Control system for realizing functional safety core of diesel engine

Abstract

The invention discloses a control system for achieving a diesel engine function safety core. The control system comprises an ECU mechanism, a chip module, an application software module, an interface module and a basic software module. The chip module is arranged in the ECU mechanism; the application software module is arranged in the ECU mechanism and electrically connected with the chip module, and a first unit and a second unit are arranged in the application software module; the interface module is arranged in the ECU and is electrically connected with the chip module; and the basic software module is arranged in the ECU and is electrically connected with the chip module. Therefore, the control system for realizing the functional safety core of the diesel engine is simple and reasonable in structure, and unreasonable risks and unexpected acceleration risks caused by hazards caused by functional abnormality of an electronic system are avoided.

Description

Technical Field

[0001] The present invention relates to the technical field of diesel engine safety control, and in particular to a control system for realizing the functional safety core of a diesel engine. Background Art

[0002] ISO26262-functional safety regulations are not mandatory items in the field of diesel engine control. With the continuous development of technology, more and more OEMs require diesel engine controllers to meet functional safety design. The existing functional safety design methods of Level 1 and Level 2 software have a lot of interactions, which cannot prevent unreasonable risks caused by functional abnormalities in electronic systems, and there is a risk of unexpected acceleration.

[0003] The information disclosed in this background technology section is only intended to enhance the understanding of the overall background of the invention and should not be regarded as an acknowledgment or any form of suggestion that the information constitutes the prior art already known to a person skilled in the art. Summary of the invention

[0004] The purpose of the present invention is to provide a control system for realizing the functional safety core of a diesel engine, which has a simple and reasonable structure and avoids the unreasonable risks caused by the functional abnormality of the electronic system and the risk of unexpected acceleration.

[0005] To achieve the above-mentioned purpose, the present invention provides a control system for realizing the functional safety core of a diesel engine, comprising: an ECU mechanism, a chip module, an application software module, an interface module and a basic software module. The chip module is built into the ECU mechanism; the application software module is built into the ECU mechanism and electrically connected to the chip module, and the application software module is provided with a first unit and a second unit; the interface module is built into the ECU and electrically connected to the chip module; and the basic software module is built into the ECU and electrically connected to the chip module.

[0006] In one embodiment of the present invention, the first unit and the second unit are electrically connected to the chip module respectively.

[0007] In one embodiment of the present invention, the first unit is used to obtain a speed signal and a throttle signal of the engine in real time.

[0008] In one embodiment of the present invention, the second unit is used to obtain a speed signal and a throttle signal of the engine in real time.

[0009] In one embodiment of the present invention, the first unit is further configured to generate a first internal torque value according to the rotation speed signal and the throttle signal.

[0010] In one embodiment of the present invention, the second unit is further configured to generate a second internal torque value according to the rotation speed signal and the throttle signal.

[0011] In one embodiment of the present invention, the second unit is further configured to generate comparison result information according to the first internal torsion value and the second internal torsion value.

[0012] In one embodiment of the present invention, the second unit is further configured to perform anti-shake processing on the comparison result information and output an injector shut-off signal.

[0013] Compared with the prior art, the control system for realizing the functional safety core of a diesel engine according to the present invention has a simple and reasonable structure, and avoids the unreasonable risks caused by the hazards caused by the functional abnormality of the electronic system and the risk of unexpected acceleration. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] Figure 1 It is a schematic diagram of the structure of a control system for realizing a diesel engine functional safety core according to an embodiment of the present invention.

[0015] Description of main reference numerals:

[0016] 1-ECU structure, 2-application software module, 3-interface module, 4-basic software module. DETAILED DESCRIPTION

[0017] The specific implementation modes of the present invention are described in detail below in conjunction with the accompanying drawings, but it should be understood that the protection scope of the present invention is not limited by the specific implementation modes.

[0018] Unless explicitly stated otherwise, throughout the specification and claims, the term “comprise” or variations such as “include” or “comprising”, etc., will be understood to include the stated elements or components but not to exclude other elements or components.

[0019] To facilitate understanding, the main implementation concepts of the embodiments of the present invention are first briefly described.

[0020] In the field of diesel engine safety control technology, especially in the design and implementation of its functional safety core control system, there are specific technical backgrounds and challenges. Although ISO26262 is not mandatory in the field of diesel engine control as a functional safety regulation, with the continuous advancement of technology and the higher requirements of OEMs for safety, meeting functional safety design has become an important trend in the development of diesel engine controllers.

[0021] The existing functional safety design methods, such as Level 1 and Level 2 software, have a lot of interactions. This interaction not only increases the complexity of the system, but also may cause harm and lead to unreasonable risks when the electronic system malfunctions, the most serious of which is the risk of unexpected acceleration. Unexpected acceleration refers to the acceleration of the diesel engine in an uncontrolled or unexpected situation, which may lead to serious safety accidents.

[0022] This interactive design in the existing technology makes it possible for the system to fail to identify and handle problems in a timely and accurate manner when functional anomalies occur, thereby increasing risks. In addition, due to the tight coupling between Level 1 and Level 2 software, once a problem occurs in one of them, it is likely to affect the stability and security of the entire system.

[0023] Therefore, in order to solve these problems and improve the functional safety of the diesel engine controller, the present invention proposes a new control system that realizes the functional safety core of the diesel engine. The system avoids the hazards caused by functional abnormalities in the electronic system by simplifying the structure and reasonably designing the connection and interaction between the modules, thereby reducing the possibility of unreasonable risks and unexpected acceleration. Specifically, the present invention distributes the control functions to different cores for operation, realizes the independent operation of Level 1 and Level 2 software, and reduces the interaction between them. At the same time, by acquiring the engine speed signal and throttle signal in real time, and generating internal torque values ​​for comparison and anti-shake processing respectively, and finally outputting the injector shut-off signal, it ensures that the system can respond promptly and accurately when an abnormal situation occurs.

[0024] In summary, the current diesel engine controller has deficiencies and challenges in functional safety design, including a large number of interactions between Level 1 and Level 2 software, high system complexity, and untimely functional abnormality processing. The present invention is proposed to solve these problems, improve the functional safety of the diesel engine controller, and reduce the risk of unexpected acceleration.

[0025] Figure 1 FIG. 1 is a schematic diagram of a control system for realizing a diesel engine functional safety core according to an embodiment of the present invention. Figure 1 As shown, according to a preferred embodiment of the present invention, a control system for realizing a diesel engine functional safety core includes: an ECU mechanism 1, a chip module, an application software module 2, an interface module 3, and a basic software module 4. The chip module is built into the ECU mechanism 1; the application software module 2 is built into the ECU mechanism 1 and is electrically connected to the chip module, and the application software module 2 is provided with a first unit and a second unit; the interface module 3 is built into the ECU and is electrically connected to the chip module; and the basic software module 4 is built into the ECU and is electrically connected to the chip module.

[0026] Specifically, the system is mainly composed of five core parts: ECU mechanism 1, chip module, application software module 2, interface module 3 and basic software module 4. Each part plays an indispensable role. First, ECU mechanism 1, as the core carrier of the entire control system, carries the installation and operation of other modules. It provides a stable and reliable environment to ensure that each module can work normally, thereby realizing the precise control of the diesel engine. The chip module is built into the ECU mechanism 1, which is the "brain" of the entire control system. The chip module is responsible for processing signals from various sensors and making corresponding control decisions according to the preset program logic. Its performance directly affects the response speed and accuracy of the entire control system. The application software module 2 is also built into the ECU mechanism 1 and is electrically connected to the chip module. The first unit and the second unit are set in this module, which respectively undertake different control tasks. The first unit is mainly used to obtain the engine speed signal and throttle signal in real time, which are the basic data of diesel engine operation and are crucial for precise control. The second unit generates corresponding internal torque values ​​based on these signals for subsequent comparison and anti-shake processing. The interface module 3 is also an important component of the ECU mechanism 1. It is electrically connected to the chip module and is responsible for realizing the communication between the control system and external devices. Through the interface module 3, the control system can receive instructions from external devices and send its own status information to external devices, thereby realizing interaction with the outside world. The basic software module 4 is the underlying support of the entire control system. It is built into the ECU mechanism 1 and electrically connected to the chip module. The basic software module 4 is responsible for providing basic software services, such as task scheduling, memory management, interrupt processing, etc., to ensure that the entire control system can operate stably and efficiently.

[0027] The first unit and the second unit are electrically connected to the chip module respectively, realizing independent signal acquisition and processing. This design method avoids a large number of interactions between Level 1 and Level 2 software in the prior art, thereby reducing the complexity of the system and improving the stability and safety of the system. Specifically, the first unit obtains the engine speed signal and throttle signal in real time, which are the basic data for the operation of the diesel engine. Then, it generates a first internal torque value based on these signals for subsequent comparison. The second unit also obtains these signals and generates a second internal torque value. Then, the second unit compares the two internal torque values ​​and generates comparison result information. In order to ensure the accuracy of the comparison result, the second unit will also perform anti-shake processing on the comparison result information to eliminate possible interference and errors. Finally, based on the comparison result information, the second unit outputs an injector shut-off signal to control the injection amount of the diesel engine, thereby achieving precise control.

[0028] In practical applications, the control system of the present invention that implements the diesel engine functional safety core has demonstrated excellent performance. Since Level 1 (first unit) and Level 2 (second unit) run in different cores and work independently, even if one of the cores fails, it will not cause the entire system to crash. This design greatly improves the fault tolerance and reliability of the system. At the same time, since the same control function is independently calculated and processed in Level 2, there is no interaction with Level 1, and only the final comparison value interacts, thus ensuring the accuracy and consistency of the control results. In addition, through anti-shake processing and direct execution of the injector shut-off command, the control system of the present invention can respond to abnormal situations quickly and accurately, avoiding the occurrence of safety risks such as unexpected acceleration.

[0029] Based on the above analysis, it can be seen that the control system of the present invention, which realizes the core of diesel engine functional safety, realizes precise control and safety protection of diesel engine through sophisticated design concept and practical functional module combination. It not only improves the operating efficiency and stability of diesel engine, but also greatly reduces safety risks, bringing new breakthroughs and progress to the field of diesel engine safety control technology.

[0030] In one embodiment of the present invention, the first unit and the second unit are electrically connected to the chip module respectively.

[0031] Specifically, through this connection method, the first unit and the second unit can independently communicate and exchange data with the chip module, thereby achieving functional independence between the two. This independence not only improves the reliability and stability of the system, but also effectively reduces the complexity of the system and reduces the potential risks caused by software interaction. Specifically, the first unit and the second unit can respectively obtain the engine speed signal and throttle signal in real time, and perform respective control calculations based on these signals. Due to their direct connection with the chip module, these calculations can be performed more quickly and accurately, thereby ensuring the safe operation of the diesel engine under various working conditions. In addition, this electrical connection method also facilitates the subsequent expansion and upgrading of the system, making the present invention more flexible and adaptable in practical applications.

[0032] In one embodiment of the present invention, the first unit is used to obtain a speed signal and a throttle signal of the engine in real time.

[0033] Specifically, by acquiring these key signals in real time, the first unit can ensure accurate monitoring of the engine's operating status, thereby providing accurate data support for subsequent control decisions. This ability to acquire signals in real time not only improves the system's response speed, but also helps to promptly detect and handle potential abnormalities, thereby effectively reducing the risks caused by functional abnormalities.

[0034] In one embodiment of the present invention, the second unit is used to obtain a speed signal and a throttle signal of the engine in real time.

[0035] Specifically, the second unit is designed to obtain the engine's speed signal and throttle signal in real time. This function is similar to the first unit, but the two play different roles in the system and may run in different cores to achieve functional independence and safety. By acquiring these key signals in real time, the second unit can ensure accurate monitoring of the engine's operating status and provide accurate data support for subsequent control decisions. This design not only improves the response speed and accuracy of the system, but also helps to promptly detect and handle potential abnormal situations, thereby effectively reducing the risks caused by functional abnormalities, especially the risk of unexpected acceleration. Through the real-time signal acquisition and processing of the second unit, the present invention further enhances the reliability and safety of the diesel engine functional safety core control system.

[0036] In one embodiment of the present invention, the first unit is further configured to generate a first internal torque value according to the rotation speed signal and the throttle signal.

[0037] Specifically, the first unit not only obtains the engine speed signal and throttle signal in real time, but also further uses these signals to generate a first internal torque value. This step is a key link in diesel engine control because the internal torque value directly reflects the current power output state of the engine. By accurately calculating the internal torque value, the first unit can provide key data support for subsequent control decisions to ensure that the engine can operate stably under various working conditions. This design not only improves the response speed and accuracy of the system, but also helps to promptly detect and handle potential abnormal situations, thereby reducing the risks caused by functional abnormalities.

[0038] In one embodiment of the present invention, the second unit is further configured to generate a second internal torque value according to the rotation speed signal and the throttle signal.

[0039] Specifically, the second unit not only obtains the engine speed signal and throttle signal in real time, but also generates a second internal torque value based on these key signals. This step is crucial to the functional safety of the diesel engine, because the internal torque value is an important parameter reflecting the engine power state. By independently generating the second internal torque value, the second unit can perform subsequent comparisons and verifications with the first unit to ensure the accuracy and reliability of the engine control instructions. This design helps to detect and handle potential abnormal situations in a timely manner, prevent risks such as unexpected acceleration caused by functional abnormalities, and further improve the functional safety of the diesel engine.

[0040] In one embodiment of the present invention, the second unit is further configured to generate comparison result information according to the first internal torsion value and the second internal torsion value.

[0041] Specifically, the first unit and the second unit will obtain the engine speed signal and throttle signal in real time, and then independently calculate the internal torque value based on these signals. These internal torque values ​​are important parameters reflecting the current operating state of the engine and are crucial for controlling the operation of the diesel engine. Since the first unit and the second unit work independently, the internal torque values ​​generated by them may differ due to various reasons (such as sensor error, calculation accuracy, etc.). Therefore, the second unit will compare the two internal torque values ​​and generate comparison result information. This comparison result information can reflect the degree of difference between the two internal torque values, thereby helping the system to determine whether the current operating state of the engine is normal. If the comparison result information shows that there is a large difference between the two internal torque values, the system will think that there may be a functional abnormality or failure, and then trigger the corresponding safety measures. In the present invention, this safety measure is that the second unit outputs an injector shutoff signal after anti-shake processing of the comparison result information. This signal will directly act on the injector of the diesel engine to shut it down, thereby avoiding the risk of unexpected acceleration caused by abnormal function of the engine.

[0042] Based on the above analysis, it can be seen that the present invention realizes an efficient and reliable diesel engine functional safety core control system. This system can not only monitor the operating status of the engine in real time, but also take timely measures when abnormalities are found to ensure the safe operation of the diesel engine. Compared with the prior art, the system structure of the present invention is simple and reasonable, avoiding the hazards caused by functional abnormalities of the electronic system, thereby reducing unreasonable risks and the possibility of unexpected acceleration. Therefore, the present invention has broad application prospects and important practical value in the field of diesel engine safety control technology.

[0043] In one embodiment of the present invention, the second unit is further configured to perform anti-shake processing on the comparison result information and output an injector shut-off signal.

[0044] Specifically, the second unit will perform anti-shake processing on the generated comparison result information. This step is crucial because in the actual operating environment, due to the influence of various factors, such as sensor noise, signal transmission interference, etc., the comparison result information may have short-term fluctuations or errors. If the system makes control decisions directly based on these unprocessed comparison result information, it may cause unnecessary misoperation, thereby affecting the normal operation of the diesel engine. In order to avoid this situation, the second unit will perform anti-shake processing on the comparison result information. This processing process may include signal processing technologies such as filtering and smoothing to eliminate noise and interference in the signal and ensure the accuracy and stability of the comparison result. The comparison result information after anti-shake processing is more reliable and can more accurately reflect the actual operating status of the engine. Based on the processed comparison result information, the second unit will further determine whether it is necessary to output the injector shutoff signal. If the comparison result information shows that there is a significant difference between the first internal torque value and the second internal torque value, and this difference exceeds the threshold range set by the system, then the second unit will determine that the current engine operating state may be abnormal. In order to ensure the safe operation of the engine and prevent risks such as unexpected acceleration caused by functional abnormalities, the second unit will output the injector shutoff signal in a timely manner. This fuel injector shutoff signal will directly act on the fuel injection system of the diesel engine, controlling the shutoff of the fuel injector, thereby cutting off the fuel supply to the engine. In this way, even if the engine control system malfunctions, the fuel injector can be shut off in time to avoid unexpected engine acceleration and ensure the safety of personnel and vehicles.

[0045] The main purpose of anti-shake processing is to eliminate noise and interference in the signal to ensure the accuracy and stability of the comparison result. In practical applications, due to factors such as sensor noise and signal transmission interference, the comparison result information may have short-term fluctuations or errors. Therefore, it is necessary to smooth the comparison result information to eliminate these unnecessary fluctuations.

[0046] The specific steps of the anti-shake processing algorithm include:

[0047] Step 1, obtaining comparison result information: The second unit first obtains the comparison result information of the first internal torsion value and the second internal torsion value. The comparison result information may be a numerical value indicating the difference between the two internal torsion values.

[0048] Step 2, filtering: In order to eliminate noise and interference in the signal, the comparison result information can be filtered. Common filtering methods include mean filtering, median filtering, Kalman filtering, etc. In the present invention, one or more filtering methods can be selected and used in combination to achieve the best anti-shake effect. For example: mean filtering smoothes the signal by calculating the average value of the comparison result information within a certain time window.

[0049] Step 3, smoothing: Based on the filtering process, the signal can be further smoothed to eliminate the remaining fluctuations. The smoothing methods include moving average method, exponential smoothing method, etc. For example, the moving average method further smoothes the signal by calculating the moving average value of the comparison result information within a certain time window.

[0050] Step 4, threshold judgment: The comparison result information after anti-shake processing needs to be compared with the set threshold to determine whether it is necessary to output the injector shutoff signal. The selection of the threshold should be set according to the actual application and safety requirements. If the processed comparison result information is less than the threshold, it means that the difference between the two internal torque values ​​is within the normal range, and there is no need to output the injector shutoff signal. If the processed comparison result information is greater than or equal to the threshold, it means that there is a significant difference between the two internal torque values, and the injector shutoff signal needs to be output.

[0051] Among them, the mean filter formula is:

[0052]

[0053] Among them, Filtered_Value(k) represents the filtering result at the kth moment, Comparison_Result(i) represents the comparison result information at the ith moment, and N represents the size of the filtering window.

[0054] The moving average method formula is:

[0055]

[0056] Among them, Smoothed_Value(k) represents the smoothing result at the kth moment, Filtered_Value(j) represents the filtering result at the jth moment, and M represents the size of the smoothing window.

[0057] The threshold judgment formula is:

[0058] texxtIfSmoothedValue(k)≥Threshold

[0059] Wherein, Threshold represents the set threshold value, that is, when the value is greater than the threshold value, the injector shutoff signal is output.

[0060] Based on the above analysis, it can be seen that the second unit in the present invention realizes effective control of the functional safety of the diesel engine by performing anti-shake processing on the comparison result information and outputting the injector shut-off signal in time according to the processed information. This design not only improves the reliability and stability of the system, but also reduces the risk of unexpected acceleration caused by functional abnormalities, providing a strong guarantee for the safe operation of the diesel engine.

[0061] In practical applications, in the control system of the present invention that realizes the functional safety core of the diesel engine, level 1 (first unit) and level 2 (second unit) run in different cores, and level 2 runs a separate core to avoid failure of the separate core of level 1 software, which may cause unexpected acceleration of the engine; the same control function is calculated in level 2 starting from sensor recognition, and the intermediate calculation process does not interact with level 1. Only the final comparison value is compared with the torque value of level 1 to prevent the output signal from being shaken, and the bottom layer directly executes the injector shutdown instruction.

[0062] In summary, the control system for realizing the functional safety core of the diesel engine of the present invention has a simple and reasonable structure, and avoids the unreasonable risks caused by the functional abnormality of the electronic system and the risk of unexpected acceleration.

[0063] The foregoing description of specific exemplary embodiments of the present invention is for the purpose of illustration and demonstration. These descriptions are not intended to limit the present invention to the precise form disclosed, and it is clear that many changes and variations can be made based on the above teachings. The purpose of selecting and describing the exemplary embodiments is to explain the specific principles of the present invention and its practical application, so that those skilled in the art can realize and utilize various different exemplary embodiments of the present invention and various different selections and changes. The scope of the present invention is intended to be limited by the claims and their equivalents.

Claims

1. A control system for realizing the functional safety core of a diesel engine, characterized in that: include: ECU organization; A chip module, built into the ECU mechanism; An application software module, which is built into the ECU mechanism and electrically connected to the chip module, and the application software module is provided with a first unit and a second unit; an interface module, built into the ECU and electrically connected to the chip module; and The basic software module is built into the ECU and is electrically connected to the chip module.

2. The control system for realizing the diesel engine functional safety core as claimed in claim 1, characterized in that: The first unit and the second unit are electrically connected to the chip module respectively.

3. The control system for realizing the diesel engine functional safety core according to claim 1, characterized in that: The first unit is used to obtain the engine speed signal and throttle signal in real time.

4. The control system for realizing the diesel engine functional safety core as claimed in claim 3, characterized in that: The second unit is used to obtain the engine speed signal and throttle signal in real time.

5. The control system for realizing the diesel engine functional safety core as claimed in claim 4, characterized in that: The first unit is further configured to generate a first internal torque value according to the rotation speed signal and the throttle signal.

6. The control system for realizing the diesel engine functional safety core as claimed in claim 5, characterized in that: The second unit is further configured to generate a second internal torque value according to the rotation speed signal and the throttle signal.

7. The control system for realizing the diesel engine functional safety core as claimed in claim 6, characterized in that: The second unit is further configured to generate comparison result information according to the first internal torsion value and the second internal torsion value.

8. The control system for realizing the diesel engine functional safety core as claimed in claim 7, characterized in that: The second unit is further used to perform anti-shake processing on the comparison result information and output an injector shut-off signal.

Images