Vehicle control system, method and device, vehicle and storage medium

Abstract

The invention provides a vehicle control system, method and device, a vehicle and a storage medium. The system comprises a cabin processor set and an intelligent driving processor set. The chip safety island is connected with the cabin processor set and the intelligent driving processor set and used for controlling the cabin processor set to reset based on a first signal output by the cabin processor set and / or controlling the intelligent driving processor set to reset based on a second signal output by the intelligent driving processor set; wherein the cabin processor set, the intelligent driving processor set and the chip safety island are integrated on the same system-level chip, the first signal represents a cabin function fault of the vehicle, and the second signal represents an intelligent driving function fault of the vehicle. By the adoption of the vehicle control system, the control fineness of the cabin processor set and the intelligent driving processor set can be improved, and intelligence is high.

Description

Technical Field

[0001] The present disclosure relates to the field of vehicle control technology, and in particular to a vehicle control system, method, device, vehicle and storage medium. Background Art

[0002] With the continuous advancement of vehicle technology, the cockpit functions and intelligent driving functions of vehicle control systems are becoming increasingly perfect. Cockpit functions include instrument display, voice interaction, video entertainment, etc., while intelligent driving functions include autonomous emergency braking (AEB), adaptive cruise control (ACC), navigation on autopilot (NOA), etc. However, the current vehicle control system has a high cost, low resource utilization, and low control accuracy for the cockpit processor set corresponding to the cockpit function and the intelligent driving processor set corresponding to the intelligent driving function. Summary of the invention

[0003] To overcome the problems existing in the related art, the present disclosure provides a vehicle control system, method, device, vehicle and storage medium.

[0004] According to a first aspect of an embodiment of the present disclosure, there is provided a vehicle control system, the system comprising:

[0005] Cockpit processor set and intelligent driving processor set;

[0006] A chip safety island is connected to the cockpit processor set and the intelligent driving processor set, and is used to control the reset of the cockpit processor set based on a first signal output by the cockpit processor set, and / or to control the reset of the intelligent driving processor set based on a second signal output by the intelligent driving processor set; wherein the cockpit processor set, the intelligent driving processor set and the chip safety island are integrated on the same system-level chip, the first signal represents a cockpit function failure of the vehicle, and the second signal represents an intelligent driving function failure of the vehicle.

[0007] In some embodiments, the system further comprises:

[0008] a microcontroller chip connected to the chip safety island, used to control the operation of the vehicle based on the intelligent driving function when the intelligent driving function is normal, and also used to receive at least one of the first signal, the second signal and the third signal sent by the chip safety island; wherein the third signal indicates a functional failure of the chip safety island in controlling the cockpit processor set and / or the intelligent driving processor set;

[0009] The microcontroller chip is also used to output fault prompt information when receiving the first signal and a third signal representing a functional failure of the chip safety island controlling the cockpit processor set; and / or to control the vehicle to stop running when receiving the second signal and a third signal representing a functional failure of the chip safety island controlling the intelligent driving processor set.

[0010] In some embodiments, the system further comprises:

[0011] A first power supply chip is connected to the cockpit processor set, the intelligent driving processor set and the chip safety island, and is used to supply power to the intelligent driving processor set and the cockpit processor set. When a first power supply parameter supplying power to the intelligent driving processor set and the cockpit processor set is abnormal, the first power supply chip controls the intelligent driving processor set and / or the cockpit processor set to reset, and sends a fourth signal indicating a power supply failure to the chip safety island.

[0012] In some embodiments, the system further comprises:

[0013] A second power supply chip is connected to the chip safety island and the microcontroller chip, and is used to supply power to the chip safety island. When a second power supply parameter for supplying power to the chip safety island indicates an abnormality, the second power supply chip is used to control the reset of the chip safety island and send a fifth signal indicating a power supply failure to the microcontroller chip.

[0014] In some embodiments, the system further comprises:

[0015] A third power supply chip is connected to the microcontroller chip and the chip safety island, and is used to supply power to the microcontroller chip. When a third power supply parameter for supplying power to the microcontroller chip indicates an abnormality, the third power supply chip is used to control the reset of the microcontroller chip and send a sixth signal indicating a power supply failure to the chip safety island.

[0016] In some embodiments, the chip safety island is connected and communicates with the microcontroller chip based on a general input-output pin, and / or the chip safety island is connected and communicates with the third power supply chip based on a general input-output pin.

[0017] According to a second aspect of an embodiment of the present disclosure, a vehicle control method is provided, the method comprising:

[0018] Acquire a first signal output by a cockpit processor set and / or a second signal output by an intelligent driving processor set; wherein the first signal indicates a cockpit function failure of the vehicle, and the second signal indicates an intelligent driving function failure of the vehicle;

[0019] Based on the first signal, controlling the cockpit processor set to reset through the chip safety island; and / or,

[0020] Based on the second signal, the intelligent driving processor set is reset by controlling the chip safety island; wherein the cockpit processor set, the intelligent driving processor set and the chip safety island are integrated on the same system-level chip.

[0021] In some embodiments, the method further comprises:

[0022] Based on the first signal, outputting instrument display information when the cockpit function fails through the chip safety island; and / or,

[0023] Based on the second signal, prompt information representing the failure of the intelligent driving function is output through the chip safety island or the cockpit processor set.

[0024] In some embodiments, the method further comprises:

[0025] During the operation of the cockpit processor set, obtaining instrument display information processed by the cockpit processor set and storing it in the storage space of the chip safety island;

[0026] The outputting, based on the first signal, instrument display information when the cockpit function fails through the chip safety island includes:

[0027] Based on the first signal, the instrument display information is acquired from the storage space of the chip safety island, and the instrument display information is output through the chip safety island.

[0028] In some embodiments, the method further comprises:

[0029] sending at least one of the first signal, the second signal and the third signal to the microcontroller chip through the chip safety island; wherein the third signal indicates a functional failure of the chip safety island in controlling the cockpit processor set and / or the intelligent driving processor set, and the microcontroller chip controls the vehicle operation based on the intelligent driving function when the intelligent driving function is normal;

[0030] When the microcontroller chip receives the first signal and a third signal indicating a functional failure of the chip safety island in controlling the cockpit processor set, the microcontroller chip outputs fault prompt information; and / or,

[0031] When the microcontroller chip receives the second signal and the third signal indicating a functional failure of the chip safety island in controlling the intelligent driving processor set, the vehicle is controlled to stop running through the microcontroller chip.

[0032] In some embodiments, the method further comprises:

[0033] Acquire a first power supply parameter of a first power supply chip for supplying power to the intelligent driving processor set and the cockpit processor set;

[0034] When the first power supply parameter indicates an abnormality, the intelligent driving processor set and / or the cockpit processor set are reset through the first power supply chip, and a fourth signal indicating a power supply failure is sent to the chip safety island through the first power supply chip.

[0035] In some embodiments, the method further comprises:

[0036] Acquire a second power supply parameter of a second power supply chip for supplying power to the chip safety island;

[0037] When the second power supply parameter indicates an abnormality, the chip safety island is reset through the second power supply chip, and a fifth signal indicating a power supply failure is sent to the microcontroller chip through the second power supply chip.

[0038] In some embodiments, the method further comprises:

[0039] Acquire a third power supply parameter of a third power supply chip for supplying power to the microcontroller chip;

[0040] When the third power supply parameter indicates an abnormality, the microcontroller chip is reset through the third power supply chip, and a sixth signal indicating a power supply failure is sent to the chip safety island through the third power supply chip.

[0041] According to a third aspect of an embodiment of the present disclosure, there is provided a vehicle control device, the device comprising:

[0042] A first acquisition module is configured to acquire a first signal output by a cockpit processor set and / or a second signal output by an intelligent driving processor set; wherein the first signal indicates a cockpit function failure of the vehicle, and the second signal indicates an intelligent driving function failure of the vehicle;

[0043] The first control module is configured to control the reset of the cockpit processor set through the chip safety island based on the first signal; and / or, based on the second signal, control the reset of the intelligent driving processor set through the chip safety island; wherein the cockpit processor set, the intelligent driving processor set and the chip safety island are integrated on the same system-level chip.

[0044] In some embodiments, the apparatus further comprises:

[0045] The output module is configured to output the instrument display information when the cockpit function fails through the chip safety island based on the first signal; and / or, based on the second signal, output prompt information representing the failure of the intelligent driving function through the chip safety island or the cockpit processor set.

[0046] In some embodiments, the apparatus further comprises:

[0047] A second acquisition module is configured to acquire instrument display information processed by the cockpit processor set and store it in the storage space of the chip safety island during the operation of the cockpit processor set;

[0048] The output module is also configured to obtain the instrument display information from the storage space of the chip safety island based on the first signal, and output the instrument display information through the chip safety island.

[0049] In some embodiments, the apparatus further comprises:

[0050] a sending module, configured to send at least one of the first signal, the second signal and the third signal to the microcontroller chip through the chip safety island; wherein the third signal indicates a functional failure of the chip safety island in controlling the cockpit processor set and / or the intelligent driving processor set, and the microcontroller chip controls the vehicle operation based on the intelligent driving function when the intelligent driving function is normal;

[0051] The second control module is configured to output fault prompt information through the microcontroller chip when the microcontroller chip receives the first signal and a third signal indicating a functional failure of the chip safety island in controlling the cockpit processor set; and / or to control the vehicle to stop running through the microcontroller chip when the microcontroller chip receives the second signal and a third signal indicating a functional failure of the chip safety island in controlling the intelligent driving processor set.

[0052] In some embodiments, the apparatus further comprises:

[0053] A third acquisition module is configured to obtain a first power supply parameter of a first power supply chip for supplying power to the intelligent driving processor set and the cockpit processor set;

[0054] The third control module is configured to control the intelligent driving processor set and / or the cockpit processor set to reset through the first power supply chip when the first power supply parameter indicates an abnormality, and send a fourth signal indicating a power supply failure to the chip safety island through the first power supply chip.

[0055] In some embodiments, the apparatus further comprises:

[0056] A fourth acquisition module is configured to acquire a second power supply parameter of a second power supply chip for supplying power to the chip safety island;

[0057] The fourth control module is configured to control the chip safety island to reset through the second power supply chip when the second power supply parameter indicates an abnormality, and send a fifth signal indicating a power supply failure to the microcontroller chip through the second power supply chip.

[0058] In some embodiments, the apparatus further comprises:

[0059] A fifth acquisition module is configured to acquire a third power supply parameter of a third power supply chip for supplying power to the microcontroller chip;

[0060] The fifth control module is configured to control the microcontroller chip to reset through the third power supply chip when the third power supply parameter indicates an abnormality, and to send a sixth signal indicating a power supply failure to the chip safety island through the third power supply chip.

[0061] According to a fourth aspect of an embodiment of the present disclosure, a vehicle is provided, comprising:

[0062] processor;

[0063] Memory for storing computer programs or instructions;

[0064] The processor executes the computer program or instructions to implement the steps of the vehicle control method described in the second aspect above.

[0065] According to the fifth aspect of an embodiment of the present disclosure, a non-temporary computer-readable storage medium is provided, which stores a computer program or instructions. When the computer program or instructions in the storage medium are executed by a processor, the steps of the vehicle control method described in the above-mentioned second aspect are implemented.

[0066] The technical solution provided by the embodiments of the present disclosure may have the following beneficial effects:

[0067] In the embodiments of the present disclosure, on the one hand, compared with the related art in which the cockpit processor set and the intelligent driving processor set are located on different system-level chips, which require two independent system-level chips and matching motherboards and other electronic components, the embodiments of the present disclosure set the cockpit processor set and the intelligent driving processor set on the same system-level chip, which can reduce the cost of the vehicle control system and improve resource utilization. On the other hand, compared with the related art in which the system microcontroller resets the cockpit processor set and the intelligent driving processor set at the same time based on the failure of any function of the cockpit function and the intelligent driving function, the embodiments of the present disclosure set a chip safety on the system-level chip. The chip safety island is used to control the reset of the cockpit processor set based on the first signal characterizing the cockpit function failure output by the cockpit processor set, and / or the reset of the intelligent driving processor set is controlled based on the second signal characterizing the intelligent driving function failure output by the intelligent driving processor set. The setting method of the embodiment of the present disclosure can realize the separate reset of the cockpit processor set and the intelligent driving processor set, and will not reset the processor set corresponding to the non-faulty function due to the failure of the intelligent driving function or a certain function in the cockpit function. The cockpit processor set and the intelligent driving processor set can be decoupled, the precision of the control of the cockpit processor set and the intelligent driving processor set is improved, and the intelligence is relatively high.

[0068] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0069] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and, together with the description, serve to explain the principles of the present disclosure.

[0070] Figure 1 It is a schematic diagram of a vehicle control system in the related art.

[0071] Figure 2 This is a schematic diagram of a vehicle control system provided by an embodiment of the present disclosure. Figure 1 .

[0072] Figure 3 It is a schematic diagram of the functional modules of the cockpit processor set provided in an embodiment of the present disclosure.

[0073] Figure 4 It is a schematic diagram of the functional modules of the intelligent driving processor set provided in an embodiment of the present disclosure.

[0074] Figure 5 This is a schematic diagram of a vehicle control system provided by an embodiment of the present disclosure. Figure 2 .

[0075] Figure 6It is a schematic diagram of the functional modules of a microcontroller chip provided in an embodiment of the present disclosure.

[0076] Figure 7 It is a functional module diagram of the internal structure of a vehicle control system provided by an embodiment of the present disclosure.

[0077] Figure 8 It is a flow chart of a vehicle control method provided by an embodiment of the present disclosure.

[0078] Fig. 9 It is a block diagram of a vehicle control device provided in an embodiment of the present disclosure.

[0079] Fig.10 It is a structural block diagram of a vehicle provided in an embodiment of the present disclosure. DETAILED DESCRIPTION

[0080] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present disclosure. Instead, they are merely examples of devices consistent with some aspects of the present disclosure as detailed in the appended claims.

[0081] There is a vehicle control system in the related art. Figure 1 It is a schematic diagram of a vehicle control system in the related technology, wherein the intelligent driving processor set is located on the intelligent driving dedicated chip L13, and the cockpit processor set is located on the cockpit dedicated chip L16. It should be noted that the intelligent driving dedicated chip L13 and the cockpit dedicated chip L16 are both system-level chips, the intelligent driving power supply chip L11 is a chip that supplies power to the intelligent driving dedicated chip L13, the cockpit power supply chip L15 is a chip that supplies power to the cockpit dedicated chip L16, and the microcontroller power supply chip L12 is a chip that supplies power to the system microcontroller L14. The intelligent driving algorithm module in the intelligent driving dedicated chip L13 is a software module for realizing the intelligent driving function, and the underlying monitoring module is a software module for monitoring whether the intelligent driving function is faulty. The instrument display module, user interaction module, and entertainment system module in the cockpit dedicated chip L16 are software modules for realizing the cockpit function. The cockpit underlying monitoring module is a software module for monitoring whether the cockpit function is faulty, and the fault prompt module is a software module for outputting prompt information. Figure 1As shown, after the underlying monitoring module of the intelligent driving dedicated chip L13 monitors the intelligent driving function failure, it transmits a fault signal to the system microcontroller L14. After receiving the fault signal, the system microcontroller L14 resets the intelligent driving dedicated chip L13 and transmits a fault signal indicating the intelligent driving function failure to the cockpit dedicated chip L16. After receiving the fault signal indicating the intelligent driving function failure, the cockpit dedicated chip L16 outputs fault prompt information based on the fault prompt module to remind the driver.

[0082] In the above-mentioned related technologies, the intelligent driving processor set is located on the intelligent driving dedicated chip L13, and the cockpit processor set is located on the cockpit dedicated chip L16, that is, the cockpit processor set and the intelligent driving processor set are located on different system-level chips and are managed separately by the system microcontroller L14. This means that the vehicle needs to be equipped with two independent system-level chips and corresponding motherboards and other electronic components. These hardware increase the production cost of the vehicle. In addition, since the cockpit processor set and the intelligent driving processor set may overlap in some functions, for example, both have the ability to process images and videos, but under the current architecture, these overlapping computing powers are not effectively utilized, resulting in waste of resources. In this regard, there is also a vehicle control system in the related technology, which integrates the cockpit processor set and the intelligent driving processor set into the same system-level chip, which is which one, and is uniformly managed by the system microcontroller. However, the related technology only simply integrates the cockpit processor set and the intelligent driving processor set. As long as a failure is detected in the intelligent driving function or any function in the cockpit function, the entire integrated chip will be restarted and the abnormal function will be disabled. If only one of the cockpit function and the intelligent driving function fails at this time, the processor set corresponding to the non-faulty function will also be reset due to the restart of the entire integrated chip, and the control precision of the cockpit processor set and the intelligent driving processor set is low.

[0083] In this regard, the present disclosure provides a vehicle control system. Figure 2 This is a schematic diagram of a vehicle control system provided by an embodiment of the present disclosure. Figure 1 ,like Figure 2 As shown, the system includes:

[0084] Cockpit processor set L22 and intelligent driving processor set L23;

[0085] The chip safety island L24 is connected to the cockpit processor set L22 and the intelligent driving processor set L23, and is used to control the reset of the cockpit processor set L22 based on a first signal output by the cockpit processor set L22, and / or to control the reset of the intelligent driving processor set L23 based on a second signal output by the intelligent driving processor set L23; wherein, the cockpit processor set L22, the intelligent driving processor set L23 and the chip safety island L24 are integrated on the same system-level chip L21, the first signal represents a cockpit function failure of the vehicle, and the second signal represents an intelligent driving function failure of the vehicle.

[0086] In the disclosed embodiment, the cockpit processor set L22 includes hardware processors and software functional modules required to implement cockpit functions, wherein the hardware processor may include one or more of a central processing unit (CPU), a graphics processor (GPU), and a neural network processor (NPU).

[0087] Figure 3 Schematic diagram of the functional modules of the cockpit processor set L22 provided in the embodiment of the present disclosure. Figure 3As shown, the cockpit processor set L22 may include an instrument display output module L221, a user interaction application module L222, a cockpit entertainment application module L223, a cockpit function monitoring module L224, and a system abnormality prompt output module L225. Among them, the instrument display output module L221 can obtain vehicle data from the vehicle's sensors or other storage spaces storing vehicle data. The vehicle data is the data required for instrument display, such as the vehicle's speed, rotation speed, fuel volume, water temperature, etc. After obtaining the vehicle data, the instrument display output module L221 can use the GPU or other processors in the cockpit processor set L22 to convert the vehicle data into image data that can be displayed and display it. It should be noted that the instrument display output module L221 can be based on a liquid crystal display (LCD), an organic light-emitting diode display (OLED), and a head-up display (HUD) for display, and this is not limited in the embodiments of the present disclosure. The user interaction application module L222 is used to provide touch, voice and other human-machine interaction interfaces to achieve personalized customization and intelligent assistant functions to enhance the user's driving experience and safety. The cockpit entertainment application module L223 is used to provide multimedia playback, navigation and map services, Internet access and information services, as well as games and social applications to meet the user's entertainment and information needs during driving. The system abnormal prompt output module L225 is used to output preset abnormal prompt information when receiving an abnormal prompt output request. The cockpit function monitoring module L224 is used to monitor whether the cockpit function is faulty, and after detecting a cockpit function failure, it sends a first signal representing the cockpit function failure to the application monitoring module L241 of the chip safety island.

[0088] In the disclosed embodiment, the cockpit processor set L22 may also monitor the failure of the cockpit function without using the cockpit function monitoring module L224. For example, in some embodiments, the cockpit processor set L22 may also determine whether the current cockpit function is faulty through user feedback. For example, when the user finds problems such as a black screen, insensitive touch or inaccurate navigation in the cockpit, information representing the failure of the cockpit function may be sent to the cockpit processor set L22 through voice commands, touch screen operations or the vehicle's built-in feedback system. After receiving the information sent by the user, the cockpit processor set L22 sends a first signal representing the failure of the cockpit function to the chip safety island.

[0089] In other embodiments, the cockpit processor set L22 may also receive remote fault diagnosis instructions from the cloud and information sent by the cloud indicating cockpit functional failures. After receiving the information sent by the cloud, the cockpit processor set L22 sends a first signal indicating cockpit functional failures to the chip safety island.

[0090] In some embodiments, when the cockpit processor set L22 determines whether the cockpit function is faulty through the internal functional module, it can detect in real time or periodically whether the preset data in the instrument information displayed based on the cockpit function, such as vehicle speed, airbag, anti-lock braking, etc., are displayed normally and / or whether the displayed preset data is within the preset range, wherein the preset data and the preset range are set values, and the preset data are usually set to be data that can affect driving safety. When the preset data is not displayed normally and / or the displayed preset data is not within the preset range, it is determined to be a cockpit function failure.

[0091] In other embodiments, when the cockpit processor set L22 determines whether the cockpit function is faulty through internal functional modules, such as the cockpit function monitoring module, it can also detect in real time or periodically whether the use of preset software function modules in the cockpit processor set L22 is normal, such as detecting whether the use of the instrument display module in the cockpit processor set L22 is normal, such as detecting whether the instrument display has problems such as stagnation, black screen, etc. When abnormal use of preset software function modules in the cockpit processor set L22 is detected, it is determined to be a cockpit function failure.

[0092] It should be noted that the embodiment of the present disclosure does not limit the number of software functional modules in the cockpit processor set L22. The software functional modules of the cockpit processor set L22 may include only the instrument display output module L221 and the cockpit function monitoring module L224, or may also include the above-mentioned functional modules while including the instrument display output module L221 and the cockpit function monitoring module L224.

[0093] In the disclosed embodiment, the intelligent driving processor set L23 includes a hardware processor and a software function module required to implement the intelligent driving function, wherein the hardware processor may include one or more of a central processing unit (CPU), a graphics processor (GPU), and a neural network processor (NPU). It should be noted that the hardware processors in the intelligent driving processor set L23 and the cockpit processor set can be shared, and the hardware processors in the intelligent driving processor set L23 and the cockpit processor set can also be different. For example, the CPU of the intelligent driving processor set L23 and the CPU of the cockpit processor set can be CPUs of different domains (groups).

[0094] Figure 4 : is a functional module diagram of the intelligent driving processor set L23 provided in an embodiment of the present disclosure, such as Figure 4As shown, the intelligent driving processor set L23 may include an intelligent driving algorithm module L231, an intelligent driving function monitoring module L232, and an intelligent driving sensor monitoring module L233. Among them, the intelligent driving algorithm module L231 is used to process data from various sensors to realize functions such as environmental perception, obstacle detection, lane line recognition, and traffic sign recognition, and make decisions and plans through complex algorithms to determine the vehicle's driving path and speed, while controlling the vehicle's steering, acceleration, and braking operations to achieve the goal of intelligent driving. The intelligent driving function monitoring module L232 is used to monitor whether the intelligent driving function fails, and after detecting the failure of the intelligent driving function, it sends a second signal representing the failure of the intelligent driving function to the application monitoring module L241 of the chip safety island. The intelligent driving sensor monitoring module L233 is used to detect the operating status of the sensors associated with the vehicle, such as detecting whether the camera is stuck, black screen, etc., and when the sensor associated with the vehicle is detected to be abnormal, it sends a signal representing the sensor abnormality to the application monitoring module L241 of the chip safety island.

[0095] In the disclosed embodiments, the intelligent driving processor set L23 may also monitor the failure of the intelligent driving function without using the intelligent driving function monitoring module L232. For example, in some embodiments, the intelligent driving processor set L23 may also determine whether the current intelligent driving function is faulty through user feedback. For example, when the user finds that the route planned by the intelligent driving function has obvious logical problems, such as the indicated navigation direction is not passable, etc., information representing the failure of the intelligent driving function can be sent to the intelligent driving processor set L23 through voice commands, touch screen operations or the vehicle's built-in feedback system. After receiving the information sent by the user, the intelligent driving processor set L23 sends a second signal representing the failure of the intelligent driving function to the chip safety island.

[0096] In other embodiments, the intelligent driving processor set L23 may also receive remote fault diagnosis instructions from the cloud and information sent by the cloud indicating the failure of the intelligent driving function. After receiving the information sent by the cloud, the intelligent driving processor set L23 sends a second signal indicating the failure of the intelligent driving function to the chip safety island.

[0097] In the disclosed embodiment, when the intelligent driving processor set L23 determines whether the intelligent driving function is faulty through the internal functional module, it can use redundant verification, fault diagnosis and other technologies in real time or periodically to detect whether there are abnormalities or errors in the intelligent driving algorithm, such as whether the intelligent driving algorithm has timed out, whether there are logical problems, such as detecting objects behind a wall, etc. When it is detected that there is an abnormality or error in the intelligent driving algorithm, it is determined to be a fault in the intelligent driving function.

[0098] In the embodiment of the present disclosure, the vehicle control system further includes a chip safety island L24, wherein the chip safety island L24 is used to control the cockpit processor set L22 to reset based on the first signal indicating the cockpit function failure output by the cockpit processor set L22. In some embodiments, after receiving the first signal indicating the cockpit function failure output by the cockpit processor set L22, the chip safety island L24 may control all hardware processors in the cockpit processor set L22 to reset.

[0099] In other embodiments, the first signal may carry a specific fault problem. For example, if the fault problem is a stuck or black instrument display screen, it may indicate that the processor used to render the display information of the instrument display screen in the cockpit processor set L22, such as a GPU, is abnormal. At this time, the chip safety island L24 may only reset the GPU in the cockpit processor set L22.

[0100] In the embodiment of the present disclosure, the chip safety island L24 also controls the intelligent driving processor set L23 to reset based on the second signal output by the intelligent driving processor set L23 that indicates the intelligent driving function failure. In some embodiments, after receiving the second signal output by the intelligent driving processor set L23 that indicates the intelligent driving function failure, the chip safety island L24 can control all hardware processors in the intelligent driving processor set L23 to reset.

[0101] In other embodiments, the second signal may carry a specific fault problem. For example, if the fault problem is a timeout of the intelligent driving algorithm, it may indicate that the processor used to run the intelligent driving algorithm in the intelligent driving processor set L23, such as the NPU, is abnormal. At this time, the chip safety island L24 may only reset the NPU in the intelligent driving processor set L23.

[0102] In the embodiments of the present disclosure, on the one hand, compared with the related art in which the cockpit processor set and the intelligent driving processor set are located on different system-level chips, which require two independent system-level chips and matching motherboards and other electronic components, in the embodiments of the present disclosure, the cockpit processor set L22 and the intelligent driving processor set L23 are arranged on the same system-level chip L21, which can reduce the cost of the vehicle control system and improve resource utilization. On the other hand, compared with the related art in which the system microcontroller resets the cockpit processor set and the intelligent driving processor set at the same time based on the failure of any function of the cockpit function and the intelligent driving function, in the embodiments of the present disclosure, a chip safety island L24 is arranged on the system-level chip L21, and the chip safety island is used to reset the cockpit processor set and the intelligent driving processor set at the same time. L24 controls the reset of the cockpit processor set L22 based on the first signal representing the cockpit function failure output by the cockpit processor set L22, and / or controls the reset of the intelligent driving processor set L23 based on the second signal representing the intelligent driving function failure output by the intelligent driving processor set L23. The setting method of the embodiment of the present disclosure can realize the separate reset of the cockpit processor set L22 and the intelligent driving processor set L23, and will not reset the processor set corresponding to the non-faulty function due to the failure of a certain function in the intelligent driving function or the cockpit function. The cockpit processor set L22 and the intelligent driving processor set L23 can be decoupled, and the precision of control over the cockpit processor set L22 and the intelligent driving processor set L23 is improved, and the intelligence is relatively high.

[0103] Figure 5 This is a schematic diagram of a vehicle control system provided by an embodiment of the present disclosure. Figure 2 , refer to the following Figure 5 The structure of the vehicle control system according to the embodiment of the present disclosure is described.

[0104] In some embodiments, the system further comprises:

[0105] A microcontroller chip L28 is connected to the chip safety island L24, and is used to control the operation of the vehicle based on the intelligent driving function when the intelligent driving function is normal, and is also used to receive at least one of the first signal, the second signal and the third signal sent by the chip safety island L24; wherein the third signal represents a functional failure of the chip safety island L24 to control the cockpit processor set L22 and / or the intelligent driving processor set L23;

[0106] The microcontroller chip L28 is also used to output fault prompt information when receiving the first signal and a third signal representing a functional failure of the chip safety island L24 controlling the cockpit processor set L22; and / or, when receiving the second signal and a third signal representing a functional failure of the chip safety island L24 controlling the intelligent driving processor set L23, control the vehicle to stop running.

[0107] In the disclosed embodiment, the microcontroller chip L28 includes a hardware processor and software functional modules required to implement vehicle control, wherein the hardware processor may include one or more of a central processing unit (CPU), a memory, a timer, an A / D converter, and a communication interface.

[0108] In the disclosed embodiment, the microcontroller chip L28 may include an intelligent driving vehicle control module, a vehicle control monitoring module, and a chip abnormality monitoring module, wherein the intelligent driving vehicle control module is used to control the acceleration, deceleration, braking, steering and other actions of the vehicle based on the decision-making judgment and path planning of the intelligent driving function to realize intelligent driving. The vehicle control monitoring module is used to monitor the vehicle operation status in real time, and can monitor various key parameters of the vehicle, such as engine status, vehicle speed, braking system, etc. Once an abnormality is found, an alarm will be immediately issued and corresponding protective measures will be taken to ensure the safety and stability of the vehicle operation. The chip abnormality monitoring module is used to receive the first signal, the second signal and the third signal sent by the chip safety island L24.

[0109] In the disclosed embodiment, the microcontroller chip L28 is used to control the vehicle operation based on the intelligent driving function when the intelligent driving function is normal. As mentioned above, the microcontroller chip L28 can be used for decision-making and path planning based on the intelligent driving function to control the vehicle's acceleration, deceleration, braking, steering and other actions to achieve intelligent driving.

[0110] In the disclosed embodiment, the microcontroller chip L28 is also used to receive at least one of the first signal, the second signal and the third signal sent by the chip safety island L24; wherein the third signal represents a functional failure of the chip safety island L24 in controlling the cockpit processor set L22 and / or the intelligent driving processor set L23.

[0111] In some embodiments, a processor or functional module may be provided inside the chip safety island L24 to monitor whether the chip safety island L24 controls the functions of the cockpit processor set L22 and / or the intelligent driving processor set L23, such as whether the reset operation of the cockpit processor set L22 and / or the intelligent driving processor set L23 is executed normally. When a functional failure of the chip safety island L24 controlling the cockpit processor set L22 and / or the intelligent driving processor set L23 is detected, a third signal is sent to the microcontroller chip L28.

[0112] In the embodiment of the present disclosure, the microcontroller chip L28 is also used to output fault prompt information when receiving the first signal and the third signal representing the functional failure of the chip safety island L24 controlling the cockpit processor set L22. As mentioned above, the first signal represents the cockpit function failure. When the first signal representing the cockpit function failure and the third signal representing the functional failure of the chip safety island L24 controlling the cockpit processor set L22 are received, it means that the cockpit function is currently completely out of control. At this time, the microcontroller chip L28 outputs fault prompt information, wherein the fault prompt information is used to represent the current cockpit function out of control. The microcontroller chip L28 can output the fault prompt information through voice output, display, etc. The embodiment of the present disclosure does not limit the way in which the microcontroller chip L28 outputs the fault prompt information.

[0113] In the disclosed embodiment, the microcontroller chip L28 can also determine the current state of the vehicle. For example, when the microcontroller chip L28 detects that the vehicle is currently in a stopped state, the system-level chip L21 can be reset.

[0114] In the disclosed embodiment, the microcontroller chip L28 controls the vehicle to stop running when receiving the second signal and the third signal indicating the functional failure of the chip safety island L24 controlling the intelligent driving processor set L23. As mentioned above, the second signal indicates the failure of the intelligent driving function. When receiving the second signal indicating the failure of the intelligent driving function and the third signal indicating the functional failure of the chip safety island L24 controlling the intelligent driving processor set L23, it means that the intelligent driving function is currently completely out of control. At this time, if the vehicle is still controlled based on the intelligent driving function, the safety of the driver will be endangered. Therefore, the microcontroller chip L28 controls the vehicle to stop running.

[0115] In the disclosed embodiment, after the microcontroller chip L28 controls the vehicle to stop running, the system-level chip L21 can be reset. When the microcontroller chip L28 receives the second signal and the third signal indicating the functional failure of the chip safety island L24 controlling the intelligent driving processor set L23, it can also output prompt information indicating the intelligent driving function failure to prompt the driver.

[0116] The method of the embodiment of the present disclosure can use the microcontroller chip L28 to control the vehicle and output fault prompt information when the chip safety island L24 controls the functional failure of the cockpit processor set L22 and / or the intelligent driving processor set L23, with high reliability.

[0117] In some embodiments, the system further comprises:

[0118] The first power supply chip L25 is connected to the cockpit processor set L22, the intelligent driving processor set L23 and the chip safety island L24, and is used to supply power to the intelligent driving processor set L23 and the cockpit processor set L22. When the first power supply parameter supplying power to the intelligent driving processor set L23 and the cockpit processor set L22 is abnormal, it is also used to control the intelligent driving processor set L23 and / or the cockpit processor set L22 to reset, and send a fourth signal indicating a power supply failure to the chip safety island L24.

[0119] In the disclosed embodiment, the first power supply chip L25 is used to supply power to the intelligent driving processor set L23 and the cockpit processor set L22. The first power supply chip L25 also obtains a first power supply parameter for supplying power to the intelligent driving processor set L23 and the cockpit processor set L22, and determines whether the first power supply parameter is abnormal. The first power supply parameter can be a power supply voltage or a power supply current. Whether the first power supply parameter is abnormal can be determined by determining whether the first power supply parameter is within a preset power supply parameter range. If the first power supply parameter is not within the preset power supply parameter range, it is determined that the first power supply parameter is abnormal.

[0120] In the embodiment of the present disclosure, the first power supply chip L25 is also used to control the intelligent driving processor set L23 and / or the cockpit processor set L22 to reset when the first power supply parameter for powering the intelligent driving processor set L23 and the cockpit processor set L22 is abnormal. In some embodiments, the hardware processors in the intelligent driving processor set L23 and the cockpit processor set L22 are different, and the power supply pins of the hardware processors in the intelligent driving processor set L23 and the cockpit processor set L22 are also different. At this time, the first power supply parameter may include the power supply parameter of the power supply pin of the intelligent driving processor set L23 and / or the power supply parameter of the power supply pin of the cockpit processor set L22, and when it is detected that the power supply parameter of the power supply pin of the intelligent driving processor set L23 is abnormal, only the intelligent driving processor set L23 is reset, and / or, when it is detected that the power supply parameter of the power supply pin of the cockpit processor set L22 is abnormal, only the cockpit processor set L22 is reset.

[0121] In other embodiments, the intelligent driving processor set L23 and the cockpit processor set L22 may include a shared hardware processor, and the power supply pins of each hardware processor are different. In this case, the first power supply parameter may include the power supply parameter of the power supply pin of each hardware processor in the intelligent driving processor set L23 and / or the cockpit processor set L22, and when the power supply parameter of a power supply pin of a certain hardware processor is detected to be abnormal, only the hardware processor is reset. If the hardware processor whose power supply parameter of the power supply pin is detected to be abnormal is the hardware processor shared by the intelligent driving processor set L23 and the cockpit processor set L22, then the hardware processor is reset. Resetting the processor means resetting the intelligent driving processor set L23 and the cockpit processor set L22 at the same time; if the hardware processor whose power supply parameters are detected to be abnormal at the power supply pin is not the hardware processor shared by the intelligent driving processor set L23 and the cockpit processor set L22, at this time, resetting the hardware processor means resetting only the processor set corresponding to the hardware processor. For example, only the cockpit function needs to render images. Therefore, the GPU only exists in the cockpit processor set L22. If the power supply parameters of the GPU power supply pin are detected to be abnormal, only the GPU is reset, indicating that only the cockpit processor set L22 is reset.

[0122] In the embodiment of the present disclosure, the first power supply chip L25 is also used to send a fourth signal characterizing a power supply failure to the chip safety island L24 when the first power supply parameters for supplying power to the intelligent driving processor set L23 and the cockpit processor set L22 are abnormal, so as to inform the chip safety island L24 that the first power supply parameters for the intelligent driving processor set L23 and the cockpit processor set L22 are abnormal.

[0123] In the disclosed embodiment, the first power supply chip L25 may also receive a reset instruction sent by the chip safety island L24 after sending the fourth signal to the chip safety island L24, and control the reset of the intelligent driving processor set L23 and / or the cockpit processor set L22 based on the reset instruction sent by the chip safety island L24.

[0124] In the disclosed embodiment, the vehicle control system also includes a first power supply chip L25 for supplying power to the intelligent driving processor set L23 and the cockpit processor set L22. When a first power supply parameter for supplying power to the intelligent driving processor set L23 and the cockpit processor set L22 is abnormal, the intelligent driving processor set L23 and / or the cockpit processor set L22 is controlled to be reset, and a fourth signal representing a power supply failure is sent to the chip safety island L24. The first power supply chip L25 can determine whether the intelligent driving processor L23 and / or the cockpit processor set L22 is faulty by detecting the power supply parameters, and perform corresponding reset processing, which has high intelligence.

[0125] In some embodiments, the system further comprises:

[0126] The second power supply chip L26 is connected to the chip safety island L24 and the microcontroller chip L28, and is used to supply power to the chip safety island L24. It is also used to control the reset of the chip safety island L24 when the second power supply parameter for supplying power to the chip safety island L24 indicates an abnormality, and send a fifth signal indicating a power supply failure to the microcontroller chip L28.

[0127] In the disclosed embodiment, the second power supply chip L26 is used to supply power to the chip safety island L24. The second power supply chip L26 also obtains a second power supply parameter for supplying power to the chip safety island L24, and determines whether the second power supply parameter is abnormal. The second power supply parameter can be a power supply voltage or a power supply current. Whether the second power supply parameter is abnormal can be determined by determining whether the second power supply parameter is within a preset power supply parameter range. If the second power supply parameter is not within the preset power supply parameter range, it is determined that the second power supply parameter is abnormal.

[0128] In the disclosed embodiment, the second power supply chip L26 is also used to control the chip safety island L24 to reset when the second power supply parameter for supplying power to the chip safety island L24 indicates an abnormality, wherein controlling the chip safety island L24 to reset refers to resetting the hardware processor of the chip safety island L24. In some embodiments, controlling the chip safety island L24 to reset refers to controlling the entire chip safety island L24 to power off and then restart. In other embodiments, the chip safety island L24 may include multiple hardware processors, each with different power supply pins. In this case, the second power supply parameter may include the power supply parameter of each hardware processor power supply pin in the chip safety island L24, and when an abnormality is detected in the power supply parameter of a certain hardware processor power supply pin, only the hardware processor is reset.

[0129] In the embodiment of the present disclosure, the second power supply chip L26 is also used to send a fifth signal characterizing a power supply failure to the microcontroller chip L28 when the second power supply parameter characterizing the power supply to the chip safety island L24 characterizes an abnormality, so as to inform the microcontroller chip L28 that the second power supply parameter of the chip safety island L24 is abnormal.

[0130] In the disclosed embodiment, the second power supply chip L26 may also receive a reset instruction sent by the microcontroller chip L28 after sending the fifth signal to the microcontroller chip L28, and control the reset of the chip safety island L24 based on the reset instruction sent by the microcontroller chip L28.

[0131] The disclosed embodiment can determine whether the power supply of the chip safety island L24 is faulty by detecting the second power supply parameter for powering the chip safety island L24, and perform reset processing. It has high intelligence and can use the microcontroller chip L28 to monitor the power supply failure of the chip safety island L24.

[0132] In some embodiments, the system further comprises:

[0133] The third power supply chip L27 is connected to the microcontroller chip L28 and the chip safety island L24, and is used to supply power to the microcontroller chip L28. It is also used to control the reset of the microcontroller chip L28 when the third power supply parameter supplying power to the microcontroller chip L28 indicates an abnormality, and send a sixth signal indicating a power supply failure to the chip safety island L24.

[0134] In the disclosed embodiment, the third power supply chip L27 is used to supply power to the chip safety island L24. The third power supply chip L27 also obtains a third power supply parameter for supplying power to the microcontroller chip L28, and determines whether the third power supply parameter is abnormal. The third power supply parameter can be a supply voltage or a supply current. Whether the third power supply parameter is abnormal can be determined by determining whether the third power supply parameter is within a preset power supply parameter range. If the third power supply parameter is not within the preset power supply parameter range, it is determined that the third power supply parameter is abnormal.

[0135] In the disclosed embodiment, the third power supply chip L27 is also used to control the reset of the microcontroller chip L28 when the third power supply parameter for powering the microcontroller chip L28 indicates an abnormality, wherein controlling the reset of the microcontroller chip L28 refers to controlling the reset of the hardware processor of the microcontroller chip L28. In some embodiments, controlling the reset of the microcontroller chip L28 refers to controlling the entire microcontroller chip L28 to be powered off and then restarted; in other embodiments, the microcontroller chip L28 may include multiple hardware processors, each of which has a different power supply pin. In this case, the third power supply parameter may include the power supply parameter of each hardware processor power supply pin in the microcontroller chip L28, and when it is detected that the power supply parameter of the power supply pin of a certain hardware processor is abnormal, only the hardware processor is reset.

[0136] In the embodiment of the present disclosure, the third power supply chip L27 is also used to send a fifth signal indicating a power supply failure to the chip safety island L24 when the third power supply parameter indicating an abnormality is detected for supplying power to the microcontroller chip L28, so as to inform the chip safety island L24 that the second power supply parameter of the microcontroller chip L28 is abnormal.

[0137] In the embodiment of the present disclosure, the third power supply chip L27 can also receive a reset instruction sent by the chip safety island L24 after sending the fifth signal to the chip safety island L24, and control the reset of the microcontroller chip L28 based on the reset instruction sent by the chip safety island L24.

[0138] The disclosed embodiment can determine whether the power supply of the microcontroller chip L28 is faulty by detecting the third power supply parameter for the microcontroller chip L28, and perform reset processing. It has high intelligence and can use the chip safety island L24 to monitor the power supply failure of the microcontroller chip L28.

[0139] Figure 6 is a functional module diagram of a microcontroller chip provided by an embodiment of the present disclosure, such as Figure 6 As shown, the functions of the intelligent driving vehicle control module L281 and the vehicle control monitoring module L282 are as described above, and the chip abnormality monitoring module L283 is used to receive the first signal, the second signal and the third signal sent by the chip safety island L24, and also receive the fault signal sent by the second power supply chip L26, where the fault signal refers to the fifth signal. Figure 6 The watchdog feeding means detecting the third power supply parameter for supplying power to the microcontroller chip L28.

[0140] In some embodiments, the chip safety island L24 is connected and communicated with the microcontroller chip L28 based on a general input and output pin, and / or the chip safety island L24 is connected and communicated with the third power supply chip L27 based on a general input and output pin. Through this connection and communication mode, the security of communication can be improved, thereby improving the overall security of the vehicle control system.

[0141] Figure 7 It is a functional module schematic diagram of the internal structure of a vehicle control system provided by an embodiment of the present disclosure, wherein the chip safety island L24 includes an application monitoring module L241, a chip bottom monitoring module L242, a microcontroller monitoring module L243, and an instrument degradation output module L244, wherein the application monitoring module L241 is used to receive a first signal representing a cockpit function failure output by the cockpit function monitoring module L224 in the cockpit processor set L22, receive a second signal representing an intelligent driving function failure output by the intelligent driving function monitoring module L232 in the intelligent driving processor set L23, and a signal representing sensor abnormality output by the intelligent driving sensor monitoring module L233, and receive a fourth signal representing a power supply failure output by the first power supply chip L25. The chip bottom monitoring module L242 is used to monitor the bottom hardware resources in the system-level chip L21, such as memory, etc. The microcontroller monitoring module L243 is used to receive a sixth signal representing a power supply failure output by the third power supply chip L27. The instrument degradation output module L244 is used to output instrument display information when the cockpit function fails. Figure 7 The watchdog feeding function in the third power supply chip L27 and the microcontroller chip L28 refers to detecting the third power supply parameter for supplying power to the microcontroller chip L28, and the watchdog feeding functions of the other power supply chips are similar.

[0142] Figure 8 is a flow chart of a vehicle control method provided by an embodiment of the present disclosure, such as Figure 8 As shown, the method includes:

[0143] S81, obtaining a first signal output by a cockpit processor set and / or a second signal output by an intelligent driving processor set; wherein the first signal indicates a cockpit function failure of the vehicle, and the second signal indicates an intelligent driving function failure of the vehicle;

[0144] S82. Based on the first signal, the cockpit processor set is reset by controlling the chip safety island; and / or, based on the second signal, the intelligent driving processor set is reset by controlling the chip safety island; wherein the cockpit processor set, the intelligent driving processor set and the chip safety island are integrated on the same system-level chip.

[0145] In the embodiments of the present disclosure, the vehicle control method can be applied to the aforementioned vehicle control system, and can also be applied to other electronic devices that have a connection relationship with the aforementioned vehicle control system. The connection relationship here includes a physical connection and / or a network connection, such as mobile phones, computers, cloud servers and other electronic devices that have a network connection relationship with the aforementioned vehicle control system. The embodiments of the present disclosure do not limit this, and specific description is given using electronic devices as an example.

[0146] In step S81, the electronic device obtains a first signal output by the cockpit processor set and / or a second signal output by the intelligent driving processor set; wherein the first signal represents a cockpit function failure of the vehicle, and the second signal represents a smart driving function failure of the vehicle. As mentioned above, the cockpit processor set can determine whether the cockpit function is faulty through internal functional modules, user feedback, remote fault diagnosis instructions from the cloud, and other methods, and the electronic device can receive the first signal representing the cockpit function failure of the vehicle sent by the cockpit processor set after determining the cockpit function failure. Similarly, the smart driving processor set can determine whether the smart driving function is faulty through internal functional modules, user feedback, remote fault diagnosis instructions from the cloud, and other methods, and the electronic device can receive the second signal representing the smart driving function failure of the vehicle sent by the smart driving processor set after determining the smart driving function failure.

[0147] In step S82, the electronic device controls the reset of the cockpit processor set through the chip safety island based on the first signal; and / or controls the reset of the intelligent driving processor set through the chip safety island based on the second signal; wherein the cockpit processor set, the intelligent driving processor set and the chip safety island are integrated on the same system-level chip, wherein the electronic device controls the reset of the cockpit processor set through the chip safety island, and / or controls the reset of the intelligent driving processor set in specific ways as described above.

[0148] In the embodiments of the present disclosure, on the one hand, compared with the related art in which the cockpit processor set and the intelligent driving processor set are located on different system-level chips, which require two independent system-level chips and matching motherboards and other electronic components, the cockpit processor set and the intelligent driving processor set are arranged on the same system-level chip in the embodiments of the present disclosure, which can reduce the cost of the vehicle control system and improve resource utilization. On the other hand, compared with the related art in which the system microcontroller resets the cockpit processor set and the intelligent driving processor set at the same time based on the failure of any function of the cockpit function and the intelligent driving function, the embodiments of the present disclosure set a chip on the system-level chip. A safety island is used to control the reset of the cockpit processor set based on a first signal output by the cockpit processor set that indicates a cockpit function failure, and / or to control the reset of the intelligent driving processor set based on a second signal output by the intelligent driving processor set that indicates an intelligent driving function failure. The disclosed embodiment can achieve separate resets of the cockpit processor set and the intelligent driving processor set, and will not reset the processor set corresponding to the non-faulty function due to a failure in the intelligent driving function or a certain function in the cockpit function. The cockpit processor set and the intelligent driving processor set can be decoupled, and the precision of control over the cockpit processor set and the intelligent driving processor set can be improved, with higher intelligence.

[0149] In some embodiments, the method further comprises:

[0150] Based on the first signal, outputting instrument display information when the cockpit function fails through the chip safety island; and / or,

[0151] Based on the second signal, prompt information representing the failure of the intelligent driving function is output through the chip safety island or the cockpit processor set.

[0152] In the disclosed embodiment, the electronic device outputs the instrument display information when the cockpit function fails through the chip safety island based on the first signal. Since the first signal indicates the failure of the vehicle's cockpit function, the submodules in the vehicle's cockpit function, such as the instrument display output module, can obtain the vehicle data from the vehicle's sensors or other storage spaces that store vehicle data. The vehicle data is the data required for instrument display, such as the vehicle's speed, rotation speed, fuel level, water temperature, etc. After obtaining the vehicle data, the GPU or other processors concentrated in the cockpit processor can be used to convert the vehicle data into image data that can be displayed and display it. After the cockpit function fails, the instrument information cannot be displayed. During the driving process of the vehicle, the failure to display the instrument information may cause the driver to make wrong judgments, thereby reducing the safety of driving.

[0153] In the embodiments of the present disclosure, after a cockpit function failure occurs, the electronic device outputs the instrument display information of the cockpit function failure through the chip safety island. In some embodiments, the electronic device can obtain vehicle data in real time from the vehicle's sensors or other storage spaces that store vehicle data. The vehicle data is the data required for instrument display, such as the vehicle's speed, rotation speed, fuel level, water temperature, etc. After obtaining the vehicle data, the hardware processor on the chip safety island, such as a GPU or other processor, can be used to convert the vehicle data into image data that can be displayed and display it.

[0154] In some other embodiments, the method further comprises:

[0155] During the operation of the cockpit processor set, obtaining instrument display information processed by the cockpit processor set and storing it in the storage space of the chip safety island;

[0156] The outputting, based on the first signal, instrument display information when the cockpit function fails through the chip safety island includes:

[0157] Based on the first signal, the instrument display information is acquired from the storage space of the chip safety island, and the instrument display information is output through the chip safety island.

[0158] In the disclosed embodiment, the electronic device can also obtain the instrument display information processed by the cockpit processor set and store it in the storage space of the chip safety island during the operation of the cockpit processor set. After obtaining the first signal representing the cockpit function failure, the electronic device obtains the instrument display information from the storage space of the chip safety island and outputs the instrument display information through the chip safety island. With this method, the electronic device only needs to obtain the pre-stored instrument display information to directly display it. When the cockpit function fails, the electronic device does not need to recalculate or generate the instrument display information through the chip safety island, but directly reads the pre-stored information, which can improve the response speed.

[0159] In the disclosed embodiment, the electronic device also outputs prompt information representing a failure of the intelligent driving function through the chip safety island or the cockpit processor set based on the second signal. Since the second signal represents a failure of the vehicle's intelligent driving function, after the vehicle's intelligent driving function fails, the route planned by the intelligent driving algorithm may be erroneous. If the vehicle is still operating based on the faulty intelligent driving function at this time, driving safety will be reduced.

[0160] In the embodiments of the present disclosure, after a cockpit function fails, the electronic device outputs prompt information characterizing the intelligent driving function failure through a chip safety island or a cockpit processor set. The electronic device can output the prompt information characterizing the intelligent driving function failure through voice, display screen, etc., and the embodiments of the present disclosure do not limit this. When the cockpit function is not failed, the prompt information characterizing the intelligent driving function failure can be output through the cockpit processor. When the cockpit function fails, the prompt information characterizing the intelligent driving function failure can be output based on the chip safety island.

[0161] The disclosed embodiment can realize that when a cockpit function fails and the instrument information cannot be output normally, the chip safety island can be used to output the instrument information. It is highly intelligent and can output fault prompt information to prompt the driver when the intelligent driving function fails, thereby improving driving safety.

[0162] In some embodiments, the method further comprises:

[0163] sending at least one of the first signal, the second signal and the third signal to the microcontroller chip through the chip safety island; wherein the third signal indicates a functional failure of the chip safety island in controlling the cockpit processor set and / or the intelligent driving processor set, and the microcontroller chip controls the vehicle operation based on the intelligent driving function when the intelligent driving function is normal;

[0164] When the microcontroller chip receives the first signal and a third signal indicating a functional failure of the chip safety island in controlling the cockpit processor set, the microcontroller chip outputs fault prompt information; and / or,

[0165] When the microcontroller chip receives the second signal and the third signal indicating a functional failure of the chip safety island in controlling the intelligent driving processor set, the vehicle is controlled to stop running through the microcontroller chip.

[0166] In an embodiment of the present disclosure, an electronic device sends a first signal, a second signal, and at least one of a third signal indicating a functional failure of the chip safety island in controlling the cockpit processor set and / or the intelligent driving processor set to a microcontroller chip through a chip safety island. The electronic device can monitor whether the functions of the chip safety island in controlling the cockpit processor set and / or the intelligent driving processor set are faulty through a software function module inside the chip safety island, such as whether the reset operation of the cockpit processor set and / or the intelligent driving processor set is executed normally. When a functional failure of the chip safety island in controlling the cockpit processor set and / or the intelligent driving processor set is detected, the third signal is sent to the microcontroller chip through the chip safety island.

[0167] In the disclosed embodiments, the microcontroller chip is used to control the operation of the vehicle based on the intelligent driving function when the intelligent driving function is normal. As mentioned above, the microcontroller chip can be used for decision-making and path planning based on the intelligent driving function to control the acceleration, deceleration, braking, steering and other actions of the vehicle to achieve intelligent driving.

[0168] In the embodiments of the present disclosure, when the microcontroller chip of the electronic device receives a first signal and a third signal indicating a functional failure of a chip safety island controlling a cockpit processor set, the microcontroller chip outputs fault prompt information. As mentioned above, the first signal indicates a cockpit function failure. When the microcontroller chip receives the first signal indicating a cockpit function failure and the third signal indicating a functional failure of a chip safety island controlling a cockpit processor set, it indicates that the cockpit function is currently completely out of control. At this time, the fault prompt information is output through the microcontroller chip, wherein the fault prompt information is used to indicate that the current cockpit function is out of control. The microcontroller chip can output the fault prompt information through voice output, display, etc. The embodiments of the present disclosure do not limit the method of outputting the fault prompt information through the microcontroller chip.

[0169] In the disclosed embodiment, the electronic device may also determine the current state of the vehicle. For example, when it is detected that the vehicle is currently stopped, the system-level chip may be reset through the microcontroller chip.

[0170] In the disclosed embodiment, when the microcontroller chip receives the second signal and the third signal indicating the functional failure of the chip safety island controlling the intelligent driving processor set, the electronic device controls the vehicle to stop running through the microcontroller chip. As mentioned above, the second signal indicates the failure of the intelligent driving function. When the microcontroller chip receives the second signal indicating the failure of the intelligent driving function and the third signal indicating the functional failure of the chip safety island controlling the intelligent driving processor set, it indicates that the intelligent driving function is currently completely out of control. At this time, if the vehicle is still controlled based on the intelligent driving function, it will endanger the safety of the driver. Therefore, at this time, the vehicle is controlled to stop running through the microcontroller chip.

[0171] The disclosed embodiment can utilize the microcontroller chip L28 to control the vehicle and output fault prompt information when the chip safety island L24 controls the functional failure of the cockpit processor set L22 and / or the intelligent driving processor set L23, with high reliability.

[0172] In some embodiments, the method further comprises:

[0173] Acquire a first power supply parameter of a first power supply chip for supplying power to the intelligent driving processor set and the cockpit processor set;

[0174] When the first power supply parameter indicates an abnormality, the intelligent driving processor set and / or the cockpit processor set are reset through the first power supply chip, and a fourth signal indicating a power supply failure is sent to the chip safety island through the first power supply chip.

[0175] In an embodiment of the present disclosure, an electronic device obtains a first power supply parameter of a first power supply chip for powering an intelligent driving processor set and a cockpit processor set, wherein the first power supply parameter may be a power supply voltage or a power supply current.

[0176] In the embodiment of the present disclosure, when the first power supply parameter indicates an abnormality, the electronic device controls the intelligent driving processor set and / or the cockpit processor set to reset through the first power supply chip, and sends a fourth signal indicating a power supply failure to the chip safety island through the first power supply chip, wherein whether the first power supply parameter is abnormal can be determined by determining whether the first power supply parameter is within a preset power supply parameter range, and if the first power supply parameter is not within the preset power supply parameter range, it is determined that the first power supply parameter is abnormal. The specific method of controlling the intelligent driving processor set and / or the cockpit processor set to reset through the first power supply chip in the embodiment of the present disclosure can be as described above.

[0177] In the disclosed embodiment, the electronic device also obtains the first power supply parameter of the first power supply chip for powering the intelligent driving processor set and the cockpit processor set. By detecting the power supply parameter, it can determine whether the intelligent driving processor and / or the cockpit processor set is faulty and perform reset processing accordingly, which is highly intelligent.

[0178] In some embodiments, the method further comprises:

[0179] Acquire a second power supply parameter of a second power supply chip for supplying power to the chip safety island;

[0180] When the second power supply parameter indicates an abnormality, the chip safety island is reset through the second power supply chip, and a fifth signal indicating a power supply failure is sent to the microcontroller chip through the second power supply chip.

[0181] In an embodiment of the present disclosure, the electronic device obtains a second power supply parameter of a second power supply chip for powering a chip safety island, wherein the second power supply parameter may be a power supply voltage or a power supply current.

[0182] In the embodiment of the present disclosure, when the second power supply parameter indicates an abnormality, the electronic device controls the chip safety island reset through the second power supply chip, and sends a fifth signal indicating a power supply failure to the microcontroller chip through the second power supply chip, wherein whether the second power supply parameter is abnormal can be determined by determining whether the second power supply parameter is within a preset power supply parameter range, and if the second power supply parameter is not within the preset power supply parameter range, then it is determined that the second power supply parameter is abnormal. The specific method of controlling the chip safety island reset through the second power supply chip in the embodiment of the present disclosure can be as described above.

[0183] The disclosed embodiment can determine whether the power supply of the chip safety island is faulty by acquiring the second power supply parameter for powering the chip safety island, and perform reset processing. It has high intelligence and can use a microcontroller chip to monitor the power supply failure of the chip safety island.

[0184] In some embodiments, the method further comprises:

[0185] Acquire a third power supply parameter of a third power supply chip for supplying power to the microcontroller chip;

[0186] When the third power supply parameter indicates an abnormality, the microcontroller chip is reset through the third power supply chip, and a sixth signal indicating a power supply failure is sent to the chip safety island through the third power supply chip.

[0187] In an embodiment of the present disclosure, the electronic device obtains a third power supply parameter of a third power supply chip for supplying power to a microcontroller chip, wherein the third power supply parameter may be a power supply voltage or a power supply current.

[0188] In the embodiment of the present disclosure, when the third power supply parameter of the electronic device indicates an abnormality, the third power supply chip is used to control the reset of the microcontroller chip, and the sixth signal indicating the power supply failure is sent to the chip safety island through the third power supply chip, wherein the determination of whether the third power supply parameter is abnormal can be made by determining whether the third power supply parameter is within a preset power supply parameter interval, and if the third power supply parameter is not within the preset power supply parameter interval, the third power supply parameter is determined to be abnormal. The specific method of controlling the reset of the microcontroller chip through the third power supply chip in the embodiment of the present disclosure can be as described above.

[0189] The disclosed embodiment can determine whether the power supply of the microcontroller chip is faulty by acquiring the third power supply parameter for the microcontroller chip, and perform reset processing. It is highly intelligent and can use the chip safety island to monitor the power supply failure of the microcontroller chip.

[0190] Fig. 9 is a block diagram of a vehicle control device 900 provided in an embodiment of the present disclosure, such as Fig. 9 As shown, the device mainly includes:

[0191] A first acquisition module 901 is configured to acquire a first signal output by a cockpit processor set and / or a second signal output by an intelligent driving processor set; wherein the first signal indicates a cockpit function failure of the vehicle, and the second signal indicates an intelligent driving function failure of the vehicle;

[0192] The first control module 902 is configured to control the reset of the cockpit processor set through the chip safety island based on the first signal; and / or, based on the second signal, control the reset of the intelligent driving processor set through the chip safety island; wherein the cockpit processor set, the intelligent driving processor set and the chip safety island are integrated on the same system-level chip.

[0193] In some embodiments, the apparatus further comprises:

[0194] The output module is configured to output the instrument display information when the cockpit function fails through the chip safety island based on the first signal; and / or, based on the second signal, output prompt information representing the failure of the intelligent driving function through the chip safety island or the cockpit processor set.

[0195] In some embodiments, the apparatus further comprises:

[0196] A second acquisition module is configured to acquire instrument display information processed by the cockpit processor set and store it in the storage space of the chip safety island during the operation of the cockpit processor set;

[0197] The output module is also configured to obtain the instrument display information from the storage space of the chip safety island based on the first signal, and output the instrument display information through the chip safety island.

[0198] In some embodiments, the apparatus further comprises:

[0199] a sending module, configured to send at least one of the first signal, the second signal and the third signal to the microcontroller chip through the chip safety island; wherein the third signal indicates a functional failure of the chip safety island in controlling the cockpit processor set and / or the intelligent driving processor set, and the microcontroller chip controls the vehicle operation based on the intelligent driving function when the intelligent driving function is normal;

[0200] The second control module is configured to output fault prompt information through the microcontroller chip when the microcontroller chip receives the first signal and a third signal indicating a functional failure of the chip safety island in controlling the cockpit processor set; and / or to control the vehicle to stop running through the microcontroller chip when the microcontroller chip receives the second signal and a third signal indicating a functional failure of the chip safety island in controlling the intelligent driving processor set.

[0201] In some embodiments, the apparatus further comprises:

[0202] A third acquisition module is configured to obtain a first power supply parameter of a first power supply chip for supplying power to the intelligent driving processor set and the cockpit processor set;

[0203] The third control module is configured to control the intelligent driving processor set and / or the cockpit processor set to reset through the first power supply chip when the first power supply parameter indicates an abnormality, and send a fourth signal indicating a power supply failure to the chip safety island through the first power supply chip.

[0204] In some embodiments, the apparatus further comprises:

[0205] A fourth acquisition module is configured to acquire a second power supply parameter of a second power supply chip for supplying power to the chip safety island;

[0206] The fourth control module is configured to control the chip safety island to reset through the second power supply chip when the second power supply parameter indicates an abnormality, and send a fifth signal indicating a power supply failure to the microcontroller chip through the second power supply chip.

[0207] In some embodiments, the apparatus further comprises:

[0208] A fifth acquisition module is configured to acquire a third power supply parameter of a third power supply chip for supplying power to the microcontroller chip;

[0209] The fifth control module is configured to control the microcontroller chip to reset through the third power supply chip when the third power supply parameter indicates an abnormality, and to send a sixth signal indicating a power supply failure to the chip safety island through the third power supply chip.

[0210] Fig.10 is a structural block diagram of a vehicle 1000 provided in an embodiment of the present disclosure, such as Fig.10 As shown, the hardware entity of the vehicle 1000 includes: a processor 1001, a communication interface 1002 and a memory 1003, wherein: the processor 1001 generally controls the overall operation of the vehicle 1000. The communication interface 1002 can enable the vehicle 1000 to communicate with other terminals or servers through a network.

[0211] The memory 1003 is configured to store instructions and applications executable by the processor 1001, and can also cache data to be processed or processed by the processor 1001 and various modules in the vehicle 1000 (for example, image data, audio data, voice communication data, and video communication data), which can be implemented by flash memory (FLASH) or random access memory (Random Access Memory, RAM). Data can be transmitted between the processor 1001, the communication interface 1002, and the memory 1003 through the bus 1004. Among them, the processor 1001 is used to execute some or all of the steps in the above-mentioned vehicle control method.

[0212] A non-transitory computer-readable storage medium, when the computer program or instructions in the storage medium are executed by a processor, can implement any of the above-mentioned vehicle control methods of the embodiments of the present disclosure. For example, the method includes:

[0213] Acquire a first signal output by a cockpit processor set and / or a second signal output by an intelligent driving processor set; wherein the first signal indicates a cockpit function failure of the vehicle, and the second signal indicates an intelligent driving function failure of the vehicle;

[0214] Based on the first signal, controlling the cockpit processor set to reset through the chip safety island; and / or,

[0215] Based on the second signal, the intelligent driving processor set is reset by controlling the chip safety island; wherein the cockpit processor set, the intelligent driving processor set and the chip safety island are integrated on the same system-level chip.

[0216] Those skilled in the art will readily appreciate other embodiments of the present disclosure after considering the specification and practicing the invention disclosed herein. The present disclosure is intended to cover any variations, uses or adaptations of the present disclosure that follow the general principles of the present disclosure and include common knowledge or customary techniques in the art that are not disclosed in the present disclosure. The description and examples are to be considered exemplary only, and the true scope and spirit of the present disclosure are indicated by the following claims.

[0217] It should be understood that the present disclosure is not limited to the exact structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims

1. A vehicle control system, characterized in that: The system comprises: Cockpit processor set and intelligent driving processor set; A chip safety island is connected to the cockpit processor set and the intelligent driving processor set, and is used to control the reset of the cockpit processor set based on a first signal output by the cockpit processor set, and / or to control the reset of the intelligent driving processor set based on a second signal output by the intelligent driving processor set; wherein the cockpit processor set, the intelligent driving processor set and the chip safety island are integrated on the same system-level chip, the first signal represents a cockpit function failure of the vehicle, and the second signal represents an intelligent driving function failure of the vehicle.

2. The system according to claim 1, characterized in that The system further comprises: a microcontroller chip connected to the chip safety island, used to control the operation of the vehicle based on the intelligent driving function when the intelligent driving function is normal, and also used to receive at least one of the first signal, the second signal and the third signal sent by the chip safety island; wherein the third signal indicates a functional failure of the chip safety island in controlling the cockpit processor set and / or the intelligent driving processor set; The microcontroller chip is also used to output fault prompt information when receiving the first signal and a third signal representing a functional failure of the chip safety island controlling the cockpit processor set; and / or to control the vehicle to stop running when receiving the second signal and a third signal representing a functional failure of the chip safety island controlling the intelligent driving processor set.

3. The system according to claim 1, characterized in that The system further comprises: A first power supply chip is connected to the cockpit processor set, the intelligent driving processor set and the chip safety island, and is used to supply power to the intelligent driving processor set and the cockpit processor set. When a first power supply parameter supplying power to the intelligent driving processor set and the cockpit processor set is abnormal, the first power supply chip controls the intelligent driving processor set and / or the cockpit processor set to reset, and sends a fourth signal indicating a power supply failure to the chip safety island.

4. The system according to claim 2, characterized in that The system further comprises: A second power supply chip is connected to the chip safety island and the microcontroller chip, and is used to supply power to the chip safety island. When a second power supply parameter for supplying power to the chip safety island indicates an abnormality, the second power supply chip is used to control the reset of the chip safety island and send a fifth signal indicating a power supply failure to the microcontroller chip.

5. The system according to claim 2, characterized in that The system further comprises: A third power supply chip is connected to the microcontroller chip and the chip safety island, and is used to supply power to the microcontroller chip. When a third power supply parameter for supplying power to the microcontroller chip indicates an abnormality, the third power supply chip is used to control the reset of the microcontroller chip and send a sixth signal indicating a power supply failure to the chip safety island.

6. The system according to claim 5, characterized in that The chip safety island is connected and communicates with the microcontroller chip based on general input and output pins, and / or the chip safety island is connected and communicates with the third power supply chip based on general input and output pins.

7. A vehicle control method, characterized in that: The method comprises: Acquire a first signal output by a cockpit processor set and / or a second signal output by an intelligent driving processor set; wherein the first signal indicates a cockpit function failure of the vehicle, and the second signal indicates an intelligent driving function failure of the vehicle; Based on the first signal, controlling the cockpit processor set to reset through the chip safety island; and / or, Based on the second signal, the intelligent driving processor set is reset by controlling the chip safety island; wherein the cockpit processor set, the intelligent driving processor set and the chip safety island are integrated on the same system-level chip.

8. The method according to claim 7, characterized in that The method further comprises: Based on the first signal, outputting instrument display information when the cockpit function fails through the chip safety island; and / or, Based on the second signal, prompt information representing the failure of the intelligent driving function is output through the chip safety island or the cockpit processor set.

9. The method according to claim 8, characterized in that The method further comprises: During the operation of the cockpit processor set, obtaining instrument display information processed by the cockpit processor set and storing it in the storage space of the chip safety island; The outputting, based on the first signal, instrument display information when the cockpit function fails through the chip safety island includes: Based on the first signal, the instrument display information is acquired from the storage space of the chip safety island, and the instrument display information is output through the chip safety island.

10. The method according to claim 7, characterized in that The method further comprises: sending at least one of the first signal, the second signal and the third signal to the microcontroller chip through the chip safety island; wherein the third signal indicates a functional failure of the chip safety island in controlling the cockpit processor set and / or the intelligent driving processor set, and the microcontroller chip controls the vehicle operation based on the intelligent driving function when the intelligent driving function is normal; When the microcontroller chip receives the first signal and a third signal indicating a functional failure of the chip safety island in controlling the cockpit processor set, the microcontroller chip outputs fault prompt information; and / or, When the microcontroller chip receives the second signal and the third signal indicating a functional failure of the chip safety island in controlling the intelligent driving processor set, the vehicle is controlled to stop running through the microcontroller chip.

11. The method according to claim 7, characterized in that The method further comprises: Acquire a first power supply parameter of a first power supply chip for supplying power to the intelligent driving processor set and the cockpit processor set; When the first power supply parameter indicates an abnormality, the intelligent driving processor set and / or the cockpit processor set are reset through the first power supply chip, and a fourth signal indicating a power supply failure is sent to the chip safety island through the first power supply chip.

12. The method according to claim 10, characterized in that The method further comprises: Obtaining a second power supply parameter of a second power supply chip for supplying power to the chip safety island; When the second power supply parameter indicates an abnormality, the chip safety island is reset through the second power supply chip, and a fifth signal indicating a power supply failure is sent to the microcontroller chip through the second power supply chip.

13. The method according to claim 10, characterized in that The method further comprises: Acquire a third power supply parameter of a third power supply chip for supplying power to the microcontroller chip; When the third power supply parameter indicates an abnormality, the microcontroller chip is reset through the third power supply chip, and a sixth signal indicating a power supply failure is sent to the chip safety island through the third power supply chip.

14. A vehicle control device, characterized in that: The device comprises: A first acquisition module is configured to acquire a first signal output by a cockpit processor set and / or a second signal output by an intelligent driving processor set; wherein the first signal indicates a cockpit function failure of the vehicle, and the second signal indicates an intelligent driving function failure of the vehicle; The first control module is configured to control the reset of the cockpit processor set through the chip safety island based on the first signal; and / or, based on the second signal, control the reset of the intelligent driving processor set through the chip safety island; wherein the cockpit processor set, the intelligent driving processor set and the chip safety island are integrated on the same system-level chip.

15. A vehicle, characterized in that: include: processor; Memory for storing computer programs or instructions; The processor executes the computer program or instructions to implement the steps of the vehicle control method according to any one of claims 7 to 13.

16. A non-transitory computer-readable storage medium storing a computer program or instruction, characterized in that: When the computer program or instructions in the storage medium are executed by a processor, the steps of the vehicle control method according to any one of claims 7 to 13 are implemented.

Images