Domain controller startup management circuit, method, MCU, domain controller and vehicle

Abstract

The present invention relates to the field of vehicle control technology, and provides a domain controller startup management circuit, method, MCU, domain controller and vehicle. The control module generates power supply instructions for multiple stages according to preset timing requirements and detects the power supply status of the functional module based on the power supply status signal; the power management circuit converts the power supply voltage based on the power supply instructions for multiple stages, obtains multiple power supply voltages in sequence, and generates multiple power supply status signals; the control module generates a mode selection instruction for controlling the SOC to run the Boot stage when the SOC is powered on normally, and detects the running status of the SOC in the Boot stage; when the running status in the Boot stage is abnormal, a restart SOC instruction is generated. The present invention controls the power-on and Boot stages of the SOC through the control module, and the ASIL level of the control module is higher than the ASIL level of the SOC, with low control cost and high efficiency, thereby improving the security and stability of the domain controller startup management.

Description

Technical Field

[0001] The present invention relates to the field of vehicle control technology, and in particular to a domain controller startup management circuit, method, MCU, domain controller and vehicle. Background Art

[0002] With the continuous development of electric vehicle control technology, Advanced Driving Assistance System (ADAS) domain controllers are now able to handle key tasks in the process of intelligent driving and autonomous driving, including perceiving the environment, planning driving paths, determining positions, and making decisions, while controlling the vehicle in real time, significantly improving driving comfort and safety.

[0003] In the design of ADAS domain controllers, the system-on-chip (SOC) is usually the core component to provide the necessary computing power. However, due to the multi-core structure of the SOC itself and its complex power system design, the control cost is high and the efficiency is low, which affects the safety and stability of the domain controller. Summary of the invention

[0004] The present invention provides a domain controller startup management circuit, method, MCU, domain controller and vehicle, which are used to solve the defects of the prior art that the SOC control cost is high, the efficiency is low, and the safety and stability of the domain controller are affected. The present invention controls the power-on and Boot stages of the SOC through a control module, the ASIL level of the control module is higher than the ASIL level of the SOC, the control cost is low and the efficiency is high, and the safety and stability of the domain controller startup management are improved.

[0005] The present invention provides a domain controller startup management circuit, the domain controller includes a SOC; the SOC includes a plurality of functional modules; the SOC is normally powered on when the plurality of functional modules are all powered on; the power supply of the plurality of functional modules meets the preset timing requirements; the domain controller startup management circuit includes a control module and a power management circuit; the ASIL level of the control module is higher than the ASIL level of the SOC; the control module is used to sequentially generate power supply instructions of multiple stages according to the preset timing requirements and detect the power supply status of the functional modules based on a power supply status signal; the power management circuit is used to perform voltage conversion on the power supply voltage based on the power supply instructions of the multiple stages, sequentially obtain multiple power supply voltages, and correspondingly Generate multiple power supply status signals; the power supply instructions of multiple stages correspond one-to-one to the multiple power supply voltages respectively; the multiple power supply voltages correspond one-to-one to the power supply of multiple functional modules respectively; the power supply instruction of the next stage is generated based on the power supply status signal of the current stage; the control module is also used to generate a mode selection instruction for controlling the SOC to run the Boot stage when the SOC is powered on normally, and detect the operating state of the SOC in the Boot stage; the mode selection instruction is an instruction for controlling the storage mode of the Boot stage; when the operating state of the Boot stage is abnormal, generate a restart SOC instruction; the restart SOC instruction is an instruction to control the SOC to power on again.

[0006] According to a domain controller startup management circuit provided by the present invention, the SOC includes a core function module, an additional function module and a peripheral transmission function module; the preset timing requirement is to power the core function module, the additional function module and the peripheral transmission function module in sequence; the control module is an MCU; the MCU is specifically used to sequentially generate a first-stage power supply instruction, a second-stage power supply instruction and a third-stage power supply instruction, and detect the power supply state of the core function module based on the first-stage power supply state signal, detect the power supply state of the additional function module based on the second-stage power supply state signal, and detect the power supply state of the peripheral transmission function module based on the third-stage power supply state signal; the power management circuit includes an integrated voltage conversion module and a voltage stabilization conversion module; the integrated voltage conversion module is used to generate a first-stage power supply instruction based on the first-stage power supply state signal. The power supply voltage is converted to obtain a first-stage power supply voltage, and a first-stage power supply status signal is generated; the first-stage power supply voltage is the voltage for supplying power to the core functional module; the second-stage power supply instruction is generated based on the first-stage power supply status signal; the voltage stabilization conversion module is used to convert the power supply voltage based on the second-stage power supply instruction to obtain the second-stage power supply voltage, and generate a second-stage power supply status signal; the second-stage power supply voltage is the voltage for supplying power to the additional functional module; the third-stage power supply instruction is generated based on the second-stage power supply status signal; the power supply voltage is converted based on the third-stage power supply instruction to obtain the third-stage power supply voltage, and a third-stage power supply status signal is generated; the third-stage power supply voltage is the voltage for supplying power to the peripheral transmission functional module.

[0007] A domain controller startup management circuit provided according to the present invention also includes a first PMIC module; the first PMIC module is used to perform voltage conversion on the power supply voltage based on a vehicle power-on signal to obtain an MCU power supply voltage; the MCU power supply voltage is a voltage for powering the MCU.

[0008] According to a domain controller startup management circuit provided by the present invention, the integrated voltage conversion module is a second PMIC module; the voltage stabilization conversion module includes a first DCDC module, a second DCDC module and a third DCDC module; the first DCDC module is used to perform voltage conversion on the power supply voltage based on a vehicle power-on signal to obtain a conversion voltage; the second DCDC module is used to perform voltage conversion on the conversion voltage based on the second-stage power supply instruction to obtain the second-stage power supply voltage, and generate the second-stage power supply status signal; the third DCDC module is used to perform voltage conversion on the conversion voltage based on the third-stage power supply instruction to obtain the third-stage power supply voltage, and generate the third-stage power supply status signal.

[0009] According to a domain controller startup management circuit provided by the present invention, the MCU is specifically used for: when the SOC is powered on normally, generating a FLASH mode selection instruction for controlling the SOC to run the Boot stage, and detecting the running state of the SOC in the FLASH mode; the FLASH mode selection instruction is an instruction for selecting the FLASH mode; when the running state of the FLASH mode is abnormal, generating a first restart SOC instruction; when the SOC is powered on normally based on the first restart SOC instruction, generating an eMMC mode selection instruction for controlling the SOC to run the Boot stage, and detecting the running state of the SOC in the eMMC mode; the eMMC mode selection instruction is an instruction for selecting the eMMC mode; when the running state of the eMMC mode is abnormal, generating a second restart SOC instruction; when the SOC is powered on normally based on the second restart SOC instruction, generating an SSD mode selection instruction for controlling the SOC to run the Boot stage, and detecting the running state of the SOC in the SSD mode; the SSD mode selection instruction is an instruction for selecting the SSD mode.

[0010] According to a domain controller startup management circuit provided by the present invention, the control module is also used to detect the state of the SOC guiding the Linux operating system to run when the SOC runs the Boot stage normally.

[0011] The present invention also provides a domain controller startup management method, the domain controller includes a SOC; the SOC includes multiple functional modules; the SOC is normally powered on when multiple functional modules are powered on; the power supply of multiple functional modules meets the preset timing requirements; the method includes: generating multiple stages of power supply instructions in sequence according to the preset timing requirements and detecting the power supply status of the functional modules based on power supply status signals; based on the power supply instructions of multiple stages, controlling the power management circuit to perform voltage conversion on the power supply voltage, sequentially obtaining multiple power supply voltages, and causing the power management circuit to generate multiple power supply status signals accordingly; the multiple stages of the power supply instructions are The power supply instructions correspond one-to-one to the multiple power supply voltages respectively; the multiple power supply voltages correspond one-to-one to the power supplies of the multiple functional modules respectively; the power supply instructions for the next stage are generated based on the power supply status signal of the current stage; when the SOC is powered on normally, a mode selection instruction for controlling the SOC to run the Boot stage is generated, and the operating state of the SOC in the Boot stage is detected; the mode selection instruction is an instruction for controlling the storage mode of the Boot stage; when the operating state of the Boot stage is abnormal, a restart SOC instruction is generated; the restart SOC instruction is an instruction for controlling the SOC to power on again.

[0012] The present invention also provides an MCU, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, any of the above-mentioned domain controller startup management methods is implemented.

[0013] The present invention also provides a domain controller, including a SOC and the above-mentioned domain controller startup management circuit.

[0014] The present invention also provides a vehicle, comprising the above-mentioned domain controller or the above-mentioned domain controller startup management circuit or the above-mentioned MCU.

[0015] The present invention provides a domain controller startup management circuit, method, MCU, domain controller and vehicle, wherein the control module sequentially generates power supply instructions for multiple stages according to preset timing requirements and detects the power supply status of the functional module based on the power supply status signal; the power management circuit performs voltage conversion on the power supply voltage based on the power supply instructions for multiple stages, sequentially obtains multiple power supply voltages, and generates multiple power supply status signals accordingly; the control module generates a mode selection instruction for controlling the SOC to run the Boot stage when the SOC is powered on normally, and detects the operating status of the SOC in the Boot stage; and generates a restart SOC instruction when the operating status in the Boot stage is abnormal. The present invention controls the power-on and Boot stages of the SOC through the control module, and the ASIL level of the control module is higher than the ASIL level of the SOC, with low control cost and high efficiency, thereby improving the security and stability of the domain controller startup management. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to more clearly illustrate the technical solutions in the present invention or the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0017] Figure 1 It is a structural schematic diagram of a domain controller startup management circuit provided by the present invention.

[0018] Figure 2 It is a schematic diagram of the principle of the preset timing requirement provided by the present invention.

[0019] Figure 3 It is a schematic diagram of the principle of the SOC power-on process provided by the present invention.

[0020] Figure 4 It is a structural schematic diagram of the eMMC and SSD storage space provided by the present invention.

[0021] Figure 5It is a schematic diagram of the principle of the SOC provided by the present invention running in the Boot stage.

[0022] Figure 6 It is a flow chart of the domain controller startup management method provided by the present invention.

[0023] Figure 7 It is a structural schematic diagram of the MCU provided by the present invention.

[0024] Reference numerals:

[0025] 1: MCU; 2: SOC; 3: first PMIC module; 4: second PMIC module; 5: first DCDC module; 6: second DCDC module; 7: third DCDC module. DETAILED DESCRIPTION

[0026] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the drawings of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0027] With the continuous development of electric vehicle autonomous driving control technology, ADAS domain controllers can realize tasks such as perception, planning, positioning, and decision-making for intelligent driving or autonomous driving, and complete real-time control of vehicles, effectively increasing the comfort and safety of car driving. ADAS domain controllers usually use system-level chips (SOCs) to meet computing power requirements. However, due to the multi-core structure of the SOC itself and its complex power system design, the control cost is high and the efficiency is low, which affects the safety and stability of the domain controller.

[0028] Please refer to Figure 1 , Figure 1 This is a schematic diagram of the structure of the domain controller startup management circuit provided by the present invention.

[0029] The present invention provides a domain controller startup management circuit, the domain controller includes SOC2; SOC2 includes multiple functional modules; SOC2 is normally powered on when multiple functional modules are powered on; the power supply of multiple functional modules meets the preset timing requirements; the domain controller startup management circuit includes a control module and a power management circuit; the ASIL level of the control module is higher than the ASIL level of the SOC2; the control module is used to generate power supply instructions of multiple stages according to the preset timing requirements and detect the power supply status of the functional modules based on the power supply status signal; the power management circuit is used to convert the power supply voltage based on the power supply instructions of multiple stages, obtain multiple power supply voltages in sequence, and Multiple power supply status signals are generated accordingly; power supply instructions of multiple stages correspond one-to-one to multiple power supply voltages respectively; multiple power supply voltages correspond one-to-one to power supplies of multiple functional modules respectively; power supply instructions of the next stage are generated based on the power supply status signal of the current stage; the control module is also used to generate a mode selection instruction for controlling SOC2 to run the Boot stage when SOC2 is powered on normally, and detect the operating status of SOC2 in the Boot stage; the mode selection instruction is an instruction for controlling the storage mode of the Boot stage; when the operating status of the Boot stage is abnormal, a restart SOC2 instruction is generated; the restart SOC2 instruction is an instruction to control SOC2 to power on again.

[0030] In order to improve the safety performance of the controller, a control module with a higher functional safety level is required to cooperate with the power-on and operation of the SOC2 chip. The design of the domain controller startup management circuit is to ensure that the various functional modules of the SOC2 can safely and reliably complete the power supply and power on normally according to the preset timing. The design of this circuit takes into account the requirements for ASIL levels in the automotive industry, where the ASIL level of the control module is higher than that of the SOC2 to provide higher safety protection. The control module generates power supply instructions for multiple stages according to the preset timing requirements. These power supply instructions are sent to the power management circuit through the control module. The control module is also responsible for detecting the power supply status of the functional modules to ensure that the power supply at each stage meets the requirements.

[0031] The power management circuit gradually provides the power supply voltage required at different stages according to the power supply instructions provided by the control module. The power management circuit is also responsible for generating power supply status signals, which are fed back to the control module to monitor the power supply status of each functional module. The power supply instructions of multiple stages correspond to multiple power supply voltages; the multiple power supply voltages correspond to the power supply of multiple functional modules; the power supply instructions of the next stage are generated based on the power supply status signal of the current stage.

[0032] After SOC2 is powered on normally, the control module will generate a mode selection instruction to control SOC2 to enter the Boot phase. In the Boot phase, SOC2 will load the boot program from the preset storage device. The control module will detect the running status of SOC2 in the Boot phase. If an abnormality is detected, such as the boot program cannot be loaded or the execution error, the control module will generate a restart SOC2 instruction; the restart SOC2 instruction is an instruction to control SOC2 to power on again.

[0033] In addition, the control module may be, but is not limited to, MCU1, FPGA (Field-Programmable Gate Array) or CPLD (Complex Programmable Logic Device). MCU1 may be ASIL-D grade.

[0034] The power management circuit may include a voltage conversion module, such as a PMIC (Power Management Integrated Circuit) module or a DCDC (Direct Current to Direct Current Converter) module, which is not particularly limited in the present invention.

[0035] The domain controller startup management circuit of the present invention controls the power-on and Boot stages of SOC2 through the control module, which can ensure that multiple functional modules complete power supply safely and reliably according to the preset timing, and perform fault processing when necessary to ensure that the power supply startup and Boot startup of SOC2 are normal. The ASIL level of the control module is higher than the ASIL level of SOC2, the control cost is low and the efficiency is high, and the security and stability of the domain controller startup management are improved.

[0036] As a preferred embodiment, SOC2 includes a core function module, an additional function module and a peripheral transmission function module; the preset timing requirement is to power the core function module, the additional function module and the peripheral transmission function module in sequence; the control module is MCU1; MCU1 is specifically used to sequentially generate a first-stage power supply instruction, a second-stage power supply instruction and a third-stage power supply instruction, and detect the power supply state of the core function module based on the first-stage power supply state signal, detect the power supply state of the additional function module based on the second-stage power supply state signal, and detect the power supply state of the peripheral transmission function module based on the third-stage power supply state signal; the power management circuit includes an integrated voltage conversion module and a voltage stabilization conversion module; the integrated voltage conversion module is used to stabilize the voltage based on the first-stage power supply instruction. The source voltage is converted into a first-stage power supply voltage, and a first-stage power supply status signal is generated; the first-stage power supply voltage is the voltage for supplying power to the core functional module; the second-stage power supply instruction is generated based on the first-stage power supply status signal; the voltage stabilization conversion module is used to convert the power supply voltage based on the second-stage power supply instruction, obtain the second-stage power supply voltage, and generate the second-stage power supply status signal; the second-stage power supply voltage is the voltage for supplying power to the additional functional module; the third-stage power supply instruction is generated based on the second-stage power supply status signal; the power supply voltage is converted into a third-stage power supply voltage based on the third-stage power supply instruction, and a third-stage power supply status signal is generated; the third-stage power supply voltage is the voltage for supplying power to the peripheral transmission functional module.

[0037] As a preferred embodiment, it also includes a first PMIC module 3; the first PMIC module 3 is used to convert the power supply voltage based on the vehicle power-on signal to obtain the MCU1 power supply voltage; the MCU1 power supply voltage is the voltage for powering the MCU1.

[0038] As a preferred embodiment, the integrated voltage conversion module is a second PMIC module 4; the voltage stabilization conversion module includes a first DCDC module 5, a second DCDC module 6 and a third DCDC module 7; the first DCDC module 5 is used to perform voltage conversion on the power supply voltage based on the vehicle power-on signal to obtain a conversion voltage; the second DCDC module 6 is used to perform voltage conversion on the conversion voltage based on the second-stage power supply instruction to obtain the second-stage power supply voltage, and generate a second-stage power supply status signal; the third DCDC module 7 is used to perform voltage conversion on the conversion voltage based on the third-stage power supply instruction to obtain the third-stage power supply voltage, and generate a third-stage power supply status signal.

[0039] Please refer to Figure 2 , Figure 2 A schematic diagram of the principle of the preset timing requirement provided by the present invention.

[0040] Please refer to Figure 3 , Figure 3A schematic diagram of the principle of the SOC power-on process provided by the present invention.

[0041] The startup of the SOC2 power supply has the requirements of timing and multiple power rails. It is necessary to meet the three groups of power rails and power on in the relevant time sequence. In this embodiment, VCC is the power supply of the domain controller, which is used to provide the power supply voltage; K15 is the enable signal of the domain controller, and K15 is also the signal for the electric vehicle to power on. After the electric vehicle is ignited, K15 (vehicle power-on signal) is set high, and the domain controller enters the startup state (SOC2 power-on), and enters the working state (Boot stage + Linux system stage) after normal startup. The control module is MCU1; the domain controller startup management circuit also includes a first PMIC module 3; the voltage input end of the first PMIC module 3 is connected to the power output end, and the output end of the first PMIC module 3 is connected to the voltage input end of MCU1. After K15 is set high, the first PMIC module 3 converts the power supply VCC into a voltage that can be used for MCU1 to work, and the first PMIC module 3 can also power the peripheral circuits related to MCU1.

[0042] The power management circuit includes an integrated voltage conversion module and a voltage stabilization conversion module. The integrated voltage conversion module is the second PMIC module 4; the voltage stabilization conversion module includes a first DCDC module 5, a second DCDC module 6 and a third DCDC module 7. The voltage input end of the first DCDC module 5 is connected to the power output end, and the output end of the first DCDC module 5 is connected to the voltage input end of the second DCDC module 6 and the voltage input end of the third DCDC module 7 respectively. When K15 is ignited, the first DCDC module 5 also starts working, converting the power supply VCC into a voltage Vm (conversion voltage). Vm can power sensors such as radars and cameras on the one hand; on the other hand, it serves as a power supply for the second DCDC module 6 and the third DCDC module 7. Due to the design of Vm, for the second DCDC module 6 and the third DCDC module 7, the stable input Vm can make the second DCDC module 6 and the third DCDC module 7 work in an ideal working range. PMIC and DCDC are both power conversion chips, and PMIC functions are more complete and more integrated than DCDC. Therefore, the power supply of MCU1 selects the first PMIC module 3 with the same functional safety level ASIL-D for voltage conversion.

[0043] When MCU1 is powered on and works normally, POR_L is first set low, and then the EN1 signal is enabled (generating the first-stage power supply instruction). The voltage input terminal of the second PMIC module 4 is connected to the power output terminal, and the output terminal of the second PMIC module 4 is connected to the voltage input terminal of the core function module (Group1). The second PMIC module 4 performs voltage conversion on the power supply voltage based on the first-stage power supply instruction (EN1) to obtain the first-stage power supply voltage (Vgrp1), and generates a first-stage power supply status signal (PG1). The first-stage power supply voltage is the voltage for powering the core function module. Including MCU1 simultaneously detecting the Power Good pin PG1 of the second PMIC module 4.

[0044] When PG1 is invalid, the circuit of the second PMIC module 4 is re-enabled; when PG1 is valid, the next level of power supply is started, and MCU1 enables EN2 (generates the second stage power supply instruction) with a delay of Td1 according to the timing table. The second DCDC module 6 performs voltage conversion on the conversion voltage based on the second stage power supply instruction (EN2) to obtain the second stage power supply voltage (Vgrp2), and generates the second stage power supply status signal (PG2). The second stage power supply voltage is the voltage for powering the additional functional module (Group2). MCU1 simultaneously detects the Power Good pin PG2 of the second DCDC module 6.

[0045] When PG2 is invalid, the circuit of the second DCDC module 6 is re-enabled; when PG2 is valid, the next level of power supply is started, and MCU1 enables EN3 (generates the third stage power supply instruction) with a delay of Td2 according to the timing table. The third DCDC module 7 performs voltage conversion on the conversion voltage based on the third stage power supply instruction (EN3), obtains the third stage power supply voltage (Vgrp3), and generates the third stage power supply status signal (PG3). The third stage power supply voltage is the voltage for powering the peripheral transmission function module (Group3). MCU1 simultaneously detects the Power Good pin PG3 of the third DCDC module 7.

[0046] When PG3 is invalid, the circuit of the third DCDC module 7 is re-enabled; when PG3 is valid, it indicates that the SOC2 power supply is powered on normally.

[0047] POR_L is the control signal for SOC2 power startup. During the power startup process, POR_L is set low. After the SOC2 power startup is normal, POR_L can be set high after a delay of Td3. POR_L is controlled by MCU1.

[0048] Core functional modules such as CPU (Central Processing Unit), GPU (Graphics Processing Unit), DSP (Digital Signal Processor), etc. are the main computing resources of SOC2, responsible for executing program instructions and processing data. Additional functional modules may include storage controllers (such as memory controllers), dedicated hardware accelerators (such as encryption accelerators, AI accelerators), and other processor cores for specific tasks. These modules enhance the functionality of SOC2, enabling it to perform more complex tasks. Peripheral transmission functional modules include various I / O (Input / Output) interfaces and communication interfaces, such as USB (Universal Serial Bus), SATA (Serial Advanced Technology Attachment), Ethernet, wireless communication modules (Wi-Fi (Wireless Fidelity), Bluetooth, NFC (Near Field Communication), etc.). These modules enable SOC2 to transmit and communicate data with external devices, and the present invention is not particularly limited here.

[0049] The MCU1 , the SOC2 , the first PMIC module 3 , the second PMIC module 4 , the first DCDC module 5 , the second DCDC module 6 and the third DCDC module 7 may all be functional safety ASIL-D level.

[0050] In summary, in this embodiment, the boot process of the domain controller is to power on MCU1 first, and then start SOC2. The boot power management of SOC2 inside the domain controller is controlled by MCU1, which manages the power startup sequence of SOC2, and MCU1 can detect the status of each level of power, which provides favorable guarantees for the correct startup of SOC2.

[0051] As a preferred embodiment, MCU1 is also specifically used for: when SOC2 is powered on normally, generating a FLASH mode selection instruction for controlling SOC2 to run the Boot stage, and detecting the running state of SOC2 in FLASH mode; the FLASH mode selection instruction is an instruction for selecting FLASH mode; when the running state of FLASH mode is abnormal, generating a first restart SOC2 instruction; when SOC2 is powered on normally based on the first restart SOC2 instruction, generating an eMMC mode selection instruction for controlling SOC2 to run the Boot stage, and detecting the running state of SOC2 in eMMC mode; the eMMC mode selection instruction is an instruction for selecting eMMC mode; when the running state of eMMC mode is abnormal, generating a second restart SOC2 instruction; when SOC2 is powered on normally based on the second restart SOC2 instruction, generating an SSD mode selection instruction for controlling SOC2 to run the Boot stage, and detecting the running state of SOC2 in SSD mode; the SSD mode selection instruction is an instruction for selecting SSD mode.

[0052] As a preferred embodiment, the control module is further used to detect the state of SOC2 booting the Linux operating system when SOC2 is running normally in the Boot stage.

[0053] Please refer to Figure 4 , Figure 4 This is a schematic diagram of the structure of the eMMC and SSD storage space provided by the present invention.

[0054] Please refer to Figure 5 , Figure 5 This is a schematic diagram of the principle of the SOC provided by the present invention running in the Boot stage.

[0055] In this embodiment, when the SOC2 power supply is powered on normally, it enters the Boot stage. SOC2 itself has no space for storing Boot and Linux operating system; external memory is required, the default startup file is placed in Flash, and other external memory needs to be opened up by a storage space, a storage space for Boot+Linux. Boot has multiple modes, and the commonly used modes are FLASH mode, eMMC (embedded Multi Media Card) mode and SSD (Solid State Drives) mode. As shown in Table 1, Table 1 is a Boot mode table. The levels of MCU1's control signals C1 and C2 determine the Boot mode of SOC2 (external storage startup), and C1' and C2' are converted to C1 and C2 through level conversion. The two signals are low level, and the default Boot mode of SOC2 is to start from FLASH mode; by setting the levels of MCU1's output pins C1' and C2', the Boot mode of SOC2 is switched.

[0056] In the Boot phase, MCU1 first delays for a period of time, and the delay time is the startup time of Boot+Linux. Since MCU1 and SOC2 work on different power rails, a level conversion circuit is required for signal transmission between the two parties. The S1 signal is generated by SOC2 and is a pulse signal used to indicate whether the startup of SOC2 is normal. When SOC2 has loaded Boot and can boot the operating system, SOC2 generates a fixed-frequency S1 pulse signal to notify MCU1 that SOC2 has started normally. When MCU1 detects that the S1 signal is valid, it means that the SOC2 system has started normally; when S1 is invalid, it means that SOC2 failed to start in FLASH (the operating status in FLASH mode is abnormal) and needs to jump to other storage areas.

[0057] Set C1 high and pull POR_L low at the same time (generate the first restart SOC2 instruction), restart the SOC2 power-on process, delay Ts, and detect whether the S1 signal is valid. When the S1 signal is valid, it means that the SOC2 system has started normally; when the S1 signal is invalid, it means that the SOC2 failed to start in the eMMC (the operating status in the eMMC mode is abnormal) and needs to jump to other storage areas.

[0058] Set C2 high. At this time, because C1 has been set high before, it corresponds to SSD mode. At the same time, pull down POR_L (generate the second restart SOC2 instruction), restart the SOC2 power-on process, delay Ts, and detect whether the S1 signal is valid. When the S1 signal is valid, it means that the SOC2 system has started normally; when the S1 signal is invalid, it means that the SOC2 failed to start in the SSD; this means that the SOC2 startup failed, and MCU1 records the corresponding fault.

[0059] Table 1 Boot mode table

[0060]

[0061] The S2 signal is a pulse signal given to MCU1 when the additional function module program is running when SOC2 is working normally, and is used for MCU1 to monitor the additional functions of SOC2. When the additional function module is running normally, SOC2 generates a fixed frequency pulse signal S2 to notify MCU1 that the additional function module of SOC2 is running normally at this time.

[0062] The operating system may also be Windows, and the present invention does not make any special limitation here.

[0063] SOC2 and FLASH can be connected via SPI (Serial Peripheral Interface), and SOC2 and SSD can be connected via PCIe (peripheral component interconnect express, high-speed serial computer expansion bus standard), and the present invention does not make any special limitation here.

[0064] In summary, in this embodiment, MCU1 can monitor whether SOC2 is working normally, and can promptly notify MCU1 to restart the power startup sequence when there is an internal fault in SOC2 to reset SOC2. The startup of SOC2 requires the boot of Boot and the operation of the Linux operating system. Based on the boot guarantee mechanism, when the system fails to start from Flash, it can jump through MCU1 and start from other storage areas (eMMC, SSD disk), ensuring that the system can start smoothly. MCU1 can monitor the operation of each functional module of SOC2.

[0065] The domain controller startup management method provided by the present invention is described below. The domain controller startup management method described below and the domain controller startup management circuit described above can be referenced to each other.

[0066] Please refer to Figure 6 , Figure 6 A schematic diagram of the process flow of the domain controller startup management method provided by the present invention.

[0067] The present invention also provides a domain controller startup management method, the domain controller includes SOC2; SOC2 includes multiple functional modules; SOC2 is normally powered on when multiple functional modules are powered on; the power supply of multiple functional modules meets the preset timing requirements; the method includes:

[0068] 601: Generate power supply instructions of multiple stages according to preset timing requirements and detect the power supply status of the functional module based on the power supply status signal;

[0069] 602: Based on the power supply instructions of multiple stages, the power management circuit is controlled to perform voltage conversion on the power supply voltage, multiple power supply voltages are obtained in sequence, and the power management circuit is caused to generate multiple power supply status signals accordingly; the power supply instructions of multiple stages correspond to the multiple power supply voltages respectively; the multiple power supply voltages correspond to the power supply of multiple functional modules respectively; the power supply instruction of the next stage is generated based on the power supply status signal of the current stage;

[0070] 603: When SOC2 is powered on normally, a mode selection instruction for controlling SOC2 to run the Boot stage is generated, and the operating status of SOC2 in the Boot stage is detected; the mode selection instruction is an instruction for controlling the storage mode of the Boot stage; when the operating status of the Boot stage is abnormal, a restart SOC2 instruction is generated; the restart SOC2 instruction is an instruction for controlling SOC2 to power on again.

[0071] The domain controller provided by the present invention is described below. The domain controller described below and the domain controller startup management circuit described above can be referenced to each other.

[0072] The present invention also provides a domain controller, including SOC2 and the above-mentioned domain controller startup management circuit.

[0073] The vehicle provided by the present invention is described below. The vehicle described below and the domain controller startup management circuit described above can be referenced to each other.

[0074] The present invention also provides a vehicle, comprising the above-mentioned domain controller or the above-mentioned domain controller startup management circuit or the above-mentioned MCU1.

[0075] Figure 7 An example of a structural diagram of MCU1 is shown below. Figure 7As shown, the MCU1 may include: a processor (processor) 701, a communication interface (Communications Interface) 702, a memory (memory) 703 and a communication bus 704, wherein the processor 701, the communication interface 702, and the memory 703 communicate with each other through the communication bus 704. The processor 701 can call the logic instructions in the memory 703 to execute the domain controller startup management method, and the domain controller includes SOC2; SOC2 includes multiple functional modules; SOC2 is normally powered on when multiple functional modules are powered on; the power supply of multiple functional modules meets the preset timing requirements; the method includes: generating multiple stages of power supply instructions according to the preset timing requirements and detecting the power supply status of the functional module based on the power supply status signal; based on the power supply instructions of multiple stages, controlling the power management circuit to convert the power supply voltage, and obtaining multiple power supply voltages in sequence, and enabling the power management circuit to generate multiple power supply voltages accordingly. status signal; power supply instructions of multiple stages correspond one-to-one to multiple power supply voltages; multiple power supply voltages correspond one-to-one to power supplies of multiple functional modules; power supply instructions of the next stage are generated based on the power supply status signal of the current stage; when SOC2 is powered on normally, a mode selection instruction for controlling SOC2 to run the Boot stage is generated, and the operating status of SOC2 in the Boot stage is detected; the mode selection instruction is an instruction for controlling the storage mode of the Boot stage; when the operating status of the Boot stage is abnormal, a restart SOC2 instruction is generated; the restart SOC2 instruction is an instruction for controlling SOC2 to power on again.

[0076] In addition, the logic instructions in the above-mentioned memory 703 can be implemented in the form of a software functional unit and can be stored in a computer-readable storage medium when it is sold or used as an independent product. Based on such an understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including several instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM, Read-Only Memory), a random access memory (RAM, Random Access Memory), a disk or an optical disk.

[0077] On the other hand, the present invention also provides a computer program product, the computer program product includes a computer program, the computer program can be stored on a non-transitory computer-readable storage medium, when the computer program is executed by a processor, the computer can execute the domain controller startup management method provided by the above methods, the domain controller includes SOC2; SOC2 includes multiple functional modules; SOC2 is normally powered on when multiple functional modules are powered on; the power supply of multiple functional modules meets the preset timing requirements; the method includes: generating multiple stages of power supply instructions according to the preset timing requirements and detecting the power supply status of the functional module based on the power supply status signal; controlling the power management circuit to adjust the power supply voltage based on the power supply instructions of the multiple stages; The voltage conversion is performed in a row, and multiple power supply voltages are obtained in sequence, and the power management circuit generates multiple power supply status signals accordingly; the power supply instructions of multiple stages correspond to the multiple power supply voltages one by one; the multiple power supply voltages correspond to the power supply of multiple functional modules one by one; the power supply instruction of the next stage is generated based on the power supply status signal of the current stage; when SOC2 is powered on normally, a mode selection instruction for controlling SOC2 to run the Boot stage is generated, and the operating status of SOC2 in the Boot stage is detected; the mode selection instruction is an instruction for controlling the storage mode of the Boot stage; when the operating status of the Boot stage is abnormal, a restart SOC2 instruction is generated; the restart SOC2 instruction is an instruction for controlling SOC2 to power on again.

[0078] On the other hand, the present invention also provides a non-transitory computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the domain controller startup management method provided by the above methods is implemented, the domain controller includes SOC2; SOC2 includes multiple functional modules; SOC2 is normally powered on when multiple functional modules are powered on; the power supply of multiple functional modules meets the preset timing requirements; the method includes: generating power supply instructions of multiple stages in sequence according to the preset timing requirements and detecting the power supply status of the functional modules based on the power supply status signal; controlling the power management circuit to convert the power supply voltage based on the power supply instructions of multiple stages, and obtaining multiple power supply voltages in sequence voltage, and enables the power management circuit to generate multiple power supply status signals accordingly; the power supply instructions of multiple stages correspond one-to-one to the multiple power supply voltages; the multiple power supply voltages correspond one-to-one to the power supply of multiple functional modules; the power supply instruction of the next stage is generated based on the power supply status signal of the current stage; when SOC2 is powered on normally, a mode selection instruction for controlling SOC2 to run the Boot stage is generated, and the operating state of SOC2 in the Boot stage is detected; the mode selection instruction is an instruction for controlling the storage mode of the Boot stage; when the operating state of the Boot stage is abnormal, a restart SOC2 instruction is generated; the restart SOC2 instruction is an instruction for controlling SOC2 to power on again.

[0079] The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative labor.

[0080] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, can also be implemented by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

[0081] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A domain controller startup management circuit, characterized in that: The domain controller includes a SOC; the SOC includes multiple functional modules; the SOC is normally powered on when multiple functional modules are powered on; the power supply of multiple functional modules meets the preset timing requirements; the domain controller startup management circuit includes a control module and a power management circuit; the ASIL level of the control module is higher than the ASIL level of the SOC; The control module is used to generate power supply instructions of multiple stages according to the preset timing requirement and detect the power supply status of the functional module based on the power supply status signal; The power management circuit is used to perform voltage conversion on the power supply voltage based on the power supply instructions of multiple stages, obtain multiple power supply voltages in time sequence, and generate multiple power supply status signals accordingly; The power supply instructions of the multiple stages correspond one-to-one to the multiple power supply voltages respectively; The plurality of supply voltages correspond one-to-one to the power supplies of the plurality of functional modules; The power supply instruction of the next stage is generated based on the power supply status signal of the current stage; The control module is also used to generate a mode selection instruction for controlling the SOC to run the Boot phase, and detect the running state of the SOC in the Boot phase when the SOC is powered on normally; the mode selection instruction is an instruction for controlling the storage mode of the Boot phase; In case that the running state of the Boot phase is abnormal, a restart SOC instruction is generated; the restart SOC instruction is an instruction for controlling the SOC to power on again; The SOC includes a core function module, an additional function module and a peripheral transmission function module; the preset timing requirement is to supply power to the core function module, the additional function module and the peripheral transmission function module in sequence; The control module is an MCU; the MCU is specifically used to sequentially generate a first-stage power supply instruction, a second-stage power supply instruction, and a third-stage power supply instruction, and detect the power supply status of the core function module based on the first-stage power supply status signal, detect the power supply status of the additional function module based on the second-stage power supply status signal, and detect the power supply status of the peripheral transmission function module based on the third-stage power supply status signal; The power management circuit includes an integrated voltage conversion module and a voltage stabilization conversion module; The integrated voltage conversion module is used to perform voltage conversion on the power supply voltage based on the first-stage power supply instruction to obtain a first-stage power supply voltage and generate a first-stage power supply status signal; the first-stage power supply voltage is a voltage for supplying power to the core functional module; The second-stage power supply instruction is generated based on the first-stage power supply status signal; The voltage stabilization conversion module is used to perform voltage conversion on the power supply voltage based on the second-stage power supply instruction to obtain a second-stage power supply voltage and generate a second-stage power supply status signal; the second-stage power supply voltage is a voltage for supplying power to the additional functional module; The third-stage power supply instruction is generated based on the second-stage power supply status signal; the power supply voltage is converted based on the third-stage power supply instruction to obtain a third-stage power supply voltage, and a third-stage power supply status signal is generated; the third-stage power supply voltage is a voltage for supplying power to the peripheral transmission function module; It also includes a first PMIC module; the first PMIC module is used to perform voltage conversion on the power supply voltage based on the vehicle power-on signal to obtain an MCU power supply voltage; the MCU power supply voltage is a voltage for powering the MCU; The integrated voltage conversion module is a second PMIC module; the voltage stabilization conversion module includes a first DCDC module, a second DCDC module and a third DCDC module; The first DCDC module is used to perform voltage conversion on the power supply voltage based on the vehicle power-on signal to obtain a conversion voltage; The second DCDC module is used to perform voltage conversion on the conversion voltage based on the second stage power supply instruction to obtain the second stage power supply voltage and generate the second stage power supply state signal; The third DCDC module is used to perform voltage conversion on the conversion voltage based on the third stage power supply instruction to obtain the third stage power supply voltage and generate the third stage power supply status signal.

2. The domain controller startup management circuit according to claim 1, characterized in that: The MCU is also specifically used for: When the SOC is powered on normally, a FLASH mode selection instruction for controlling the SOC to run the Boot phase is generated, and the running state of the SOC in the FLASH mode is detected; The FLASH mode selection instruction is an instruction for selecting the FLASH mode; When the running state of the FLASH mode is abnormal, generating a first restart SOC instruction; When the SOC is normally powered on based on the first restart SOC instruction, an eMMC mode selection instruction for controlling the SOC to run the Boot phase is generated, and an operating state of the SOC in the eMMC mode is detected; The eMMC mode selection instruction is an instruction for selecting the eMMC mode; When the running state of the eMMC mode is abnormal, generating a second restart SOC instruction; When the SOC is powered on normally based on the second restart SOC instruction, an SSD mode selection instruction is generated to control the SOC to run the Boot phase, and the running state of the SOC in the SSD mode is detected; the SSD mode selection instruction is an instruction for selecting the SSD mode.

3. The domain controller startup management circuit according to any one of claims 1 to 2, characterized in that: The control module is further configured to detect a state in which the SOC guides the Linux operating system to run when the SOC runs the Boot phase normally.

4. A domain controller startup management method, characterized in that: The domain controller includes a SOC; the SOC includes multiple functional modules; the SOC is normally powered on when multiple functional modules are powered on; the power supply of multiple functional modules meets the preset timing requirements; the method adopts the domain controller startup management circuit according to any one of claims 1 to 3; the domain controller startup management circuit includes a control module and a power management circuit; The ASIL level of the control module is higher than the ASIL level of the SOC; The method comprises: Generate power supply instructions of multiple stages according to the preset timing requirements by the control module and detect the power supply status of the functional module based on the power supply status signal; The power management circuit controls the power management circuit to perform voltage conversion on the power supply voltage based on the power supply instructions of multiple stages, obtains multiple power supply voltages in sequence, and enables the power management circuit to generate multiple power supply status signals accordingly; the power supply instructions of multiple stages correspond one-to-one to the multiple power supply voltages; the multiple power supply voltages correspond one-to-one to the power supply of multiple functional modules; the power supply instruction of the next stage is generated based on the power supply status signal of the current stage; When the SOC is powered on normally, the control module generates a mode selection instruction for controlling the SOC to run the Boot phase, and detects the operating state of the SOC in the Boot phase; the mode selection instruction is an instruction for controlling the storage mode of the Boot phase; when the operating state of the Boot phase is abnormal, a restart SOC instruction is generated; the restart SOC instruction is an instruction for controlling the SOC to power on again; The SOC includes a core function module, an additional function module and a peripheral transmission function module; the preset timing requirement is to supply power to the core function module, the additional function module and the peripheral transmission function module in sequence; The control module is an MCU; the MCU is specifically used to sequentially generate a first-stage power supply instruction, a second-stage power supply instruction, and a third-stage power supply instruction, and detect the power supply status of the core function module based on the first-stage power supply status signal, detect the power supply status of the additional function module based on the second-stage power supply status signal, and detect the power supply status of the peripheral transmission function module based on the third-stage power supply status signal; The power management circuit includes an integrated voltage conversion module and a voltage stabilization conversion module; The integrated voltage conversion module is used to perform voltage conversion on the power supply voltage based on the first-stage power supply instruction to obtain a first-stage power supply voltage and generate a first-stage power supply status signal; the first-stage power supply voltage is a voltage for supplying power to the core functional module; the second-stage power supply instruction is generated based on the first-stage power supply status signal; The voltage stabilization conversion module is used to perform voltage conversion on the power supply voltage based on the second-stage power supply instruction to obtain the second-stage power supply voltage and generate a second-stage power supply status signal; the second-stage power supply voltage is a voltage for supplying power to the additional functional module; the third-stage power supply instruction is generated based on the second-stage power supply status signal; based on the third-stage power supply instruction, the power supply voltage is converted to obtain the third-stage power supply voltage and generate a third-stage power supply status signal; the third-stage power supply voltage is a voltage for supplying power to the peripheral transmission functional module; The domain controller startup management circuit also includes a first PMIC module; The method further comprises: The first PMIC module performs voltage conversion on the power supply voltage based on a vehicle power-on signal to obtain an MCU power supply voltage; the MCU power supply voltage is a voltage for supplying power to the MCU; The integrated voltage conversion module is a second PMIC module; the voltage stabilization conversion module includes a first DCDC module, a second DCDC module and a third DCDC module; The first DCDC module is used to perform voltage conversion on the power supply voltage based on the vehicle power-on signal to obtain a conversion voltage; The second DCDC module is used to perform voltage conversion on the conversion voltage based on the second stage power supply instruction to obtain the second stage power supply voltage and generate the second stage power supply state signal; The third DCDC module is used to perform voltage conversion on the conversion voltage based on the third stage power supply instruction to obtain the third stage power supply voltage and generate the third stage power supply status signal.

5. An MCU, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the domain controller startup management method as claimed in claim 4 is implemented.

6. A domain controller, characterized in that: It includes a SOC and also includes a domain controller startup management circuit as described in any one of claims 1 to 3.

7. A vehicle, characterized in that: It includes the domain controller described in claim 6 or the domain controller startup management circuit described in any one of claims 1 to 3 or the MCU described in claim 5.

Images