or steering function failure.

[0005] In a first aspect, an embodiment of the present application provides a high-voltage emergency power-off protection control method, the high-voltage emergency power-off protection control method comprising:

[0006] Performing a vehicle speed rationality check based on the acquired vehicle speed signal and a preset first vehicle speed signal threshold;

[0007] When the vehicle speed rationality check result is failed, controlling the first vehicle speed signal to drop to a preset second vehicle speed signal threshold value until the vehicle speed rationality check result is passed and the first vehicle speed signal threshold value is greater than the second vehicle speed signal threshold value;

[0008] Performing a power-off rationality check based on the consistency of the acquired target signal, wherein the target signal is any one of a collision signal, an emergency power-off switch signal, and an emergency power-off command signal;

[0009] If the power-off rationality check result fails, the high-voltage emergency power-off protection is controlled based on the vehicle speed signal;

[0010] When the power-off rationality check result is passed, the high voltage is cut off based on the target signal control.

[0011] In conjunction with the first aspect, in one embodiment, the vehicle speed signal includes a first vehicle speed signal and a second vehicle speed signal acquired at different locations, and performing a vehicle speed rationality check based on the acquired vehicle speed signal and a preset first vehicle speed signal threshold includes:

[0012] When both the first vehicle speed signal and the second vehicle speed signal are less than a preset first vehicle speed signal threshold and the difference between the first vehicle speed signal and the second vehicle speed signal is less than a preset difference threshold, the vehicle speed rationality check result is determined to be passed;

[0013] When any one of the following conditions is met: the first vehicle speed signal is not less than the preset first vehicle speed signal threshold, the second vehicle speed signal is not less than the preset first vehicle speed signal threshold, and the difference between the first vehicle speed signal and the second vehicle speed signal is not less than the preset difference threshold, the vehicle speed rationality check result is determined to be failed.

[0014] In combination with the first aspect, in one embodiment, when the power-off rationality check result fails, controlling the high-voltage emergency power-off protection based on the vehicle speed signal includes:

[0015] When the power-off rationality check result is failed, determining whether the first vehicle speed signal is greater than a preset second vehicle speed signal threshold;

[0016] If so, the first vehicle speed signal is controlled to drop to a preset second vehicle speed signal threshold, and the high-voltage relay of the entire vehicle is controlled to be urgently cut off;

[0017] If not, the entire vehicle is controlled to urgently cut off the high-voltage relay.

[0018] In conjunction with the first aspect, in one embodiment, the target signal is a collision signal, the collision signal includes a first collision signal and a second collision signal acquired at different positions, and performing a power-off rationality check based on the consistency of the acquired target signals includes:

[0019] If the first collision signal and the second collision signal are both within the preset collision signal threshold range, then the power-off rationality check result is determined to be passed;

[0020] If the first collision signal is not within the preset collision signal threshold range or the second collision signal is not within the preset collision signal threshold range, it is determined that the power-off rationality check result is failed.

[0021] In conjunction with the first aspect, in one embodiment, the target signal is an emergency power-off command signal, the emergency power-off command signal includes a first emergency power-off command signal and a second emergency power-off command signal, the first emergency power-off command signal is obtained by a preset basic function layer, and the second emergency power-off command signal is obtained by a preset software monitoring layer, and the power-off rationality check based on the consistency of the obtained target signals includes:

[0022] If the first emergency power-off command signal and the second emergency power-off command signal are inconsistent, determining that the power-off rationality check result is failed;

[0023] If the first emergency power-off command signal is consistent with the second emergency power-off command signal, it is determined that the power-off rationality check result is passed.

[0024] In a second aspect, an embodiment of the present application provides a high-voltage emergency power-off protection control system, the high-voltage emergency power-off protection control system comprising:

[0025] a first processing module, configured to perform a vehicle speed rationality check based on the acquired vehicle speed signal and a preset first vehicle speed signal threshold;

[0026] a second processing module configured to, when a speed rationality check result fails, control the first speed signal to decrease to a preset second speed signal threshold value, until the speed rationality check result passes and the first speed signal threshold value is greater than the second speed signal threshold value;

[0027] a third processing module, configured to perform a power-off rationality check based on the consistency of an acquired target signal, wherein the target signal is any one of a collision signal, an emergency power-off switch signal, and an emergency power-off command signal;

[0028] a fourth processing module configured to control high-voltage emergency power-off protection based on a vehicle speed signal when a power-off rationality check result fails;

[0029] The fifth processing module is configured to control cutting off the high voltage based on the target signal when the power-off rationality check result is passed.

[0030] In conjunction with the second aspect, in one embodiment, the vehicle speed signal includes a first vehicle speed signal and a second vehicle speed signal acquired at different positions, and the first processing module is specifically configured to:

[0031] When both the first vehicle speed signal and the second vehicle speed signal are less than a preset first vehicle speed signal threshold and the difference between the first vehicle speed signal and the second vehicle speed signal is less than a preset difference threshold, the vehicle speed rationality check result is determined to be passed;

[0032] When any one of the following conditions is met: the first vehicle speed signal is not less than the preset first vehicle speed signal threshold, the second vehicle speed signal is not less than the preset first vehicle speed signal threshold, and the difference between the first vehicle speed signal and the second vehicle speed signal is not less than the preset difference threshold, the vehicle speed rationality check result is determined to be failed.

[0033] In conjunction with the second aspect, in one embodiment, the fourth processing module is specifically configured to:

[0034] When the power-off rationality check result is failed, determining whether the first vehicle speed signal is greater than a preset second vehicle speed signal threshold;

[0035] If so, the first vehicle speed signal is controlled to drop to a preset second vehicle speed signal threshold, and the high-voltage relay of the entire vehicle is controlled to be urgently cut off;

[0036] If not, the entire vehicle is controlled to urgently cut off the high-voltage relay.

[0037] In a third aspect, an embodiment of the present application provides a high-voltage emergency power-off protection control device, which includes a processor, a memory, and a high-voltage emergency power-off protection control program stored on the memory and executable by the processor, wherein when the high-voltage emergency power-off protection control program is executed by the processor, the steps of the high-voltage emergency power-off protection control method as described in any of the foregoing items are implemented.

[0038] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, on which a high-voltage emergency power-off protection control program is stored, wherein when the high-voltage emergency power-off protection control program is executed by a processor, the steps of the high-voltage emergency power-off protection control method as described in any of the foregoing items are implemented.

[0039] The beneficial effects of the technical solutions provided in the embodiments of the present application include:

[0040] A speed rationality check is performed based on the acquired speed signal and the preset first speed signal threshold to ensure that the vehicle's speed signal is within a safe range, thereby avoiding misjudgment due to abnormal speed; when the speed rationality check result is failed, the first speed signal is controlled to drop to the preset second speed signal threshold until the speed rationality check result is passed, and the first speed signal threshold is greater than the second speed signal threshold, to avoid further potential risks; in the case of passing the speed rationality check, the rationality of the power outage is further verified based on the consistency of the acquired target signal, ensuring the rationality of the high-voltage power-off operation and avoiding unnecessary power interruption or steering function failure due to misjudgment; when the power-off rationality check result is failed, the high-voltage emergency power-off protection is controlled based on the speed signal; when the power-off rationality check result is passed, the high voltage is controlled to be cut off based on the target signal. This application avoids the problem of unexpected power interruption or steering function failure when the vehicle is traveling at high speed due to direct high-voltage power outage through the above-mentioned rationality check mechanism, ensures the safety of power-off operation in emergency situations, and maximizes the protection of the driver's safety. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Figure 1 This is a flow chart of an embodiment of a high-voltage emergency power-off protection control method of the present application;

[0042] Figure 2 For this application Figure 1 Detailed flow chart of step S10;

[0043] Figure 3 For this application Figure 1 Detailed flow chart of step S40;

[0044] Figure 4 This is a functional module diagram of an embodiment of a high-voltage emergency power-off protection control system of the present application;

[0045] Figure 5 This is a schematic diagram of the hardware structure of the high-voltage emergency power-off protection control device involved in the embodiment of the present application. DETAILED DESCRIPTION

[0046] In order to enable those skilled in the art to better understand the present invention, the following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0047] In order to make the objectives, technical solutions and advantages of this application clearer, the implementation methods of this application will be further described in detail below with reference to the accompanying drawings.

[0048] In a first aspect, an embodiment of the present application provides a high-voltage emergency power-off protection control method.

[0049] In one embodiment, referring to Figure 1 , Figure 1 This is a flow chart of an embodiment of the high voltage emergency power off protection control method of this application. Figure 1 As shown, the high voltage emergency power off protection control method includes:

[0050] Step S10: Perform a vehicle speed rationality check based on the acquired vehicle speed signal and a preset first vehicle speed signal threshold.

[0051] For example, it can be understood that the vehicle's high-voltage control has three states: high voltage on, low voltage off, and emergency high voltage off. The traditional control strategy is as follows: When the VCU receives a remote power-on or key-on signal, the high-voltage power supply management module controls the high-voltage relay to close according to the established power-on sequence, achieving high voltage on the entire vehicle; when receiving a remote power-off or key-off command, the high-voltage power supply management module controls the high-voltage relay to disconnect according to the established power-off sequence, achieving high voltage off the entire vehicle. When the emergency power-off control module receives a high-voltage interlock disconnection, a valid collision signal, and a valid high-voltage disconnect switch, it controls the emergency high-voltage disconnect relay to open and close, achieving rapid high-voltage off of the entire vehicle. The emergency high-voltage disconnect relay is directly connected in series in the high-voltage circuit. When it disconnects, the high voltage of the entire vehicle is disconnected, enabling rapid and emergency high-voltage off.

[0052] It can be seen that the above control strategy does not perform vehicle speed rationality verification and power-off rationality verification, which may lead to unexpected power interruption or steering function failure when the vehicle is driving at high speed, thereby endangering the driver's safety; the high-voltage emergency power-off protection control method in this application performs rationality verification on the vehicle speed and breakpoint to avoid the above problems.

[0053] It should be noted that the specific value of the preset first vehicle speed signal threshold can be determined according to actual needs and is not limited here. For example, the preset first vehicle speed signal threshold is preferably 30 km / h; the vehicle speed signal can be obtained by a vehicle speed sensor, and then the rationality of the vehicle speed can be verified based on the size relationship between the vehicle speed signal and the vehicle speed signal threshold.

[0054] In this embodiment, it is understood that the input circuit can transmit the collected first and second vehicle speed signals to the processor for logical analysis within 10 μs, so that the processor can perform effective checks within 1 ms after receiving the first and second vehicle speed signals. By comparing the two acquired vehicle speed signals with the first vehicle speed signal threshold, the vehicle speed signals are ensured to be within a reasonable range, which not only improves the stability and reliability of the system but also protects the safety of the vehicle and its occupants.

[0055] It should be noted that before determining the magnitude relationship between the vehicle speed signal and the first vehicle speed signal threshold, the vehicle speed signal can be subjected to message verification, specifically including timeout detection, CRC (Cyclic Redundancy Check), and alive counter verification. Timeout detection is used to check whether the vehicle speed signal is received within a predetermined time; CRC verification verifies errors in data transmission through cyclic redundancy check; and alive counter verification confirms the continuity and real-time nature of data transmission. Message verification ensures that the received vehicle speed signal is valid and reliable, thereby protecting the stability and security of the system.

[0056] It can be understood that the detection strategies corresponding to the timeout detection, CRC check and alive counter check are as follows: a frame of vehicle speed signal is received every 10ms, and a timeout check is performed on the vehicle speed signal. When a frame of signal is not received for a certain period of time, it is determined that the frame of signal is lost and the check fails, and the vehicle speed signal is obtained again; for the vehicle speed signal that passes the timeout check, a CRC check is performed on it. When the CRC check of this frame of signal fails, it is determined that the CRC of this frame of signal is wrong, and the vehicle speed signal is obtained again; for the vehicle speed signal that passes the CRC check, an alive counter check is performed on it. When the alive counter check of this frame of signal fails, it is determined that the alive counter of this frame of signal is wrong, and the vehicle speed signal is obtained again; for the vehicle speed signal that passes the CRC check, a rationality check is performed on it.

[0057] Step S20: When the vehicle speed rationality check result is failed, the first vehicle speed signal is controlled to drop to a preset second vehicle speed signal threshold until the vehicle speed rationality check result is passed, and the first vehicle speed signal threshold is greater than the second vehicle speed signal threshold.

[0058] For example, in an embodiment of the present application, the specific value of the preset second vehicle speed signal threshold can be determined according to actual needs and is not limited here. For example, the preset second vehicle speed signal threshold is preferably 5km / h; specifically, the first vehicle speed signal threshold is a higher vehicle speed and is set when the vehicle is operating normally, which is used to preliminarily determine whether the vehicle is in a high-speed or normal operating state; the second vehicle speed signal threshold is a lower vehicle speed and is lower than the first vehicle speed threshold. When the vehicle speed drops below the second vehicle speed signal threshold (that is, the vehicle speed is less than 5km / h), the speed rationality check result at this time is passed, wherein the vehicle speed can drop directly from the first vehicle speed to the second vehicle speed signal threshold, or it can drop according to a preset gradient; for example, the vehicle speed is 25km / h, and it gradually decreases to the second vehicle speed signal threshold of 5km / h with a preset gradient of 5km / h.

[0059] Step S30: Perform a power-off rationality check based on the consistency of the acquired target signal, where the target signal is any one of a collision signal, an emergency power-off switch signal, and an emergency power-off command signal.

[0060] For example, in the embodiments of the present application, the target signal may be any one of a collision signal, an emergency power-off switch signal, and an emergency power-off command signal. Specifically, the collision signal may be acquired by a collision sensor, i.e., a signal is emitted when a collision event is detected. The collision signal is then acquired by the collision sensor. The emergency power-off switch signal is emitted by the driver or an emergency power-off switch in the vehicle system. The emergency power-off command signal is a command signal emitted by an onboard control system or fault detection system, used to trigger emergency power-off protection.

[0061] Specifically, the system performs a consistency check on two target signals (collision signal and emergency power-off switch signal) acquired by sensors at different locations at the same time. This check determines whether the two signals are within a threshold range and, based on the result, determines whether to initiate a high-voltage power-off operation. This consistency check ensures the system's correct response to actual hazardous situations, improving overall system reliability and stability.

[0062] Step S40: When the power-off rationality check result is failed, the high-voltage emergency power-off protection is controlled based on the vehicle speed signal.

[0063] For example, in this embodiment of the present application, the system continuously monitors the vehicle speed signal to determine the vehicle's motion state. If the power-off rationality check fails, the system uses the vehicle speed signal as key reference information to further determine whether to initiate emergency power-off protection. Using the vehicle speed signal as a basis for this determination can avoid disconnecting high-voltage power in inappropriate circumstances (such as when the vehicle is at high speed), reduce the risk of misoperation, and ensure that the power-off operation is performed under appropriate conditions.

[0064] Step S50: When the power-off rationality check result is passed, the high voltage is cut off based on the target signal control.

[0065] For example, in an embodiment of the present application, the purpose of the power-off rationality check is to verify whether the current system state meets the conditions for cutting off the high voltage power. If the power-off rationality check passes, the control unit issues an instruction to cut off the high voltage power. After receiving this instruction, the high voltage power supply management module will immediately disconnect the high voltage circuit, thereby cutting off the power supply.

[0066] The present application performs a speed rationality check based on the acquired speed signal and the preset first speed signal threshold to ensure that the vehicle's speed signal is within a safe range, thereby avoiding misjudgment due to abnormal speed; when the speed rationality check result is failed, the first speed signal is controlled to drop to the preset second speed signal threshold until the speed rationality check result is passed, and the first speed signal threshold is greater than the second speed signal threshold, to avoid further potential risks; when the speed rationality check passes, the rationality of the power outage is further verified based on the consistency of the acquired target signal, ensuring the rationality of the high-voltage power-off operation and avoiding unnecessary power interruption or steering function failure due to misjudgment; when the power-off rationality check result is failed, the high-voltage emergency power-off protection is controlled based on the speed signal; when the power-off rationality check result is passed, the high voltage is controlled to be cut off based on the target signal. The present application avoids the problem of unexpected power interruption or steering function failure when the vehicle is traveling at high speed due to direct high-voltage power outage through the above-mentioned rationality check mechanism, ensuring the safety of power-off operation in emergency situations and protecting the driver's safety to the greatest extent.

[0067] Furthermore, in one embodiment, referring to Figure 2 As shown, the vehicle speed signal includes a first vehicle speed signal and a second vehicle speed signal obtained at different positions, and the vehicle speed rationality check based on the obtained vehicle speed signal and a preset first vehicle speed signal threshold includes:

[0068] Step S101: When the first vehicle speed signal and the second vehicle speed signal are both less than a preset first vehicle speed signal threshold and the difference between the first vehicle speed signal and the second vehicle speed signal is less than a preset difference threshold, it is determined that the vehicle speed rationality check result passes;

[0069] Step S102: When any one of the following conditions is met: the first vehicle speed signal is not less than the preset first vehicle speed signal threshold, the second vehicle speed signal is not less than the preset first vehicle speed signal threshold, and the difference between the first vehicle speed signal and the second vehicle speed signal is not less than the preset difference threshold, the vehicle speed rationality check result is determined to be failed.

[0070] For example, in the embodiment of the present application, the specific value of the preset difference threshold can be determined according to actual needs and is not limited here. For example, the preset difference threshold is preferably 5%; the vehicle speed signal includes a first vehicle speed signal and a second vehicle speed signal obtained from different locations at the same time. When the first vehicle speed signal and the second vehicle speed signal are both lower than the preset first vehicle speed signal threshold, and the difference between the two signals is less than the preset difference threshold, it indicates that the vehicle speed is in a low speed range and the consistency of the two signals is high, then the vehicle speed rationality check result is determined to be passed. When any of the following situations occurs: the first vehicle speed signal is not less than the preset first vehicle speed signal threshold, the second vehicle speed signal is not less than the preset first vehicle speed signal threshold, the difference between the first vehicle speed signal and the second vehicle speed signal is not less than the preset difference threshold, indicating that the vehicle is in a high-speed state or there is a significant difference between the vehicle speed signals, then the vehicle speed rationality check result is determined to be failed.

[0071] It is understandable that by comparing the two vehicle speed signals and the relationship between the two and the first vehicle speed threshold, the accuracy and consistency of the vehicle speed data can be verified, thereby improving the reliability of the data and avoiding erroneous decisions due to signal anomalies.

[0072] Furthermore, in one embodiment, referring to Figure 3 As shown, when the power-off rationality check result fails, the high-voltage emergency power-off protection is controlled based on the vehicle speed signal, including:

[0073] Step S401: When the power-off rationality check result is failed, determining whether the first vehicle speed signal is greater than a preset second vehicle speed signal threshold;

[0074] Step S4011: If yes, controlling the first vehicle speed signal to drop to a preset second vehicle speed signal threshold, and controlling the entire vehicle to urgently cut off the high-voltage relay;

[0075] Step S4012: If not, control the entire vehicle to urgently cut off the high-voltage relay.

[0076] For example, in an embodiment of the present application, when the power-off rationality check fails, the system determines whether the first vehicle speed signal A is greater than the second vehicle speed signal threshold of 5 km / h. When the first vehicle speed signal A is greater than the preset second vehicle speed signal threshold of 5 km / h, the system controls the vehicle speed signal to decrease to the preset second vehicle speed signal threshold (i.e., enters safety level SS2: torque limit 70% + fault storage + fault alarm) to ensure that when the vehicle is traveling at high speed, the impact can be reduced by first reducing the vehicle speed. Once the vehicle speed signal is successfully reduced to the preset threshold, the system then controls the entire vehicle to emergency cut off the high-voltage relay, thereby achieving power-off protection for the high-voltage system. When the first vehicle speed signal A is less than or equal to the preset second vehicle speed signal threshold of 5 km / h, the system directly controls the entire vehicle to emergency cut off the high-voltage relay (i.e., enters safety level SS1: fault storage + fault alarm), without further decreasing the vehicle speed signal. This means that the vehicle is already at a lower speed or parked, and direct power off can quickly cut off the high-voltage system to ensure safety.

[0077] It is understandable that when the power-off rationality check fails, controlling the high-voltage emergency power-off protection through the vehicle speed signal can effectively reduce the risk of the electrical system; controlling the vehicle speed to decrease at high speeds can reduce the impact on the vehicle's power system during power outages and reduce the impact on the driver.

[0078] Furthermore, in one embodiment, the target signal is a collision signal, and the collision signal includes a first collision signal and a second collision signal acquired at different positions. The power-off rationality check based on the consistency of the acquired target signals includes:

[0079] If the first collision signal and the second collision signal are both within the preset collision signal threshold range, then the power-off rationality check result is determined to be passed;

[0080] If the first collision signal is not within the preset collision signal threshold range or the second collision signal is not within the preset collision signal threshold range, it is determined that the power-off rationality check result is failed.

[0081] For example, in an embodiment of the present application, the preset collision signal threshold range can be determined according to actual needs and is not limited here; the collision signal includes a first collision signal and a second collision signal, both of which are collected by sensors at different positions at the same time. The collision signal reflects whether the system or equipment has suffered a collision or impact at a certain moment.

[0082] Specifically, the input circuit transmits the collected first collision signal and the second collision signal to the processor in 10us for logical judgment. When the processor receives the first collision signal and the second collision signal, the processor performs a valid sensor value check within 1ms; when the first collision signal and the second collision signal are both within the collision signal threshold range, it means that the collision signal is real, then the power-off rationality check result is judged to be passed, and the high voltage can be cut off according to the collision signal control; if one of the first collision signal and the second collision signal is not within the preset threshold range, it means that the collision signal is not real and the fault mode at this time is: the output value of the collision signal sensor is stuck and the collision signal sensor has no output, then the power-off rationality check result is judged to be failed, and the high-voltage emergency power-off protection can be controlled based on the vehicle speed signal. At the same time, the processor outputs a collision signal error indication signal to the safety-related fault processing module.

[0083] It is understood that by detecting the accuracy and consistency of the collision signal, unnecessary power outages due to false collision signals or external interference can be avoided, ensuring that the power-off operation is performed under reasonable collision signal conditions, improving the scientific and rationality of the power-off operation, and reducing operational errors caused by misjudgment. It should be noted that in this application, when the target signal is the emergency power-off switch signal, the corresponding control strategy is consistent with the target signal being a collision signal. For the sake of brevity, this is not detailed here.

[0084] Furthermore, in one embodiment, the target signal is an emergency power-off command signal, the emergency power-off command signal includes a first emergency power-off command signal and a second emergency power-off command signal, the first emergency power-off command signal is obtained by a preset basic function layer, and the second emergency power-off command signal is obtained by a preset software monitoring layer, and the power-off rationality check based on the consistency of the obtained target signals includes:

[0085] If the first emergency power-off command signal and the second emergency power-off command signal are inconsistent, determining that the power-off rationality check result is failed;

[0086] If the first emergency power-off command signal is consistent with the second emergency power-off command signal, it is determined that the power-off rationality check result is passed.

[0087] Exemplarily, in an embodiment of the present application, the first emergency power-off command signal is obtained by the basic function (Lv1) layer of the system, which is responsible for processing the core functions and operations of the system, such as the basic operation control of the vehicle; it can be understood that the first emergency power-off command signal obtained by the Lv1 layer is directly based on the trigger condition and responds without undergoing complex rationality verification. The second emergency power-off command signal is obtained by the software monitoring (Lv2) layer, which is mainly responsible for monitoring the status of the system and can issue commands based on the operating status or abnormal conditions of the system; it can be seen that the second emergency power-off command signal obtained by the Lv2 layer undergoes additional logical analysis and verification, so the second emergency power-off command signal can be used to conduct a more in-depth inspection of the system status to ensure the accuracy and reliability of the signal.

[0088] Specifically, the emergency power-off control module calculates the Lv1 emergency power-off instruction based on its own logic, and the emergency power-off control calculation and monitoring module calculates the Lv2 emergency power-off instruction signal based on the collision signal, the emergency power-off switch signal, and the high-voltage interlock disconnection indication signal. The system compares the first emergency power-off instruction signal from the Lv1 layer with the second emergency power-off instruction signal from the Lv2 layer. If the two signals are consistent, the power-off request is determined to be valid and the power-off rationality check result is passed. The high voltage can be controlled to be cut off according to the emergency power-off instruction signal; if the two signals are inconsistent, the power-off request is determined to be inconsistent with expectations, so the check result is failed. The high-voltage emergency power-off protection can be controlled based on the vehicle speed signal. At the same time, the processor outputs the emergency power-off instruction signal error indication signal to the safety-related fault handling module.

[0089] In a second aspect, an embodiment of the present application also provides a high-voltage emergency power-off protection control system.

[0090] In one embodiment, referring to Figure 4 , Figure 4 This is a functional module diagram of an embodiment of the high voltage emergency power off protection control system of this application. Figure 4 As shown, the high voltage emergency power off protection control system includes:

[0091] a first processing module, configured to perform a vehicle speed rationality check based on the acquired vehicle speed signal and a preset first vehicle speed signal threshold;

[0092] a second processing module configured to, when a speed rationality check result fails, control the first speed signal to decrease to a preset second speed signal threshold value, until the speed rationality check result passes and the first speed signal threshold value is greater than the second speed signal threshold value;

[0093] a third processing module, configured to perform a power-off rationality check based on the consistency of an acquired target signal, wherein the target signal is any one of a collision signal, an emergency power-off switch signal, and an emergency power-off command signal;

[0094] a fourth processing module configured to control high-voltage emergency power-off protection based on a vehicle speed signal when a power-off rationality check result fails;

[0095] The fifth processing module is configured to control cutting off the high voltage based on the target signal when the power-off rationality check result is passed.

[0096] Furthermore, in one embodiment, the vehicle speed signal includes a first vehicle speed signal and a second vehicle speed signal obtained at different positions, and the first processing module is specifically configured to:

[0097] When both the first vehicle speed signal and the second vehicle speed signal are less than a preset first vehicle speed signal threshold and the difference between the first vehicle speed signal and the second vehicle speed signal is less than a preset difference threshold, the vehicle speed rationality check result is determined to be passed;

[0098] When any one of the following conditions is met: the first vehicle speed signal is not less than the preset first vehicle speed signal threshold, the second vehicle speed signal is not less than the preset first vehicle speed signal threshold, and the difference between the first vehicle speed signal and the second vehicle speed signal is not less than the preset difference threshold, the vehicle speed rationality check result is determined to be failed.

[0099] Furthermore, in one embodiment, the fourth processing module is specifically configured to:

[0100] When the power-off rationality check result is failed, determining whether the first vehicle speed signal is greater than a preset second vehicle speed signal threshold;

[0101] If so, the first vehicle speed signal is controlled to drop to a preset second vehicle speed signal threshold, and the high-voltage relay of the entire vehicle is controlled to be urgently cut off;

[0102] If not, the entire vehicle is controlled to urgently cut off the high-voltage relay.

[0103] Furthermore, in one embodiment, the target signal is a collision signal, and the collision signal includes a first collision signal and a second collision signal acquired at different positions. The third processing module is specifically configured to:

[0104] If the first collision signal and the second collision signal are both within the preset collision signal threshold range, then the power-off rationality check result is determined to be passed;

[0105] If the first collision signal is not within the preset collision signal threshold range or the second collision signal is not within the preset collision signal threshold range, it is determined that the power-off rationality check result is failed.

[0106] Furthermore, in one embodiment, the target signal is an emergency power-off command signal, the emergency power-off command signal includes a first emergency power-off command signal and a second emergency power-off command signal, the first emergency power-off command signal is obtained by a preset basic function layer, and the second emergency power-off command signal is obtained by a preset software monitoring layer, and the third processing module is further specifically configured to:

[0107] If the first emergency power-off command signal and the second emergency power-off command signal are inconsistent, determining that the power-off rationality check result is failed;

[0108] If the first emergency power-off command signal is consistent with the second emergency power-off command signal, it is determined that the power-off rationality check result is passed.

[0109] The present application performs a speed rationality check based on the acquired speed signal and a preset first speed signal threshold to ensure that the vehicle's speed signal is within a safe range, thereby avoiding misjudgment due to abnormal speed; when the speed rationality check result is failed, the first speed signal is controlled to drop to a preset second speed signal threshold until the speed rationality check result is passed, and the first speed signal threshold is greater than the second speed signal threshold, to avoid further potential risks; when the speed rationality check passes, the rationality of the power outage is further verified based on the consistency of the acquired target signal, ensuring the rationality of the high-voltage power-off operation and avoiding unnecessary power interruption or steering function failure due to misjudgment; when the power-off rationality check result is failed, the high-voltage emergency power-off protection is controlled based on the speed signal; when the power-off rationality check result is passed, the high voltage is controlled to be cut off based on the target signal. The present application avoids the problem of unexpected power interruption or steering function failure when the vehicle is traveling at high speed due to direct high-voltage power outage through the above-mentioned rationality check mechanism, ensuring the safety of power-off operation in emergency situations and protecting the driver's safety to the greatest extent.

[0110] Among them, the functional implementation of each module in the above-mentioned high-voltage emergency power-off protection control system corresponds to the various steps in the above-mentioned high-voltage emergency power-off protection control method embodiment, and its functions and implementation processes will not be repeated here one by one.

[0111] In a third aspect, an embodiment of the present application provides a high-voltage emergency power-off protection control device, which may be a personal computer (PC), a laptop computer, a server, or other device with data processing capabilities.

[0112] Reference Figure 5 , Figure 5Schematic diagram of the hardware structure of the high-voltage emergency power-off protection control device involved in the embodiment of the present application. In the embodiment of the present application, the high-voltage emergency power-off protection control device may include a processor, a memory, a communication interface, and a communication bus.

[0113] The communication bus may be of any type and is used to interconnect the processor, memory, and communication interface.

[0114] Communication interfaces include input / output (I / O) interfaces, physical interfaces, and logical interfaces, used to interconnect components within the high-voltage emergency power-off protection and control equipment, as well as interfaces used to interconnect the high-voltage emergency power-off protection and control equipment with other devices (such as other computing devices or user devices). Physical interfaces can be Ethernet, fiber, or ATM interfaces; user devices can be displays, keyboards, and other devices.

[0115] The memory can be various types of storage media, such as random access memory (RAM), read-only memory (ROM), non-volatile RAM (NVRAM), flash memory, optical storage, hard disk, programmable ROM (PROM), erasable PROM (EPROM), electrically erasable PROM (EEPROM), etc.

[0116] The processor may be a general-purpose processor that can call a high-voltage emergency power-off protection control program stored in a memory and execute the high-voltage emergency power-off protection control method provided in the embodiments of the present application. For example, the general-purpose processor may be a central processing unit (CPU). The method executed when the high-voltage emergency power-off protection control program is called can refer to the various embodiments of the high-voltage emergency power-off protection control method of the present application and will not be repeated here.

[0117] Those skilled in the art will understand that Figure 5 The hardware structure shown in the figure does not constitute a limitation to the present application and may include more or fewer components than shown in the figure, or a combination of certain components, or a different arrangement of components.

[0118] In a fourth aspect, an embodiment of the present application also provides a readable storage medium.

[0119] The readable storage medium of the present application stores a high-voltage emergency power-off protection control program, wherein when the high-voltage emergency power-off protection control program is executed by the processor, the steps of the high-voltage emergency power-off protection control method as described above are implemented.

[0120] Among them, the method implemented when the high-voltage emergency power-off protection control program is executed can refer to the various embodiments of the high-voltage emergency power-off protection control method of this application, and will not be repeated here.

[0121] The terms "including" and "having" and any variations thereof in the specification and claims of this application and the above-mentioned drawings are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but optionally includes steps or units that are not listed, or optionally includes other steps or units inherent to these processes, methods, products or devices. The terms "first", "second" and "third" are used to distinguish different objects, etc., and do not represent a sequence, nor do they limit the "first", "second" and "third" to different types.

[0122] In the description of the embodiments of this application, the words "exemplary," "for example," or "for example" are used to indicate examples, illustrations, or descriptions. Any embodiment or design described as "exemplary," "for example," or "for example" in the embodiments of this application should not be construed as being preferred or advantageous over other embodiments or designs. Rather, the use of words such as "exemplary," "for example," or "for example" is intended to present the relevant concepts in a concrete manner.

[0123] In the description of the embodiments of the present application, unless otherwise specified, “ / ” means or, for example, A / B can mean A or B; “and / or” in the text is merely a description of the association relationship of associated objects, indicating that three relationships may exist, for example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. In addition, in the description of the embodiments of the present application, “multiple” refers to two or more than two.

[0124] In some processes described in the embodiments of the present application, multiple operations or steps are included that appear in a specific order. However, it should be understood that these operations or steps may not be performed in the order in which they appear in the embodiments of the present application or may be performed in parallel. The sequence numbers of the operations are only used to distinguish between different operations, and the sequence numbers themselves do not represent any order of execution. In addition, these processes may include more or fewer operations, and these operations or steps may be performed in sequence or in parallel, and these operations or steps may be combined.

[0125] It should be noted that the serial numbers of the above-mentioned embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.

[0126] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus the necessary general hardware platform, of course, it can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) as described above, and includes a number of instructions for enabling a terminal device to execute the methods described in each embodiment of the present application.

[0127] The above are only preferred embodiments of the present application and do not limit the patent scope of the present application. Any equivalent structure or equivalent process transformation made using the contents of the present application specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present application.

Claims

1. A high voltage emergency power off protection control method, characterized in that: The high-voltage emergency power-off protection control method comprises: Performing a vehicle speed rationality check based on the acquired vehicle speed signal and a preset first vehicle speed signal threshold; When the vehicle speed rationality check result fails, controlling the vehicle speed to drop to a preset second vehicle speed signal threshold value until the vehicle speed rationality check result passes and the first vehicle speed signal threshold value is greater than the second vehicle speed signal threshold value; Performing a power-off rationality check based on the consistency of the acquired target signal, wherein the target signal is any one of a collision signal, an emergency power-off switch signal, and an emergency power-off command signal; If the power-off rationality check result fails, the high-voltage emergency power-off protection is controlled based on the vehicle speed signal; When the power-off rationality check result is passed, the high voltage is cut off based on the target signal control; Among them, the target signal is an emergency power-off command signal, and the emergency power-off command signal includes a first emergency power-off command signal and a second emergency power-off command signal. The first emergency power-off command signal is obtained by a preset basic function layer, and the second emergency power-off command signal is obtained by a preset software monitoring layer.

2. The high voltage emergency power off protection control method according to claim 1, characterized in that: The vehicle speed signal includes a first vehicle speed signal and a second vehicle speed signal obtained at different locations, and the vehicle speed rationality check based on the obtained vehicle speed signal and a preset first vehicle speed signal threshold includes: When both the first vehicle speed signal and the second vehicle speed signal are less than a preset first vehicle speed signal threshold and the difference between the first vehicle speed signal and the second vehicle speed signal is less than a preset difference threshold, the vehicle speed rationality check result is determined to be passed; When any one of the following conditions is met: the first vehicle speed signal is not less than the preset first vehicle speed signal threshold, the second vehicle speed signal is not less than the preset first vehicle speed signal threshold, and the difference between the first vehicle speed signal and the second vehicle speed signal is not less than the preset difference threshold, the vehicle speed rationality check result is determined to be failed.

3. The high voltage emergency power off protection control method according to claim 2, characterized in that: When the power-off rationality check result fails, the high-voltage emergency power-off protection is controlled based on the vehicle speed signal, including: When the power-off rationality check result is failed, determining whether the first vehicle speed signal is greater than a preset second vehicle speed signal threshold; If so, the first vehicle speed is controlled to drop to a preset second vehicle speed signal threshold, and the entire vehicle is controlled to urgently cut off the high-voltage relay; If not, the entire vehicle is controlled to urgently cut off the high-voltage relay.

4. The high voltage emergency power off protection control method according to claim 1, characterized in that: The target signal is a collision signal, and the collision signal includes a first collision signal and a second collision signal obtained at different positions. The power-off rationality check based on the consistency of the obtained target signals includes: If the first collision signal and the second collision signal are both within the preset collision signal threshold range, then the power-off rationality check result is determined to be passed; If the first collision signal is not within the preset collision signal threshold range or the second collision signal is not within the preset collision signal threshold range, it is determined that the power-off rationality check result is failed.

5. The high voltage emergency power off protection control method according to claim 1, characterized in that: The power-off rationality check based on the consistency of the acquired target signal includes: If the first emergency power-off command signal and the second emergency power-off command signal are inconsistent, determining that the power-off rationality check result is failed; If the first emergency power-off command signal is consistent with the second emergency power-off command signal, it is determined that the power-off rationality check result is passed.

6. A high voltage emergency power off protection control system, characterized in that: The high-voltage emergency power-off protection control system includes: a first processing module, configured to perform a vehicle speed rationality check based on the acquired vehicle speed signal and a preset first vehicle speed signal threshold; a second processing module configured to, when a speed rationality check result fails, control the vehicle speed to decrease to a preset second speed signal threshold value, until the speed rationality check result passes and the first speed signal threshold value is greater than the second speed signal threshold value; a third processing module, configured to perform a power-off rationality check based on the consistency of an acquired target signal, wherein the target signal is any one of a collision signal, an emergency power-off switch signal, and an emergency power-off command signal; a fourth processing module configured to control high-voltage emergency power-off protection based on a vehicle speed signal when a power-off rationality check result fails; a fifth processing module, configured to control cutting off the high voltage based on the target signal when the power-off rationality check result is passed; Wherein, the third processing module is further used for: The target signal is an emergency power-off command signal, which includes a first emergency power-off command signal and a second emergency power-off command signal. The first emergency power-off command signal is obtained by a preset basic function layer, and the second emergency power-off command signal is obtained by a preset software monitoring layer.

7. The high voltage emergency power off protection control system according to claim 6, characterized in that: The vehicle speed signal includes a first vehicle speed signal and a second vehicle speed signal obtained at different positions, and the first processing module is specifically configured to: When both the first vehicle speed signal and the second vehicle speed signal are less than a preset first vehicle speed signal threshold and the difference between the first vehicle speed signal and the second vehicle speed signal is less than a preset difference threshold, the vehicle speed rationality check result is determined to be passed; When any one of the following conditions is met: the first vehicle speed signal is not less than the preset first vehicle speed signal threshold, the second vehicle speed signal is not less than the preset first vehicle speed signal threshold, and the difference between the first vehicle speed signal and the second vehicle speed signal is not less than the preset difference threshold, the vehicle speed rationality check result is determined to be failed.

8. The high voltage emergency power off protection control system according to claim 7, characterized in that: The fourth processing module is specifically configured to: When the power-off rationality check result is failed, determining whether the first vehicle speed signal is greater than a preset second vehicle speed signal threshold; If so, the first vehicle speed is controlled to drop to a preset second vehicle speed signal threshold, and the entire vehicle is controlled to urgently cut off the high-voltage relay; If not, the entire vehicle is controlled to urgently cut off the high-voltage relay.

9. A high voltage emergency power off protection control device, characterized in that: The high-voltage emergency power-off protection control device includes a processor, a memory, and a high-voltage emergency power-off protection control program stored in the memory and executable by the processor, wherein when the high-voltage emergency power-off protection control program is executed by the processor, the steps of the high-voltage emergency power-off protection control method according to any one of claims 1 to 5 are implemented.

10. A computer-readable storage medium, characterized in that The computer-readable storage medium stores a high-voltage emergency power-off protection control program, wherein when the high-voltage emergency power-off protection control program is executed by the processor, the steps of the high-voltage emergency power-off protection control method according to any one of claims 1 to 5 are implemented.

Images