Control circuit, control system and control method for limping function of vehicle

Abstract

The present disclosure relates to a control circuit for a limp function of a vehicle, comprising: a first port arranged to receive a fault output signal indicating execution of the limp function; the driving module is arranged to be used for driving a load, capable of executing the limping function, of the vehicle; the power supply module is used for providing a power supply signal for the driving module; and a second port configured to output a driving signal for driving a load. The power supply module is configured to provide a power supply signal in a manner of delaying a predetermined time period, and the predetermined time period is determined based on response parameters of a micro-control unit and a functional safety control unit of the vehicle in a starting process of the vehicle. The invention further relates to a control system and a control method for the limp function of the vehicle and a computer readable storage medium.

Description

Technical Field

[0001] The present invention relates to the technical field of electronic control of vehicles, and in particular to a control circuit, a control system and a control method for a limp home function of a vehicle, and a computer-readable storage medium. Background Art

[0002] The limp home function is a very important function in vehicle body control. When the microcontroller unit (MCU) suddenly fails during vehicle driving and the system cannot work properly, the limp home function enables the functional safety-related loads, such as lights, doors, wipers, etc., to work properly, ensuring that the vehicle can safely drive home or to a nearby maintenance point in a load-efficient manner.

[0003] Therefore, a control design for the limp home function of the vehicle is needed. In the current mainstream design scheme, a system basis chip (SBC) is often used to achieve this. SBC is a comprehensive functional chip that integrates a power supply unit, a monitoring unit, a communication unit, a signal output unit, etc. according to user needs. In an SBC with built-in functional safety function, for example, the operating status of the MCU is monitored by the watchdog unit of the SBC. When the MCU hardware or software fails and the feeding signal is missing, the SBC outputs a fault output signal (Failure Output, FO) to activate the load that can perform the limp home function.

[0004] However, in the actual operation of the vehicle, when the vehicle is started, since the initialization completion time of the MCU is later than the initialization completion time of the SBC, the SBC cannot, for example, receive the dog feeding signal in time before the MCU initialization is completed, and outputs a fault output signal, thereby causing abnormal activation of related loads. Only when the MCU initialization is completed and the dog feeding signal is output normally, the abnormal activation of related loads stops, such as the short-term activation of the lights and wipers when starting the vehicle.

[0005] In addition, in the event that the MCU actually fails, as explained above, the SBC will continue to output a fault output signal and cause long-term activation of the relevant loads, which can only be stopped after the entire vehicle is powered off. Therefore, it is not desirable, for example, when the vehicle does not require the functions of the relevant loads or when the vehicle is short of power. Summary of the invention

[0006] In order to solve the above problems, the present disclosure proposes a control circuit, a control system and a control method for a limp home function of a vehicle, so that on the one hand, abnormal activation of the load can be avoided when the initialization of the microcontroller is not completed, and on the other hand, manual deactivation of the load can be achieved in the event of a failure of the microcontroller, which is particularly suitable for motor vehicle domain controllers (Domain Controller), regional controllers (Zonal Controller), etc.

[0007] An embodiment of the present disclosure provides a control circuit for a limp home function of a vehicle, comprising:

[0008] - a first port configured to receive a fault output signal indicating execution of a limp home function;

[0009] - a drive module, configured to drive a load of the vehicle capable of performing a limp home function;

[0010] - a power module, configured to provide a power signal to the driving module;

[0011] - a second port, configured to output a driving signal for driving a load,

[0012] The first input terminal of the driving module is connected to the power module, the second input terminal is connected to the first port, and the output terminal is connected to the second port. The power module is configured to provide a power signal in a manner of delaying a predetermined period of time, so that the fault output signal is shielded within the predetermined period of time, thereby making it impossible to drive the load within the predetermined period of time.

[0013] The predetermined period is determined based on response parameters of the vehicle's microcontroller unit and a functional safety control unit during the vehicle's startup process. The functional safety control unit is configured to monitor the operating status of the microcontroller unit and output a fault output signal when an abnormal operating status is detected.

[0014] According to an embodiment of the present disclosure, the response parameter is initialization completion time, and the predetermined period is determined based on a difference between initialization completion times of the micro control unit and the functional safety control unit.

[0015] According to an embodiment of the present disclosure, the predetermined period is between 100 ms and 200 ms, or other time lengths.

[0016] According to an embodiment of the present disclosure, in the case where the driving module continuously receives a fault output signal, the power module can be manually disabled, wherein continuously receiving the fault output signal includes receiving the fault output signal for longer than a predetermined period of time.

[0017] According to an embodiment of the present disclosure, the power module can be controlled in a hardware and / or software manner.

[0018] According to an embodiment of the present disclosure, the power module has a power supply and a switch device, and the switch device can be controlled in a hardware and / or software manner.

[0019] According to an embodiment of the present disclosure, the power module can be manually disabled, including manually disabling by means of a switch device in the form of hardware or software in the power module.

[0020] According to an embodiment of the present disclosure, the driving module includes a triode and / or a field effect transistor.

[0021] According to an embodiment of the present disclosure, the control circuit is arranged in a functional safety control unit or implemented as a peripheral circuit of the functional safety control unit.

[0022] An embodiment of the present disclosure provides a control system for a limp home function of a vehicle, comprising: a functional safety control unit, configured to monitor the operating state of a microcontroller unit of the vehicle and output a fault output signal for indicating execution of a limp home function when an abnormal operating state is detected; a control circuit according to an embodiment of the present disclosure; a load capable of executing the limp home function; and a load control circuit configured for circuit control between a microcontroller and the control circuit and the load, wherein the control circuit receives the fault output signal and outputs a drive signal so as to drive the load in conjunction with the load control circuit.

[0023] An embodiment of the present disclosure provides a domain controller, including the control circuit according to the embodiment of the present disclosure described above. The above control circuit is suitable for integration into the control circuit. The features of the domain controller according to the embodiment of the present disclosure can be found in the description of the control circuit above, and will not be repeated here for the sake of brevity.

[0024] An embodiment of the present disclosure provides a motor vehicle, comprising the control circuit according to the embodiment of the present disclosure described above and / or the domain controller according to the embodiment of the present disclosure described above. For the sake of brevity, no further details will be given here. An embodiment of the present disclosure provides a control method for a limp home function of a vehicle, comprising:

[0025] - receiving a fault output signal for indicating execution of a limp home function;

[0026] - providing a power signal in a manner of delaying a predetermined period of time, so that the fault output signal is shielded during the predetermined period of time, thereby making it impossible to drive a load capable of performing a limp home function of the vehicle during the predetermined period of time,

[0027] The predetermined period is determined based on response parameters of the vehicle's microcontroller unit and a functional safety control unit during the vehicle's startup process. The functional safety control unit is configured to monitor the operating status of the microcontroller unit and output a fault output signal when an abnormal operating status is detected.

[0028] According to an embodiment of the present disclosure, the response parameter is initialization completion time, and the predetermined period is determined based on a difference between initialization completion times of the micro control unit and the functional safety control unit.

[0029] According to an embodiment of the present disclosure, the predetermined period is between 100 ms and 200 ms, or other time lengths.

[0030] According to an embodiment of the present disclosure, providing the power signal in a manner delayed by a predetermined period includes: controlling the power supply used to provide the power signal through a switching circuit, so that the power signal is output to the driving module with a delay of the predetermined period, thereby making the driving module unable to drive the load within the predetermined period.

[0031] An embodiment of the present disclosure provides a computer-readable storage medium having computer-executable instructions stored thereon. When the instructions are executed by a processor, the methods according to the embodiments of the present disclosure are implemented.

[0032] The embodiments of the present disclosure provide a computer program product or a computer program, which includes a computer instruction stored in a computer-readable storage medium. A processor of a computer device reads the computer instruction from the computer-readable storage medium, and the processor executes the computer instruction, so that the computer device executes a method according to an embodiment of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some exemplary embodiments of the present disclosure, and a person of ordinary skill in the art can obtain other drawings based on these drawings without creative work.

[0034] Figure 1 A schematic diagram showing a control circuit for a limp home function of a vehicle according to an embodiment of the present disclosure is shown;

[0035] Figure 2 The example shows the Figure 1 A schematic diagram of a driving module of a control circuit;

[0036] Figure 3 The example shows the Figure 1A schematic diagram of a power module of a control circuit;

[0037] Figure 4 A schematic diagram showing a control system for a limp home function of a vehicle according to an embodiment of the present disclosure;

[0038] Figure 5 A schematic flow chart showing a control method for a limp home function of a vehicle according to an embodiment of the present disclosure;

[0039] Figure 6 A schematic diagram of a computer-readable storage medium according to an embodiment of the present disclosure is shown. DETAILED DESCRIPTION

[0040] In order to make the purpose, technical solution and advantages of the present disclosure more obvious, the exemplary embodiments according to the present disclosure will be described in detail with reference to the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present disclosure, rather than all the embodiments of the present disclosure, and it should be understood that the present disclosure is not limited to the exemplary embodiments described here.

[0041] In this specification and the accompanying drawings, substantially the same or similar steps and elements are represented by the same or similar reference numerals, and repeated descriptions of these steps and elements will be omitted. At the same time, in the description of the present disclosure, the terms "first", "second", etc. are only used to distinguish the description and cannot be understood as indicating or implying relative importance or ranking.

[0042] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which the present disclosure pertains. The terms used herein are only for the purpose of describing the embodiments of the present invention and are not intended to limit the present invention.

[0043] Figure 1 FIG. 1 is a schematic diagram of a control circuit 100 for a limp home function of a vehicle according to an embodiment of the present disclosure.

[0044] like Figure 1 As shown, the control circuit 100 includes:

[0045] - a first port P1, arranged to receive a fault output signal, the fault output signal indicating execution of a limp home function;

[0046] a drive module DM, arranged to drive a load of the vehicle capable of performing a limp home function;

[0047] - a power module PM, configured to provide a power signal to the driving module;

[0048] A second port P2 is configured to output a driving signal for driving a load.

[0049] The first input terminal of the driving module DM is connected to the power module PM, the second input terminal is connected to the first port P1 , and the output terminal is connected to the second port P2 .

[0050] When the vehicle is started, the functional safety control unit and the micro control unit of the vehicle are powered on and initialized in sequence. The functional safety control unit is configured to monitor the operating state of the micro control unit and output a fault output signal when an abnormal operating state is detected. The functional safety control unit may be, for example, a system basis chip or include a system basis chip.

[0051] For example, when the functional safety control unit is implemented as a system basis chip, on the one hand, the micro control unit relies on the system basis chip to provide power, so that the power-on time of the micro control unit is later than that of the system basis chip, and on the other hand, the micro control unit is more complex than the system basis chip and takes longer to initialize. Therefore, the initialization completion time of the functional safety control unit and the micro control unit is different from each other, and more precisely, the initialization completion time of the micro control unit is later than that of the functional safety control unit.

[0052] The functional safety control unit monitors the operating state of the microcontroller, for example, with the help of a built-in watchdog unit. Under normal operating conditions, the microcontroller periodically outputs a dog-feeding signal to the functional safety control unit or the watchdog unit. When the watchdog unit does not receive the dog-feeding signal within a predetermined time window, it is considered that the microcontroller is abnormal and outputs a fault output signal, so as to instruct the vehicle to enter the limp home mode and the relevant load to perform the limp home function.

[0053] The loads that can perform the limp home function are, for example, functional safety-related loads, such as lights, wipers, etc. In normal operation of the vehicle, the activation of the loads is controlled by the microcontroller. After entering the limp home mode, the loads can still be activated or perform the limp home function with the help of the functional safety control unit, so that the vehicle will not face the problem of being unable to activate safety-critical loads due to a failure of the microcontroller, greatly improving the driving safety of the vehicle.

[0054] However, as described above, during the period when the functional safety control unit is initialized but the micro control unit is not initialized, the dog feeding signal cannot be output by the micro control unit and received by the functional safety control unit, so that the functional safety control unit outputs a fault output signal.

[0055] When the functional safety control unit outputs a fault output signal, the first port P1 of the control circuit 100 receives the fault output signal and transmits it to the driving module DM.

[0056] The power supply module PM connected to the driving module DM provides a power supply signal, thereby providing a driving current and / or a driving voltage to the driving module.

[0057] When receiving the fault output signal and being provided with the power signal, the driving module DM outputs a driving signal and transmits it to a subsequent circuit including a load through the second port P2, thereby driving the load to perform a limp home function or activating the load.

[0058] Since the fault output signal generated by the failure to complete the initialization of the microcontroller does not mean that the microcontroller actually fails, and it is not desired to cause a short-term abnormal activation of the load during the vehicle startup process due to the fault output signal, according to an embodiment of the present disclosure, no power signal is provided within a predetermined period of time after the vehicle is started, or the power signal is provided in a manner delayed by a predetermined period of time, so that the fault output signal generated within the predetermined time is shielded, so that the drive module DM does not output a drive signal capable of activating the load within the predetermined period of time.

[0059] According to an embodiment of the present disclosure, the predetermined period is determined based on response parameters of a micro control unit and a functional safety control unit of the vehicle during the startup process of the vehicle.

[0060] Preferably, the response parameter is the initialization completion time, and the predetermined period is determined based on the difference between the initialization completion time of the micro control unit and the functional safety control unit. For example, when the initialization completion time of the micro control unit is 220ms and the initialization completion time of the functional safety control unit is 100ms, the predetermined period is 120ms. Preferably, the predetermined period is between 100ms and 200ms, or other time lengths.

[0061] By providing the power signal with a delay of a predetermined period, even if the driving module DM receives a fault output signal from the functional safety control unit, it does not output a driving signal capable of activating the load, thereby avoiding abnormal activation of the load.

[0062] During the operation of the vehicle, in the event of a failure of the microcontroller unit, the functional safety control unit continuously outputs a fault output signal, resulting in long-term activation of the load. The continuous output of the fault output signal, for example, includes outputting the fault output signal for a longer period than the predetermined period. According to an embodiment of the present disclosure, the power module can be manually disabled in this case so that the power signal is no longer provided, thereby no longer activating the load or achieving deactivation of the load.

[0063] Manual disabling includes, for example, manual disabling by means of a switch device in the form of hardware or software in the power module. The hardware control or software control in the power module is not affected by a microcontroller failure, which effectively solves the problem that the limp home mode can only be exited at a maintenance point in the event of a microcontroller failure. For example, in the case where the power module has a physical switch in the form of hardware, the physical switch can be directly turned off manually, thereby cutting off the power signal in a simple manner.

[0064] According to an embodiment of the present disclosure, the power module can be controlled by hardware and / or software. Alternatively, the power module has a power supply and a switch device, and the switch device can be controlled by hardware and / or software.

[0065] In the case of hardware control, for example, Figure 3 The power supply shown is combined with the technical solution of the switch circuit to realize the function of the power module. In the case of software control, for example, the function of the power module can be realized by means of the technical solution of inputting a controllable delay signal through an I / O port.

[0066] Figure 2 The example shows the Figure 1 Schematic diagram of the drive module of the control circuit.

[0067] like Figure 2 As shown, the driving module DM may include, for example, a transistor Q1 , a resistor R1 , a resistor R2 , and a capacitor C1 .

[0068] The transistor Q1 can be, for example, a PNP transistor. The emitter of the transistor Q1 is connected to the power module PM, the base is connected to the first port P1 through a circuit connected to the resistor R1, the collector is connected to the second port P1 and grounded through a circuit connected to the capacitor C1, and the capacitor C1 is connected in parallel to the resistor R3. The resistors R1, R2, R3 and the capacitor C1 respectively play the role of protecting the transistor, improving the cutoff reliability of the transistor, limiting the level and stabilizing the voltage in terms of circuit design.

[0069] In this example, the power supply signal is, for example, a high level, and the fault output signal is, for example, a low level. When the driving module DM receives a low level fault output signal and is provided with a high level power supply signal, the transistor Q1 is turned on and outputs a high level as a driving signal capable of activating the load. When the driving module DM does not receive a fault output signal or a power supply signal, the transistor Q1 is turned off.

[0070] According to an embodiment of the present disclosure, the driving module DM outputs a driving signal according to the fault output signal and the power supply signal. Figure 2In addition to the driving module shown, other design solutions that can achieve this also fall within the scope of the present disclosure. For example, the driving module DM may include a field effect transistor, such as a MOS transistor.

[0071] Figure 3 The example shows the Figure 1 Schematic diagram of the power module PM of the control circuit.

[0072] like Figure 3 As shown, the power module PM may include, for example, a power source BAT in the form of a battery and a switch circuit SC capable of implementing a delay function. The switch circuit SC may be implemented, for example, by a resistor-capacitor circuit (RC circuit).

[0073] In this example, the switch circuit SC includes resistors R4, R5, R6, R7, R8, R9, capacitor C2, and transistors Q2 and Q3. The base of transistor Q2 is connected to resistor R4 connected to power supply BAT, grounded resistor R5, and grounded capacitor C2, the emitter is connected to grounded resistor R7, the emitter is connected to resistor R6 connected to power supply BAT and one end of resistor R8, the other end of resistor R8 is connected to the base of transistor Q3, the emitter of transistor Q3 is connected to power supply BAT, the collector is connected to grounded resistor R9, and outputs a power signal.

[0074] The power supply BAT charges the capacitor C2 via the resistor R4 and provides a power signal to the transistors Q2 and Q3. The voltage at one end of the capacitor C2 connected to the base of the transistor Q2 starts to rise from 0. For the subsequent circuit, the time t to rise to the effective voltage required by the subsequent circuit can be considered as the delay time. The delay time can be adjusted by adjusting the parameters of the resistors R4, R5 and the capacitor C2. When the base voltage of the transistor Q2 meets the conduction condition, the transistor Q2 is turned on and outputs a level signal. The transistor Q3 is used to achieve a reliable switching effect in a similar manner. Other resistors play a role in protecting the transistor, improving the cutoff reliability of the transistor, limiting the level, etc. in terms of circuit design. The power module PM outputs a power signal after the delay time t.

[0075] According to an embodiment of the present disclosure, the power module can be controlled in a hardware and / or software manner to complete the delay function and the manually disabled function. Figure 3 In addition to the power module shown, other designs that can achieve this also fall within the scope of the present disclosure.

[0076] Figure 4 A schematic diagram of a control system 200 for a limp home function of a vehicle according to an embodiment of the present disclosure is shown.

[0077] like Figure 4As shown, the control system 200 includes a functional safety control unit FS, a control circuit 100 according to an embodiment of the present disclosure (herein, according to Figure 2 Embodiment), a load capable of performing a limp home function, and a load control circuit 300.

[0078] The functional safety control unit FS is configured to monitor the operating state of the micro control unit of the vehicle and output a fault output signal for instructing to execute the limp home function when an abnormal operating state is detected. The functional safety control unit FS is, for example, a system basis chip or includes a system basis chip.

[0079] Two loads, namely a first load L1 and a second load L2 are shown as loads capable of performing a limp home function.

[0080] The load control circuit 300 is configured to control a circuit between a microcontroller and a control circuit and a load, and may include, for example, a first signal port S1 and a second signal port S2 connected to the microcontroller and diodes D1-D4 connected upstream of the load. Users may adopt a variation of the load control circuit as needed.

[0081] As can be seen from the figure, in the load control circuit 300, the load can be driven not only by the driving signal output by the control circuit 100, but also by the control signal received from the microcontroller via the first signal port S1 and the second signal port S2. Therefore, in the normal operation state of the microcontroller, the load can be directly activated, and in the abnormal operation state of the microcontroller, the load can be activated by means of the control circuit 100 for the limp home function of the vehicle according to the present disclosure. Through the control system for the limp home function of the vehicle according to the embodiment of the present disclosure, the control circuit and the load control circuit are combined to drive the load.

[0082] Figure 5 A schematic flow chart of a control method for a limp home function of a vehicle according to an embodiment of the present disclosure is shown.

[0083] like Figure 5 As shown, in step S1, for example, a fault output signal for instructing to execute the limp home function is received from the functional safety control unit. In step S2, for example, a power supply signal is provided in a manner of delaying a predetermined period after the vehicle is started, so that the fault output signal is shielded within the predetermined period, so that the load capable of executing the limp home function of the vehicle cannot be driven within the predetermined period. It should be understood that the order of occurrence of steps S1 and S2 is not limited.

[0084] For example, the predetermined period can be determined based on the response parameters of the micro control unit and the functional safety control unit of the vehicle during the startup process of the vehicle. The response parameter can be, for example, the initialization completion time, so that the predetermined period is determined based on the difference in the initialization completion time of the micro control unit and the functional safety control unit, and the predetermined period is, for example, between 100ms and 200ms, or other time lengths.

[0085] The providing of the power signal in a manner of delaying a predetermined period of time may include, for example, providing the power signal in a manner of delaying a predetermined period of time by: Figure 3 The switch circuit shown controls a power source for providing a power signal so that the power signal is output to the driving module with a delay of a predetermined period of time.

[0086] Figure 6 A schematic diagram of a computer-readable storage medium 400 according to an embodiment of the present disclosure is shown.

[0087] like Figure 6 As shown, the computer storage medium 400 stores computer-readable instructions 401. When the computer-readable instructions 401 are executed by the processor, the method according to the embodiment of the present disclosure described above can be executed. The computer-readable storage medium in the embodiment of the present disclosure can be a volatile memory or a non-volatile memory, or can include both volatile and non-volatile memories. The non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM) or a flash memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example but not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous connection dynamic random access memory (SLDRAM) and direct memory bus random access memory (DR RAM). It should be noted that memory of the methods described herein is intended to include, but is not limited to, these and any other suitable types of memory. It should be noted that memory of the methods described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0088] It should be noted that the flowcharts and block diagrams in the accompanying drawings illustrate the possible architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each box in the flowchart or block diagram can represent a module, a program segment, or a part of a code, and the module, program segment, or a part of the code contains at least one executable instruction for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flowchart, and the combination of boxes in the block diagram and / or flowchart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0089] In general, various example embodiments of the present disclosure may be implemented in hardware or dedicated circuits, software, firmware, logic, or any combination thereof. Certain aspects may be implemented in hardware, while other aspects may be implemented in firmware or software that may be executed by a controller, microprocessor, or other computing device. When various aspects of the embodiments of the present disclosure are illustrated or described as block diagrams, flow charts, or using some other graphical representation, it will be understood that the blocks, devices, systems, techniques, or methods described herein may be implemented in hardware, software, firmware, dedicated circuits or logic, general purpose hardware or controllers or other computing devices, or some combination thereof as non-limiting examples.

[0090] The exemplary embodiments of the present disclosure described in detail above are merely illustrative and not restrictive. It should be understood by those skilled in the art that various modifications and combinations may be made to these embodiments or their features without departing from the principles and spirit of the present disclosure, and such modifications should fall within the scope of the present disclosure.

Claims

1. A control circuit for a limp home function of a vehicle, comprising: - a first port, configured to receive a fault output signal, the fault output signal indicating execution of a limp home function; - a driving module, configured to drive a load of the vehicle capable of performing the limp home function; - a power module, configured to provide a power signal to the driving module; - a second port, configured to output a driving signal for driving the load, The first input terminal of the driving module is connected to the power supply module, the second input terminal is connected to the first port, and the output terminal is connected to the second port, and The power module is configured to provide a power signal in a manner of delaying a predetermined period of time, so that the fault output signal is shielded within the predetermined period of time, thereby making it impossible for the control circuit to drive the load within the predetermined period of time, and Wherein, the predetermined time period is determined based on the response parameters of the microcontroller unit and the functional safety control unit of the vehicle during the startup process of the vehicle, and the functional safety control unit is configured to monitor the operating status of the microcontroller unit and output the fault output signal when an abnormal operating status is detected.

2. The control circuit according to claim 1, wherein: The response parameter is an initialization completion time, and the predetermined period is determined based on a difference in initialization completion time between the micro control unit and the functional safety control unit.

3. The control circuit according to claim 1 or 2, wherein: The predetermined period is between 100 ms and 200 ms.

4. The control circuit according to claim 1 or 2, wherein: The power module can be manually disabled in the event that the driver module continuously receives the fault output signal, wherein the continuously receiving the fault output signal includes receiving the fault output signal for longer than the predetermined period of time.

5. The control circuit according to claim 1 or 2, wherein: The power module can be controlled in a hardware and / or software manner.

6. The control circuit according to claim 5, wherein: The power module has a power supply and a switching device, which can be controlled by hardware and / or software.

7. The control circuit according to claim 4, wherein: The power module can be manually disabled including by means of a switch device in the form of hardware or software in the power module.

8. The control circuit according to claim 1, wherein: The driving module includes a triode and / or a field effect transistor.

9. The control circuit according to claim 1 or 2, wherein: The control circuit is arranged in the functional safety control unit or implemented as a peripheral circuit of the functional safety control unit.

10. A control system for a limp home function of a vehicle, comprising: a functional safety control unit configured to monitor the operating state of the micro control unit of the vehicle and output a fault output signal for indicating execution of a limp home function when an abnormal operating state is detected; A control circuit according to any one of claims 1 to 9; a load capable of performing said limp home function; and a load control circuit configured to control a circuit between the microcontroller and the control circuit and the load, The control circuit receives the fault output signal and outputs a driving signal so as to drive the load in combination with the load control circuit.

11. A domain controller comprising the control circuit according to any one of claims 1 to 9.

12. A motor vehicle comprising a control circuit according to any one of claims 1 to 9 and / or a domain controller according to claim 11.

13. A method for controlling a limp home function of a vehicle, comprising: - receiving a fault output signal for indicating execution of a limp home function; - providing a power signal in a manner of delaying a predetermined period of time, so that the fault output signal is shielded during the predetermined period of time, thereby making it impossible to drive a load of the vehicle capable of performing the limp home function during the predetermined period of time, Wherein, the predetermined time period is determined based on the response parameters of the microcontroller unit and the functional safety control unit of the vehicle during the startup process of the vehicle, and the functional safety control unit is configured to monitor the operating status of the microcontroller unit and output the fault output signal when an abnormal operating status is detected.

14. The control method according to claim 13, wherein: The response parameter is an initialization completion time, and the predetermined period is determined based on a difference in initialization completion time between the micro control unit and the functional safety control unit.

15. The control method according to claim 13 or 14, wherein: The predetermined period is between 100 ms and 200 ms.

16. The control method according to claim 13 or 14, wherein: The providing of the power signal in a manner of delaying a predetermined period of time comprises: The power supply for providing the power signal is controlled by the switch circuit so that the power signal is output to the driving module with a delay of a predetermined period of time, thereby making it impossible for the driving module to drive the load within the predetermined period of time.

17. A computer-readable storage medium having computer-executable instructions stored thereon, wherein the instructions are used to implement the method according to any one of claims 13 to 16 when executed by a processor.

Images