Methods, devices, equipment and storage media for monitoring remote throttle for functional safety
By detecting brake signal faults during vehicle operation, accurate control of the remote throttle switch function can be achieved, solving the safety problem of the inability to monitor the remote throttle switch while driving in existing technologies, ensuring driving safety and maintaining the smoothness of the driving process.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- DONGFENG COMML VEHICLE CO LTD
- Filing Date
- 2024-12-27
- Publication Date
- 2026-05-26
Smart Images
Figure CN119754941B_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of vehicle remote throttle technology, specifically to a method, device, equipment, and storage medium for monitoring remote throttle for functional safety. Background Technology
[0002] The commonly used method for determining the remote throttle enable switch of a diesel engine is as follows: if all four of the following conditions are met simultaneously: vehicle speed is less than the calibrated minimum speed, engine speed is greater than the idle speed, the remote throttle switch is open, and there are no short circuits or open circuits in the remote throttle function, then the remote throttle function is activated. If any one of the conditions is no longer met, the remote throttle function is deactivated.
[0003] Currently, the development of traditional remote throttle switch functions for diesel engines is based on the A-SPICE process. This only allows for safety assessments of potential malfunctions, but it doesn't monitor the throttle switching status during actual driving. Since remote throttle is a safety-related function, the timing of its activation while the vehicle is in motion significantly impacts driving safety; therefore, further improvements to remote throttle monitoring methods are needed. Summary of the Invention
[0004] This application provides a method, apparatus, device, and storage medium for monitoring remote throttle for functional safety, which can solve the technical problems existing in the prior art.
[0005] In a first aspect, embodiments of this application provide a method for monitoring a remote throttle for functional safety, employing the following technical solution:
[0006] A method for monitoring remote throttle for functional safety, the method comprising:
[0007] If the remote throttle switch does not have a functional fault during vehicle operation, determine whether the braking signal has a fault.
[0008] When the braking signal is faulty, the vehicle needs to enter a preset safety management driving state based on whether the remote throttle switch is turned on; in the safety management driving state, the vehicle's engine torque output is limited and the corresponding function of the remote throttle switch is prohibited.
[0009] When there is no fault in the braking signal, the remote throttle switch will respond normally to the corresponding functions.
[0010] In conjunction with the first aspect, in one implementation, when the braking signal malfunctions, determining whether the vehicle needs to enter a preset safety management driving state based on whether the remote throttle switch is on includes the following steps:
[0011] If the remote throttle switch is turned on, the vehicle enters the safety management driving state.
[0012] If the remote throttle switch is not turned on, the vehicle will not enter the aforementioned safe driving state.
[0013] In conjunction with the first aspect, in one implementation, determining whether the braking signal is faulty includes the following steps:
[0014] When the braking signal is configured as a bus, if a braking signal from a message is detected, a braking signal validity flag is output; if a fault is detected in the braking signal from a message, a braking signal fault flag is output.
[0015] In conjunction with the first aspect, in one implementation, determining whether the braking signal is faulty includes the following steps:
[0016] When the braking signal is hardwired, the two brake pedal signals after receiving the underlying processing are mutually verified. If the two brake pedal signals are consistent, the brake signal validity flag is output; if the two brake pedal signals are inconsistent, the brake signal fault flag is output.
[0017] In conjunction with the first aspect, in one implementation, the following steps are also included:
[0018] If the remote throttle switch malfunctions during vehicle operation, the vehicle will be controlled to enter the aforementioned safe driving state.
[0019] In conjunction with the first aspect, in one embodiment, before determining whether the braking signal is faulty if the remote throttle switch is not malfunctioning during vehicle operation, the following steps are included:
[0020] Obtain the vehicle's speed signal;
[0021] If the vehicle speed signal is greater than a preset limit and no braking signal is obtained, it is determined that the vehicle is in motion.
[0022] Secondly, embodiments of this application provide a remote throttle monitoring device for functional safety, employing the following technical solution:
[0023] The monitoring module is configured to determine whether the braking signal is faulty if the remote throttle switch is not malfunctioning during vehicle operation.
[0024] The control module is configured to determine whether the vehicle needs to enter a preset safety management driving state when a brake signal fault is detected, based on whether the remote throttle switch is turned on; wherein, in the safety management driving state, the vehicle engine torque output is limited and the corresponding function of the remote throttle switch is prohibited; when there is no brake signal fault, the corresponding function of the remote throttle switch is responded to normally.
[0025] In conjunction with the second aspect, in one embodiment, the control module is further configured to control the vehicle to enter the safe management driving state if the remote throttle switch malfunctions during vehicle operation.
[0026] Thirdly, embodiments of this application provide a remote throttle monitoring device for functional safety, employing the following technical solution:
[0027] A monitoring device for a remote throttle for functional safety, comprising a processor, a memory, and a monitoring program for a remote throttle for functional safety stored in the memory and executable by the processor, wherein when the monitoring program for a remote throttle for functional safety is executed by the processor, the steps of the monitoring method for a remote throttle for functional safety as described above are implemented.
[0028] Fourthly, embodiments of this application provide a storage medium, employing the following technical solution:
[0029] A storage medium storing a monitoring program for a remote throttle for functional safety, wherein when the monitoring program for a remote throttle for functional safety is executed by a processor, the steps of the monitoring method for a remote throttle for functional safety as described above are implemented.
[0030] The beneficial effects of the technical solutions provided in this application include:
[0031] By judging the braking signal when there is no functional fault in the remote throttle switch during vehicle operation, the system can more accurately control the use of the remote throttle switch function under two conditions: when the braking signal is faulty and when it is not. When the braking signal is faulty, as long as the remote throttle is opened, the system enters a safe driving management state, restricting vehicle movement and remote throttle use to ensure driving safety. When the braking signal is not faulty, braking can be achieved. In this state, the remote throttle switch function can respond normally without restricting vehicle movement or remote throttle switch function, ensuring a smooth driving process. Attached Figure Description
[0032] Figure 1 A flowchart illustrating an embodiment of the remote throttle monitoring method for functional safety according to this application;
[0033] Figure 2 A schematic diagram of the functional modules of an embodiment of the remote throttle monitoring device for functional safety according to this application;
[0034] Figure 3This is a schematic diagram of the hardware structure of a remote throttle monitoring device for functional safety involved in the embodiments of this application. Detailed Implementation
[0035] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the scope of protection of the present application.
[0036] First, some of the technical terms used in this application will be explained to help those skilled in the art understand this application.
[0037] The commonly used method for determining the remote throttle enable switch of a diesel engine is as follows: if all four of the following conditions are met simultaneously: vehicle speed is less than the calibrated minimum speed, engine speed is greater than the idle speed, the remote throttle switch is open, and there are no short circuits or open circuits in the remote throttle function, then the remote throttle function is activated. If any one of the conditions is no longer met, the remote throttle function is deactivated.
[0038] Currently, the development of traditional remote throttle switch functions for diesel engines is based on the A-SPICE process. This only allows for safety assessments of potential malfunctions, but it doesn't monitor the throttle switching status during actual driving. Since remote throttle is a safety-related function, the timing of its activation while the vehicle is in motion significantly impacts driving safety; therefore, further improvements to remote throttle monitoring methods are needed.
[0039] To address the aforementioned issues, this application provides a method, apparatus, device, and storage medium for monitoring remote throttle for functional safety. The key aspect of this invention lies in judging the braking signal when the remote throttle switch is functioning correctly during vehicle operation. This allows for more accurate control of the remote throttle switch function under both faulty and normal braking conditions. When the braking signal is faulty, the system enters a safe driving management state as soon as the remote throttle is activated, restricting vehicle movement and remote throttle use to ensure driving safety. When the braking signal is functioning correctly, braking is possible, and the remote throttle switch can respond normally without restricting vehicle movement or remote throttle function, ensuring a smooth driving experience.
[0040] To make the objectives, technical solutions, and advantages of this application clearer, the embodiments of this application will be described in further detail below with reference to the accompanying drawings.
[0041] In a first aspect, embodiments of this application provide a method for monitoring remote throttle for functional safety.
[0042] In one embodiment, reference is made to Figure 1 , Figure 1 This is a flowchart illustrating the first embodiment of the remote throttle monitoring method for functional safety according to this application. Figure 1 As shown, the remote throttle monitoring method for functional safety includes:
[0043] S100. If the remote throttle switch does not have a functional fault during vehicle operation, determine whether the braking signal has a fault.
[0044] S210. When the braking signal is faulty, determine whether the vehicle needs to enter a preset safety management driving state based on whether the remote throttle switch is turned on; wherein, in the safety management driving state, the vehicle's engine torque output is limited and the corresponding function of the remote throttle switch is prohibited.
[0045] S220 When there is no fault in the braking signal, the remote throttle switch will respond normally to the corresponding functions.
[0046] In this embodiment, the braking signal is judged when the remote throttle switch does not have a functional fault during vehicle operation, thereby enabling more accurate control over the use of the remote throttle switch function under both the presence and absence of a faulty braking signal.
[0047] Specifically, when there is a malfunction in the braking signal, the braking ability of the vehicle during its current driving process is at great risk. If the remote throttle function is still maintained at this time, there will be a great risk. Therefore, in this situation, as long as the remote throttle is activated, this embodiment will enter a safe driving management state to restrict the vehicle's driving and the use of the remote throttle, so as to ensure driving safety.
[0048] When there is no fault in the braking signal, the braking ability of the vehicle during the current driving process is normal and can be braked smoothly when needed. Therefore, in this state, the remote throttle switch function can be responded to normally without restricting the vehicle's driving or the remote throttle switch function, ensuring the smoothness of the driving process.
[0049] Furthermore, in one embodiment, when the braking signal in S210 malfunctions, determining whether the vehicle needs to enter a preset safety management driving state based on whether the remote throttle switch is on includes the following steps:
[0050] S211. If the remote throttle switch is turned on, the vehicle enters the safety management driving state.
[0051] S212. If the remote throttle switch is not turned on, the vehicle will not enter the aforementioned safe driving state.
[0052] Furthermore, in one embodiment, step S220, determining whether the braking signal has a fault, includes the following steps:
[0053] S221. When the braking signal is configured as a bus, if a braking signal sent by a message is detected, the braking signal validity flag bit is output; if a fault is detected in the braking signal sent by the message, the braking signal fault flag bit is output.
[0054] In this embodiment, for vehicle conditions where the braking signal is configured by the bus, the system can determine whether the braking signal is faulty based on the braking signal sent in the message, enabling quick and accurate judgment in this scenario.
[0055] Furthermore, in some other embodiments, step S220, determining whether the braking signal is faulty, includes the following steps:
[0056] S222. When the braking signal is hardwired, the two brake pedal signals after receiving the underlying processing are mutually verified. If the two brake pedal signals are consistent, the brake signal validity flag is output; if the two brake pedal signals are inconsistent, the brake signal fault flag is output.
[0057] In this embodiment, for vehicles with hard-wired brake signals, the presence of a brake signal fault is determined by the mutual verification results between the two pedal signals, enabling quick and accurate judgment of the brake signal in this scenario.
[0058] Furthermore, in one embodiment, the method further includes the following steps:
[0059] S110. If the remote throttle switch malfunctions during vehicle operation, control the vehicle to enter the aforementioned safe driving state.
[0060] While the vehicle is in motion, it is necessary to first determine whether there is a functional malfunction in the remote throttle switch, such as whether there is a short circuit or open circuit in the remote throttle. If a relevant malfunction is detected, the vehicle will be directly controlled for safe driving management.
[0061] Furthermore, in one embodiment, before determining whether the braking signal is faulty if the remote throttle switch is not malfunctioning during vehicle operation, the following steps are included:
[0062] S010, Obtain the vehicle speed signal;
[0063] S020. If the vehicle speed signal is greater than a preset limit value and no braking signal is obtained, it is determined that the vehicle is in motion.
[0064] In this embodiment, by acquiring the vehicle's speed signal, a determination is triggered to determine whether a braking signal has been acquired when the vehicle speed exceeds a corresponding limit. If no braking signal is acquired, it indicates that the vehicle is in motion. This allows for the monitoring and control of remote throttle switch functions during driving.
[0065] Furthermore, the solutions in the above embodiments are designed based on the E-GAS architecture, with the existing remote throttle function as the level 1 functional layer, and a remote throttle function monitoring mechanism designed in the level 2 monitoring layer, that is, monitoring the vehicle driving status, braking signal, and remote throttle switch signal in the level 2 layer.
[0066] Ultimately, by assessing the braking signal when the remote throttle switch is functioning correctly during vehicle operation, the system can more accurately control the use of the remote throttle switch under two different conditions: with and without a faulty braking signal. When the braking signal is faulty, the system enters a safety management driving state as soon as the remote throttle is engaged, restricting vehicle movement and remote throttle use to ensure driving safety. When the braking signal is functioning correctly, braking is possible, and the remote throttle switch can respond normally without restricting vehicle movement or remote throttle function, ensuring a smooth driving experience. Conversely, if the remote throttle switch is faulty, the system directly controls the vehicle to enter a safety management driving state, ensuring that the remote throttle switch function is not triggered unexpectedly, thus preventing any impact on driving safety.
[0067] Secondly, embodiments of this application also provide a remote throttle monitoring device for functional safety.
[0068] In one embodiment, reference is made to Figure 2 , Figure 2 This is a functional module diagram of an embodiment of a remote throttle monitoring device for functional safety according to this application. Figure 2 As shown, the remote throttle monitoring device for functional safety includes:
[0069] The monitoring module is configured to determine whether the braking signal is faulty if the remote throttle switch is not malfunctioning during vehicle operation.
[0070] The control module is configured to determine whether the vehicle needs to enter a preset safety management driving state when a brake signal fault is detected, based on whether the remote throttle switch is turned on; wherein, in the safety management driving state, the vehicle engine torque output is limited and the corresponding function of the remote throttle switch is prohibited; when there is no brake signal fault, the corresponding function of the remote throttle switch is responded to normally.
[0071] Furthermore, in one embodiment, when the control module performs the following steps to determine whether the vehicle needs to enter a preset safety management driving state based on whether the remote throttle switch is open when the braking signal is faulty:
[0072] If the remote throttle switch is turned on, the vehicle enters the safety management driving state.
[0073] If the remote throttle switch is not turned on, the vehicle will not enter the aforementioned safe driving state.
[0074] Furthermore, in one embodiment, when the monitoring module performs the step of determining whether the braking signal is faulty, it includes the following steps:
[0075] When the braking signal is configured as a bus, if a braking signal from a message is detected, a braking signal validity flag is output; if a fault is detected in the braking signal from a message, a braking signal fault flag is output.
[0076] Furthermore, in one embodiment, the monitoring module performs the following steps when determining whether the braking signal is faulty:
[0077] When the braking signal is hardwired, the two brake pedal signals after receiving the underlying processing are mutually verified. If the two brake pedal signals are consistent, the brake signal validity flag is output; if the two brake pedal signals are inconsistent, the brake signal fault flag is output.
[0078] Furthermore, in one embodiment, before the monitoring module performs the following steps to determine whether the braking signal is faulty if the remote throttle switch is not malfunctioning during vehicle operation:
[0079] Obtain the vehicle's speed signal;
[0080] If the vehicle speed signal is greater than a preset limit and no braking signal is obtained, it is determined that the vehicle is in motion.
[0081] Furthermore, in one embodiment, the control module is also configured to perform the following: if the remote throttle switch malfunctions during vehicle operation, control the vehicle to enter the safe management driving state.
[0082] The functions of each module in the aforementioned remote throttle monitoring device for functional safety correspond to the steps in the aforementioned remote throttle monitoring method embodiment for functional safety, and their functions and implementation processes will not be described in detail here.
[0083] Thirdly, embodiments of this application provide a monitoring device for a remote throttle for functional safety. The monitoring device for a remote throttle for functional safety can be a device with data processing capabilities, such as a personal computer (PC), a laptop, or a server.
[0084] Reference Figure 3 , Figure 3 This is a schematic diagram of the hardware structure of a remote throttle monitoring device for functional safety involved in an embodiment of this application. In this embodiment, the remote throttle monitoring device for functional safety may include a processor, a memory, a communication interface, and a communication bus.
[0085] The communication bus can be of any type and is used to interconnect the processor, memory, and communication interface.
[0086] Communication interfaces include input / output (I / O) interfaces, physical interfaces, and logical interfaces used for interconnecting internal components of the monitoring equipment that enables remote throttle control for functional safety, as well as interfaces used for interconnecting the monitoring equipment with other devices (such as other computing devices or user equipment). Physical interfaces can be Ethernet interfaces, fiber optic interfaces, ATM interfaces, etc.; user equipment can be displays, keyboards, etc.
[0087] Memory can be various types of storage media, such as random access memory (RAM), read-only memory (ROM), non-volatile RAM (NVRAM), flash memory, optical storage, hard disk, programmable ROM (PROM), erasable PROM (EPROM), electrically erasable PROM (EEPROM), etc.
[0088] The processor can be a general-purpose processor, which can call the monitoring program for the remote throttle for functional safety stored in memory and execute the monitoring method for the remote throttle for functional safety provided in the embodiments of this application. For example, the general-purpose processor can be a central processing unit (CPU). The method executed when the monitoring program for the remote throttle for functional safety is called can refer to the various embodiments of the monitoring method for the remote throttle for functional safety in this application, and will not be repeated here.
[0089] Those skilled in the art will understand that Figure 3The hardware structure shown does not constitute a limitation of this application and may include more or fewer components than shown, or combine certain components, or have different component arrangements.
[0090] Fourthly, embodiments of this application also provide a storage medium.
[0091] The storage medium of this application stores a monitoring program for a remote throttle for functional safety, wherein when the monitoring program for a remote throttle for functional safety is executed by a processor, it implements the steps of the monitoring method for a remote throttle for functional safety as described above.
[0092] The method implemented when the monitoring program for the remote throttle for functional safety is executed can be referred to in various embodiments of the monitoring method for the remote throttle for functional safety of this application, and will not be repeated here.
[0093] It should be noted that the sequence numbers of the embodiments in this application are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.
[0094] The terms "comprising" and "having," and any variations thereof, in the specification, claims, and accompanying drawings of this application are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or apparatus that includes a series of steps or units is not limited to the listed steps or units, but may optionally include steps or units not listed, or may optionally include other steps or units inherent to such process, method, product, or apparatus. The terms "first," "second," and "third," etc., are used to distinguish different objects, etc., and do not indicate a sequence, nor do they limit "first," "second," and "third" to different types.
[0095] In the description of the embodiments of this application, terms such as "exemplary," "for example," or "for instance" are used to indicate examples, illustrations, or explanations. Any embodiment or design described as "exemplary," "for example," or "for instance" in the embodiments of this application should not be construed as being more preferred or advantageous than other embodiments or designs. Specifically, the use of terms such as "exemplary," "for example," or "for instance" is intended to present the relevant concepts in a concrete manner.
[0096] In the description of the embodiments of this application, unless otherwise stated, " / " means "or". For example, A / B can mean A or B. The "and / or" in the text is merely a description of the relationship between related objects, indicating that there can be three relationships. For example, A and / or B can mean: A exists alone, A and B exist simultaneously, and B exists alone. In addition, in the description of the embodiments of this application, "multiple" means two or more.
[0097] In some processes described in the embodiments of this application, multiple operations or steps are included in a specific order. However, it should be understood that these operations or steps may not be executed in the order they appear in the embodiments of this application, or they may be executed in parallel. The sequence number of the operation is only used to distinguish different operations, and the sequence number itself does not represent any execution order. In addition, these processes may include more or fewer operations, and these operations or steps may be executed sequentially or in parallel, and these operations or steps may be combined.
[0098] Through the above description of the embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus necessary general-purpose hardware platforms. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) as described above, and includes several instructions to cause a terminal device to execute the methods described in the various embodiments of this application.
[0099] The above are merely preferred embodiments of this application and do not limit the patent scope of this application. Any equivalent structural or procedural transformations made using the content of this application's specification and drawings, or direct or indirect applications in other related technical fields, are similarly included within the patent protection scope of this application.
Claims
1. A method for monitoring remote throttle for functional safety, characterized in that, The method includes: If the remote throttle switch does not have a functional fault while the vehicle is in motion, determine whether there is a fault in the braking signal; When the braking signal is faulty, the vehicle needs to enter a preset safety management driving state based on whether the remote throttle switch is turned on; in the safety management driving state, the vehicle's engine torque output is limited and the corresponding function of the remote throttle switch is prohibited. When there is no fault in the braking signal, the remote throttle switch will respond normally to the corresponding functions. When the braking signal malfunctions, the system determines whether the vehicle needs to enter a preset safety management driving state based on whether the remote throttle switch is on, including the following steps: If the remote throttle switch is turned on, the vehicle enters the safety management driving state. If the remote throttle switch is not turned on, the vehicle will not enter the aforementioned safe driving state.
2. The method for monitoring remote throttle for functional safety as described in claim 1, characterized in that, Determining whether the braking signal is faulty includes the following steps: When the braking signal is configured as a bus, if a braking signal from a message is detected, a braking signal validity flag is output; if a fault is detected in the braking signal from a message, a braking signal fault flag is output.
3. The method for monitoring remote throttle for functional safety as described in claim 1, characterized in that, Determining whether the braking signal is faulty includes the following steps: When the braking signal is hardwired, the two brake pedal signals after receiving the underlying processing are mutually verified. If the two brake pedal signals are consistent, the brake signal validity flag is output; if the two brake pedal signals are inconsistent, the brake signal fault flag is output.
4. The method for monitoring remote throttle for functional safety as described in claim 1, characterized in that, It also includes the following steps: If the remote throttle switch malfunctions during vehicle operation, the vehicle will be controlled to enter the aforementioned safe driving state.
5. The method for monitoring remote throttle for functional safety as described in claim 1, characterized in that, Before determining whether the braking signal is faulty, if the remote throttle switch is not malfunctioning during vehicle operation, the following steps are included: Obtain the vehicle's speed signal; If the vehicle speed signal is greater than a preset limit and no braking signal is obtained, it is determined that the vehicle is in motion.
6. A remote throttle monitoring device for functional safety, characterized in that, The device includes: The monitoring module is configured to determine whether there is a fault in the braking signal if the remote throttle switch does not have a functional fault during vehicle operation. The control module is configured to determine whether the vehicle needs to enter a preset safety management driving state when a brake signal fault is detected, based on whether the remote throttle switch is open; wherein, in the safety management driving state, the vehicle's engine torque output is limited and the corresponding function of the remote throttle switch is prohibited; when there is no brake signal fault, the corresponding function of the remote throttle switch is responded to normally. When the control module performs the following steps, if the braking signal malfunctions, it determines whether the vehicle needs to enter a preset safety management driving state based on whether the remote throttle switch is open: If the remote throttle switch is turned on, the vehicle enters the safety management driving state. If the remote throttle switch is not turned on, the vehicle will not enter the aforementioned safe driving state.
7. The remote throttle monitoring device for functional safety as described in claim 6, characterized in that, The control module is also configured to, if the remote throttle switch malfunctions during vehicle operation, control the vehicle to enter the safe management driving state.
8. A remote throttle monitoring device for functional safety, characterized in that, The monitoring device for the remote throttle for functional safety includes a processor, a memory, and a monitoring program for the remote throttle for functional safety stored in the memory and executable by the processor, wherein when the monitoring program for the remote throttle for functional safety is executed by the processor, it implements the steps of the monitoring method for the remote throttle for functional safety as described in any one of claims 1 to 5.
9. A storage medium, characterized in that, The storage medium stores a monitoring program for a remote throttle for functional safety, wherein when the monitoring program for the remote throttle for functional safety is executed by a processor, it implements the steps of the monitoring method for the remote throttle for functional safety as described in any one of claims 1 to 5.