Safety driving detection system

Abstract

The invention relates to a safety driving detection system which comprises a control unit, a driving unit and a main control logic unit and further comprises an auxiliary logic control unit and a driving auxiliary unit, the control unit is connected with the main control logic unit and the auxiliary logic control unit, and the main control logic unit is connected with the auxiliary logic control unit and the driving unit. And the auxiliary logic control unit is connected with the driving auxiliary unit, and the control unit is configured to execute the following steps of firstly confirming that each path of output signal is in a turn-off state, then judging whether the output signal can be normally switched on or not, then judging whether the forbidding function of the driving unit and the main control logic unit is normal or not, and then judging whether the output signal can be normally switched on or turned off or not. Compared with the prior art, the method has the advantages of low cost, high safety and the like.

Description

Technical Field

[0001] The present invention relates to the field of electric driving, and in particular to a safe driving detection system. Background Art

[0002] With the development of electric vehicle technology, the complexity of vehicle electronic control units is increasing, and the functional safety requirements for motor control systems are increasing. If the motor outputs unexpected torque or fails to enter and maintain a safe state in time due to certain failures of the motor-controlled drive system, it may directly or indirectly cause safety hazards to personnel. In order to improve safety, it is necessary to effectively detect latent faults in the drive path after power-on or before power-off. In some existing technologies, there is a lack of safety integrity detection of the main drive path and the auxiliary safety drive path in each operating cycle of the motor control system. When a safety fault occurs during operation, the system cannot correctly identify the validity of the safety path and select the appropriate path to execute the safety state, so it cannot meet the requirements of functional safety vehicles for high-level safety integrity for the diagnosis of potential faults in the safety drive path. The control and state feedback logic of the drive detection signal is relatively complex and relies on high-cost and high-complexity dedicated chips.

[0003] At present, in electronic devices, the main way to confirm whether the hardware is available is through self-test. The self-test method is mainly to confirm whether each part is normally available, including two aspects: one is whether each hardware is connected normally, and the other is whether each function is normal.

[0004] However, in the prior art, when verifying whether the functions of various parts are normal, too many test items are involved, which easily leads to problems such as slow power-on startup. Summary of the invention

[0005] The purpose of the present invention is to provide a safe drive detection system, which can detect the entire safe drive circuit by only collecting the output signal of the drive unit in combination with a specific execution sequence. On the one hand, it does not need to rely on complex dedicated safety chips. The control and status feedback of the detection signal are processed by simple logic circuits or programmable logic, which is low-cost, easy to implement and highly portable. On the other hand, the detection of each function is integrated into a design, which reduces time consumption and improves power-on efficiency.

[0006] The purpose of the present invention can be achieved by the following technical solutions:

[0007] A safe drive detection system includes a control unit, a drive unit and a main control logic unit, and also includes an auxiliary logic control unit and a drive auxiliary unit, wherein the control unit is respectively connected to the main control logic unit and the auxiliary logic control unit, the main control logic unit is respectively connected to the auxiliary logic control unit and the drive unit, the auxiliary logic control unit is connected to the drive auxiliary unit, and the control unit is configured to perform the following steps:

[0008] Step S1: after receiving the first state signal, collecting the output signal of each channel of the driving unit, if each output signal is in the off state, executing step S2;

[0009] Step S2: sequentially outputting first conduction signals corresponding to the outputs of the driving unit, wherein the first conduction signals are used to enable the main control logic unit to control the corresponding output to be in a conduction state.

[0010] And determine whether the output signals of the driving unit are turned on in sequence, if yes, execute step S3;

[0011] Step S3: After enabling the auxiliary logic control unit to control the main control logic unit to prohibit the driving unit from being turned on, the main control logic unit is controlled to sequentially output the first turn-on signal corresponding to each output of the driving unit, and determine whether each output of the driving unit is in the off state. If yes, step S4 is executed;

[0012] Step S4: Enable or disable the signal output of the main control logic unit, and determine whether all outputs of the drive unit are in the off state. If yes, execute step S5;

[0013] Step S5: sequentially outputting second conduction signals corresponding to the outputs of the driving unit, wherein the second conduction signals are used to enable the auxiliary logic unit to control the corresponding output to be in a conduction state.

[0014] Whether the output signals of the driving unit are turned on in sequence, if yes, executing step S6;

[0015] Step S6: enabling the auxiliary logic unit to individually control each output of the driving unit to be in the off state, collecting each output signal of the driving unit, and if each output signal is in the off state, the detection is completed.

[0016] The driving units and the driving auxiliary units are each provided with two, and they correspond one to one, and any driving auxiliary unit is connected to its corresponding driving unit.

[0017] The step S3 specifically includes:

[0018] Step S31: After enabling the auxiliary logic control unit to control the main control logic unit to prohibit the first drive unit from being turned on, the main control logic unit is controlled to sequentially output first turn-on signals corresponding to the outputs of the first drive unit, and it is determined whether the outputs of the first drive unit are in the off state. If yes, step S32 is executed;

[0019] Step S32: After enabling the auxiliary logic control unit to control the main control logic unit to prohibit the second drive unit from turning on, the main control logic unit is controlled to output the first turn-on signal corresponding to each output of the second drive unit in sequence, and determine whether each output of the second drive unit is in the off state. If yes, execute step S4.

[0020] In the step S31: if any of the outputs of the first drive unit is in the on state, the drive unit is recorded as being in a fault state, and step S32 is executed.

[0021] The first state signal is a power-on signal.

[0022] The step S4 specifically includes: when receiving the power-off signal, enabling and disabling the signal output of the main control logic unit, determining whether all outputs of the driving unit are in the off state, and if so, executing step S5;

[0023] The first status signal is a power-off preparation signal.

[0024] The basis for judging that any output signal of the driving unit is turned off is that the output of the channel is continuously turned off for a time period exceeding a first set threshold time period.

[0025] The basis for judging whether any output signal of the driving unit is turned on is that the continuous on time of the output of the driving unit exceeds the second set threshold time.

[0026] The driving auxiliary unit is a level signal acquisition processing and logic processing unit.

[0027] Compared with the prior art, the present invention has the following beneficial effects:

[0028] 1. The entire safety drive circuit can be tested by only collecting the output signal of the drive unit and combining it with a specific execution sequence. On the one hand, it does not need to rely on complex dedicated safety chips. The control and status feedback of the detection signal are processed by simple logic circuits or programmable logic, which is low-cost, easy to implement and highly portable. On the other hand, the detection of each function is integrated, which reduces time consumption and improves power-on efficiency.

[0029] 2. There are two drive units and two drive auxiliary units each, which are tested separately. When a fault occurs in the output corresponding to one drive unit, the other drive unit can effectively execute the safe state. This ensures that if a safety fault occurs during operation, the system can correctly select an effective path to enter the safe state, meeting the requirements of functional safety vehicles for high-level safety integrity for potential fault diagnosis of safe drive paths.

[0030] 3. In each operation cycle of the motor control system, the main drive path and the auxiliary safety drive path can be fully tested to ensure that the system can operate normally only after the safety drive path test passes. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] Figure 1 It is a structural schematic diagram of the present invention;

[0032] Figure 2 A schematic flow chart of the main steps of the method executed by the control unit of the present invention;

[0033] Among them: C1, control unit, L1, main control logic unit, L2, auxiliary logic control unit, O1, upper bridge arm group driving unit, O2, lower bridge arm group driving unit, A1, upper bridge arm group driving auxiliary unit, A2, lower bridge arm group driving auxiliary unit, M_T, upper three bridge arm groups, M_B, lower three bridge arm groups. DETAILED DESCRIPTION

[0034] The present invention is described in detail below in conjunction with the accompanying drawings and specific embodiments. This embodiment is implemented based on the technical solution of the present invention, and provides a detailed implementation method and specific operation process, but the protection scope of the present invention is not limited to the following embodiments.

[0035] A safe drive detection system, such as Figure 1 As shown, it includes a control unit C1, a driving unit and a main control logic unit L1, and also includes an auxiliary logic control unit L2 and a driving auxiliary unit. The control unit C1 is respectively connected to the main control logic unit L1 and the auxiliary logic control unit L2, the main logic unit L1 is respectively connected to the auxiliary logic control unit L2 and the driving unit, the auxiliary logic control unit L2 is connected to the driving auxiliary unit, and the driving auxiliary unit is connected to the driving unit. Figure 2 As shown, the control unit C1 is configured to perform the following steps:

[0036] Step S1: after receiving the first state signal, collecting the output signal of each channel of the driving unit, if each output signal is in the off state, executing step S2;

[0037] Step S2: sequentially outputting first conduction signals corresponding to the outputs of the driving unit, wherein the first conduction signals are used to enable the main control logic unit L1 to control the corresponding output to be in a conduction state.

[0038] And determine whether the output signals of the driving unit are turned on in sequence, if yes, execute step S3;

[0039] Step S3: After enabling the auxiliary logic control unit L2 to control the main control logic unit L1 to prohibit the driving unit from being turned on, the main control logic unit L1 is controlled to sequentially output the first turn-on signal corresponding to each output of the driving unit, and determine whether each output of the driving unit is in the off state. If yes, step S4 is executed;

[0040] Step S4: Enable or disable the signal output of the main control logic unit L1, and determine whether all outputs of the driving unit are in the off state. If yes, execute step S5;

[0041] Step S5: sequentially outputting second conduction signals corresponding to the outputs of the driving unit, wherein the second conduction signals are used to enable the auxiliary logic unit to control the corresponding output to be in a conduction state.

[0042] Whether the output signals of the driving unit are turned on in sequence, if yes, executing step S6;

[0043] Step S6: enabling the auxiliary logic unit to individually control each output of the driving unit to be in the off state, collecting each output signal of the driving unit, and if each output signal is in the off state, the detection is completed.

[0044] The entire safety drive circuit can be tested by simply collecting the output signal of the drive unit in combination with a specific execution sequence. On the one hand, there is no need to rely on complex dedicated safety chips. The control and status feedback of the detection signal are processed through simple logic circuits or programmable logic, which is low-cost, easy to implement and highly portable. On the other hand, the detection of each function is integrated into a design to reduce time consumption and improve power-on efficiency.

[0045] In most embodiments, two driving units and two driving auxiliary units are provided respectively, and they correspond one to one. Any driving auxiliary unit is connected to its corresponding driving unit. Specifically, the two driving units are respectively the upper bridge arm group driving unit O1 and the lower bridge arm group driving unit O2, and the two driving auxiliary units are respectively the upper bridge arm group driving auxiliary unit A1 and the lower bridge arm group driving auxiliary unit A2. Among them, the output end of the upper bridge arm group driving unit O1 is connected to the upper three bridge arm group M_T, and there are three outputs, namely G1, G2, and G3. The output end of the lower bridge arm group driving unit O2 is connected to the lower three bridge arm group M_B, and there are three outputs, namely G4, G5, and G6. G1~G6 have two states of opening or closing. The upper bridge arm group driving auxiliary unit A1 can monitor the upper bridge arm group The output status of each output of the driving unit O1 is fed back to the auxiliary logic control unit L2. The lower bridge arm group driving auxiliary unit A2 can monitor the output status of the lower bridge arm group driving unit O2 and feed back the driving status auxiliary logic control unit to L2. The main control logic unit L1 can control the output status of the upper bridge arm group driving unit O1 and the lower bridge arm group driving unit O2. The auxiliary logic unit L2 can control the output status of G1, G2, and G3 through the upper bridge arm group driving auxiliary unit A1, and can also control the output status of G4, G5, and G6 through the lower bridge arm group driving auxiliary unit A2. It can also control the output of the main control logic unit L1, and can also collect the driving status collected by the upper bridge arm group driving auxiliary unit A1 and the lower bridge arm group driving auxiliary unit A2 and feed it back to C1.

[0046] Based on this, step S3 specifically includes:

[0047] Step S31: After enabling the auxiliary logic control unit L2 to control the main control logic unit L1 to prohibit the upper bridge arm group driving unit O1 from being turned on, the main control logic unit L1 is controlled to sequentially output the first conduction signal corresponding to each output of the upper bridge arm group driving unit O1, and determine whether each output of the upper bridge arm group driving unit O1 is in the off state. If yes, step S32 is executed;

[0048] Step S32: After enabling the auxiliary logic control unit L2 to control the main control logic unit L1 to prohibit the lower bridge arm group driving unit O2 from turning on, the main control logic unit L1 is controlled to output the first conduction signal corresponding to each output of the lower bridge arm group driving unit O2 in sequence, and determine whether each output of the lower bridge arm group driving unit O2 is in the off state. If yes, execute step S4.

[0049] In the step S31: if any of the outputs of the first drive unit is in the on state, the drive unit is recorded as being in a fault state, and step S32 is executed.

[0050] In this way, two drive units and two drive auxiliary units are each provided and are detected separately. When a corresponding output of one drive unit fails, the other drive unit can effectively execute the safe state. This ensures that if a safety failure occurs during operation, the system can correctly select an effective path to enter the safe state, thus meeting the requirements of functional safety vehicles for high-level safety integrity for potential fault diagnosis of safe drive paths.

[0051] In some embodiments, the first state signal is a power-on signal, and the overall steps are executed when the power is on to achieve detection. Of course, in other embodiments, the first state signal may also be a power-off signal, and the overall steps are executed when the power is off.

[0052] Of course, in another part of the embodiments, the above steps are executed separately. Specifically, in this part of the embodiments, the first state signal is a power-on signal, but step S4 is specifically: after receiving the ready-to-power-off signal, enable and disable the signal output of the main control logic unit L1, and determine whether all outputs of the drive unit are in the off state. If so, execute step S5. Based on this, the time consumption of power-on self-test can be further reduced.

[0053] In this embodiment, the basis for judging whether any output signal of the driving unit is off is that the output is continuously off for a time period exceeding a first set threshold time. Similarly, the basis for judging whether any output signal of the driving unit is on is that the output is continuously on for a time period exceeding a second set threshold time. This can provide high accuracy.

[0054] Of course, in some other embodiments, the instantaneous shutdown may be used as the basis for determining the shutdown state. Similarly, the instantaneous conduction may be used as the basis for determining the conduction state.

[0055] In some embodiments, the main control logic unit L1 and the auxiliary logic unit L2 are commonly used logic processing units.

[0056] In some embodiments, the upper bridge arm group driving auxiliary unit A1 and the lower bridge arm group driving auxiliary unit A2 are level signal acquisition processing and logic processing units.

[0057] In some embodiments, the control unit C1, the main control logic unit L1, the auxiliary logic unit L2, the upper bridge arm group driving auxiliary unit A1, and the lower bridge arm group driving auxiliary unit A2 are processing units implemented by programmable logic.

[0058] If the above functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc., which can store program code.

Claims

1. A safe drive detection system, comprising a control unit, a drive unit and a main control logic unit, characterized in that: It also includes an auxiliary logic control unit and a driving auxiliary unit, wherein the control unit is connected to the main control logic unit and the auxiliary logic control unit respectively, the main control logic unit is connected to the auxiliary logic control unit and the driving unit respectively, the auxiliary logic control unit is connected to the driving auxiliary unit, and the control unit is configured to perform the following steps: Step S1: after receiving the first state signal, collecting the output signal of each channel of the driving unit, if each output signal is in the off state, executing step S2; Step S2: sequentially outputting first conduction signals corresponding to the outputs of the driving unit, wherein the first conduction signals are used to enable the main control logic unit to control the corresponding output to be in a conduction state. And determine whether the output signals of the driving unit are turned on in sequence, if yes, execute step S3; Step S3: After enabling the auxiliary logic control unit to control the main control logic unit to prohibit the driving unit from being turned on, the main control logic unit is controlled to sequentially output the first turn-on signal corresponding to each output of the driving unit, and determine whether each output of the driving unit is in the off state. If yes, step S4 is executed; Step S4: Enable or disable the signal output of the main control logic unit, and determine whether all outputs of the drive unit are in the off state. If yes, execute step S5; Step S5: sequentially outputting second conduction signals corresponding to the outputs of the driving unit, wherein the second conduction signals are used to enable the auxiliary logic unit to control the corresponding output to be in a conduction state. Whether the output signals of the driving unit are turned on in sequence, if yes, executing step S6; Step S6: enabling the auxiliary logic unit to individually control each output of the driving unit to be in the off state, collecting each output signal of the driving unit, and if each output signal is in the off state, the detection is completed.

2. A safe drive detection system according to claim 1, characterized in that: The driving units and the driving auxiliary units are each provided with two, and they correspond one to one, and any driving auxiliary unit is connected to its corresponding driving unit.

3. A safe drive detection system according to claim 2, characterized in that: The step S3 specifically includes: Step S31: After enabling the auxiliary logic control unit to control the main control logic unit to prohibit the first drive unit from being turned on, the main control logic unit is controlled to sequentially output first turn-on signals corresponding to the outputs of the first drive unit, and it is determined whether the outputs of the first drive unit are in the off state. If yes, step S32 is executed; Step S32: After enabling the auxiliary logic control unit to control the main control logic unit to prohibit the second drive unit from turning on, the main control logic unit is controlled to output the first turn-on signal corresponding to each output of the second drive unit in sequence, and determine whether each output of the second drive unit is in the off state. If yes, execute step S4.

4. A safe drive detection system according to claim 3, characterized in that: In the step S31: if any one of the outputs of the first drive unit is in the on state, the drive unit is recorded as being in a fault state, and step S32 is executed.

5. A safe drive detection system according to claim 1, characterized in that: The first state signal is a power-on signal.

6. A safe drive detection system according to claim 5, characterized in that: The step S4 is specifically as follows: after receiving the power-off signal, the signal output of the main control logic unit is enabled and disabled, and it is determined whether all outputs of the driving unit are in the off state. If yes, step S5 is executed.

7. A safe driving detection system according to claim 1, characterized in that: The first status signal is a power-off preparation signal.

8. A safe driving detection system according to claim 1, characterized in that: The basis for judging that any output signal of the driving unit is turned off is that the output of the channel is continuously turned off for a time period exceeding a first set threshold time period.

9. A safe driving detection system according to claim 1, characterized in that: The basis for judging whether any output signal of the driving unit is turned on is that the continuous on time of the output of the driving unit exceeds the second set threshold time.

10. A safe driving detection system according to claim 1, characterized in that: The driving auxiliary unit is a level signal acquisition processing and logic processing unit.

Images