Power supply control method, target domain controller and storage medium

Abstract

The present application provides a power supply control method, a target domain controller and a storage medium, which relate to the fields of autonomous driving and functional safety technology. The method is applied to a target domain controller, which is connected to multiple power supplies; the method includes: determining the autonomous driving level of the autonomous driving system of the target vehicle; if the autonomous driving level is higher than or equal to the target level, determining the effective power supply in the multiple power supplies; if the effective power supply includes a reference power supply, the reference power supply is used to power the target domain controller; if the effective power supply does not include the reference power supply, any of the effective power supplies is used to power the target domain controller. The present application avoids the potential safety hazards of a single power supply method, provides power redundancy for the target domain controller, and ensures that the target domain controller can obtain a stable and reliable power supply when the autonomous driving system is at a critical level.

Description

Technical Field

[0001] The present application relates to the fields of autonomous driving and functional safety technology, and specifically to a power supply control method, a target domain controller and a storage medium. Background Art

[0002] With the development of autonomous driving technology and the continued hot sales of new energy vehicles, more and more vehicles are equipped with autonomous driving systems. The autonomous driving systems of these vehicles have extremely high safety requirements, and the stability of the domain controller, as a core component in safety control, directly determines the reliability of the entire autonomous driving system.

[0003] In this context, the traditional method of providing a single power supply to the domain controller can no longer meet the high requirements of the autonomous driving system for power supply stability and safety. The reason is that once the power supply fails, the entire autonomous driving system may fail immediately, thus affecting the safe operation of the vehicle. Summary of the invention

[0004] In view of this, an embodiment of the present application provides a power supply control method, a target domain controller and a storage medium.

[0005] In a first aspect, an embodiment of the present application provides a power supply control method, which is applied to a target domain controller of a target vehicle, and the target domain controller is connected to multiple power supplies. The method includes: determining the autonomous driving level of the autonomous driving system of the target vehicle; if the autonomous driving level is higher than or equal to the target level, determining an effective power supply among the multiple power supplies, and the effective power supply indicates that it can continuously provide power that meets safety and performance requirements; if the effective power supply includes a reference power supply, the reference power supply is used to power the target domain controller, wherein the reference power supply is pre-set in the multiple power supplies; if the effective power supply does not include the reference power supply, any one of the effective power supplies is used to power the target domain controller.

[0006] In combination with the first aspect, in certain implementations of the first aspect, after the target domain controller is powered by a reference power supply, or after the target domain controller is powered by any of the effective power supplies, it also includes: sending a mode lock instruction to a user interaction module so that the user interaction module responds to the mode lock instruction and disables a power supply policy configuration function in the user interaction module, wherein the power supply policy configuration function is used to allow the target user to set the power supply policy of the target domain controller.

[0007] In combination with the first aspect, in certain implementations of the first aspect, the method also includes: if the autonomous driving level is lower than the target level, determining whether the target user has set the power supply policy of the target domain controller; if set, starting the power supply policy of the target domain controller set by the target user; if not set, detecting whether the voltage values ​​of multiple power supplies are within a target range; if within the target range, using a power supply with a voltage value within the target range to power the target domain controller; if none of them are within the target range, blocking multiple power supplies from powering the target domain controller.

[0008] In combination with the first aspect, in certain implementations of the first aspect, after blocking the multi-way power supply to the target domain controller, it also includes: controlling the target domain controller to enter a functional safety state, and the functional safety state refers to a safety mode that the target domain controller can be in when encountering a fault or danger.

[0009] In combination with the first aspect, in certain implementations of the first aspect, after the target domain controller is powered on, it also includes: monitoring the power supply of key modules, wherein the key modules include at least one of a microprocessor, a communication module and a target functional module; if an abnormality is detected in the power supply of any key module, disconnecting the power supply circuit of the key module with the abnormality, and controlling the target domain controller to enter a functional safety state; after a target time period, sampling electrical parameters in the power supply circuit of the key module with the abnormality, if the sampled electrical parameters are within a preset normal value range, restoring the power supply to the key module with the abnormality, and controlling the target domain controller to exit the functional safety state.

[0010] In combination with the first aspect, in certain implementations of the first aspect, if set, then starting the power supply strategy of the target domain controller set by the target user includes: if the effective power supply includes a reference power supply, then using the reference power supply to power the target domain controller; if the effective power supply does not include the reference power supply, then using any power supply among the effective power supplies to power the target domain controller; or, when the voltage values ​​of multiple power supplies are within a target range, then using the power supply with a voltage value within the target range to power the target domain controller; when the voltage values ​​of multiple power supplies are not within the target range, then blocking the multiple power supplies from powering the target domain controller.

[0011] In combination with the first aspect, in certain implementations of the first aspect, if the effective power supply includes a reference power supply, the target domain controller is powered by the reference power supply, or, if the effective power supply does not include the reference power supply, the target domain controller is powered by any one of the effective power supplies, it also includes: fault monitoring of each power supply channel of the multiple power supplies; if an abnormality is detected in any power supply channel, an alarm message of the abnormal power supply channel is sent.

[0012] In combination with the first aspect, in certain implementations of the first aspect, the reference power source is obtained by marking any one of the multiple power sources as the reference power source.

[0013] In the second aspect, an embodiment of the present application provides a target domain controller, which is connected to multiple power supplies, and the target domain controller includes a power supply arbitration module; the power supply arbitration module is configured to determine the autonomous driving level of the autonomous driving system of the target vehicle; if the autonomous driving level is higher than or equal to the target level, an effective power supply among the multiple power supplies is determined, and the effective power supply indicates that it can continuously provide power that meets safety and performance requirements; if the effective power supply includes a reference power supply, the reference power supply is used to power the target domain controller, wherein the reference power supply is pre-set from the multiple power supplies; if the effective power supply does not include the reference power supply, any power supply among the effective power supplies is used to power the target domain controller.

[0014] In a third aspect, an embodiment of the present application provides a computer-readable storage medium, which stores a computer program, and the computer program is used to execute the power supply control method described in the first aspect.

[0015] In a fourth aspect, an embodiment of the present application provides an electronic device, comprising: a processor; a memory for storing instructions executable by the processor; and the processor is used to execute the power supply control method described in the first aspect.

[0016] In this application, the target domain controller is connected to multiple power supplies, which provides power redundancy for the target domain controller and avoids the potential safety hazards of a single power supply method. The need to check and switch the power supply is determined according to the autonomous driving level of the autonomous driving system, ensuring that the target domain controller obtains a stable and reliable power supply when the autonomous driving system is at a critical level (such as higher than or equal to the target level). By identifying and selecting an effective power supply, it is ensured that the target domain controller can continue to operate in the event of any power failure or performance degradation, thereby ensuring the continuity of the autonomous driving system and the safety of the vehicle. In addition, by setting a baseline power supply and giving priority to it for power supply, the reliability of power management is enhanced. If the baseline power supply is unavailable, it will switch to other effective power supplies. This mechanism achieves power supply redundancy and ensures that the target domain controller can obtain the necessary power support in various situations, thereby improving the safety and reliability of the entire autonomous driving system. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] By describing the embodiments of the present application in more detail in conjunction with the accompanying drawings, the above and other purposes, features and advantages of the present application will become more apparent. The accompanying drawings are used to provide a further understanding of the embodiments of the present application and constitute a part of the specification. Together with the embodiments of the present application, they are used to explain the present application and do not constitute a limitation of the present application. In the accompanying drawings, the same reference numerals generally represent the same components or steps.

[0018] Figure 1 The figure is a flow chart of a power supply control method provided in one embodiment of the present application.

[0019] Figure 2 Shown is a flow chart of a power supply control method provided in another embodiment of the present application.

[0020] Figure 3 Shown is a flow chart of a power supply control method provided in another embodiment of the present application.

[0021] Figure 4 Shown is a module block diagram of a target domain controller provided in an embodiment of the present application.

[0022] Figure 5 Shown is a relationship diagram for monitoring power supply provided by an embodiment of the present application.

[0023] Figure 6 Shown is a schematic structural diagram of a vehicle provided in one embodiment of the present application.

[0024] Figure 7 Shown is a schematic structural diagram of an electronic device provided in one embodiment of the present application. DETAILED DESCRIPTION

[0025] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0026] Figure 1 The figure shows a flow chart of a power supply control method provided by an embodiment of the present application. Exemplarily, the method is applied to a target domain controller of a target vehicle, and the target domain controller is connected to multiple power supplies, so that the redundancy and reliability of the power supplies can be ensured, and when some power supplies fail, the target domain controller can still work normally.

[0027] like Figure 1 As shown, the method includes the following steps.

[0028] Step S110, determining the autonomous driving level of the autonomous driving system of the target vehicle.

[0029] The level of autonomous driving is defined according to the standards of the Society of Automotive Engineers, and is divided into six levels from L0 to L5. Each level represents a different degree of autonomous driving system, as well as the autonomy of the autonomous driving system and the degree of driver participation.

[0030] Specifically, the L0 level means no automation, the driver is fully responsible for all operations of the vehicle, and there is no assistance from autonomous driving functions. The L1 level means driving assistance, the vehicle has a single autonomous driving function, such as adaptive cruise control or lane keeping assist, but the driver must be ready to take over control at any time. The L2 level means partial automation, the vehicle can control acceleration, braking and steering at the same time, but the driver must always monitor the driving situation and be ready to take over at any time. The L3 level means conditional autonomous driving. Under certain conditions, the vehicle can fully control the driving task autonomously, but the driver must be able to take over when the system requests it. The L4 level means highly automated driving. The vehicle can achieve fully automated driving under most environmental conditions without driver intervention, but the driver may need to take over in some special circumstances. The L5 level means fully automated driving. The vehicle can achieve fully automated driving in any environment and conditions without driver intervention, and even without a steering wheel and pedals.

[0031] In the present application, the autonomous driving level can be determined by existing methods. As an exemplary but not limiting embodiment, for example, the position of the lever on the right side of the steering wheel can be stored in advance in correspondence with the autonomous driving level, and the autonomous driving level can be determined by determining the lever position. In other embodiments, the present application can also directly obtain the autonomous driving level.

[0032] Step S120: If the autonomous driving level is higher than or equal to the target level, determining an effective power supply among the multiple power supplies.

[0033] It should be noted that when the autonomous driving level is higher than or equal to the target level, the target vehicle can fully control the driving task autonomously under certain conditions without the intervention of the driver. For example, the target level is L3. At this time, the stability and safety of the power supply are required to be higher, and a more reliable power supply solution is needed to support these advanced functions.

[0034] In this embodiment, the effective power supply means that the power supply that meets the safety and performance requirements can be continuously provided. Exemplarily, the target voltage required for the target domain controller to work normally is determined, and if the voltage value corresponding to the power supply is less than the target voltage, the power supply is determined as an invalid power supply; if the voltage corresponding to the power supply is greater than or equal to the target voltage, the power supply is determined as a valid power supply.

[0035] Step S130: If the effective power supply includes a reference power supply, the reference power supply is used to supply power to the target domain controller.

[0036] The reference power supply is pre-set in the multi-way power supply. Specifically, the reference power supply is obtained by marking any one of the multi-way power supply as the reference power supply. The setting of the reference power supply simplifies the power management logic, making power selection and fault handling more efficient and rapid. That is, when the reference power supply is pre-set, the reference power supply is directly selected for power supply.

[0037] Step S140: If the valid power supplies do not include the reference power supply, any power supply among the valid power supplies is used to supply power to the target domain controller.

[0038] Step S130 and step S140 in this embodiment together constitute a power management strategy, which is intended to ensure that the target domain controller always obtains a stable and reliable power supply.

[0039] Specifically, in step S130, if there is a pre-set reference power supply in the effective power supply, then this reference power supply will be used for power supply first. In step S140, if the effective power supply does not include the reference power supply, the target domain controller is powered by other effective power supplies except the reference power supply in the multiple power supplies. This design ensures that even when there is a problem with the reference power supply, the target domain controller can still obtain power from other available power supplies, thereby ensuring that the target domain controller will not fail due to power supply problems, ensuring the continuous operation of key components of the autonomous driving system. In addition, the method of selecting any effective power supply means that one of multiple effective power supplies can be selected for power supply, which provides flexibility to a certain extent.

[0040] In this embodiment, the target domain controller is connected to multiple power supplies, which provides power redundancy for the target domain controller and avoids the potential safety hazards of a single power supply method. Whether the power supply needs to be checked and switched is determined according to the autonomous driving level of the autonomous driving system, ensuring that the target domain controller obtains a stable and reliable power supply when the autonomous driving system is at a critical level (such as higher than or equal to the target level). By identifying and selecting an effective power supply, it is ensured that the target domain controller can continue to operate in the event of any power failure or performance degradation, thereby ensuring the continuity of the autonomous driving system and the safety of the vehicle. In addition, by setting a reference power supply and giving priority to it for power supply, the reliability of power management is enhanced. If the reference power supply is unavailable, it will switch to other effective power supplies. This mechanism realizes power supply redundancy and ensures that the target domain controller can obtain the necessary power support in various situations, thereby improving the safety and reliability of the entire autonomous driving system.

[0041] exist Figure 1 On the basis of the illustrated embodiment, after the target domain controller is powered by a reference power supply, or after the target domain controller is powered by any of the effective power supplies, it also includes: sending a mode lock instruction to the user interaction module, so that the user interaction module responds to the mode lock instruction and disables the power supply policy configuration function in the user interaction module, wherein the power supply policy configuration function is used to allow the target user to set the power supply policy of the target domain controller.

[0042] Specifically, the power supply policy configuration function is used to allow the target user to set the power supply policy of the target domain controller, that is, the power supply configuration policy function allows the target user to set or change the power supply policy of the target domain controller through the user interaction module. Among them, the user interaction module is an important component in the target vehicle, which is responsible for managing and responding to inputs and commands from the driver, passengers or other components in the target vehicle.

[0043] It should be noted that when the autonomous driving level is higher than or equal to the target level, the driving tasks performed by the autonomous driving system of the target vehicle are more complex, which places higher requirements on the stability and safety of the target vehicle. The target domain controller is responsible for coordinating and managing key aspects of the autonomous driving function, including but not limited to sensor data processing, decision making, and vehicle dynamic control. Therefore, it is particularly important to ensure the stable power supply of the target domain controller. In this case, after the target domain controller is powered by the reference power supply or any of the effective power supplies, if the target user is allowed to change the power supply strategy through the user interaction module, it may bring security risks. For example, the target user may change the settings accidentally or based on a misunderstanding of the vehicle status, resulting in the power supply strategy no longer being suitable for the needs of the current autonomous driving system, thereby affecting the stability and safety of the target vehicle. Alternatively, the target user changes the power supply strategy to use a power supply with a target voltage lower than the normal operation of the target domain controller, but not suitable for the power demand at a higher level of autonomous driving.

[0044] In this embodiment, in order to prevent such potential risks and ensure that the power supply of the target domain controller can continuously and stably support the autonomous driving function when the autonomous driving level is higher than or equal to the target level, a mode lock instruction is sent to the user interaction module after the target domain controller is powered by the reference power supply or any of the effective power supplies to prevent the target user from changing the power supply strategy during the operation of the target vehicle. This is a preventive measure designed to protect the safety of the target vehicle and passengers by limiting the target user's ability to change the power supply strategy during critical operations.

[0045] exist Figure 1 On the basis of the illustrated embodiment, if the effective power supply includes a reference power supply, the target domain controller is powered by the reference power supply, or if the effective power supply does not include the reference power supply, the target domain controller is powered by any one of the effective power supplies, and further includes: performing fault monitoring on the respective power supply channels of multiple power supplies that are currently in a powered state or not in a powered state; if an abnormality is detected in any power supply channel, sending an alarm message of the abnormal power supply channel.

[0046] Monitoring the power supply channels of multiple power supplies means continuously detecting and evaluating the status of each power supply line connected to the target domain controller. For example, the voltage, current, connection integrity and other key electrical parameters of the power supply line are checked in real time to ensure that they are within the normal operating range, so as to promptly detect any abnormal conditions that may affect the stability and reliability of the power supply, such as voltage surges, current drops, power line short circuits or open circuits, and other faults.

[0047] By monitoring the faults of the effective power supply, whether it is currently in the power supply state or not, it is possible to identify abnormal problems in the power supply channel at an early stage, so as to take preventive measures, such as sending an alarm message of the abnormal power supply channel. Exemplarily, the alarm message can be a warning in visual, auditory or digital form to remind relevant personnel to pay attention to and deal with the problem. This effectively prevents the situation where there is no effective power supply to replace the effective power supply that is currently in the power supply state if the effective power supply that is not currently in the power supply state fails.

[0048] The alarm information in this embodiment is crucial for quickly responding to power supply failures, helping to prevent potential failure or performance degradation of the autonomous driving system and providing necessary protection for the autonomous driving system.

[0049] Figure 2 FIG. 1 is a flow chart of a power supply control method provided by another embodiment of the present application. Figure 1 Based on the embodiment shown, Figure 2 The embodiment shown is described below in detail. Figure 2 The embodiment shown and Figure 1 The differences and similarities of the illustrated embodiments are not described in detail.

[0050] like Figure 2 As shown, the method also includes the following steps.

[0051] Step S210: If the autonomous driving level is lower than the target level, it is determined whether the target user sets the power supply policy of the target domain controller.

[0052] When the autonomous driving level is lower than the target level, it means that the autonomous driving function of the target vehicle does not need to perform highly complex tasks, so the power supply requirements for the target domain controller are relatively low. In this case, it is further determined whether the target user sets the power supply policy for the target domain controller.

[0053] If set, step S220 is executed to start the power supply policy of the target domain controller set by the target user.

[0054] In this step, the target user's customized power supply strategy can be used to optimize the use of the target domain controller's power supply, improve energy efficiency, and also meet the target user's power supply requirements for specific functions or components.

[0055] If not set, step S230 is executed to detect whether the voltage values ​​of the multiple power supplies are within the target range.

[0056] Exemplarily, a voltage monitoring device is used to measure the voltage values ​​of multiple power supplies in real time and compare them with a preset target range that meets safety and performance requirements. Optionally, the target range is determined based on the voltage value required for the target domain controller to work normally and a preset tolerance ratio. For example, the preset tolerance ratio refers to the maximum deviation percentage allowed based on the voltage value required for the target domain controller to work normally, to ensure that the voltage of the power supply is within the range of safety and performance requirements. For example, the voltage value required for the target domain controller to work normally is a, and the preset tolerance ratio can be 10%, then the target range is [a-10% a,a+10% a].

[0057] If it is within the target range, step S240 is executed to supply power to the target domain controller using a power supply whose voltage value is within the target range.

[0058] In this embodiment, using a power supply with a voltage value within a target range to supply power to the target domain controller includes: using one of the power supplies with a voltage value within the target range to supply power to the target domain controller, or using multiple power supplies with voltage values ​​within the target range to supply power to the target domain controller. For example, if there are three power supplies, and after detection, only two power supplies have voltage values ​​within the target range, then the two power supplies can be used to supply power to the target domain controller at the same time, or one of the two power supplies can be used to supply power to the target domain controller.

[0059] If none of them are within the target range, step S250 is executed to block the multiple power supplies from supplying power to the target domain controller.

[0060] Exemplarily, the target domain controller is powered off by multiple power supplies by controlling the switch element in the circuit. Specifically, when it is detected that the voltage value is not within the target range, the switch element is disconnected, thereby blocking the power supply from the power supply to the target domain controller, thereby protecting the target domain controller from damage.

[0061] This embodiment provides a flexible and reliable power supply control strategy to adapt to the needs of the autonomous driving system for power supply stability and safety in autonomous driving tasks at different autonomous driving levels. Specifically, the autonomous driving level is used to determine whether it is necessary to execute the power supply strategy set by the target user or to perform voltage value detection, ensuring that when the autonomous driving level is lower than the target level, the target user can customize the power supply strategy according to his or her needs, thereby optimizing energy use and meeting specific functional requirements. At the same time, if the target user does not set a power supply strategy, the voltage value of the power supply will be detected to ensure that the voltage is within the target range required for safety and performance, thereby ensuring the stable power supply of the target domain controller. Then, when the voltage values ​​of the power supply exceed the target range, the power supply will be blocked to prevent damage or instability of the target domain controller caused by voltage abnormalities. This automatic detection and control mechanism ensures that the target domain controller can obtain the necessary power support under various circumstances, thereby improving the safety and reliability of the entire autonomous driving system.

[0062] In some embodiments, when the autonomous driving level is lower than the target level and the target user has set a power supply strategy for the target domain controller, the power supply strategy for the target domain controller set by the target user is started, wherein the power supply strategies include two types, namely a first power supply strategy and a second power supply strategy.

[0063] The first power supply strategy: if the effective power supply includes the reference power supply, the target domain controller is powered by the reference power supply; if the effective power supply does not include the reference power supply, the target domain controller is powered by any power supply among the effective power supplies.

[0064] The second power supply strategy: when the voltage values ​​of multiple power supplies are within the target range, the power supply with the voltage value within the target range is used to power the target domain controller; when the voltage values ​​of multiple power supplies are not within the target range, the multiple power supplies are blocked from powering the target domain controller.

[0065] Specifically, the first power supply strategy corresponds to Figure 1 In the embodiment shown, the second power supply strategy corresponds to Figure 2Embodiment shown. As can be seen from the above, the first power supply strategy provides a choice between a reference power supply and other effective power supplies, and is able to switch between them, thereby achieving power supply redundancy. This redundant design focuses on ensuring the continuous power supply of the target domain controller, which is necessary for high-level autonomous driving systems. However, when the autonomous driving level is lower than the target level, the first power supply strategy can still be activated. The second power supply strategy focuses on deciding whether to supply power based on the voltage value of the power supply, which helps to protect the autonomous driving system when the voltage is unstable or not within the target range. The second power supply strategy is suitable for situations with a lower level of autonomous driving. The reason is that when the level of autonomous driving is low, the vehicle mainly relies on the direct control of the driver. Therefore, the immediacy and responsiveness of the power supply are not strict, and the stability of the power supply is more important.

[0066] exist Figure 2 On the basis of the illustrated embodiment, after blocking the multi-channel power supply from supplying power to the target domain controller, it also includes: controlling the target domain controller to enter a functional safety state.

[0067] The functional safety state refers to a safe mode that the target domain controller can be in when encountering a fault or hazard to prevent or minimize harm to people and the environment. Specifically, the functional safety state includes a series of predetermined safety responses that are designed to minimize the potential risks to passengers and the surrounding environment from the failure of the autonomous driving system. Exemplarily, after the target domain controller enters the functional safety state, it will activate its built-in fault detection mechanism, monitor its operation more closely, and be ready to take action when further anomalies are detected, such as adjusting its operating mode to ensure that critical functions are still available, while temporarily disabling some non-critical functions to reduce risks. In addition, the target domain controller will also send warning signals to other systems of the target vehicle, indicating that a fault has occurred and taking safety measures, allowing the target vehicle to take appropriate safety measures, such as slowing down or stopping.

[0068] When it is detected that the voltage values ​​between multiple power supplies are not within the target range, it indicates that there is a power supply problem or system failure, which will affect the normal operation of the target domain controller, and it is necessary to block the power supply of multiple power supplies to the target domain controller. However, simply blocking the power supply is not enough to ensure the safety of the autonomous driving system. Putting the target domain controller into a functional safety state can further ensure that the autonomous driving system responds to faults in a controllable manner, ensuring that even in the case of unstable power supply or other potential risks, the autonomous driving system can still take appropriate safety measures to protect the safety of passengers and the target vehicle.

[0069] Figure 3 FIG. 1 is a flow chart of a power supply control method provided by another embodiment of the present application. Figure 1Based on the embodiment shown, Figure 3 The embodiment shown is described below in detail. Figure 3 The embodiment shown and Figure 1 The differences and similarities of the illustrated embodiments are not described in detail.

[0070] like Figure 3 As shown, in this embodiment, after the target domain controller is powered on, the following steps are also included.

[0071] First, it should be noted that the power supply to the target domain controller in this embodiment includes using Figure 1 The solution shown in the figure is to power on the target domain controller and use Figure 2 The scenario shown in the figure powers on the target domain controller.

[0072] Step S310, monitoring the power supply of key modules.

[0073] Optionally, the key module may be deployed inside the target domain controller, or may be externally electrically connected to the target domain controller to achieve power supply to the key module.

[0074] Optionally, the key module includes at least one of a microprocessor, a communication module and a target functional module. The microprocessor is used for decision-making, planning and control of the autonomous driving system, etc. The communication module is the external communication interface of the target domain controller, including a CAN (Controller Area Network) module and a PHY (Physical Layer) Ethernet module. The target functional module is an extension module of the target domain controller, including a camera deserializer, a serializer, a temperature monitoring unit, etc.

[0075] In this embodiment, the power supply monitoring of key modules is for the stable operation and performance of these key modules. It is understandable that the microprocessor, communication module and target function module are the basis for the normal operation of the autonomous driving system. They are responsible for processing large amounts of data, making complex decisions, maintaining communication with other systems and external networks, and performing specific functional tasks. In addition, these key modules have strict requirements on the stability and continuity of electricity. Monitoring their power supply can detect the status of the power supply in real time to ensure that they always get the required power. In addition, through power supply monitoring, power supply anomalies can be discovered in time, such as voltage fluctuations, power outages or other power-related problems, so that appropriate measures can be taken before the problem affects the performance of key modules or causes the autonomous driving system to fail.

[0076] In addition, power supply monitoring can also help to detect potential hardware failures or degradation problems in advance. By analyzing power supply data, the root causes that may lead to power supply problems can be predicted and identified, so that future failures can be prevented through maintenance or replacement of components.

[0077] Step S320: If it is detected that the power supply of any key module is abnormal, the power supply circuit of the key module with the abnormality is disconnected, and the target domain controller is controlled to enter a functional safety state.

[0078] The power supply circuit of the critical module with an abnormality refers to the circuit path that provides power to the critical module. This circuit path includes components such as the connection from the power supply to the critical module, connectors, electrical switches (such as relays) and possible power management circuits.

[0079] When an abnormality is detected in the power supply circuit of a key module, such as a sudden drop in voltage, an abnormal increase in current, a short circuit or an open circuit, it means that the power supply will become unstable or unsafe, which may damage the performance of the key module or even cause permanent hardware damage, thereby affecting the function and safety of the entire autonomous driving system. Therefore, in order to cope with this potentially serious situation, when an abnormality is detected in the power supply of any key module, the power supply circuit of the key module with the problem will be automatically disconnected to prevent the fault from spreading to other parts, protect the key module from damage, and prevent possible safety risks. At the same time, the target domain controller is controlled to enter a functional safety state to ensure that even if the key module fails to work properly, the target vehicle can still run or stop in a safe manner, thereby protecting the safety of passengers and the surrounding environment. Among them, the explanation of the functional safety state can be found in the description in the aforementioned embodiment, and will not be repeated here.

[0080] Step S330, after the target time period, the electrical parameters in the power supply circuit of the key module with the abnormality are sampled. If the sampled electrical parameters are within the preset normal value range, the power supply to the key module with the abnormality is restored, and the target domain controller is controlled to exit the functional safety state.

[0081] Specifically, real-time data of electrical parameters in the disconnected power supply circuit is sampled through sensors or monitoring devices (such as power supply monitoring modules). If the sampling results show that the electrical parameters (such as voltage and current) are within the preset normal value range, it means that the power supply circuit can be restored to normal, and the power supply to the critical modules with abnormalities can be safely restored. Optionally, by turning off the electrical switch (such as a relay) in the power supply circuit, the power supply to the critical modules with abnormalities can be realized, and the target domain controller is controlled to exit the functional safety state. This decision-making process ensures that the critical modules can resume work in time after the power supply circuit can be restored to normal. On the contrary, if the electrical parameters are not within the preset normal value range, the functional safety state will continue to be maintained to protect the critical modules from damage.

[0082] In summary, after the target domain controller is powered on, this embodiment continuously monitors the power supply of key modules to detect and respond to power supply anomalies of key modules in real time, prevent potential damage by disconnecting abnormal power supply circuits, and guide the target domain controller into a functional safety state to ensure that the entire autonomous driving system can maintain a safe operating range when facing power supply problems. This preventive measure not only improves the reliability of the autonomous driving system and reduces the risk of system failures caused by power supply problems, but also helps protect the safety of passengers and vehicles, and can maintain control of the target vehicle even when the key module encounters power supply anomalies, thereby providing a higher level of safety protection in complex and changing driving environments.

[0083] Figure 4 FIG. 1 is a block diagram of a target domain controller provided by an embodiment of the present application. Figure 4 As shown, the target domain controller M402 includes a power supply arbitration module M403, a microprocessor M404, a target function module M405, a communication module M406, and a power supply monitoring module M407. The target domain controller M402 is respectively connected to the user interaction module M401 and the vehicle platform M408 for communication.

[0084] Specifically, the user interaction module M401 can display the power supply strategy of the target domain controller M402 to the target user, and provide a configuration interface to the target user. The target user can set the power supply strategy of the target domain controller M402 through the graphical interface of the user interaction module M401. The power supply arbitration module M403 can receive inputs from multiple power supplies and start the corresponding power supply strategy; and send a mode lock instruction to the user interaction module. The functions of the microprocessor M404, the target function module M405, and the communication module M406 can be found in the description of the aforementioned embodiment, which will not be repeated here. The power supply monitoring module M407 is responsible for fault monitoring of the power supply channels of the multiple power supplies; and, power supply monitoring of key modules. The vehicle platform M408 includes steering, braking, parking, power and other systems, which can control the movement of the target vehicle according to the control instructions of the target domain controller M402.

[0085] Figure 5 FIG. 1 is a diagram showing a relationship for monitoring a power supply provided by an embodiment of the present application. For example, Figure 5 As shown, the multi-channel power supply includes IN1 power supply and IN2 power supply, which are connected to the power supply arbitration module M403. The power supply arbitration module M403 is the core of the target domain controller M402, which is responsible for receiving the external IN1 power supply and IN2 power supply input, and selecting the appropriate power supply strategy according to the level of autonomous driving to ensure that the microprocessor M404, the communication module M406 and the target functional module M405 can obtain stable and reliable power supply. Figure 5 It can also be seen that the power supply of the power monitoring module M407 is also IN1 power supply and IN2 power supply, which can ensure that the power monitoring module M407 can operate stably under any circumstances, thereby effectively monitoring the power supply status of the entire target domain controller M402. Furthermore, the power monitoring module M407 monitors the power supply of IN1 power supply, IN2 power supply, microprocessor M404, communication module M406 and target functional module M405 respectively. If a power supply abnormality is detected, M407 will disconnect (such as disconnecting the relay in the loop) the power supply circuit with the abnormality, and guide the entire target domain controller M402 into a functional safety state to protect the autonomous driving system from damage and maintain the safety status of the target vehicle. Figure 5 The intelligent power supply monitoring and arbitration strategy shown can maintain the operation of key modules in various situations and ensure the performance and safety of the autonomous driving system.

[0086] Combination of the above Figures 1 to 5 , describes in detail the power supply control method embodiment of the present application, and the following is combined with Figure 6, the vehicle embodiment of the present application is described in detail. It should be understood that the description of the power supply control method embodiment corresponds to the description of the vehicle embodiment, so the parts not described in detail can refer to the previous method embodiment.

[0087] Figure 6 FIG. 1 is a schematic diagram of the structure of a target domain controller provided by an embodiment of the present application. Figure 6 As shown, the target domain controller M402 provided in the embodiment of the present application is connected to multiple power supplies, and the target domain controller M402 includes a power supply arbitration module M403; the power supply arbitration module M403 is configured to determine the autonomous driving level of the autonomous driving system of the target vehicle; if the autonomous driving level is higher than or equal to the target level, then determine the effective power supply in the multiple power supplies, and the effective power supply indicates that it can continuously provide power that meets safety and performance requirements; if the effective power supply includes a reference power supply, then use the reference power supply to power the target domain controller, wherein the reference power supply is pre-set from the multiple power supplies; if the effective power supply does not include the reference power supply, then use any power supply in the effective power supplies to power the target domain controller.

[0088] In one embodiment of the present application, the power supply arbitration module M403 is further configured to send a mode lock instruction to the user interaction module so that the user interaction module responds to the mode lock instruction and disables the power supply policy configuration function in the user interaction module, wherein the power supply policy configuration function is used to allow the target user to set the power supply policy of the target domain controller.

[0089] In one embodiment of the present application, the power supply arbitration module M403 is further configured to, if the autonomous driving level is lower than the target level, determine whether the target user has set the power supply policy of the target domain controller; if set, start the power supply policy of the target domain controller set by the target user; if not set, detect whether the voltage values ​​of multiple power supplies are within the target range; if within the target range, use the power supply with a voltage value within the target range to power the target domain controller; if none of them are within the target range, block the multiple power supplies from powering the target domain controller.

[0090] In one embodiment of the present application, the power supply arbitration module M403 is further configured to control the target domain controller to enter a functional safety state, where the functional safety state refers to a safety mode that the target domain controller can be in when encountering a fault or danger.

[0091] In one embodiment of the present application, a power supply monitoring module M407 is also included, which is configured to monitor the power supply of key modules, wherein the key modules include at least one of a microprocessor, a communication module and a target functional module; if an abnormality is detected in the power supply of any key module, the power supply circuit of the key module with the abnormality is disconnected, and the target domain controller is controlled to enter a functional safety state; after a target time period, the electrical parameters in the power supply circuit of the key module with the abnormality are sampled, and if the sampled electrical parameters are within a preset normal value range, the power supply to the key module with the abnormality is restored, and the target domain controller is controlled to exit the functional safety state.

[0092] In one embodiment of the present application, the power supply arbitration module M403 is further configured to, if the effective power supply includes a reference power supply, use the reference power supply to power the target domain controller; if the effective power supply does not include the reference power supply, use any power supply among the effective power supplies to power the target domain controller; or, when the voltage values ​​of multiple power supplies are within a target range, use the power supply with a voltage value within the target range to power the target domain controller; when the voltage values ​​of multiple power supplies are not within the target range, block the multiple power supplies from powering the target domain controller.

[0093] In one embodiment of the present application, the power supply monitoring module M407 is further configured to perform fault monitoring on the respective power supply channels of the multiple power supplies; if an abnormality is detected in any power supply channel, an alarm message of the abnormal power supply channel is sent.

[0094] In an embodiment of the present application, the reference power source is obtained by marking any one of the multiple power sources as the reference power source.

[0095] Below, reference Figure 7 To describe an electronic device according to an embodiment of the present application. Figure 7 Shown is a schematic structural diagram of an electronic device provided by an exemplary embodiment of the present application.

[0096] like Figure 7 As shown, the electronic device 70 includes one or more processors 701 and a memory 702 .

[0097] The processor 701 may be a central processing unit (CPU) or other forms of processing units having data processing capabilities and / or instruction execution capabilities, and may control other components in the electronic device 70 to perform desired functions.

[0098] The memory 702 may include one or more computer program products, which may include various forms of computer-readable storage media, such as volatile memory and / or non-volatile memory. The volatile memory may include, for example, random access memory (RAM) and / or cache memory (cache), etc. The non-volatile memory may include, for example, read-only memory (ROM), hard disk, flash memory, etc. One or more computer program instructions may be stored on the computer-readable storage medium, and the processor 701 may run the program instructions to implement the power supply control method of each embodiment of the present application described above and / or other desired functions. Various contents such as effective power supply, reference power supply, autonomous driving level, target level, etc. may also be stored in the computer-readable storage medium.

[0099] In one example, the electronic device 70 may further include: an input device 703 and an output device 704 , and these components are interconnected via a bus system and / or other forms of connection mechanisms (not shown).

[0100] The input device 703 may include, for example, a keyboard, a mouse, etc.

[0101] The output device 704 can output various information to the outside, including effective power supply, reference power supply, automatic driving level, target level, etc. The output device 704 can include, for example, a display, a speaker, a printer, a communication network and a remote output device connected thereto, and the like.

[0102] Of course, to simplify, Figure 7 Only some of the components related to the present application in the electronic device 70 are shown, and components such as a bus, an input / output interface, etc. are omitted. In addition, according to specific application conditions, the electronic device 70 may also include any other appropriate components.

[0103] In addition to the above-mentioned methods and devices, an embodiment of the present application may also be a computer program product, which includes computer program instructions, which, when executed by a processor, enable the processor to execute the steps of the power supply control method according to various embodiments of the present application described above in this specification.

[0104] The computer program product may be written in any combination of one or more programming languages ​​to write program codes for performing the operations of the embodiments of the present application, including object-oriented programming languages, such as Java, C++, etc., and conventional procedural programming languages, such as "C" language or similar programming languages. The program code may be executed entirely on the user computing device, partially on the user device, as an independent software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server.

[0105] In addition, an embodiment of the present application may also be a computer-readable storage medium on which computer program instructions are stored. When the computer program instructions are executed by a processor, the processor executes the steps of the power supply control method according to various embodiments of the present application described above in this specification.

[0106] The computer readable storage medium can adopt any combination of one or more readable media. The readable medium can be a readable signal medium or a readable storage medium. The readable storage medium can include, for example, but is not limited to, a system, device or device of electricity, magnetism, light, electromagnetic, infrared, or semiconductor, or any combination of the above. More specific examples (non-exhaustive list) of readable storage media include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

[0107] The basic principles of the present application are described above in conjunction with specific embodiments. However, it should be noted that the advantages, strengths, effects, etc. mentioned in the present application are only examples and not limitations, and it cannot be considered that these advantages, strengths, effects, etc. are required by each embodiment of the present application. In addition, the specific details disclosed above are only for the purpose of illustration and ease of understanding, not for limitation, and the above details do not limit the present application to being implemented by adopting the above specific details.

[0108] The block diagrams of the devices, apparatuses, equipment, and systems involved in this application are only illustrative examples and are not intended to require or imply that they must be connected, arranged, and configured in the manner shown in the block diagram. As will be appreciated by those skilled in the art, these devices, apparatuses, equipment, and systems can be connected, arranged, and configured in any manner. Words such as "including", "comprising", "having", etc. are open words, referring to "including but not limited to", and can be used interchangeably with them. The words "or" and "and" used here refer to the words "and / or" and can be used interchangeably with them, unless the context clearly indicates otherwise. The words "such as" used here refer to the phrase "such as but not limited to", and can be used interchangeably with them.

[0109] It should also be noted that in the apparatus, device and method of the present application, each component or each step can be decomposed and / or recombined. Such decomposition and / or recombination should be regarded as equivalent solutions of the present application.

[0110] The above description of the disclosed aspects is provided to enable any person skilled in the art to make or use the present application. Various modifications to these aspects will be readily apparent to those skilled in the art, and the general principles defined herein may be applied to other aspects without departing from the scope of the present application. Therefore, the present application is not intended to be limited to the aspects shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

[0111] The above description has been given for the purpose of illustration and description. In addition, this description is not intended to limit the embodiments of the present application to the forms disclosed herein. Although multiple example aspects and embodiments have been discussed above, those skilled in the art will recognize certain variations, modifications, changes, additions and sub-combinations thereof.

Claims

1. A power supply control method, characterized in that: A target domain controller applied to a target vehicle, the target domain controller being connected to multiple power supplies, the method comprising: Determining an autonomous driving level of an autonomous driving system of the target vehicle; If the autonomous driving level is higher than or equal to the target level, determining an effective power supply among the multiple power supplies, wherein the effective power supply indicates a power supply that can continuously provide power that meets safety and performance requirements; If the effective power supply includes a reference power supply, the target domain controller is powered by the reference power supply, wherein the reference power supply is pre-set in the multi-channel power supply; If the effective power supply does not include the reference power supply, using any power supply among the effective power supplies to supply power to the target domain controller; If the autonomous driving level is lower than the target level, determining whether the target user sets a power supply policy for the target domain controller; If set, start the power supply policy of the target domain controller set by the target user; If not set, detecting whether the voltage values ​​of the multiple power supplies are within a target range; If it is within the target range, powering the target domain controller with a power supply whose voltage value is within the target range; If none of them are within the target range, the multi-channel power supply is blocked from supplying power to the target domain controller.

2. The power supply control method according to claim 1, characterized in that: After the target domain controller is powered by the reference power supply, or the target domain controller is powered by any power supply among the effective power supplies, the method further includes: A mode lock instruction is sent to a user interaction module so that the user interaction module disables a power supply policy configuration function in the user interaction module in response to the mode lock instruction, wherein the power supply policy configuration function is used to allow a target user to set a power supply policy for the target domain controller.

3. The power supply control method according to claim 1, characterized in that: After blocking the multi-channel power supply from supplying power to the target domain controller, the method further includes: controlling the target domain controller to enter a functional safety state, wherein the functional safety state refers to a safety mode in which the target domain controller can be in when encountering a fault or danger.

4. The power supply control method according to any one of claims 1 to 3, characterized in that: After the target domain controller is powered on, the method further includes: Performing power supply monitoring on a key module, wherein the key module includes at least one of a microprocessor, a communication module, and a target functional module; If it is detected that the power supply of any key module is abnormal, the power supply circuit of the key module with the abnormality is disconnected, and the target domain controller is controlled to enter a functional safety state; After the target time period, the electrical parameters in the power supply circuit of the critical module with the abnormality are sampled. If the sampled electrical parameters are within the preset normal value range, the power supply to the critical module with the abnormality is restored, and the target domain controller is controlled to exit the functional safety state.

5. The power supply control method according to claim 1, characterized in that: If set, starting the power supply strategy of the target domain controller set by the target user includes: If the effective power supply includes the reference power supply, the target domain controller is powered by the reference power supply; if the effective power supply does not include the reference power supply, the target domain controller is powered by any power supply among the effective power supplies; Alternatively, when the voltage values ​​of the multiple power supplies are within the target range, the target domain controller is powered by the power supply whose voltage value is within the target range; when the voltage values ​​of the multiple power supplies are not within the target range, the multiple power supplies are blocked from powering the target domain controller.

6. The power supply control method according to any one of claims 1, 2 and 5, characterized in that: If the effective power supply includes a reference power supply, the target domain controller is powered by the reference power supply, or if the effective power supply does not include the reference power supply, the target domain controller is powered by any power supply among the effective power supplies, the method further includes: Performing fault monitoring on the power supply channels of the multiple power supplies; If any power supply channel is detected to be abnormal, an alarm message of the abnormal power supply channel is sent.

7. The power supply control method according to claim 1, characterized in that: The reference power source is obtained by marking any one of the multiple power sources as a reference power source.

8. A target domain controller, the target domain controller is connected to multiple power supplies, and the target domain controller includes a power supply arbitration module; The power supply arbitration module is configured to determine the autonomous driving level of the autonomous driving system of the target vehicle; if the autonomous driving level is higher than or equal to the target level, determine the effective power supply among the multiple power supplies, wherein the effective power supply indicates that the power supply that meets the safety and performance requirements can be continuously provided; if the effective power supply includes a reference power supply, the reference power supply is used to power the target domain controller, wherein: The reference power source is preset from the multiple power sources; If the effective power supply does not include the reference power supply, using any power supply among the effective power supplies to supply power to the target domain controller; The power supply arbitration module is further configured to, if the autonomous driving level is lower than the target level, determine whether the target user sets a power supply policy for the target domain controller; If set, start the power supply policy of the target domain controller set by the target user; If not set, detecting whether the voltage values ​​of the multiple power supplies are within a target range; If it is within the target range, the target domain controller is powered by a power supply whose voltage value is within the target range; if none of them are within the target range, the multiple power supplies are blocked from powering the target domain controller.

9. A computer-readable storage medium, characterized in that: The storage medium stores a computer program, and the computer program is used to execute the power supply control method according to any one of claims 1 to 7.

Images