Monitoring method, device and equipment of remote accelerator for function safety and storage medium

Abstract

The invention discloses a monitoring method, device and equipment for a remote accelerator for function safety and a storage medium, and the method comprises the steps: in the vehicle driving process, if a function fault does not exist in a remote accelerator switch, judging whether a brake signal has a fault or not; when the brake signal has a fault, whether the vehicle needs to enter a preset safety management driving state or not is judged according to whether a remote accelerator switch is turned on or not; wherein in the safety management driving state, torque output of a vehicle engine is limited, and corresponding functions of a remote accelerator switch are forbidden to be used; and when the brake signal does not have a fault, the corresponding function of the remote accelerator switch is normally responded. A brake signal is judged when the remote accelerator switch does not have a function fault in the vehicle driving process, so that the use of the function of the remote accelerator switch is more accurately controlled under the two conditions that the brake signal has a fault and does not have a fault, and the vehicle driving and the use of the remote accelerator are limited as required, so that the safety of the vehicle is improved. The driving safety is ensured.

Description

Technical Field

[0001] The present application relates to the technical field of vehicle remote throttle, and in particular to a monitoring method, device, equipment and storage medium for a remote throttle for functional safety. Background Art

[0002] The commonly used judgment method for the diesel engine remote throttle enable switch is that if the following four conditions are met at the same time: the vehicle speed is less than the calibrated minimum speed value, the engine speed is greater than the idle speed value, the remote throttle switch is turned on, and the remote throttle has no short circuit or open circuit fault, then the remote throttle function is activated. If one of the conditions is no longer met, the remote throttle function is exited.

[0003] At present, the function development of traditional diesel engine remote throttle switches is based on the A-SPICE process, which can only make safety judgments on whether there is a fault, but does not monitor the throttle switching status during actual driving. Since the remote throttle is a safety-related function, when the remote throttle is allowed to be turned on when the vehicle is in motion will have a great impact on driving safety, so the remote throttle monitoring method needs to be further improved. Summary of the invention

[0004] The present application provides a remote throttle monitoring method, device, equipment and storage medium for functional safety, which can solve the technical problems existing in the above-mentioned prior art.

[0005] In a first aspect, an embodiment of the present application provides a remote throttle monitoring method for functional safety, which adopts the following technical solution:

[0006] A method for monitoring a remote throttle for functional safety, the method comprising:

[0007] During the driving of the vehicle, if there is no functional failure of the remote throttle switch, determining whether there is a failure in the brake signal;

[0008] When there is a fault in the brake signal, whether the vehicle needs to enter a preset safety management driving state is determined based on whether the remote throttle switch is turned on; wherein, in the safety management driving state, the vehicle engine torque output is limited and the corresponding function of the remote throttle switch is prohibited from being used;

[0009] When there is no fault in the brake signal, the remote throttle switch responds normally to the corresponding function.

[0010] In combination with the first aspect, in one implementation, when the brake signal fails, judging whether the vehicle needs to enter a preset safety management driving state according to whether the remote throttle switch is turned on includes the following steps:

[0011] If the remote throttle switch is turned on, the safety management driving state is entered;

[0012] If the remote throttle switch is not turned on, the safety management driving state will not be entered.

[0013] In combination with the first aspect, in one implementation manner, determining whether the brake signal has a fault comprises the following steps:

[0014] When the brake signal is bus configured, if the brake signal sent by the message is monitored, the brake signal validity flag is output; when the brake signal sent by the message is monitored to have a fault, the brake signal fault flag is output.

[0015] In combination with the first aspect, in one implementation manner, determining whether the brake signal has a fault comprises the following steps:

[0016] When the brake signal is hard-wired, the two brake pedal signals received after bottom-level processing are cross-checked. If the two brake pedal signals are consistent, the brake signal validity flag is output; if the two brake pedal signals are inconsistent, the brake signal fault flag is output.

[0017] In combination with the first aspect, in one implementation, the method further includes the following steps:

[0018] During vehicle driving, if there is a functional failure in the remote throttle switch, the vehicle is controlled to enter the safety management driving state.

[0019] In combination with the first aspect, in one implementation, during the vehicle driving process, if the remote throttle switch does not have a functional failure, before determining whether the brake signal has a failure, the following steps are included:

[0020] Obtaining a vehicle speed signal;

[0021] If the vehicle speed signal is greater than a preset limit value and no braking signal is obtained, it is determined that the vehicle is in a driving process.

[0022] In a second aspect, the embodiment of the present application provides a remote throttle monitoring device for functional safety, which adopts the following technical solution:

[0023] A monitoring module configured to determine whether the brake signal has a fault if the remote throttle switch has no functional fault during vehicle driving;

[0024] A control module is configured to determine whether the vehicle needs to enter a preset safety management driving state based on whether the remote throttle switch is turned on when it is determined that there is a fault in the braking signal; wherein the vehicle engine torque output is limited and the corresponding function of the remote throttle switch is prohibited in the safety management driving state; and when there is no fault in the braking signal, the remote throttle switch corresponding function is responded to normally.

[0025] In combination with the second aspect, in one implementation, the control module is further configured to control the vehicle to enter the safety management driving state if there is a functional failure in the remote throttle switch during vehicle driving.

[0026] In a third aspect, the embodiment of the present application provides a remote throttle monitoring device for functional safety, which adopts the following technical solution:

[0027] A monitoring device for a remote throttle for functional safety, the monitoring device for the remote throttle for functional safety comprising a processor, a memory, and a monitoring program for the remote throttle for functional safety stored in the memory and executable by the processor, wherein when the monitoring program for the remote throttle for functional safety is executed by the processor, the steps of the monitoring method for the remote throttle for functional safety as described above are implemented.

[0028] In a fourth aspect, an embodiment of the present application provides a storage medium, which adopts the following technical solution:

[0029] A storage medium stores a monitoring program for a remote throttle for functional safety. When the monitoring program for the remote throttle for functional safety is executed by a processor, the steps of the monitoring method for the remote throttle for functional safety as described above are implemented.

[0030] The beneficial effects brought by the technical solution provided in the embodiments of the present application include:

[0031] By judging the brake signal when there is no functional failure of the remote throttle switch during vehicle driving, the use of the remote throttle switch function can be more accurately controlled under both conditions when the brake signal has a failure and when the remote throttle is not failed. When there is a failure in the brake signal, as long as the remote throttle is turned on, the vehicle enters a safe management driving state, restricts vehicle driving and remote throttle use, and ensures driving safety. When there is no failure in the brake signal, braking can be achieved. In this state, the corresponding function of the remote throttle switch can be responded to normally, and there is no need to restrict vehicle driving and remote throttle switch functions, thereby ensuring the smoothness of the driving process. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] Figure 1 A flowchart of an embodiment of a remote throttle monitoring method for functional safety of the present application;

[0033] Figure 2 This is a functional module diagram of an embodiment of a remote throttle monitoring device for functional safety of the present application;

[0034] Figure 3This is a schematic diagram of the hardware structure of a remote throttle monitoring device for functional safety involved in an embodiment of the present application. DETAILED DESCRIPTION

[0035] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0036] First, some technical terms in the present application are explained to facilitate those skilled in the art to understand the present application.

[0037] The commonly used judgment method for the diesel engine remote throttle enable switch is that if the following four conditions are met at the same time: the vehicle speed is less than the calibrated minimum speed value, the engine speed is greater than the idle speed value, the remote throttle switch is turned on, and the remote throttle has no short circuit or open circuit fault, then the remote throttle function is activated. If one of the conditions is no longer met, the remote throttle function is exited.

[0038] At present, the function development of traditional diesel engine remote throttle switches is based on the A-SPICE process, which can only make safety judgments on whether there is a fault, but does not monitor the throttle switching status during actual driving. Since the remote throttle is a safety-related function, when the remote throttle is allowed to be turned on when the vehicle is in motion will have a great impact on driving safety, so the remote throttle monitoring method needs to be further improved.

[0039] Based on the above problems, the present application provides a monitoring method, device, equipment and storage medium for a remote throttle for functional safety. The key point of the invention is that the braking signal is judged when there is no functional failure in the remote throttle switch during vehicle driving, and then the use of the remote throttle switch function is more accurately controlled under two conditions: when there is a failure in the braking signal, as long as the remote throttle is turned on, the vehicle enters a safe management driving state, restricts vehicle driving and remote throttle use, and ensures driving safety. When there is no failure in the braking signal, braking can be achieved. In this state, the corresponding function of the remote throttle switch can be responded to normally, and there is no need to restrict vehicle driving and remote throttle switch functions, thereby ensuring the smoothness of the driving process.

[0040] In order to make the objectives, technical solutions and advantages of the present application clearer, the implementation methods of the present application will be further described in detail below with reference to the accompanying drawings.

[0041] In a first aspect, an embodiment of the present application provides a method for monitoring a remote throttle for functional safety.

[0042] In one embodiment, referring to Figure 1 , Figure 1 This is a flow chart of the first embodiment of the remote throttle monitoring method for functional safety of this application. Figure 1 As shown in the figure, the monitoring method of remote throttle for functional safety includes:

[0043] S100, during the driving of the vehicle, if the remote throttle switch does not have a functional failure, determining whether the brake signal has a failure;

[0044] S210: When there is a fault in the brake signal, judging whether the vehicle needs to enter a preset safety management driving state according to whether the remote throttle switch is turned on; wherein in the safety management driving state, the vehicle engine torque output is limited and the corresponding function of the remote throttle switch is prohibited from being used;

[0045] S220: When there is no fault in the brake signal, the remote throttle switch responds normally to the corresponding function.

[0046] In this embodiment, by judging the brake signal when there is no functional failure of the remote throttle switch during vehicle driving, the use of the remote throttle switch function is more accurately controlled in both the conditions of the brake signal failure and the failure of the remote throttle switch.

[0047] Specifically, when there is a fault in the brake signal, the braking ability of the current vehicle during driving is at great risk. At this time, if the related functions of the remote throttle are still maintained, there will be great risks. Therefore, in this situation, as long as the remote throttle is turned on, this embodiment will enter the safety management driving state, restrict the vehicle driving and the use of the remote throttle, and ensure driving safety.

[0048] When there is no fault in the braking signal, the braking ability of the current vehicle driving process is normal and can brake smoothly when needed. Therefore, in this state, the corresponding functions of the remote throttle switch can be responded normally. There is no need to restrict the vehicle driving and the remote throttle switch functions, thereby ensuring the smoothness of the driving process.

[0049] Further, in one embodiment, when the brake signal fails in S210, judging whether the vehicle needs to enter a preset safety management driving state according to whether the remote throttle switch is turned on includes the following steps:

[0050] S211, if the remote throttle switch is turned on, entering the safety management driving state;

[0051] S212: If the remote throttle switch is not turned on, the safety management driving state is not entered.

[0052] Further, in one embodiment, the step S220, determining whether the brake signal has a fault, comprises the following steps:

[0053] S221. When the braking signal is bus configured, if the braking signal sent by the message is monitored, the braking signal validity flag is output; when the braking signal sent by the message is monitored to have a fault, the braking signal fault flag is output.

[0054] In this embodiment, for the vehicle situation when the brake signal is configured by the bus, it is implemented to determine whether the brake signal is faulty according to the brake signal sent by the message, thereby achieving a quick and accurate determination in this scenario.

[0055] In addition, in some other embodiments, the step S220, determining whether the brake signal has a fault, comprises the following steps:

[0056] S222. When the brake signal is hard-wired, the two brake pedal signals received after bottom-level processing are cross-checked. If the two brake pedal signals are consistent, the brake signal validity flag is output; if the two brake pedal signals are inconsistent, the brake signal fault flag is output.

[0057] In this embodiment, for the vehicle situation when the brake signal is hard-wired, whether the brake signal has a fault is determined based on the result of mutual verification between the two pedal signals, thereby achieving quick and accurate judgment of the brake signal in this scenario.

[0058] Furthermore, in one embodiment, the following steps are also included:

[0059] S110: During vehicle driving, if there is a functional failure in the remote throttle switch, the vehicle is controlled to enter the safety management driving state.

[0060] When the vehicle is in motion, it is necessary to first determine whether the remote throttle switch has a functional fault, such as whether the remote throttle is short-circuited or open-circuited. When a related fault is detected, the vehicle is directly controlled to perform safe driving management.

[0061] Furthermore, in one embodiment, during the driving of the vehicle, if the remote throttle switch does not have a functional failure, before determining whether the brake signal has a failure, the following steps are included:

[0062] S010, obtaining a vehicle speed signal;

[0063] S020: If the vehicle speed signal is greater than a preset limit value and no braking signal is obtained, it is determined that the vehicle is in a driving process.

[0064] In this embodiment, by acquiring the vehicle speed signal, when the vehicle speed is greater than the corresponding limit value, it is triggered to determine whether the brake signal is obtained. When it is determined that the brake signal is not obtained, it means that the vehicle is in the driving process. Then, the relevant remote throttle switch function can be monitored and controlled during the driving process.

[0065] In addition, the design of the solutions in the above embodiments is based on the E-GAS architecture, with the existing remote throttle function as the level 1 functional layer, and a remote throttle function monitoring mechanism is designed at the level 2 monitoring layer, that is, the vehicle driving status, braking signal, and remote throttle switch signal are monitored at the level 2 layer.

[0066] Finally, by judging the brake signal when there is no functional failure of the remote throttle switch during vehicle driving, the use of the remote throttle switch function can be more accurately controlled in both the case of a brake signal failure and a non-failure condition. When there is a brake signal failure, as long as the remote throttle is turned on, the vehicle enters the safe management driving state, restricting the vehicle driving and the use of the remote throttle to ensure driving safety. When there is no brake signal failure, braking can be achieved. In this state, the corresponding function of the remote throttle switch can be responded normally, and there is no need to restrict the vehicle driving and the remote throttle switch function, ensuring the smoothness of the driving process. When there is a functional failure of the remote throttle switch, the vehicle will be directly controlled to enter the safe management driving state of the vehicle to ensure that the remote throttle switch function will not be triggered unexpectedly, resulting in driving safety.

[0067] In a second aspect, an embodiment of the present application also provides a remote throttle monitoring device for functional safety.

[0068] In one embodiment, referring to Figure 2 , Figure 2 This is a functional module diagram of an embodiment of a remote throttle monitoring device for functional safety of the present application. Figure 2 As shown in the figure, the monitoring device of the remote throttle for functional safety includes:

[0069] A monitoring module configured to determine whether the brake signal has a fault if the remote throttle switch has no functional fault during vehicle driving;

[0070] A control module is configured to determine whether the vehicle needs to enter a preset safety management driving state based on whether the remote throttle switch is turned on when it is determined that there is a fault in the braking signal; wherein the vehicle engine torque output is limited and the corresponding function of the remote throttle switch is prohibited in the safety management driving state; and when there is no fault in the braking signal, the remote throttle switch corresponding function is responded to normally.

[0071] Further, in one embodiment, when the control module executes: when the brake signal fails, judging whether the vehicle needs to enter a preset safety management driving state according to whether the remote throttle switch is turned on, the control module specifically includes the following steps:

[0072] If the remote throttle switch is turned on, the safety management driving state is entered;

[0073] If the remote throttle switch is not turned on, the safety management driving state will not be entered.

[0074] Further, in one embodiment, when the monitoring module performs the step of determining whether the braking signal has a fault, the following steps are included:

[0075] When the brake signal is bus configured, if the brake signal sent by the message is monitored, the brake signal validity flag is output; when the brake signal sent by the message is monitored to have a fault, the brake signal fault flag is output.

[0076] Further, in one embodiment, the monitoring module performs: the step of determining whether the braking signal has a fault, including the following steps:

[0077] When the brake signal is hard-wired, the two brake pedal signals received after bottom-level processing are cross-checked. If the two brake pedal signals are consistent, the brake signal validity flag is output; if the two brake pedal signals are inconsistent, the brake signal fault flag is output.

[0078] Further, in one embodiment, the monitoring module, before executing: during the vehicle driving process, if the remote throttle switch does not have a functional failure, determining whether the brake signal has a failure, includes the following steps:

[0079] Obtaining a vehicle speed signal;

[0080] If the vehicle speed signal is greater than a preset limit value and no braking signal is obtained, it is determined that the vehicle is in a driving process.

[0081] Furthermore, in one embodiment, the control module is further configured to execute: during vehicle driving, if there is a functional failure in the remote throttle switch, controlling the vehicle to enter the safety management driving state.

[0082] Among them, the functional implementation of each module in the above-mentioned remote throttle monitoring device for functional safety corresponds to each step in the above-mentioned embodiment of the remote throttle monitoring method for functional safety, and its functions and implementation processes are not repeated here one by one.

[0083] In a third aspect, an embodiment of the present application provides a remote throttle monitoring device for functional safety. The remote throttle monitoring device for functional safety may be a personal computer (PC), a laptop computer, a server, or other device with data processing capabilities.

[0084] Reference Figure 3 , Figure 3 The hardware structure diagram of the remote throttle monitoring device for functional safety involved in the embodiment of the present application is shown in FIG. In the embodiment of the present application, the remote throttle monitoring device for functional safety may include a processor, a memory, a communication interface, and a communication bus.

[0085] The communication bus may be of any type and is used to interconnect the processor, the memory, and the communication interface.

[0086] The communication interface includes input / output (I / O) interface, physical interface and logical interface, etc., which are used to realize the interconnection of devices inside the monitoring device of the remote throttle for functional safety, and the interface used to realize the interconnection of the monitoring device of the remote throttle for functional safety with other devices (such as other computing devices or user devices). The physical interface can be an Ethernet interface, a fiber optic interface, an ATM interface, etc.; the user device can be a display, a keyboard, etc.

[0087] The memory can be various types of storage media, such as random access memory (RAM), read-only memory (ROM), non-volatile RAM (NVRAM), flash memory, optical storage, hard disk, programmable ROM (PROM), erasable PROM (EPROM), electrically erasable PROM (EEPROM), etc.

[0088] The processor may be a general-purpose processor, which may call the monitoring program of the remote throttle for functional safety stored in the memory and execute the monitoring method of the remote throttle for functional safety provided in the embodiment of the present application. For example, the general-purpose processor may be a central processing unit (CPU). The method executed when the monitoring program of the remote throttle for functional safety is called may refer to the various embodiments of the monitoring method of the remote throttle for functional safety of the present application, which will not be described in detail here.

[0089] Those skilled in the art will understand that Figure 3The hardware structure shown in the figure does not constitute a limitation on the present application, and may include more or less components than shown in the figure, or combine certain components, or arrange the components differently.

[0090] In a fourth aspect, an embodiment of the present application also provides a storage medium.

[0091] The storage medium of the present application stores a monitoring program for a remote throttle for functional safety, wherein when the monitoring program for a remote throttle for functional safety is executed by a processor, the steps of the monitoring method for a remote throttle for functional safety as described above are implemented.

[0092] Among them, the method implemented when the monitoring program of the remote throttle for functional safety is executed can refer to the various embodiments of the monitoring method of the remote throttle for functional safety of the present application, and will not be repeated here.

[0093] It should be noted that the serial numbers of the above-mentioned embodiments of the present application are only for description and do not represent the advantages or disadvantages of the embodiments.

[0094] The terms "including" and "having" and any variations thereof in the specification and claims of this application and the above-mentioned drawings are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but optionally includes steps or units that are not listed, or optionally includes other steps or units inherent to these processes, methods, products or devices. The terms "first", "second" and "third" are used to distinguish different objects, etc., and do not represent a sequence, nor do they limit "first", "second" and "third" to different types.

[0095] In the description of the embodiments of the present application, "exemplary", "for example" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary", "for example" or "for example" in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary", "for example" or "for example" is intended to present related concepts in a specific way.

[0096] In the description of the embodiments of the present application, unless otherwise specified, “ / ” means or, for example, A / B can mean A or B; the “and / or” in the text is merely a description of the association relationship of associated objects, indicating that three relationships may exist, for example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. In addition, in the description of the embodiments of the present application, “multiple” refers to two or more than two.

[0097] In some processes described in the embodiments of the present application, multiple operations or steps that appear in a specific order are included, but it should be understood that these operations or steps may not be executed in the order in which they appear in the embodiments of the present application or in parallel, and the sequence number of the operation is only used to distinguish the different operations, and the sequence number itself does not represent any execution order. In addition, these processes may include more or fewer operations, and these operations or steps may be executed in sequence or in parallel, and these operations or steps may be combined.

[0098] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application is essentially or the part that contributes to the prior art can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, disk, CD) as described above, and includes a number of instructions for a terminal device to execute the methods described in each embodiment of the present application.

[0099] The above are only preferred embodiments of the present application, and are not intended to limit the patent scope of the present application. Any equivalent structure or equivalent process transformation made using the contents of the present application specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present application.

Claims

1. A remote throttle monitoring method for functional safety, characterized in that: The method comprises: During the driving of the vehicle, if there is no functional failure of the remote throttle switch, determining whether there is a failure in the brake signal; When there is a fault in the brake signal, whether the vehicle needs to enter a preset safety management driving state is determined based on whether the remote throttle switch is turned on; wherein, in the safety management driving state, the vehicle engine torque output is limited and the corresponding function of the remote throttle switch is prohibited from being used; When there is no fault in the brake signal, the remote throttle switch responds normally to the corresponding function.

2. The method for monitoring a remote throttle for functional safety according to claim 1, characterized in that: When the brake signal fails, judging whether the vehicle needs to enter a preset safety management driving state according to whether the remote throttle switch is turned on includes the following steps: If the remote throttle switch is turned on, the safety management driving state is entered; If the remote throttle switch is not turned on, the safety management driving state will not be entered.

3. The method for monitoring a remote throttle for functional safety according to claim 1, characterized in that: The step of determining whether the brake signal has a fault comprises the following steps: When the brake signal is bus configured, if the brake signal sent by the message is monitored, the brake signal validity flag is output; when the brake signal sent by the message is monitored to have a fault, the brake signal fault flag is output.

4. The method for monitoring a remote throttle for functional safety according to claim 1, characterized in that: The step of determining whether the brake signal has a fault comprises the following steps: When the brake signal is hard-wired, the two brake pedal signals received after bottom-level processing are cross-checked. If the two brake pedal signals are consistent, the brake signal validity flag is output; if the two brake pedal signals are inconsistent, the brake signal fault flag is output.

5. The method for monitoring a remote throttle for functional safety according to claim 1, characterized in that: The following steps are also included: During vehicle driving, if there is a functional failure in the remote throttle switch, the vehicle is controlled to enter the safety management driving state.

6. The method for monitoring a remote throttle for functional safety according to claim 1, characterized in that: During the vehicle driving process, if the remote throttle switch does not have a functional failure, before determining whether the brake signal has a failure, the following steps are included: Obtaining a vehicle speed signal; If the vehicle speed signal is greater than a preset limit value and no braking signal is obtained, it is determined that the vehicle is in a driving process.

7. A remote throttle monitoring device for functional safety, characterized in that: The device comprises: A monitoring module configured to determine whether the brake signal has a fault if the remote throttle switch has no functional fault during vehicle driving; A control module is configured to determine whether the vehicle needs to enter a preset safety management driving state based on whether the remote throttle switch is turned on when it is determined that there is a fault in the braking signal; wherein the vehicle engine torque output is limited and the corresponding function of the remote throttle switch is prohibited in the safety management driving state; and when there is no fault in the braking signal, the remote throttle switch corresponding function is responded to normally.

8. The monitoring device for remote throttle for functional safety according to claim 1, characterized in that: The control module is also configured to control the vehicle to enter the safety management driving state if there is a functional failure in the remote throttle switch during vehicle driving.

9. A remote throttle monitoring device for functional safety, characterized in that: The monitoring device for the remote throttle for functional safety includes a processor, a memory, and a monitoring program for the remote throttle for functional safety stored in the memory and executable by the processor, wherein when the monitoring program for the remote throttle for functional safety is executed by the processor, the steps of the monitoring method for the remote throttle for functional safety as described in any one of claims 1 to 6 are implemented.

10. A storage medium, characterized in that: The storage medium stores a monitoring program for a remote throttle for functional safety, wherein when the monitoring program for a remote throttle for functional safety is executed by a processor, the steps of the monitoring method for a remote throttle for functional safety according to any one of claims 1 to 6 are implemented.

Images